@kya-os/cli 1.8.3 → 2.0.2

package/dist/utils/cli-kit/json-file.js

@@ -1,51 +0,0 @@
-import { existsSync, mkdirSync, readFileSync } from "fs";
-import { dirname } from "path";
-import { writeFileAtomicSafe } from "./fs-safe.js";
-/**
- * Merge `patch` into a JSON file at `path`, preserving every other key.
- *
- * A file we cannot parse (or that doesn't hold a plain object) is left
- * untouched and reported "skipped-invalid": clobbering a caller's existing
- * config is worse than leaving the patch unapplied. Already-applied patches
- * report "unchanged" without writing.
- *
- * `path` is used as given, with no containment check against a base
- * directory (unlike `upsertMarkerBlock`, this function takes a fully
- * resolved path, not a `cwd` + relative segment) — resolving it safely is
- * the caller's responsibility.
- */
-export function mergeJsonFile(path, patch, options = {}) {
-    if (existsSync(path)) {
-        let settings;
-        try {
-            const parsed = JSON.parse(readFileSync(path, "utf-8"));
-            if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-                return { result: "skipped-invalid", path };
-            }
-            settings = parsed;
-        }
-        catch {
-            return { result: "skipped-invalid", path };
-        }
-        const alreadyApplied = Object.entries(patch).every(([key, value]) => settings[key] === value);
-        if (alreadyApplied) {
-            return { result: "unchanged", path };
-        }
-        if (options.dryRun) {
-            return { result: "would-change", path };
-        }
-        Object.assign(settings, patch);
-        writeFileAtomicSafe(path, JSON.stringify(settings, null, 2) + "\n");
-        return { result: "updated", path };
-    }
-    if (options.dryRun) {
-        return { result: "would-change", path };
-    }
-    const dir = dirname(path);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    writeFileAtomicSafe(path, JSON.stringify(patch, null, 2) + "\n");
-    return { result: "created", path };
-}
-//# sourceMappingURL=json-file.js.map

package/dist/utils/cli-kit/json-file.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-file.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AASnD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,KAA8B,EAC9B,UAAgC,EAAE;IAElC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,QAAiC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC7C,CAAC;YACD,QAAQ,GAAG,MAAiC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAChD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,CAC1C,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/utils/cli-kit/marker-block.d.ts

@@ -1,26 +0,0 @@
-export type UpsertResult = "created" | "updated" | "unchanged" | "would-change";
-/**
- * Insert or replace a delimited block in a file, generalized over the
- * target file, the start/end markers, and the block content — so a
- * consumer can manage its own marker pair (e.g. `<!-- mcpi:dco:start -->`)
- * in its own target file (e.g. `CLAUDE.md`) without duplicating this
- * splice/append logic.
- *
- * Creates the file with just the block when missing, replaces an existing
- * managed block in place, or appends with a blank-line separator when no
- * managed block exists yet. A no-op write (content already matches) is
- * reported as "unchanged" rather than touching the file.
- *
- * `relativePath` must never carry attacker- or config-file-influenced
- * segments without validation upstream: it's resolved against `cwd` and
- * rejected if it would escape it (e.g. `../../.ssh/authorized_keys`),
- * but a crafted value that stays inside `cwd` (e.g. overwriting an
- * unrelated tracked file) is still the caller's responsibility to guard.
- */
-export declare function upsertMarkerBlock(cwd: string, relativePath: string, startMarker: string, endMarker: string, block: string, options?: {
-    dryRun?: boolean;
-}): {
-    result: UpsertResult;
-    path: string;
-};
-//# sourceMappingURL=marker-block.d.ts.map

package/dist/utils/cli-kit/marker-block.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"marker-block.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/marker-block.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,CAAC;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA2CxC"}

