@kya-os/cli 1.7.0 → 1.8.3

package/dist/utils/review/verdict-verify.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Local review-verdict proof verification for `kya-os review verify`
+ * (review-loop P9 commit 3).
+ *
+ * Seam completed (was TEMPORARY pending review-loop P13's commit 0 / PR
+ * #701, now merged): delegates the signature check to
+ * `@kya-os/contracts/review/verify`'s `verifyReviewVerdictProof(body,
+ * publicKeyRaw)` (the same raw-bytes shape `resolveDidWebEd25519Key`,
+ * did-web-key.ts, already produces) rather than reimplementing the
+ * SPKI-wrap Ed25519 verify locally. `verifyLocalReviewVerdictProof` stays
+ * as a thin wrapper -- not deleted outright -- because contracts' function
+ * returns a plain boolean with no way to distinguish a digest mismatch
+ * from a signature failure, and `commands/review.ts` reports those as two
+ * different human-readable reasons; this wrapper does the digest
+ * pre-check itself (matching compute's `review.ts`'s identical seam) to
+ * keep that distinction, then delegates for the signature half.
+ *
+ * @module cli/utils/review/verdict-verify
+ */
+import { type ReviewVerdictBody } from "@kya-os/contracts/review";
+export type VerdictProofFailureReason = "digest" | "signature";
+export interface VerdictProofResult {
+    valid: boolean;
+    reason?: VerdictProofFailureReason;
+}
+/**
+ * Verify a review verdict's proof against a RAW Ed25519 public key: that
+ * `findingsDigest` matches `findings`, and that `proof.signature` was
+ * produced by the private half of `publicKeyRaw`. Fail-closed — any
+ * malformed input or key-import failure returns `{ valid: false, reason:
+ * "signature" }` rather than throwing (contracts' `verifyReviewVerdictProof`
+ * is itself fail-closed, never throws).
+ */
+export declare function verifyLocalReviewVerdictProof(body: ReviewVerdictBody, publicKeyRaw: Buffer): VerdictProofResult;
+/**
+ * Extract every fenced ```kya-os-signed-verdict block's raw contents from a
+ * review or comment body. Returns the raw text (not yet parsed/validated) —
+ * callers JSON.parse and `ReviewVerdictBodySchema.safeParse` each block
+ * themselves, so a malformed block reports as one INVALID row rather than
+ * aborting extraction of the others.
+ */
+export declare function extractSignedVerdictBlocks(markdown: string): string[];
+//# sourceMappingURL=verdict-verify.d.ts.map

package/dist/utils/review/verdict-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-verify.d.ts","sourceRoot":"","sources":["../../../src/utils/review/verdict-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,iBAAiB,EACvB,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAOpB;AAID;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAMrE"}

