@kya-os/cli 1.8.1 → 1.8.3

package/dist/utils/{claim-polling.js → cli-kit/claim-polling.js}

@@ -1,17 +1,17 @@
 import chalk from "chalk";
 import ora from "ora";
 /**
- * Poll for agent claim status
+ * Poll a claim-status endpoint until claimed, timed out, or interrupted.
  *
- * Polls the KTA API to check if an agent has been claimed.
- * Returns true when claimed, false if timeout or interrupted.
+ * Endpoint-agnostic: `endpoint` is the base URL and `statusPath` builds the
+ * per-check path from it, so a caller can point this at knowthat.ai's
+ * `/api/agents/:slug` today or a Checkpoint `/api/v1/cli/claim-status`
+ * tomorrow without forking the polling logic. A response is "claimed" when
+ * `isClaimed` returns true for its parsed JSON body.
  *
- * @param agentName - The agent's name (slug) to check
- * @param did - The agent's DID
- * @param endpoint - API endpoint URL (default: https://knowthat.ai)
- * @param options - Polling options
+ * Returns true when claimed, false on timeout or user interrupt (Ctrl+C).
  */
-export async function pollForClaimStatus(agentName, did, endpoint = "https://knowthat.ai", options = {}) {
+export async function pollForClaimStatus(statusUrl, isClaimed, options = {}) {
     const { verbose = false, maxAttempts = 60, // 5 minutes at 5 second intervals
     pollInterval = 5000, // 5 seconds
      } = options;
@@ -26,12 +26,11 @@ export async function pollForClaimStatus(agentName, did, endpoint = "https://kno
         skipPolling = true;
         spinner.warn(chalk.yellow("⏭️  Skipping claim check..."));
     };
-    process.on('SIGINT', handleInterrupt);
+    process.on("SIGINT", handleInterrupt);
     try {
         while (attempts < maxAttempts && !skipPolling) {
             try {
-                const statusCheckUrl = new URL("/api/agents/" + encodeURIComponent(agentName), endpoint);
-                const response = await fetch(statusCheckUrl.toString(), {
+                const response = await fetch(statusUrl, {
                     method: "GET",
                     headers: {
                         "User-Agent": "kya-os-cli",
@@ -41,25 +40,19 @@ export async function pollForClaimStatus(agentName, did, endpoint = "https://kno
                 if (response.ok) {
                     const data = await response.json();
                     if (verbose) {
-                        console.log(chalk.gray(`\n[DEBUG] Agent status:`));
+                        console.log(chalk.gray(`\n[DEBUG] Claim status:`));
                         console.log(chalk.gray(JSON.stringify(data, null, 2)));
                     }
-                    // Check if claimed (multiple possible indicators)
-                    if (data &&
-                        (data.userId ||
-                            data.status === 'active' ||
-                            data.owner ||
-                            data.claimedAt ||
-                            data.isDraft === false)) {
-                        spinner.succeed(chalk.green("✅ Agent claimed successfully!"));
-                        process.removeListener('SIGINT', handleInterrupt);
+                    if (isClaimed(data)) {
+                        spinner.succeed(chalk.green("✅ Claimed successfully!"));
+                        process.removeListener("SIGINT", handleInterrupt);
                         return true;
                     }
                 }
                 else if (response.status === 404) {
-                    // Agent not found - might not be indexed yet, continue polling
+                    // Not found yet - might not be indexed yet, continue polling
                     if (verbose) {
-                        console.log(chalk.gray(`\n[DEBUG] Agent not found yet (404), continuing...`));
+                        console.log(chalk.gray(`\n[DEBUG] Not found yet (404), continuing...`));
                     }
                 }
             }
@@ -79,17 +72,17 @@ export async function pollForClaimStatus(agentName, did, endpoint = "https://kno
                 .toString()
                 .padStart(2, "0")} remaining)`;
         }
-        process.removeListener('SIGINT', handleInterrupt);
+        process.removeListener("SIGINT", handleInterrupt);
         if (skipPolling) {
             console.log(chalk.gray("\n   You can complete the claim process later."));
             return false;
         }
         spinner.warn(chalk.yellow("⏱️  Claim check timed out"));
-        console.log(chalk.gray("\n   Don't worry! You can still claim your agent."));
+        console.log(chalk.gray("\n   Don't worry! You can still complete the claim."));
         return false;
     }
     catch (error) {
-        process.removeListener('SIGINT', handleInterrupt);
+        process.removeListener("SIGINT", handleInterrupt);
         spinner.fail("Claim polling failed");
         throw error;
     }