package/dist/utils/cli-kit/marker-block.js

@@ -1,61 +0,0 @@
-import { existsSync, mkdirSync, readFileSync } from "fs";
-import { dirname, resolve, sep } from "path";
-import { writeFileAtomicSafe } from "./fs-safe.js";
-/**
- * Insert or replace a delimited block in a file, generalized over the
- * target file, the start/end markers, and the block content — so a
- * consumer can manage its own marker pair (e.g. `<!-- mcpi:dco:start -->`)
- * in its own target file (e.g. `CLAUDE.md`) without duplicating this
- * splice/append logic.
- *
- * Creates the file with just the block when missing, replaces an existing
- * managed block in place, or appends with a blank-line separator when no
- * managed block exists yet. A no-op write (content already matches) is
- * reported as "unchanged" rather than touching the file.
- *
- * `relativePath` must never carry attacker- or config-file-influenced
- * segments without validation upstream: it's resolved against `cwd` and
- * rejected if it would escape it (e.g. `../../.ssh/authorized_keys`),
- * but a crafted value that stays inside `cwd` (e.g. overwriting an
- * unrelated tracked file) is still the caller's responsibility to guard.
- */
-export function upsertMarkerBlock(cwd, relativePath, startMarker, endMarker, block, options = {}) {
-    const resolvedCwd = resolve(cwd);
-    const path = resolve(resolvedCwd, relativePath);
-    if (path !== resolvedCwd && !path.startsWith(resolvedCwd + sep)) {
-        throw new Error(`Invalid relativePath "${relativePath}": resolves outside cwd "${cwd}"`);
-    }
-    if (!existsSync(path)) {
-        if (options.dryRun) {
-            return { result: "would-change", path };
-        }
-        const dir = dirname(path);
-        if (!existsSync(dir)) {
-            mkdirSync(dir, { recursive: true });
-        }
-        writeFileAtomicSafe(path, block + "\n");
-        return { result: "created", path };
-    }
-    const existing = readFileSync(path, "utf-8");
-    const startIdx = existing.indexOf(startMarker);
-    const endIdx = existing.indexOf(endMarker);
-    let next;
-    if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
-        const before = existing.slice(0, startIdx);
-        const after = existing.slice(endIdx + endMarker.length);
-        next = before + block + after;
-    }
-    else {
-        const separator = existing.endsWith("\n") ? "\n" : "\n\n";
-        next = existing + separator + block + "\n";
-    }
-    if (next === existing) {
-        return { result: "unchanged", path };
-    }
-    if (options.dryRun) {
-        return { result: "would-change", path };
-    }
-    writeFileAtomicSafe(path, next);
-    return { result: "updated", path };
-}
-//# sourceMappingURL=marker-block.js.map

package/dist/utils/cli-kit/marker-block.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"marker-block.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/marker-block.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAInD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,YAAoB,EACpB,WAAmB,EACnB,SAAiB,EACjB,KAAa,EACb,UAAgC,EAAE;IAElC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,4BAA4B,GAAG,GAAG,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,mBAAmB,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE3C,IAAI,IAAY,CAAC;IACjB,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,IAAI,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/utils/cli-kit/paths.d.ts

@@ -1,15 +0,0 @@
-/**
- * Slugs are often sourced from a file or env var an untrusted cloned repo
- * can influence, and become a path segment under a state directory, so
- * every source must pass this same shape check.
- */
-export declare const SLUG_PATTERN: RegExp;
-export declare function isValidSlug(slug: string): boolean;
-/**
- * Absolute path to a namespaced state directory under the user's home,
- * e.g. `stateDir("mcpi", "keys")` -> `~/.mcpi/keys`. Each CLI (mcpi,
- * kya-id, ...) picks its own namespace so their on-disk state never
- * collides.
- */
-export declare function stateDir(namespace: string, ...segments: string[]): string;
-//# sourceMappingURL=paths.d.ts.map

package/dist/utils/cli-kit/paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/paths.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,eAAO,MAAM,YAAY,QAAyB,CAAC;AAEnD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAEzE"}