package/dist/utils/review/verdict-verify.js

@@ -0,0 +1,53 @@
+/**
+ * Local review-verdict proof verification for `kya-os review verify`
+ * (review-loop P9 commit 3).
+ *
+ * Seam completed (was TEMPORARY pending review-loop P13's commit 0 / PR
+ * #701, now merged): delegates the signature check to
+ * `@kya-os/contracts/review/verify`'s `verifyReviewVerdictProof(body,
+ * publicKeyRaw)` (the same raw-bytes shape `resolveDidWebEd25519Key`,
+ * did-web-key.ts, already produces) rather than reimplementing the
+ * SPKI-wrap Ed25519 verify locally. `verifyLocalReviewVerdictProof` stays
+ * as a thin wrapper -- not deleted outright -- because contracts' function
+ * returns a plain boolean with no way to distinguish a digest mismatch
+ * from a signature failure, and `commands/review.ts` reports those as two
+ * different human-readable reasons; this wrapper does the digest
+ * pre-check itself (matching compute's `review.ts`'s identical seam) to
+ * keep that distinction, then delegates for the signature half.
+ *
+ * @module cli/utils/review/verdict-verify
+ */
+import { verifyReviewVerdictProof } from "@kya-os/contracts/review/verify";
+import { computeFindingsDigest, } from "@kya-os/contracts/review";
+/**
+ * Verify a review verdict's proof against a RAW Ed25519 public key: that
+ * `findingsDigest` matches `findings`, and that `proof.signature` was
+ * produced by the private half of `publicKeyRaw`. Fail-closed — any
+ * malformed input or key-import failure returns `{ valid: false, reason:
+ * "signature" }` rather than throwing (contracts' `verifyReviewVerdictProof`
+ * is itself fail-closed, never throws).
+ */
+export function verifyLocalReviewVerdictProof(body, publicKeyRaw) {
+    if (computeFindingsDigest(body.findings) !== body.findingsDigest) {
+        return { valid: false, reason: "digest" };
+    }
+    return verifyReviewVerdictProof(body, publicKeyRaw)
+        ? { valid: true }
+        : { valid: false, reason: "signature" };
+}
+const SIGNED_VERDICT_FENCE = /```kya-os-signed-verdict\n([\s\S]*?)\n```/g;
+/**
+ * Extract every fenced ```kya-os-signed-verdict block's raw contents from a
+ * review or comment body. Returns the raw text (not yet parsed/validated) —
+ * callers JSON.parse and `ReviewVerdictBodySchema.safeParse` each block
+ * themselves, so a malformed block reports as one INVALID row rather than
+ * aborting extraction of the others.
+ */
+export function extractSignedVerdictBlocks(markdown) {
+    const blocks = [];
+    for (const match of markdown.matchAll(SIGNED_VERDICT_FENCE)) {
+        blocks.push(match[1]);
+    }
+    return blocks;
+}
+//# sourceMappingURL=verdict-verify.js.map

package/dist/utils/review/verdict-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-verify.js","sourceRoot":"","sources":["../../../src/utils/review/verdict-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AASlC;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAuB,EACvB,YAAoB;IAEpB,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC;QACjD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/review-registry-writer.d.ts

@@ -0,0 +1,52 @@
+import { type ReviewerRegistry, type ReviewerRegistryEntry } from "@kya-os/contracts/review";
+/**
+ * Generates/updates `~/.mcpi/review-registry.json` from the profiles just
+ * created by `kya-os init`'s agent-profile stage. Deliberately MERGE-ONLY:
+ * `orgId`/`orgRootDid`/`repos`/`quorumN` are org-wide values a single
+ * developer's `init` run has no way to know, so a machine with no existing
+ * registry gets no invented one -- only entries in an ALREADY-PRESENT file
+ * are ever added or updated. A failed validation is reported, never
+ * silently written (a bug, not a warning, per the spec).
+ */
+export declare function reviewRegistryPath(): string;
+export type MergeReviewRegistryResult = {
+    status: "written";
+    path: string;
+    registry: ReviewerRegistry;
+} | {
+    status: "skipped-no-existing-registry";
+    path: string;
+} | {
+    status: "invalid-existing";
+    path: string;
+    error: string;
+} | {
+    status: "invalid-result";
+    path: string;
+    error: string;
+};
+export interface MergeReviewRegistryOptions {
+    path?: string;
+    /**
+     * agentDids (from `newEntries`) to promote to `fixes: true` IF their
+     * githubLogin has no `fixes: true` entry anywhere in the MERGED registry
+     * (existing entries plus this run's, not just this run's own batch).
+     * Never demotes an existing fixer and never gives one person two.
+     *
+     * This decision belongs here, not in the caller: a caller building
+     * `newEntries` sees only its own batch (e.g. "the first profile created
+     * THIS run"), so computing `fixes` there is correct on a machine's first
+     * `kya-os init` but wrong on every later run that adds one more profile
+     * for someone who already has a fixer -- the caller has no way to know
+     * that without re-reading the file this function already loads.
+     */
+    designateFixerCandidates?: string[];
+}
+/**
+ * Merge freshly generated profile entries into the on-disk review registry,
+ * keyed by `agentDid`: a matching entry is updated in place (same array
+ * position), a new one is appended, and every entry this run didn't touch
+ * (other people's, hand-added) is preserved untouched.
+ */
+export declare function mergeReviewRegistry(newEntries: ReviewerRegistryEntry[], options?: MergeReviewRegistryOptions): MergeReviewRegistryResult;
+//# sourceMappingURL=review-registry-writer.d.ts.map