package/dist/utils/cli-kit/claim-polling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-polling.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/claim-polling.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AAQtB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,SAAqC,EACrC,UAA+B,EAAE;IAEjC,MAAM,EACJ,OAAO,GAAG,KAAK,EACf,WAAW,GAAG,EAAE,EAAE,kCAAkC;IACpD,YAAY,GAAG,IAAI,EAAE,YAAY;MAClC,GAAG,OAAO,CAAC;IAEZ,MAAM,OAAO,GAAG,GAAG,CAAC;QAClB,IAAI,EAAE,wCAAwC;QAC9C,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEX,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,2CAA2C;IAC3C,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,OAAO,QAAQ,GAAG,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;oBACtC,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE;wBACP,YAAY,EAAE,YAAY;wBAC1B,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAEnC,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;wBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzD,CAAC;oBAED,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;wBACpB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;wBACxD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;wBAClD,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnC,6DAA6D;oBAC7D,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC;oBAC1E,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,gEAAgE;gBAChE,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,0BAA0B,QAAQ,GAAG,CAAC,YACpC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eACrD,EAAE,CACH,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YAClE,QAAQ,EAAE,CAAC;YAEX,qCAAqC;YACrC,MAAM,aAAa,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,GAAG,2CAA2C,OAAO,IAAI,OAAO;iBACzE,QAAQ,EAAE;iBACV,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/utils/cli-kit/diagnostics.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Run a named set of async checks in parallel and collect their results
+ * under the same keys, e.g. `doctor`-style commands that report several
+ * independent health checks (packages, connectivity, config, ...) at once.
+ */
+export declare function runDiagnosticChecks<T extends Record<string, unknown>>(checks: {
+    [K in keyof T]: () => Promise<T[K]>;
+}): Promise<T>;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/utils/cli-kit/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzE,MAAM,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GAC9C,OAAO,CAAC,CAAC,CAAC,CAIZ"}

package/dist/utils/cli-kit/diagnostics.js

@@ -0,0 +1,11 @@
+/**
+ * Run a named set of async checks in parallel and collect their results
+ * under the same keys, e.g. `doctor`-style commands that report several
+ * independent health checks (packages, connectivity, config, ...) at once.
+ */
+export async function runDiagnosticChecks(checks) {
+    const keys = Object.keys(checks);
+    const values = await Promise.all(keys.map((key) => checks[key]()));
+    return Object.fromEntries(keys.map((key, i) => [key, values[i]]));
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/utils/cli-kit/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA+C;IAE/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAgB,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAM,CAAC;AACzE,CAAC"}

package/dist/utils/cli-kit/fs-safe.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Atomic, symlink-safe file replace.
+ *
+ * The destination and its temp sibling may live in an untrusted working
+ * tree (e.g. a cloned repo). A tracked symlink planted at the predictable
+ * `<path>.mcpi-tmp` sibling would otherwise make a plain writeFileSync
+ * follow it and clobber an arbitrary file the caller can write. So: unlink
+ * any pre-existing temp (rmSync removes the link itself, never its
+ * target), then create it with O_EXCL (`wx`) so a planted or racing
+ * symlink makes the write fail closed instead of being followed.
+ * renameSync replaces the destination without following a symlink there.
+ */
+export declare function writeFileAtomicSafe(path: string, content: string, mode?: number): void;
+//# sourceMappingURL=fs-safe.d.ts.map

package/dist/utils/cli-kit/fs-safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-safe.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/fs-safe.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,SAAQ,GACX,IAAI,CAKN"}

package/dist/utils/cli-kit/fs-safe.js

@@ -0,0 +1,20 @@
+import { renameSync, rmSync, writeFileSync } from "fs";
+/**
+ * Atomic, symlink-safe file replace.
+ *
+ * The destination and its temp sibling may live in an untrusted working
+ * tree (e.g. a cloned repo). A tracked symlink planted at the predictable
+ * `<path>.mcpi-tmp` sibling would otherwise make a plain writeFileSync
+ * follow it and clobber an arbitrary file the caller can write. So: unlink
+ * any pre-existing temp (rmSync removes the link itself, never its
+ * target), then create it with O_EXCL (`wx`) so a planted or racing
+ * symlink makes the write fail closed instead of being followed.
+ * renameSync replaces the destination without following a symlink there.
+ */
+export function writeFileAtomicSafe(path, content, mode = 0o644) {
+    const tempPath = `${path}.mcpi-tmp`;
+    rmSync(tempPath, { force: true });
+    writeFileSync(tempPath, content, { flag: "wx", mode });
+    renameSync(tempPath, path);
+}
+//# sourceMappingURL=fs-safe.js.map

package/dist/utils/cli-kit/fs-safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-safe.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/fs-safe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,OAAe,EACf,IAAI,GAAG,KAAK;IAEZ,MAAM,QAAQ,GAAG,GAAG,IAAI,WAAW,CAAC;IACpC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/utils/cli-kit/index.d.ts