package/dist/utils/cli-kit/paths.js

@@ -1,21 +0,0 @@
-import { homedir } from "os";
-import { join, resolve } from "path";
-/**
- * Slugs are often sourced from a file or env var an untrusted cloned repo
- * can influence, and become a path segment under a state directory, so
- * every source must pass this same shape check.
- */
-export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
-export function isValidSlug(slug) {
-    return SLUG_PATTERN.test(slug);
-}
-/**
- * Absolute path to a namespaced state directory under the user's home,
- * e.g. `stateDir("mcpi", "keys")` -> `~/.mcpi/keys`. Each CLI (mcpi,
- * kya-id, ...) picks its own namespace so their on-disk state never
- * collides.
- */
-export function stateDir(namespace, ...segments) {
-    return resolve(join(homedir(), `.${namespace}`, ...segments));
-}
-//# sourceMappingURL=paths.js.map

package/dist/utils/cli-kit/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAEnD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,SAAiB,EAAE,GAAG,QAAkB;IAC/D,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/utils/cli-kit/secure-storage.d.ts

@@ -1,14 +0,0 @@
-/**
- * Create (or reuse) a directory with 0700 permissions, recursively.
- */
-export declare function ensureSecureDir(path: string, mode?: number): void;
-/**
- * Write credential/key material with 0600 permissions.
- *
- * The mode is set on write to avoid any window where the file exists with
- * looser permissions, then re-asserted with chmod: the write-time mode
- * option is ignored when the file already exists, so a pre-existing file
- * with looser permissions would otherwise keep them.
- */
-export declare function writeSecureFile(path: string, content: string, mode?: number): void;
-//# sourceMappingURL=secure-storage.d.ts.map

package/dist/utils/cli-kit/secure-storage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secure-storage.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/secure-storage.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAQ,GAAG,IAAI,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,SAAQ,GACX,IAAI,CAGN"}

package/dist/utils/cli-kit/secure-storage.js

@@ -1,20 +0,0 @@
-import { chmodSync, mkdirSync, writeFileSync } from "fs";
-/**
- * Create (or reuse) a directory with 0700 permissions, recursively.
- */
-export function ensureSecureDir(path, mode = 0o700) {
-    mkdirSync(path, { recursive: true, mode });
-}
-/**
- * Write credential/key material with 0600 permissions.
- *
- * The mode is set on write to avoid any window where the file exists with
- * looser permissions, then re-asserted with chmod: the write-time mode
- * option is ignored when the file already exists, so a pre-existing file
- * with looser permissions would otherwise keep them.
- */
-export function writeSecureFile(path, content, mode = 0o600) {
-    writeFileSync(path, content, { mode });
-    chmodSync(path, mode);
-}
-//# sourceMappingURL=secure-storage.js.map

package/dist/utils/cli-kit/secure-storage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secure-storage.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/secure-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAEzD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK;IACxD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,OAAe,EACf,IAAI,GAAG,KAAK;IAEZ,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/utils/cli-kit/step-report.d.ts

@@ -1,16 +0,0 @@
-export type StepStatus = "done" | "skipped" | "failed" | "action-required" | "would-change";
-export interface StepResult {
-    id: string;
-    title: string;
-    status: StepStatus;
-    detail?: string;
-}
-export declare function statusLabel(status: StepStatus): string;
-/**
- * Render a step-report list as aligned `title  status` lines, with a
- * detail line under any step that isn't "done" or "skipped". Returns
- * lines rather than printing them, so a consumer composes its own
- * header/footer around the shared body.
- */
-export declare function renderSteps(steps: StepResult[]): string[];
-//# sourceMappingURL=step-report.d.ts.map

package/dist/utils/cli-kit/step-report.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"step-report.d.ts","sourceRoot":"","sources":["../../../src/utils/cli-kit/step-report.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,SAAS,GACT,QAAQ,GACR,iBAAiB,GACjB,cAAc,CAAC;AAEnB,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAatD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAazD"}