package/dist/utils/review-registry-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-registry-writer.d.ts","sourceRoot":"","sources":["../../src/utils/review-registry-writer.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAGlC;;;;;;;;GAQG;AAEH,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC/D;IAAE,MAAM,EAAE,8BAA8B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;OAYG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,qBAAqB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CAgE3B"}

package/dist/utils/review-registry-writer.js

@@ -0,0 +1,79 @@
+import { existsSync, readFileSync } from "fs";
+import { join, resolve } from "path";
+import { ReviewerRegistrySchema, } from "@kya-os/contracts/review";
+import { stateDir, writeFileAtomicSafe } from "./cli-kit/index.js";
+/**
+ * Generates/updates `~/.mcpi/review-registry.json` from the profiles just
+ * created by `kya-os init`'s agent-profile stage. Deliberately MERGE-ONLY:
+ * `orgId`/`orgRootDid`/`repos`/`quorumN` are org-wide values a single
+ * developer's `init` run has no way to know, so a machine with no existing
+ * registry gets no invented one -- only entries in an ALREADY-PRESENT file
+ * are ever added or updated. A failed validation is reported, never
+ * silently written (a bug, not a warning, per the spec).
+ */
+export function reviewRegistryPath() {
+    return resolve(process.env.MCPI_REVIEW_REGISTRY_PATH ||
+        join(stateDir("mcpi"), "review-registry.json"));
+}
+/**
+ * Merge freshly generated profile entries into the on-disk review registry,
+ * keyed by `agentDid`: a matching entry is updated in place (same array
+ * position), a new one is appended, and every entry this run didn't touch
+ * (other people's, hand-added) is preserved untouched.
+ */
+export function mergeReviewRegistry(newEntries, options = {}) {
+    const path = options.path ?? reviewRegistryPath();
+    if (!existsSync(path)) {
+        return { status: "skipped-no-existing-registry", path };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch (error) {
+        return {
+            status: "invalid-existing",
+            path,
+            error: `Could not parse ${path}: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    const existing = ReviewerRegistrySchema.safeParse(parsed);
+    if (!existing.success) {
+        return {
+            status: "invalid-existing",
+            path,
+            error: `${path} fails schema validation: ${existing.error.message}`,
+        };
+    }
+    const byDid = new Map(existing.data.entries.map((e) => [e.agentDid, e]));
+    for (const entry of newEntries) {
+        byDid.set(entry.agentDid, entry);
+    }
+    if (options.designateFixerCandidates) {
+        const fixerLoginSeen = new Set(Array.from(byDid.values())
+            .filter((e) => e.fixes)
+            .map((e) => e.githubLogin));
+        for (const did of options.designateFixerCandidates) {
+            const entry = byDid.get(did);
+            if (!entry || fixerLoginSeen.has(entry.githubLogin))
+                continue;
+            byDid.set(did, { ...entry, fixes: true });
+            fixerLoginSeen.add(entry.githubLogin);
+        }
+    }
+    const merged = {
+        ...existing.data,
+        entries: Array.from(byDid.values()),
+    };
+    const validated = ReviewerRegistrySchema.safeParse(merged);
+    if (!validated.success) {
+        return {
+            status: "invalid-result",
+            path,
+            error: `Generated review registry fails schema validation: ${validated.error.message}`,
+        };
+    }
+    writeFileAtomicSafe(path, JSON.stringify(validated.data, null, 2) + "\n");
+    return { status: "written", path, registry: validated.data };
+}
+//# sourceMappingURL=review-registry-writer.js.map

