@kya-os/cli 1.8.1 → 1.8.3

package/dist/utils/review/verdict-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-verify.js","sourceRoot":"","sources":["../../../src/utils/review/verdict-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AASlC;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAuB,EACvB,YAAoB;IAEpB,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC;QACjD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/review-registry-writer.d.ts

@@ -0,0 +1,52 @@
+import { type ReviewerRegistry, type ReviewerRegistryEntry } from "@kya-os/contracts/review";
+/**
+ * Generates/updates `~/.mcpi/review-registry.json` from the profiles just
+ * created by `kya-os init`'s agent-profile stage. Deliberately MERGE-ONLY:
+ * `orgId`/`orgRootDid`/`repos`/`quorumN` are org-wide values a single
+ * developer's `init` run has no way to know, so a machine with no existing
+ * registry gets no invented one -- only entries in an ALREADY-PRESENT file
+ * are ever added or updated. A failed validation is reported, never
+ * silently written (a bug, not a warning, per the spec).
+ */
+export declare function reviewRegistryPath(): string;
+export type MergeReviewRegistryResult = {
+    status: "written";
+    path: string;
+    registry: ReviewerRegistry;
+} | {
+    status: "skipped-no-existing-registry";
+    path: string;
+} | {
+    status: "invalid-existing";
+    path: string;
+    error: string;
+} | {
+    status: "invalid-result";
+    path: string;
+    error: string;
+};
+export interface MergeReviewRegistryOptions {
+    path?: string;
+    /**
+     * agentDids (from `newEntries`) to promote to `fixes: true` IF their
+     * githubLogin has no `fixes: true` entry anywhere in the MERGED registry
+     * (existing entries plus this run's, not just this run's own batch).
+     * Never demotes an existing fixer and never gives one person two.
+     *
+     * This decision belongs here, not in the caller: a caller building
+     * `newEntries` sees only its own batch (e.g. "the first profile created
+     * THIS run"), so computing `fixes` there is correct on a machine's first
+     * `kya-os init` but wrong on every later run that adds one more profile
+     * for someone who already has a fixer -- the caller has no way to know
+     * that without re-reading the file this function already loads.
+     */
+    designateFixerCandidates?: string[];
+}
+/**
+ * Merge freshly generated profile entries into the on-disk review registry,
+ * keyed by `agentDid`: a matching entry is updated in place (same array
+ * position), a new one is appended, and every entry this run didn't touch
+ * (other people's, hand-added) is preserved untouched.
+ */
+export declare function mergeReviewRegistry(newEntries: ReviewerRegistryEntry[], options?: MergeReviewRegistryOptions): MergeReviewRegistryResult;
+//# sourceMappingURL=review-registry-writer.d.ts.map

package/dist/utils/review-registry-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-registry-writer.d.ts","sourceRoot":"","sources":["../../src/utils/review-registry-writer.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAGlC;;;;;;;;GAQG;AAEH,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC/D;IAAE,MAAM,EAAE,8BAA8B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;OAYG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,qBAAqB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CAgE3B"}