package/dist/utils/cli-kit/step-report.js

@@ -1,36 +0,0 @@
-import chalk from "chalk";
-export function statusLabel(status) {
-    switch (status) {
-        case "done":
-            return chalk.green("done");
-        case "skipped":
-            return chalk.gray("skipped");
-        case "would-change":
-            return chalk.cyan("would change");
-        case "action-required":
-            return chalk.yellow("action required");
-        case "failed":
-            return chalk.red("failed");
-    }
-}
-/**
- * Render a step-report list as aligned `title  status` lines, with a
- * detail line under any step that isn't "done" or "skipped". Returns
- * lines rather than printing them, so a consumer composes its own
- * header/footer around the shared body.
- */
-export function renderSteps(steps) {
-    if (steps.length === 0) {
-        return [];
-    }
-    const width = Math.max(...steps.map((s) => s.title.length));
-    const lines = [];
-    for (const step of steps) {
-        lines.push(`  ${step.title.padEnd(width)}  ${statusLabel(step.status)}`);
-        if (step.detail && step.status !== "done" && step.status !== "skipped") {
-            lines.push(`  ${" ".repeat(width)}  ${chalk.gray(step.detail)}`);
-        }
-    }
-    return lines;
-}
-//# sourceMappingURL=step-report.js.map

package/dist/utils/cli-kit/step-report.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"step-report.js","sourceRoot":"","sources":["../../../src/utils/cli-kit/step-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAgB1B,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzC,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/dco/agent-metadata.d.ts

@@ -1,24 +0,0 @@
-/**
- * Persistent agent metadata written at registration time so later commands
- * (notably `dco setup`) know the agent's public name, slug, and URL
- * without another API round trip. Lives next to identity.json but contains
- * no key material (claimUrl may embed a short-lived claim capability; the
- * whole .mcpi directory is gitignored).
- */
-export interface AgentMetadata {
-    id?: string;
-    slug?: string;
-    name?: string;
-    url?: string;
-    did?: string;
-    claimUrl?: string;
-    registeredAt?: string;
-}
-export declare function readAgentMetadata(cwd: string): AgentMetadata | null;
-/**
- * Merge the given fields into .mcpi/agent.json, creating the directory and
- * file when needed. Existing fields are preserved unless overwritten by a
- * defined value in `meta`.
- */
-export declare function writeAgentMetadata(cwd: string, meta: AgentMetadata): void;
-//# sourceMappingURL=agent-metadata.d.ts.map

package/dist/utils/dco/agent-metadata.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-metadata.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/agent-metadata.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAQD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAcnE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CAmBzE"}

package/dist/utils/dco/agent-metadata.js

@@ -1,46 +0,0 @@
-import { existsSync, mkdirSync, readFileSync } from "fs";
-import { join } from "path";
-import { writeFileAtomicSafe } from "../cli-kit/index.js";
-const AGENT_METADATA_FILE = "agent.json";
-function agentMetadataPath(cwd) {
-    return join(cwd, ".mcpi", AGENT_METADATA_FILE);
-}
-export function readAgentMetadata(cwd) {
-    const path = agentMetadataPath(cwd);
-    if (!existsSync(path)) {
-        return null;
-    }
-    try {
-        const parsed = JSON.parse(readFileSync(path, "utf-8"));
-        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-            return parsed;
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Merge the given fields into .mcpi/agent.json, creating the directory and
- * file when needed. Existing fields are preserved unless overwritten by a
- * defined value in `meta`.
- */
-export function writeAgentMetadata(cwd, meta) {
-    const dir = join(cwd, ".mcpi");
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    const existing = readAgentMetadata(cwd) ?? {};
-    const merged = { ...existing };
-    for (const [key, value] of Object.entries(meta)) {
-        // Empty strings are skipped alongside undefined: legacy API responses
-        // coerce missing fields to "", which must not clobber good values.
-        if (value !== undefined && value !== "") {
-            merged[key] = value;
-        }
-    }
-    // Symlink-safe: agent.json lives in a possibly-untrusted working tree.
-    writeFileAtomicSafe(agentMetadataPath(cwd), JSON.stringify(merged, null, 2) + "\n");
-}
-//# sourceMappingURL=agent-metadata.js.map