package/dist/utils/review-registry-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-registry-writer.js","sourceRoot":"","sources":["../../src/utils/review-registry-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EACL,sBAAsB,GAGvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEnE;;;;;;;;GAQG;AAEH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CACZ,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CACjD,CAAC;AACJ,CAAC;AA0BD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAmC,EACnC,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAElD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI;YACJ,KAAK,EAAE,mBAAmB,IAAI,KAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI;YACJ,KAAK,EAAE,GAAG,IAAI,6BAA6B,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAC7B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,GAAG,QAAQ,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;KACpC,CAAC;IAEF,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI;YACJ,KAAK,EAAE,sDAAsD,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE;SACvF,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/utils/should-install-dependency.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Decides whether `kya-os init` should install the missing `@kya-os/mcp-i`
+ * dependency, given `--install`/`--no-install`/`--yes` and whether stdin is
+ * a TTY. Pure decision logic, deliberately separated from init.ts's dynamic
+ * `import("@kya-os/mcp-i")` retry (which stays inline there -- it exists to
+ * survive monorepo CI ordering and isn't itself a seam) so this tri-state
+ * flag interaction is exhaustively unit-testable on its own.
+ */
+export interface ShouldInstallDependencyOptions {
+    /** true = --install, false = --no-install, undefined = neither passed. */
+    install?: boolean;
+    /** --yes: consents to installs only, never to registration/key decisions. */
+    yes?: boolean;
+}
+export type ConfirmInstallImpl = (message: string) => Promise<boolean>;
+export declare function shouldInstallDependency(options: ShouldInstallDependencyOptions, isTTY: boolean, confirmImpl: ConfirmInstallImpl): Promise<boolean>;
+//# sourceMappingURL=should-install-dependency.d.ts.map

package/dist/utils/should-install-dependency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"should-install-dependency.d.ts","sourceRoot":"","sources":["../../src/utils/should-install-dependency.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,8BAA8B;IAC7C,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvE,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,EACvC,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAelB"}

package/dist/utils/should-install-dependency.js

@@ -0,0 +1,25 @@
+/**
+ * Decides whether `kya-os init` should install the missing `@kya-os/mcp-i`
+ * dependency, given `--install`/`--no-install`/`--yes` and whether stdin is
+ * a TTY. Pure decision logic, deliberately separated from init.ts's dynamic
+ * `import("@kya-os/mcp-i")` retry (which stays inline there -- it exists to
+ * survive monorepo CI ordering and isn't itself a seam) so this tri-state
+ * flag interaction is exhaustively unit-testable on its own.
+ */
+export async function shouldInstallDependency(options, isTTY, confirmImpl) {
+    // --no-install always wins: an explicit "never" overrides even --yes.
+    if (options.install === false) {
+        return false;
+    }
+    if (!isTTY) {
+        // Non-TTY: keep today's behavior unless --install opted in (CI). --yes
+        // is a TTY-prompt shortcut and has no effect off a TTY.
+        return options.install === true;
+    }
+    // TTY: --yes or --install both skip the prompt with an implicit yes.
+    if (options.yes === true || options.install === true) {
+        return true;
+    }
+    return confirmImpl("Install @kya-os/mcp-i now?");
+}
+//# sourceMappingURL=should-install-dependency.js.map

package/dist/utils/should-install-dependency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"should-install-dependency.js","sourceRoot":"","sources":["../../src/utils/should-install-dependency.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuC,EACvC,KAAc,EACd,WAA+B;IAE/B,sEAAsE;IACtE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,uEAAuE;QACvE,wDAAwD;QACxD,OAAO,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IAClC,CAAC;IACD,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC,4BAA4B,CAAC,CAAC;AACnD,CAAC"}