@@ -0,0 +1,15 @@
+export { writeFileAtomicSafe } from "./fs-safe.js";
+export { upsertMarkerBlock } from "./marker-block.js";
+export type { UpsertResult } from "./marker-block.js";
+export { mergeJsonFile } from "./json-file.js";
+export type { MergeJsonResult } from "./json-file.js";
+export { renderSteps, statusLabel } from "./step-report.js";
+export type { StepStatus, StepResult } from "./step-report.js";
+export { SLUG_PATTERN, isValidSlug, stateDir } from "./paths.js";
+export { ensureSecureDir, writeSecureFile } from "./secure-storage.js";
+export { pollForClaimStatus } from "./claim-polling.js";
+export type { ClaimPollingOptions } from "./claim-polling.js";
+export { openUrlInBrowser } from "./browser.js";
+export type { OpenUrlInBrowserOptions, OpenUrlInBrowserResult, } from "./browser.js";
+export { runDiagnosticChecks } from "./diagnostics.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/cli-kit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,YAAY,EACV,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/utils/cli-kit/index.js

@@ -0,0 +1,10 @@
+export { writeFileAtomicSafe } from "./fs-safe.js";
+export { upsertMarkerBlock } from "./marker-block.js";
+export { mergeJsonFile } from "./json-file.js";
+export { renderSteps, statusLabel } from "./step-report.js";
+export { SLUG_PATTERN, isValidSlug, stateDir } from "./paths.js";
+export { ensureSecureDir, writeSecureFile } from "./secure-storage.js";
+export { pollForClaimStatus } from "./claim-polling.js";
+export { openUrlInBrowser } from "./browser.js";
+export { runDiagnosticChecks } from "./diagnostics.js";
+//# sourceMappingURL=index.js.map

package/dist/utils/cli-kit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/utils/cli-kit/json-file.d.ts

@@ -0,0 +1,21 @@
+export type MergeJsonResult = "created" | "updated" | "unchanged" | "skipped-invalid" | "would-change";
+/**
+ * Merge `patch` into a JSON file at `path`, preserving every other key.
+ *
+ * A file we cannot parse (or that doesn't hold a plain object) is left
+ * untouched and reported "skipped-invalid": clobbering a caller's existing
+ * config is worse than leaving the patch unapplied. Already-applied patches
+ * report "unchanged" without writing.
+ *
+ * `path` is used as given, with no containment check against a base
+ * directory (unlike `upsertMarkerBlock`, this function takes a fully
+ * resolved path, not a `cwd` + relative segment) — resolving it safely is
+ * the caller's responsibility.
+ */
+export declare function mergeJsonFile(path: string, patch: Record<string, unknown>, options?: {
+    dryRun?: boolean;
+}): {
+    result: MergeJsonResult;
+    path: string;
+};
+//# sourceMappingURL=json-file.d.ts.map

package/dist/utils/cli-kit/json-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-file.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/json-file.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,SAAS,GACT,WAAW,GACX,iBAAiB,GACjB,cAAc,CAAC;AAEnB;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAoC3C"}