package/dist/utils/dco/agent-metadata.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-metadata.js","sourceRoot":"","sources":["../../../src/utils/dco/agent-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAmB1D,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAuB,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAmB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACvC,MAAkC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,mBAAmB,CACjB,iBAAiB,CAAC,GAAG,CAAC,EACtB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACvC,CAAC;AACJ,CAAC"}

package/dist/utils/dco/claude-config.d.ts

@@ -1,55 +0,0 @@
-import { type MergeJsonResult, type UpsertResult as CliKitUpsertResult } from "../cli-kit/index.js";
-/**
- * Claude Code integration: a managed block in CLAUDE.md instructs the agent
- * harness to attribute PRs to the registered agent, and .claude/settings.json
- * disables the stock "Generated with Claude Code" attribution.
- *
- * The PR byline can only be influenced through instructions because the PR
- * body is composed by the model at PR time; commit trailers are enforced
- * mechanically by the git hook instead (see git-config.ts).
- *
- * The block used to interpolate a specific agent's name/URL/DID as literal
- * strings. That was wrong for any repo that receives dispatched work from
- * more than one agent: CLAUDE.md is committed, so the literal values only
- * ever reflected whichever agent happened to run `dco setup` first, and
- * every other agent's PRs in that repo would carry a false attribution with
- * no way to correct it short of re-running `dco setup` (which a dispatch
- * flow generally can't do per task). The block below is agent-agnostic
- * instead: it tells the agent to run `dco whoami` and use whatever
- * that reports, so the byline is always whichever identity is actually
- * configured in the current checkout. See resolve-agent.ts.
- */
-export declare const CLAUDE_MD_START = "<!-- mcpi:dco:start -->";
-export declare const CLAUDE_MD_END = "<!-- mcpi:dco:end -->";
-export interface AttributionBlockParams {
-    /**
-     * When the git hook could not be installed (foreign hook, unsafe
-     * core.hooksPath, or install failure), trailer duty falls back to
-     * instructions.
-     */
-    includeTrailerInstructions?: boolean;
-}
-export declare const DID_PATTERN: RegExp;
-export declare const MAX_DID_LENGTH = 200;
-export declare function isValidDid(value: string): boolean;
-export declare function buildAttributionBlock(params?: AttributionBlockParams): string;
-export type UpsertResult = CliKitUpsertResult;
-export declare function upsertClaudeMdBlock(cwd: string, block: string, options?: {
-    dryRun?: boolean;
-}): {
-    result: UpsertResult;
-    path: string;
-};
-export type SettingsResult = MergeJsonResult;
-/**
- * Set includeCoAuthoredBy: false in .claude/settings.json, preserving every
- * other key. A file we cannot parse is left untouched: clobbering a user's
- * settings is worse than leaving the stock byline on.
- */
-export declare function updateClaudeSettings(cwd: string, options?: {
-    dryRun?: boolean;
-}): {
-    result: SettingsResult;
-    path: string;
-};
-//# sourceMappingURL=claude-config.d.ts.map

package/dist/utils/dco/claude-config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claude-config.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/claude-config.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,YAAY,IAAI,kBAAkB,EACxC,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,eAAe,4BAA4B,CAAC;AACzD,eAAO,MAAM,aAAa,0BAA0B,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAQD,eAAO,MAAM,WAAW,QAAuC,CAAC;AAChE,eAAO,MAAM,cAAc,MAAM,CAAC;AAElC,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,sBAA2B,GAAG,MAAM,CAqBjF;AAED,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CASxC;AAED,MAAM,MAAM,cAAc,GAAG,eAAe,CAAC;AAE7C;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAG1C"}