package/dist/utils/review-registry-writer.js

@@ -0,0 +1,79 @@
+import { existsSync, readFileSync } from "fs";
+import { join, resolve } from "path";
+import { ReviewerRegistrySchema, } from "@kya-os/contracts/review";
+import { stateDir, writeFileAtomicSafe } from "./cli-kit/index.js";
+/**
+ * Generates/updates `~/.mcpi/review-registry.json` from the profiles just
+ * created by `kya-os init`'s agent-profile stage. Deliberately MERGE-ONLY:
+ * `orgId`/`orgRootDid`/`repos`/`quorumN` are org-wide values a single
+ * developer's `init` run has no way to know, so a machine with no existing
+ * registry gets no invented one -- only entries in an ALREADY-PRESENT file
+ * are ever added or updated. A failed validation is reported, never
+ * silently written (a bug, not a warning, per the spec).
+ */
+export function reviewRegistryPath() {
+    return resolve(process.env.MCPI_REVIEW_REGISTRY_PATH ||
+        join(stateDir("mcpi"), "review-registry.json"));
+}
+/**
+ * Merge freshly generated profile entries into the on-disk review registry,
+ * keyed by `agentDid`: a matching entry is updated in place (same array
+ * position), a new one is appended, and every entry this run didn't touch
+ * (other people's, hand-added) is preserved untouched.
+ */
+export function mergeReviewRegistry(newEntries, options = {}) {
+    const path = options.path ?? reviewRegistryPath();
+    if (!existsSync(path)) {
+        return { status: "skipped-no-existing-registry", path };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch (error) {
+        return {
+            status: "invalid-existing",
+            path,
+            error: `Could not parse ${path}: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    const existing = ReviewerRegistrySchema.safeParse(parsed);
+    if (!existing.success) {
+        return {
+            status: "invalid-existing",
+            path,
+            error: `${path} fails schema validation: ${existing.error.message}`,
+        };
+    }
+    const byDid = new Map(existing.data.entries.map((e) => [e.agentDid, e]));
+    for (const entry of newEntries) {
+        byDid.set(entry.agentDid, entry);
+    }
+    if (options.designateFixerCandidates) {
+        const fixerLoginSeen = new Set(Array.from(byDid.values())
+            .filter((e) => e.fixes)
+            .map((e) => e.githubLogin));
+        for (const did of options.designateFixerCandidates) {
+            const entry = byDid.get(did);
+            if (!entry || fixerLoginSeen.has(entry.githubLogin))
+                continue;
+            byDid.set(did, { ...entry, fixes: true });
+            fixerLoginSeen.add(entry.githubLogin);
+        }
+    }
+    const merged = {
+        ...existing.data,
+        entries: Array.from(byDid.values()),
+    };
+    const validated = ReviewerRegistrySchema.safeParse(merged);
+    if (!validated.success) {
+        return {
+            status: "invalid-result",
+            path,
+            error: `Generated review registry fails schema validation: ${validated.error.message}`,
+        };
+    }
+    writeFileAtomicSafe(path, JSON.stringify(validated.data, null, 2) + "\n");
+    return { status: "written", path, registry: validated.data };
+}
+//# sourceMappingURL=review-registry-writer.js.map

package/dist/utils/review-registry-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-registry-writer.js","sourceRoot":"","sources":["../../src/utils/review-registry-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EACL,sBAAsB,GAGvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEnE;;;;;;;;GAQG;AAEH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CACZ,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CACjD,CAAC;AACJ,CAAC;AA0BD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAmC,EACnC,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAElD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI;YACJ,KAAK,EAAE,mBAAmB,IAAI,KAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI;YACJ,KAAK,EAAE,GAAG,IAAI,6BAA6B,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAC7B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,GAAG,QAAQ,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;KACpC,CAAC;IAEF,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI;YACJ,KAAK,EAAE,sDAAsD,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE;SACvF,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/utils/should-install-dependency.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Decides whether `kya-os init` should install the missing `@kya-os/mcp-i`
+ * dependency, given `--install`/`--no-install`/`--yes` and whether stdin is
+ * a TTY. Pure decision logic, deliberately separated from init.ts's dynamic
+ * `import("@kya-os/mcp-i")` retry (which stays inline there -- it exists to
+ * survive monorepo CI ordering and isn't itself a seam) so this tri-state
+ * flag interaction is exhaustively unit-testable on its own.
+ */
+export interface ShouldInstallDependencyOptions {
+    /** true = --install, false = --no-install, undefined = neither passed. */
+    install?: boolean;
+    /** --yes: consents to installs only, never to registration/key decisions. */
+    yes?: boolean;
+}
+export type ConfirmInstallImpl = (message: string) => Promise<boolean>;
+export declare function shouldInstallDependency(options: ShouldInstallDependencyOptions, isTTY: boolean, confirmImpl: ConfirmInstallImpl): Promise<boolean>;
+//# sourceMappingURL=should-install-dependency.d.ts.map

package/dist/utils/should-install-dependency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"should-install-dependency.d.ts","sourceRoot":"","sources":["../../src/utils/should-install-dependency.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,8BAA8B;IAC7C,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvE,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,EACvC,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAelB"}