package/dist/utils/tool-readiness.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Checks whether the external binaries init needs (`git`, `gh`, `claude`)
+ * are present, and for `gh` specifically, authenticated. Table-driven and
+ * fully injectable (`whichImpl`, `execImpl`) so every path is testable
+ * without touching the real filesystem, PATH, or network -- mirrors
+ * `packages/cli/src/utils/agent-detector.ts`'s detection-only contract:
+ * this module never executes a detected binary beyond a `--version`/
+ * `auth status` probe, and never spawns `gh auth login` itself (that is
+ * interactive and must be run by the user).
+ */
+export type ToolKind = "git" | "gh" | "claude";
+export interface ToolCheck {
+    tool: ToolKind;
+    found: boolean;
+    version?: string;
+    /** `gh` only: result of `gh auth status`. */
+    authenticated?: boolean;
+    /** Exact per-platform command (or instruction) to resolve this row. */
+    installHint: string;
+}
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+export type WhichImpl = (bin: string) => Promise<string | null>;
+export type ExecImpl = (command: string, args: string[]) => Promise<ExecResult>;
+export interface ToolReadinessDeps {
+    whichImpl: WhichImpl;
+    execImpl: ExecImpl;
+    platform: NodeJS.Platform;
+}
+/**
+ * Detect presence (and for `gh`, auth) of the requested tools. Never
+ * executes a detected binary beyond a `--version`/`auth status` probe.
+ */
+export declare function checkTools(required: ToolKind[], deps?: Partial<ToolReadinessDeps>): Promise<ToolCheck[]>;
+export interface RunToolReadinessGateOptions {
+    interactive: boolean;
+    required?: ToolKind[];
+    deps?: Partial<ToolReadinessDeps>;
+    /** Injectable confirm prompt; defaults to an inquirer confirm. */
+    confirmImpl?: (message: string) => Promise<boolean>;
+}
+export interface ToolReadinessGateResult {
+    checks: ToolCheck[];
+    /** Tools whose absence should stop init entirely (today: just `git`). */
+    fatalMissing: ToolKind[];
+}
+/**
+ * Run the readiness check and, in interactive mode on darwin, offer to run
+ * the brew install command for anything missing. Non-interactive (or
+ * non-darwin) callers get the checks back untouched -- no prompt, no
+ * install, ever attempted.
+ */
+export declare function runToolReadinessGate(options: RunToolReadinessGateOptions): Promise<ToolReadinessGateResult>;
+//# sourceMappingURL=tool-readiness.d.ts.map

package/dist/utils/tool-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-readiness.d.ts","sourceRoot":"","sources":["../../src/utils/tool-readiness.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAEH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B;AAiDD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,QAAQ,EAAE,EACpB,IAAI,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACpC,OAAO,CAAC,SAAS,EAAE,CAAC,CAmCtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClC,kEAAkE;IAClE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,yEAAyE;IACzE,YAAY,EAAE,QAAQ,EAAE,CAAC;CAC1B;AAYD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CA4BlC"}