package/dist/utils/cli-kit/json-file.js

@@ -0,0 +1,51 @@
+import { existsSync, mkdirSync, readFileSync } from "fs";
+import { dirname } from "path";
+import { writeFileAtomicSafe } from "./fs-safe.js";
+/**
+ * Merge `patch` into a JSON file at `path`, preserving every other key.
+ *
+ * A file we cannot parse (or that doesn't hold a plain object) is left
+ * untouched and reported "skipped-invalid": clobbering a caller's existing
+ * config is worse than leaving the patch unapplied. Already-applied patches
+ * report "unchanged" without writing.
+ *
+ * `path` is used as given, with no containment check against a base
+ * directory (unlike `upsertMarkerBlock`, this function takes a fully
+ * resolved path, not a `cwd` + relative segment) — resolving it safely is
+ * the caller's responsibility.
+ */
+export function mergeJsonFile(path, patch, options = {}) {
+    if (existsSync(path)) {
+        let settings;
+        try {
+            const parsed = JSON.parse(readFileSync(path, "utf-8"));
+            if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+                return { result: "skipped-invalid", path };
+            }
+            settings = parsed;
+        }
+        catch {
+            return { result: "skipped-invalid", path };
+        }
+        const alreadyApplied = Object.entries(patch).every(([key, value]) => settings[key] === value);
+        if (alreadyApplied) {
+            return { result: "unchanged", path };
+        }
+        if (options.dryRun) {
+            return { result: "would-change", path };
+        }
+        Object.assign(settings, patch);
+        writeFileAtomicSafe(path, JSON.stringify(settings, null, 2) + "\n");
+        return { result: "updated", path };
+    }
+    if (options.dryRun) {
+        return { result: "would-change", path };
+    }
+    const dir = dirname(path);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    writeFileAtomicSafe(path, JSON.stringify(patch, null, 2) + "\n");
+    return { result: "created", path };
+}
+//# sourceMappingURL=json-file.js.map

package/dist/utils/cli-kit/json-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-file.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AASnD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,KAA8B,EAC9B,UAAgC,EAAE;IAElC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,QAAiC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC7C,CAAC;YACD,QAAQ,GAAG,MAAiC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAChD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,CAC1C,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/utils/cli-kit/marker-block.d.ts

@@ -0,0 +1,26 @@
+export type UpsertResult = "created" | "updated" | "unchanged" | "would-change";
+/**
+ * Insert or replace a delimited block in a file, generalized over the
+ * target file, the start/end markers, and the block content — so a
+ * consumer can manage its own marker pair (e.g. `<!-- mcpi:dco:start -->`)
+ * in its own target file (e.g. `CLAUDE.md`) without duplicating this
+ * splice/append logic.
+ *
+ * Creates the file with just the block when missing, replaces an existing
+ * managed block in place, or appends with a blank-line separator when no
+ * managed block exists yet. A no-op write (content already matches) is
+ * reported as "unchanged" rather than touching the file.
+ *
+ * `relativePath` must never carry attacker- or config-file-influenced
+ * segments without validation upstream: it's resolved against `cwd` and
+ * rejected if it would escape it (e.g. `../../.ssh/authorized_keys`),
+ * but a crafted value that stays inside `cwd` (e.g. overwriting an
+ * unrelated tracked file) is still the caller's responsibility to guard.
+ */
+export declare function upsertMarkerBlock(cwd: string, relativePath: string, startMarker: string, endMarker: string, block: string, options?: {
+    dryRun?: boolean;
+}): {
+    result: UpsertResult;
+    path: string;
+};
+//# sourceMappingURL=marker-block.d.ts.map

package/dist/utils/cli-kit/marker-block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marker-block.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/marker-block.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,CAAC;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA2CxC"}

package/dist/utils/cli-kit/marker-block.js

@@ -0,0 +1,61 @@
+import { existsSync, mkdirSync, readFileSync } from "fs";
+import { dirname, resolve, sep } from "path";
+import { writeFileAtomicSafe } from "./fs-safe.js";
+/**
+ * Insert or replace a delimited block in a file, generalized over the
+ * target file, the start/end markers, and the block content — so a
+ * consumer can manage its own marker pair (e.g. `<!-- mcpi:dco:start -->`)
+ * in its own target file (e.g. `CLAUDE.md`) without duplicating this
+ * splice/append logic.
+ *
+ * Creates the file with just the block when missing, replaces an existing
+ * managed block in place, or appends with a blank-line separator when no
+ * managed block exists yet. A no-op write (content already matches) is
+ * reported as "unchanged" rather than touching the file.
+ *
+ * `relativePath` must never carry attacker- or config-file-influenced
+ * segments without validation upstream: it's resolved against `cwd` and
+ * rejected if it would escape it (e.g. `../../.ssh/authorized_keys`),
+ * but a crafted value that stays inside `cwd` (e.g. overwriting an
+ * unrelated tracked file) is still the caller's responsibility to guard.
+ */
+export function upsertMarkerBlock(cwd, relativePath, startMarker, endMarker, block, options = {}) {
+    const resolvedCwd = resolve(cwd);
+    const path = resolve(resolvedCwd, relativePath);
+    if (path !== resolvedCwd && !path.startsWith(resolvedCwd + sep)) {
+        throw new Error(`Invalid relativePath "${relativePath}": resolves outside cwd "${cwd}"`);
+    }
+    if (!existsSync(path)) {
+        if (options.dryRun) {
+            return { result: "would-change", path };
+        }
+        const dir = dirname(path);
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        writeFileAtomicSafe(path, block + "\n");
+        return { result: "created", path };
+    }
+    const existing = readFileSync(path, "utf-8");
+    const startIdx = existing.indexOf(startMarker);
+    const endIdx = existing.indexOf(endMarker);
+    let next;
+    if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
+        const before = existing.slice(0, startIdx);
+        const after = existing.slice(endIdx + endMarker.length);
+        next = before + block + after;
+    }
+    else {
+        const separator = existing.endsWith("\n") ? "\n" : "\n\n";
+        next = existing + separator + block + "\n";
+    }
+    if (next === existing) {
+        return { result: "unchanged", path };
+    }
+    if (options.dryRun) {
+        return { result: "would-change", path };
+    }
+    writeFileAtomicSafe(path, next);
+    return { result: "updated", path };
+}
+//# sourceMappingURL=marker-block.js.map