package/dist/utils/should-install-dependency.js

@@ -0,0 +1,25 @@
+/**
+ * Decides whether `kya-os init` should install the missing `@kya-os/mcp-i`
+ * dependency, given `--install`/`--no-install`/`--yes` and whether stdin is
+ * a TTY. Pure decision logic, deliberately separated from init.ts's dynamic
+ * `import("@kya-os/mcp-i")` retry (which stays inline there -- it exists to
+ * survive monorepo CI ordering and isn't itself a seam) so this tri-state
+ * flag interaction is exhaustively unit-testable on its own.
+ */
+export async function shouldInstallDependency(options, isTTY, confirmImpl) {
+    // --no-install always wins: an explicit "never" overrides even --yes.
+    if (options.install === false) {
+        return false;
+    }
+    if (!isTTY) {
+        // Non-TTY: keep today's behavior unless --install opted in (CI). --yes
+        // is a TTY-prompt shortcut and has no effect off a TTY.
+        return options.install === true;
+    }
+    // TTY: --yes or --install both skip the prompt with an implicit yes.
+    if (options.yes === true || options.install === true) {
+        return true;
+    }
+    return confirmImpl("Install @kya-os/mcp-i now?");
+}
+//# sourceMappingURL=should-install-dependency.js.map

package/dist/utils/should-install-dependency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"should-install-dependency.js","sourceRoot":"","sources":["../../src/utils/should-install-dependency.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuC,EACvC,KAAc,EACd,WAA+B;IAE/B,sEAAsE;IACtE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,uEAAuE;QACvE,wDAAwD;QACxD,OAAO,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IAClC,CAAC;IACD,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC,4BAA4B,CAAC,CAAC;AACnD,CAAC"}

package/dist/utils/tool-readiness.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Checks whether the external binaries init needs (`git`, `gh`, `claude`)
+ * are present, and for `gh` specifically, authenticated. Table-driven and
+ * fully injectable (`whichImpl`, `execImpl`) so every path is testable
+ * without touching the real filesystem, PATH, or network -- mirrors
+ * `packages/cli/src/utils/agent-detector.ts`'s detection-only contract:
+ * this module never executes a detected binary beyond a `--version`/
+ * `auth status` probe, and never spawns `gh auth login` itself (that is
+ * interactive and must be run by the user).
+ */
+export type ToolKind = "git" | "gh" | "claude";
+export interface ToolCheck {
+    tool: ToolKind;
+    found: boolean;
+    version?: string;
+    /** `gh` only: result of `gh auth status`. */
+    authenticated?: boolean;
+    /** Exact per-platform command (or instruction) to resolve this row. */
+    installHint: string;
+}
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+export type WhichImpl = (bin: string) => Promise<string | null>;
+export type ExecImpl = (command: string, args: string[]) => Promise<ExecResult>;
+export interface ToolReadinessDeps {
+    whichImpl: WhichImpl;
+    execImpl: ExecImpl;
+    platform: NodeJS.Platform;
+}
+/**
+ * Detect presence (and for `gh`, auth) of the requested tools. Never
+ * executes a detected binary beyond a `--version`/`auth status` probe.
+ */
+export declare function checkTools(required: ToolKind[], deps?: Partial<ToolReadinessDeps>): Promise<ToolCheck[]>;
+export interface RunToolReadinessGateOptions {
+    interactive: boolean;
+    required?: ToolKind[];
+    deps?: Partial<ToolReadinessDeps>;
+    /** Injectable confirm prompt; defaults to an inquirer confirm. */
+    confirmImpl?: (message: string) => Promise<boolean>;
+}
+export interface ToolReadinessGateResult {
+    checks: ToolCheck[];
+    /** Tools whose absence should stop init entirely (today: just `git`). */
+    fatalMissing: ToolKind[];
+}
+/**
+ * Run the readiness check and, in interactive mode on darwin, offer to run
+ * the brew install command for anything missing. Non-interactive (or
+ * non-darwin) callers get the checks back untouched -- no prompt, no
+ * install, ever attempted.
+ */
+export declare function runToolReadinessGate(options: RunToolReadinessGateOptions): Promise<ToolReadinessGateResult>;
+//# sourceMappingURL=tool-readiness.d.ts.map

package/dist/utils/tool-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-readiness.d.ts","sourceRoot":"","sources":["../../src/utils/tool-readiness.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAEH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B;AAiDD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,QAAQ,EAAE,EACpB,IAAI,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACpC,OAAO,CAAC,SAAS,EAAE,CAAC,CAmCtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClC,kEAAkE;IAClE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,yEAAyE;IACzE,YAAY,EAAE,QAAQ,EAAE,CAAC;CAC1B;AAYD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CA4BlC"}