package/dist/utils/tool-readiness.js

@@ -0,0 +1,114 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { defaultWhich } from "./which.js";
+const execFileAsync = promisify(execFile);
+async function defaultExec(command, args) {
+    try {
+        const { stdout, stderr } = await execFileAsync(command, args, {
+            encoding: "utf8",
+        });
+        return { stdout, stderr, code: 0 };
+    }
+    catch (error) {
+        const err = error;
+        return {
+            stdout: err.stdout ?? "",
+            stderr: err.stderr ?? err.message ?? "",
+            code: typeof err.code === "number" ? err.code : 1,
+        };
+    }
+}
+function defaultDeps() {
+    return { whichImpl: defaultWhich, execImpl: defaultExec, platform: process.platform };
+}
+function installHintFor(tool, platform) {
+    const darwin = platform === "darwin";
+    switch (tool) {
+        case "git":
+            return darwin
+                ? "brew install git"
+                : "Install git: https://git-scm.com/downloads";
+        case "gh":
+            return darwin
+                ? "brew install gh"
+                : "Install gh: https://cli.github.com";
+        case "claude":
+            return darwin
+                ? "brew install --cask claude-code"
+                : "Install Claude Code: https://docs.claude.com/en/docs/claude-code";
+    }
+}
+/**
+ * Detect presence (and for `gh`, auth) of the requested tools. Never
+ * executes a detected binary beyond a `--version`/`auth status` probe.
+ */
+export async function checkTools(required, deps = {}) {
+    const { whichImpl, execImpl, platform } = { ...defaultDeps(), ...deps };
+    const results = [];
+    for (const tool of required) {
+        const binPath = await whichImpl(tool);
+        const found = Boolean(binPath);
+        let version;
+        let authenticated;
+        let installHint = installHintFor(tool, platform);
+        if (found) {
+            const versionResult = await execImpl(tool, ["--version"]);
+            if (versionResult.code === 0) {
+                version = versionResult.stdout.trim().split("\n")[0] || undefined;
+            }
+            if (tool === "gh") {
+                const authResult = await execImpl("gh", [
+                    "auth",
+                    "status",
+                    "--hostname",
+                    "github.com",
+                ]);
+                authenticated = authResult.code === 0;
+                if (!authenticated) {
+                    installHint = "gh auth login";
+                }
+            }
+        }
+        results.push({ tool, found, version, authenticated, installHint });
+    }
+    return results;
+}
+const FATAL_IF_MISSING = ["git"];
+async function defaultConfirm(message) {
+    const inquirer = (await import("inquirer")).default;
+    const { answer } = await inquirer.prompt([
+        { type: "confirm", name: "answer", message, default: true },
+    ]);
+    return answer;
+}
+/**
+ * Run the readiness check and, in interactive mode on darwin, offer to run
+ * the brew install command for anything missing. Non-interactive (or
+ * non-darwin) callers get the checks back untouched -- no prompt, no
+ * install, ever attempted.
+ */
+export async function runToolReadinessGate(options) {
+    const required = options.required ?? ["git", "gh", "claude"];
+    const deps = { ...defaultDeps(), ...options.deps };
+    const checks = await checkTools(required, deps);
+    if (options.interactive && deps.platform === "darwin") {
+        const confirmImpl = options.confirmImpl ?? defaultConfirm;
+        for (let i = 0; i < checks.length; i++) {
+            const check = checks[i];
+            if (!check.found && check.installHint.startsWith("brew ")) {
+                const shouldInstall = await confirmImpl(`${check.tool} was not found. Run \`${check.installHint}\` now?`);
+                if (shouldInstall) {
+                    const [cmd, ...args] = check.installHint.split(" ");
+                    await deps.execImpl(cmd, args);
+                    const [rechecked] = await checkTools([check.tool], deps);
+                    checks[i] = rechecked;
+                }
+            }
+        }
+    }
+    const fatalMissing = checks
+        .filter((c) => FATAL_IF_MISSING.includes(c.tool) && !c.found)
+        .map((c) => c.tool);
+    return { checks, fatalMissing };
+}
+//# sourceMappingURL=tool-readiness.js.map

package/dist/utils/tool-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-readiness.js","sourceRoot":"","sources":["../../src/utils/tool-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAwC1C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,KAAK,UAAU,WAAW,CACxB,OAAe,EACf,IAAc;IAEd,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE;YAC5D,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAIX,CAAC;QACF,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE;YACvC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,QAAyB;IAC/D,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,CAAC;IACrC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,MAAM;gBACX,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,4CAA4C,CAAC;QACnD,KAAK,IAAI;YACP,OAAO,MAAM;gBACX,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,oCAAoC,CAAC;QAC3C,KAAK,QAAQ;YACX,OAAO,MAAM;gBACX,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,kEAAkE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAoB,EACpB,OAAmC,EAAE;IAErC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;IACxE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAA2B,CAAC;QAChC,IAAI,aAAkC,CAAC;QACvC,IAAI,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEjD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1D,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YACpE,CAAC;YAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;oBACtC,MAAM;oBACN,QAAQ;oBACR,YAAY;oBACZ,YAAY;iBACb,CAAC,CAAC;gBACH,aAAa,GAAG,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,WAAW,GAAG,eAAe,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAgBD,MAAM,gBAAgB,GAAe,CAAC,KAAK,CAAC,CAAC;AAE7C,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACvC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;KAC5D,CAAC,CAAC;IACH,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAoC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,MAAM,aAAa,GAAG,MAAM,WAAW,CACrC,GAAG,KAAK,CAAC,IAAI,yBAAyB,KAAK,CAAC,WAAW,SAAS,CACjE,CAAC;gBACF,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC/B,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;oBACzD,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;SAC5D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC"}