package/dist/utils/cli-kit/marker-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marker-block.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/marker-block.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAInD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,YAAoB,EACpB,WAAmB,EACnB,SAAiB,EACjB,KAAa,EACb,UAAgC,EAAE;IAElC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,4BAA4B,GAAG,GAAG,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,mBAAmB,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE3C,IAAI,IAAY,CAAC;IACjB,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,IAAI,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/utils/cli-kit/paths.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Slugs are often sourced from a file or env var an untrusted cloned repo
+ * can influence, and become a path segment under a state directory, so
+ * every source must pass this same shape check.
+ */
+export declare const SLUG_PATTERN: RegExp;
+export declare function isValidSlug(slug: string): boolean;
+/**
+ * Absolute path to a namespaced state directory under the user's home,
+ * e.g. `stateDir("mcpi", "keys")` -> `~/.mcpi/keys`. Each CLI (mcpi,
+ * kya-id, ...) picks its own namespace so their on-disk state never
+ * collides.
+ */
+export declare function stateDir(namespace: string, ...segments: string[]): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/utils/cli-kit/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/paths.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,eAAO,MAAM,YAAY,QAAyB,CAAC;AAEnD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAEzE"}

package/dist/utils/cli-kit/paths.js

@@ -0,0 +1,21 @@
+import { homedir } from "os";
+import { join, resolve } from "path";
+/**
+ * Slugs are often sourced from a file or env var an untrusted cloned repo
+ * can influence, and become a path segment under a state directory, so
+ * every source must pass this same shape check.
+ */
+export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+export function isValidSlug(slug) {
+    return SLUG_PATTERN.test(slug);
+}
+/**
+ * Absolute path to a namespaced state directory under the user's home,
+ * e.g. `stateDir("mcpi", "keys")` -> `~/.mcpi/keys`. Each CLI (mcpi,
+ * kya-id, ...) picks its own namespace so their on-disk state never
+ * collides.
+ */
+export function stateDir(namespace, ...segments) {
+    return resolve(join(homedir(), `.${namespace}`, ...segments));
+}
+//# sourceMappingURL=paths.js.map

package/dist/utils/cli-kit/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAEnD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,SAAiB,EAAE,GAAG,QAAkB;IAC/D,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/utils/cli-kit/secure-storage.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Create (or reuse) a directory with 0700 permissions, recursively.
+ */
+export declare function ensureSecureDir(path: string, mode?: number): void;
+/**
+ * Write credential/key material with 0600 permissions.
+ *
+ * The mode is set on write to avoid any window where the file exists with
+ * looser permissions, then re-asserted with chmod: the write-time mode
+ * option is ignored when the file already exists, so a pre-existing file
+ * with looser permissions would otherwise keep them.
+ */
+export declare function writeSecureFile(path: string, content: string, mode?: number): void;
+//# sourceMappingURL=secure-storage.d.ts.map

package/dist/utils/cli-kit/secure-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-storage.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/secure-storage.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,IAAI,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,SAAQ,GACX,IAAI,CAGN"}

package/dist/utils/cli-kit/secure-storage.js

@@ -0,0 +1,20 @@
+import { chmodSync, mkdirSync, writeFileSync } from "fs";
+/**
+ * Create (or reuse) a directory with 0700 permissions, recursively.
+ */
+export function ensureSecureDir(path, mode = 0o700) {
+    mkdirSync(path, { recursive: true, mode });
+}
+/**
+ * Write credential/key material with 0600 permissions.
+ *
+ * The mode is set on write to avoid any window where the file exists with
+ * looser permissions, then re-asserted with chmod: the write-time mode
+ * option is ignored when the file already exists, so a pre-existing file
+ * with looser permissions would otherwise keep them.
+ */
+export function writeSecureFile(path, content, mode = 0o600) {
+    writeFileSync(path, content, { mode });
+    chmodSync(path, mode);
+}
+//# sourceMappingURL=secure-storage.js.map

package/dist/utils/cli-kit/secure-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-storage.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/secure-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAEzD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK;IACxD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,OAAe,EACf,IAAI,GAAG,KAAK;IAEZ,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/utils/cli-kit/step-report.d.ts