package/dist/utils/tool-readiness.js

@@ -0,0 +1,114 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { defaultWhich } from "./which.js";
+const execFileAsync = promisify(execFile);
+async function defaultExec(command, args) {
+    try {
+        const { stdout, stderr } = await execFileAsync(command, args, {
+            encoding: "utf8",
+        });
+        return { stdout, stderr, code: 0 };
+    }
+    catch (error) {
+        const err = error;
+        return {
+            stdout: err.stdout ?? "",
+            stderr: err.stderr ?? err.message ?? "",
+            code: typeof err.code === "number" ? err.code : 1,
+        };
+    }
+}
+function defaultDeps() {
+    return { whichImpl: defaultWhich, execImpl: defaultExec, platform: process.platform };
+}
+function installHintFor(tool, platform) {
+    const darwin = platform === "darwin";
+    switch (tool) {
+        case "git":
+            return darwin
+                ? "brew install git"
+                : "Install git: https://git-scm.com/downloads";
+        case "gh":
+            return darwin
+                ? "brew install gh"
+                : "Install gh: https://cli.github.com";
+        case "claude":
+            return darwin
+                ? "brew install --cask claude-code"
+                : "Install Claude Code: https://docs.claude.com/en/docs/claude-code";
+    }
+}
+/**
+ * Detect presence (and for `gh`, auth) of the requested tools. Never
+ * executes a detected binary beyond a `--version`/`auth status` probe.
+ */
+export async function checkTools(required, deps = {}) {
+    const { whichImpl, execImpl, platform } = { ...defaultDeps(), ...deps };
+    const results = [];
+    for (const tool of required) {
+        const binPath = await whichImpl(tool);
+        const found = Boolean(binPath);
+        let version;
+        let authenticated;
+        let installHint = installHintFor(tool, platform);
+        if (found) {
+            const versionResult = await execImpl(tool, ["--version"]);
+            if (versionResult.code === 0) {
+                version = versionResult.stdout.trim().split("\n")[0] || undefined;
+            }
+            if (tool === "gh") {
+                const authResult = await execImpl("gh", [
+                    "auth",
+                    "status",
+                    "--hostname",
+                    "github.com",
+                ]);
+                authenticated = authResult.code === 0;
+                if (!authenticated) {
+                    installHint = "gh auth login";
+                }
+            }
+        }
+        results.push({ tool, found, version, authenticated, installHint });
+    }
+    return results;
+}
+const FATAL_IF_MISSING = ["git"];
+async function defaultConfirm(message) {
+    const inquirer = (await import("inquirer")).default;
+    const { answer } = await inquirer.prompt([
+        { type: "confirm", name: "answer", message, default: true },
+    ]);
+    return answer;
+}
+/**
+ * Run the readiness check and, in interactive mode on darwin, offer to run
+ * the brew install command for anything missing. Non-interactive (or
+ * non-darwin) callers get the checks back untouched -- no prompt, no
+ * install, ever attempted.
+ */
+export async function runToolReadinessGate(options) {
+    const required = options.required ?? ["git", "gh", "claude"];
+    const deps = { ...defaultDeps(), ...options.deps };
+    const checks = await checkTools(required, deps);
+    if (options.interactive && deps.platform === "darwin") {
+        const confirmImpl = options.confirmImpl ?? defaultConfirm;
+        for (let i = 0; i < checks.length; i++) {
+            const check = checks[i];
+            if (!check.found && check.installHint.startsWith("brew ")) {
+                const shouldInstall = await confirmImpl(`${check.tool} was not found. Run \`${check.installHint}\` now?`);
+                if (shouldInstall) {
+                    const [cmd, ...args] = check.installHint.split(" ");
+                    await deps.execImpl(cmd, args);
+                    const [rechecked] = await checkTools([check.tool], deps);
+                    checks[i] = rechecked;
+                }
+            }
+        }
+    }
+    const fatalMissing = checks
+        .filter((c) => FATAL_IF_MISSING.includes(c.tool) && !c.found)
+        .map((c) => c.tool);
+    return { checks, fatalMissing };
+}
+//# sourceMappingURL=tool-readiness.js.map