package/dist/utils/which.d.ts

@@ -0,0 +1,2 @@
+export declare function defaultWhich(bin: string): Promise<string | null>;
+//# sourceMappingURL=which.d.ts.map

package/dist/utils/which.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"which.d.ts","sourceRoot":"","sources":["../../src/utils/which.ts"],"names":[],"mappings":"AAcA,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYtE"}

package/dist/utils/which.js

@@ -0,0 +1,22 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+/**
+ * Resolve a binary's path on PATH, cross-platform (`which` on POSIX,
+ * `where` on Windows). Returns null rather than throwing when the binary
+ * isn't found -- that's the expected, non-error outcome for a presence
+ * check, not a failure to report. Shared by tool-readiness.ts and
+ * agent-detector.ts, both of which need this exact resolution as their
+ * default injectable `whichImpl`.
+ */
+const execFileAsync = promisify(execFile);
+export async function defaultWhich(bin) {
+    try {
+        const { stdout } = await execFileAsync(process.platform === "win32" ? "where" : "which", [bin], { encoding: "utf8" });
+        const path = stdout.split("\n")[0]?.trim();
+        return path || null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=which.js.map

package/dist/utils/which.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"which.js","sourceRoot":"","sources":["../../src/utils/which.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC;;;;;;;GAOG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAChD,CAAC,GAAG,CAAC,EACL,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3C,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @kya-os/cli version, read from package.json at module load time.
+ *
+ * All three bins (`kya-os`, `mcpi`, `dco`) report this so a `.version()`
+ * literal can never drift from the published package version the way
+ * "1.2.2" (index.prod.ts) and "1.0.0" (index.ts) previously did.
+ *
+ * Mirrors packages/compute/src/version.ts's approach: readFileSync +
+ * JSON.parse rather than a JSON import, since the latter needs an import
+ * attribute (`with { type: "json" }`) whose supported syntax has moved
+ * across Node versions.
+ */
+declare let cliVersion: string;
+export { cliVersion };
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,QAAA,IAAI,UAAU,QAAU,CAAC;AAYzB,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/version.js

@@ -0,0 +1,29 @@
+/**
+ * @kya-os/cli version, read from package.json at module load time.
+ *
+ * All three bins (`kya-os`, `mcpi`, `dco`) report this so a `.version()`
+ * literal can never drift from the published package version the way
+ * "1.2.2" (index.prod.ts) and "1.0.0" (index.ts) previously did.
+ *
+ * Mirrors packages/compute/src/version.ts's approach: readFileSync +
+ * JSON.parse rather than a JSON import, since the latter needs an import
+ * attribute (`with { type: "json" }`) whose supported syntax has moved
+ * across Node versions.
+ */
+import { readFileSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+let cliVersion = "0.0.0";
+try {
+    const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
+    const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    const version = pkg?.version;
+    if (typeof version === "string") {
+        cliVersion = version;
+    }
+}
+catch {
+    // Fallback — non-fatal (e.g., running from a bundled context)
+}
+export { cliVersion };
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,IAAI,UAAU,GAAG,OAAO,CAAC;AACzB,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACpF,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAI,GAAoC,EAAE,OAAO,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,UAAU,GAAG,OAAO,CAAC;IACvB,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,8DAA8D;AAChE,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}