@@ -0,0 +1,16 @@
+export type StepStatus = "done" | "skipped" | "failed" | "action-required" | "would-change";
+export interface StepResult {
+    id: string;
+    title: string;
+    status: StepStatus;
+    detail?: string;
+}
+export declare function statusLabel(status: StepStatus): string;
+/**
+ * Render a step-report list as aligned `title  status` lines, with a
+ * detail line under any step that isn't "done" or "skipped". Returns
+ * lines rather than printing them, so a consumer composes its own
+ * header/footer around the shared body.
+ */
+export declare function renderSteps(steps: StepResult[]): string[];
+//# sourceMappingURL=step-report.d.ts.map

package/dist/utils/cli-kit/step-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-report.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/step-report.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,SAAS,GACT,QAAQ,GACR,iBAAiB,GACjB,cAAc,CAAC;AAEnB,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAatD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAazD"}

package/dist/utils/cli-kit/step-report.js

@@ -0,0 +1,36 @@
+import chalk from "chalk";
+export function statusLabel(status) {
+    switch (status) {
+        case "done":
+            return chalk.green("done");
+        case "skipped":
+            return chalk.gray("skipped");
+        case "would-change":
+            return chalk.cyan("would change");
+        case "action-required":
+            return chalk.yellow("action required");
+        case "failed":
+            return chalk.red("failed");
+    }
+}
+/**
+ * Render a step-report list as aligned `title  status` lines, with a
+ * detail line under any step that isn't "done" or "skipped". Returns
+ * lines rather than printing them, so a consumer composes its own
+ * header/footer around the shared body.
+ */
+export function renderSteps(steps) {
+    if (steps.length === 0) {
+        return [];
+    }
+    const width = Math.max(...steps.map((s) => s.title.length));
+    const lines = [];
+    for (const step of steps) {
+        lines.push(`  ${step.title.padEnd(width)}  ${statusLabel(step.status)}`);
+        if (step.detail && step.status !== "done" && step.status !== "skipped") {
+            lines.push(`  ${" ".repeat(width)}  ${chalk.gray(step.detail)}`);
+        }
+    }
+    return lines;
+}
+//# sourceMappingURL=step-report.js.map

package/dist/utils/cli-kit/step-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"step-report.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/step-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAgB1B,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzC,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/dco/agent-metadata.d.ts

@@ -1,6 +1,6 @@
 /**
  * Persistent agent metadata written at registration time so later commands
- * (notably `mcpi dco setup`) know the agent's public name, slug, and URL
+ * (notably `dco setup`) know the agent's public name, slug, and URL
  * without another API round trip. Lives next to identity.json but contains
  * no key material (claimUrl may embed a short-lived claim capability; the
  * whole .mcpi directory is gitignored).

package/dist/utils/dco/agent-metadata.js

@@ -1,6 +1,6 @@
 import { existsSync, mkdirSync, readFileSync } from "fs";
 import { join } from "path";
-import { writeFileAtomicSafe } from "./fs-safe.js";
+import { writeFileAtomicSafe } from "../cli-kit/index.js";
 const AGENT_METADATA_FILE = "agent.json";
 function agentMetadataPath(cwd) {
     return join(cwd, ".mcpi", AGENT_METADATA_FILE);

package/dist/utils/dco/agent-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-metadata.js","sourceRoot":"","sources":["../../../src/utils/dco/agent-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAmBnD,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAuB,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAmB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACvC,MAAkC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,mBAAmB,CACjB,iBAAiB,CAAC,GAAG,CAAC,EACtB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"agent-metadata.js","sourceRoot":"","sources":["../../../src/utils/dco/agent-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAmB1D,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAuB,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAmB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACvC,MAAkC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,mBAAmB,CACjB,iBAAiB,CAAC,GAAG,CAAC,EACtB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACvC,CAAC;AACJ,CAAC"}