package/dist/utils/tool-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-readiness.js","sourceRoot":"","sources":["../../src/utils/tool-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAwC1C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,KAAK,UAAU,WAAW,CACxB,OAAe,EACf,IAAc;IAEd,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE;YAC5D,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAIX,CAAC;QACF,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE;YACvC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,QAAyB;IAC/D,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,CAAC;IACrC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,MAAM;gBACX,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,4CAA4C,CAAC;QACnD,KAAK,IAAI;YACP,OAAO,MAAM;gBACX,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,oCAAoC,CAAC;QAC3C,KAAK,QAAQ;YACX,OAAO,MAAM;gBACX,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,kEAAkE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAoB,EACpB,OAAmC,EAAE;IAErC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;IACxE,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAA2B,CAAC;QAChC,IAAI,aAAkC,CAAC;QACvC,IAAI,WAAW,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEjD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1D,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YACpE,CAAC;YAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;oBACtC,MAAM;oBACN,QAAQ;oBACR,YAAY;oBACZ,YAAY;iBACb,CAAC,CAAC;gBACH,aAAa,GAAG,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,WAAW,GAAG,eAAe,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAgBD,MAAM,gBAAgB,GAAe,CAAC,KAAK,CAAC,CAAC;AAE7C,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IACpD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACvC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;KAC5D,CAAC,CAAC;IACH,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAoC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,MAAM,aAAa,GAAG,MAAM,WAAW,CACrC,GAAG,KAAK,CAAC,IAAI,yBAAyB,KAAK,CAAC,WAAW,SAAS,CACjE,CAAC;gBACF,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC/B,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;oBACzD,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;SAC5D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC"}

package/dist/utils/which.d.ts

@@ -0,0 +1,2 @@
+export declare function defaultWhich(bin: string): Promise<string | null>;
+//# sourceMappingURL=which.d.ts.map

package/dist/utils/which.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"which.d.ts","sourceRoot":"","sources":["../../src/utils/which.ts"],"names":[],"mappings":"AAcA,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYtE"}

package/dist/utils/which.js

@@ -0,0 +1,22 @@
+import { execFile } from "child_process";
+import { promisify } from "util";
+/**
+ * Resolve a binary's path on PATH, cross-platform (`which` on POSIX,
+ * `where` on Windows). Returns null rather than throwing when the binary
+ * isn't found -- that's the expected, non-error outcome for a presence
+ * check, not a failure to report. Shared by tool-readiness.ts and
+ * agent-detector.ts, both of which need this exact resolution as their
+ * default injectable `whichImpl`.
+ */
+const execFileAsync = promisify(execFile);
+export async function defaultWhich(bin) {
+    try {
+        const { stdout } = await execFileAsync(process.platform === "win32" ? "where" : "which", [bin], { encoding: "utf8" });
+        const path = stdout.split("\n")[0]?.trim();
+        return path || null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=which.js.map

package/dist/utils/which.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"which.js","sourceRoot":"","sources":["../../src/utils/which.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC;;;;;;;GAOG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAChD,CAAC,GAAG,CAAC,EACL,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3C,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @kya-os/cli version, read from package.json at module load time.
+ *
+ * All three bins (`kya-os`, `mcpi`, `dco`) report this so a `.version()`
+ * literal can never drift from the published package version the way
+ * "1.2.2" (index.prod.ts) and "1.0.0" (index.ts) previously did.
+ *
+ * Mirrors packages/compute/src/version.ts's approach: readFileSync +
+ * JSON.parse rather than a JSON import, since the latter needs an import
+ * attribute (`with { type: "json" }`) whose supported syntax has moved
+ * across Node versions.
+ */
+declare let cliVersion: string;
+export { cliVersion };
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,QAAA,IAAI,UAAU,QAAU,CAAC;AAYzB,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/version.js

@@ -0,0 +1,29 @@
+/**
+ * @kya-os/cli version, read from package.json at module load time.
+ *
+ * All three bins (`kya-os`, `mcpi`, `dco`) report this so a `.version()`
+ * literal can never drift from the published package version the way
+ * "1.2.2" (index.prod.ts) and "1.0.0" (index.ts) previously did.
+ *
+ * Mirrors packages/compute/src/version.ts's approach: readFileSync +
+ * JSON.parse rather than a JSON import, since the latter needs an import
+ * attribute (`with { type: "json" }`) whose supported syntax has moved
+ * across Node versions.
+ */
+import { readFileSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+let cliVersion = "0.0.0";
+try {
+    const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
+    const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    const version = pkg?.version;
+    if (typeof version === "string") {
+        cliVersion = version;
+    }
+}
+catch {
+    // Fallback — non-fatal (e.g., running from a bundled context)
+}
+export { cliVersion };
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,IAAI,UAAU,GAAG,OAAO,CAAC;AACzB,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACpF,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAI,GAAoC,EAAE,OAAO,CAAC;IAC/D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,UAAU,GAAG,OAAO,CAAC;IACvB,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,8DAA8D;AAChE,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/cli",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "CLI for MCP-I setup and management",
   "keywords": [
     "cli",
@@ -19,14 +19,16 @@
   "main": "dist/index.js",
   "type": "module",
   "bin": {
-    "mcpi": "./dist/index.js"
+    "kya-os": "./dist/index.js",
+    "mcpi": "./dist/index.js",
+    "dco": "./dist/dco.js"
   },
   "files": [
     "dist",
     "templates"
   ],
   "scripts": {
-    "build": "rm -f tsconfig.build.tsbuildinfo && tsc -p tsconfig.build.json && mv dist/index.prod.js dist/index.js && mv dist/index.prod.d.ts dist/index.d.ts && rm -f dist/index.prod.* && node scripts/fix-esm-imports.js && chmod +x dist/index.js",
+    "build": "rm -f tsconfig.build.tsbuildinfo && tsc -p tsconfig.build.json && mv dist/index.prod.js dist/index.js && mv dist/index.prod.d.ts dist/index.d.ts && rm -f dist/index.prod.* && node scripts/fix-esm-imports.js && chmod +x dist/index.js dist/dco.js && node scripts/smoke-test-dist.js",
     "dev": "tsx src/index.ts",
     "clean": "rm -rf dist",
     "prepublishOnly": "npm run clean && npm run build && node ../create-mcpi-app/scripts/validate-dependencies.js",
@@ -42,7 +44,7 @@
   },
   "dependencies": {
     "@kya-os/contracts": "^1.10.0",
-    "@kya-os/mcp": "1.11.0",
+    "@kya-os/mcp": "^1.14.0",
     "@kya-os/mcp-i": "^1.12.0",
     "boxen": "^8.0.1",
     "chalk": "^5.3.0",
@@ -52,10 +54,12 @@
     "gradient-string": "^3.0.0",
     "inquirer": "^9.2.23",
     "jose": "^5.10.0",
+    "json-canonicalize": "2.0.0",
     "open": "^10.1.2",
     "ora": "^8.0.1",
     "terminal-image": "^3.1.1",
-    "zod": "^3.25.67"
+    "zod": "^3.25.67",
+    "ws": "^8.20.1"
   },
   "devDependencies": {
     "@types/figlet": "^1.7.0",
@@ -64,9 +68,18 @@
     "@vitest/coverage-v8": "^4.0.18",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0",
-    "vitest": "^4.0.18"
+    "vitest": "^4.0.18",
+    "@types/better-sqlite3": "^7.6.11",
+    "@types/react": "^18.3.12",
+    "@types/ws": "^8.5.13",
+    "ink-testing-library": "^4.0.0"
   },
   "engines": {
     "node": ">=20.0.0"
+  },
+  "optionalDependencies": {
+    "better-sqlite3": "^11.7.0",
+    "ink": "^5.1.0",
+    "react": "^18.3.1"
   }
 }

package/dist/utils/claim-polling.d.ts

@@ -1,21 +0,0 @@
-/**
- * Options for claim polling
- */
-export interface ClaimPollingOptions {
-    verbose?: boolean;
-    maxAttempts?: number;
-    pollInterval?: number;
-}
-/**
- * Poll for agent claim status
- *
- * Polls the KTA API to check if an agent has been claimed.
- * Returns true when claimed, false if timeout or interrupted.
- *
- * @param agentName - The agent's name (slug) to check
- * @param did - The agent's DID
- * @param endpoint - API endpoint URL (default: https://knowthat.ai)
- * @param options - Polling options
- */
-export declare function pollForClaimStatus(agentName: string, did: string, endpoint?: string, options?: ClaimPollingOptions): Promise<boolean>;
-//# sourceMappingURL=claim-polling.d.ts.map

package/dist/utils/claim-polling.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim-polling.d.ts","sourceRoot":"","sources":["../../src/utils/claim-polling.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAA8B,EACxC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,OAAO,CAAC,CA4GlB"}

package/dist/utils/claim-polling.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim-polling.js","sourceRoot":"","sources":["../../src/utils/claim-polling.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AAWtB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,GAAW,EACX,WAAmB,qBAAqB,EACxC,UAA+B,EAAE;IAEjC,MAAM,EACJ,OAAO,GAAG,KAAK,EACf,WAAW,GAAG,EAAE,EAAE,kCAAkC;IACpD,YAAY,GAAG,IAAI,EAAE,YAAY;MAClC,GAAG,OAAO,CAAC;IAEZ,MAAM,OAAO,GAAG,GAAG,CAAC;QAClB,IAAI,EAAE,wCAAwC;QAC9C,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEX,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,2CAA2C;IAC3C,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,OAAO,QAAQ,GAAG,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,cAAc,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAEzF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE;oBACtD,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE;wBACP,YAAY,EAAE,YAAY;wBAC1B,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAM/B,CAAC;oBAEF,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;wBACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzD,CAAC;oBAED,kDAAkD;oBAClD,IACE,IAAI;wBACJ,CAAC,IAAI,CAAC,MAAM;4BACV,IAAI,CAAC,MAAM,KAAK,QAAQ;4BACxB,IAAI,CAAC,KAAK;4BACV,IAAI,CAAC,SAAS;4BACd,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,EACzB,CAAC;wBACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;wBAC9D,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;wBAClD,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;qBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnC,+DAA+D;oBAC/D,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC;oBAChF,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,gEAAgE;gBAChE,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,0BAA0B,QAAQ,GAAG,CAAC,YACpC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eACrD,EAAE,CACH,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YAClE,QAAQ,EAAE,CAAC;YAEX,qCAAqC;YACrC,MAAM,aAAa,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,GAAG,2CAA2C,OAAO,IAAI,OAAO;iBACzE,QAAQ,EAAE;iBACV,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/utils/dco/fs-safe.d.ts

@@ -1,14 +0,0 @@
-/**
- * Atomic, symlink-safe file replace.
- *
- * For `mcpi dco`, the destination and its temp sibling live in the current
- * working tree, which may be an untrusted cloned repo. A tracked symlink
- * planted at the predictable `<path>.mcpi-tmp` sibling would otherwise make
- * a plain writeFileSync follow it and clobber an arbitrary file the user can
- * write. So: unlink any pre-existing temp (rmSync removes the link itself,
- * never its target), then create it with O_EXCL (`wx`) so a planted or
- * racing symlink makes the write fail closed instead of being followed.
- * renameSync replaces the destination without following a symlink there.
- */
-export declare function writeFileAtomicSafe(path: string, content: string, mode?: number): void;
-//# sourceMappingURL=fs-safe.d.ts.map

package/dist/utils/dco/fs-safe.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fs-safe.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/fs-safe.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,SAAQ,GACX,IAAI,CAKN"}

package/dist/utils/dco/fs-safe.js

@@ -1,20 +0,0 @@
-import { renameSync, rmSync, writeFileSync } from "fs";
-/**
- * Atomic, symlink-safe file replace.
- *
- * For `mcpi dco`, the destination and its temp sibling live in the current
- * working tree, which may be an untrusted cloned repo. A tracked symlink
- * planted at the predictable `<path>.mcpi-tmp` sibling would otherwise make
- * a plain writeFileSync follow it and clobber an arbitrary file the user can
- * write. So: unlink any pre-existing temp (rmSync removes the link itself,
- * never its target), then create it with O_EXCL (`wx`) so a planted or
- * racing symlink makes the write fail closed instead of being followed.
- * renameSync replaces the destination without following a symlink there.
- */
-export function writeFileAtomicSafe(path, content, mode = 0o644) {
-    const tempPath = `${path}.mcpi-tmp`;
-    rmSync(tempPath, { force: true });
-    writeFileSync(tempPath, content, { flag: "wx", mode });
-    renameSync(tempPath, path);
-}
-//# sourceMappingURL=fs-safe.js.map

package/dist/utils/dco/fs-safe.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fs-safe.js","sourceRoot":"","sources":["../../../src/utils/dco/fs-safe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,OAAe,EACf,IAAI,GAAG,KAAK;IAEZ,MAAM,QAAQ,GAAG,GAAG,IAAI,WAAW,CAAC;IACpC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC"}