package/dist/utils/dco/claude-config.js

@@ -1,66 +0,0 @@
-import { join } from "path";
-import { mergeJsonFile, upsertMarkerBlock, } from "../cli-kit/index.js";
-/**
- * Claude Code integration: a managed block in CLAUDE.md instructs the agent
- * harness to attribute PRs to the registered agent, and .claude/settings.json
- * disables the stock "Generated with Claude Code" attribution.
- *
- * The PR byline can only be influenced through instructions because the PR
- * body is composed by the model at PR time; commit trailers are enforced
- * mechanically by the git hook instead (see git-config.ts).
- *
- * The block used to interpolate a specific agent's name/URL/DID as literal
- * strings. That was wrong for any repo that receives dispatched work from
- * more than one agent: CLAUDE.md is committed, so the literal values only
- * ever reflected whichever agent happened to run `dco setup` first, and
- * every other agent's PRs in that repo would carry a false attribution with
- * no way to correct it short of re-running `dco setup` (which a dispatch
- * flow generally can't do per task). The block below is agent-agnostic
- * instead: it tells the agent to run `dco whoami` and use whatever
- * that reports, so the byline is always whichever identity is actually
- * configured in the current checkout. See resolve-agent.ts.
- */
-export const CLAUDE_MD_START = "<!-- mcpi:dco:start -->";
-export const CLAUDE_MD_END = "<!-- mcpi:dco:end -->";
-// did:key / did:web / etc: a lowercase method name, then method-specific-id
-// drawn from the DID spec's idchar set. No backtick, "<", "!", or whitespace
-// can appear in a matching value. Exported for verify.ts, which validates a
-// DID claimed in a PR body against this same shape before ever resolving
-// it, and for resolve-agent.ts, which validates the DID read from
-// .mcpi/identity.json before it's ever printed by `dco whoami`.
-export const DID_PATTERN = /^did:[a-z0-9]+:[A-Za-z0-9.\-_:%]+$/;
-export const MAX_DID_LENGTH = 200;
-export function isValidDid(value) {
-    return value.length <= MAX_DID_LENGTH && DID_PATTERN.test(value);
-}
-export function buildAttributionBlock(params = {}) {
-    const lines = [
-        CLAUDE_MD_START,
-        "## Agent attribution (managed by `dco setup`)",
-        "",
-        "- Before creating a pull request, run `dco whoami --json` in this repo to find the agent identity configured in this checkout.",
-        '- If it reports `"configured": true`, end the PR description with exactly these two lines, filled in from that command\'s `name`, `url`, and `did` fields (curly braces mark what to fill in; every other character, including the square/round brackets and the angle brackets around the DID line, is literal):',
-        "  `Generated with [{name}]({url})`",
-        "  `Agent DID: {did}`",
-        '- If it reports `"configured": false`, do not add a "Generated with" or "Agent DID" line at all.',
-        '- Never add "Generated with Claude Code" or any other tool byline to PR descriptions or commit messages.',
-    ];
-    if (params.includeTrailerInstructions) {
-        lines.push("- End every commit message with these trailers. Resolve the first line from `git config user.name` / `git config user.email`, and the second from `dco whoami --json`'s `name` and `email` fields (omit this line entirely if `configured` is false). Curly braces mark what to fill in; the angle brackets around each email are literal characters git trailers require, keep them:", "  `Signed-off-by: {your name} <{your email}>`", "  `Co-authored-by: {agent name} <{agent email}>`");
-    }
-    lines.push(CLAUDE_MD_END);
-    return lines.join("\n");
-}
-export function upsertClaudeMdBlock(cwd, block, options = {}) {
-    return upsertMarkerBlock(cwd, "CLAUDE.md", CLAUDE_MD_START, CLAUDE_MD_END, block, options);
-}
-/**
- * Set includeCoAuthoredBy: false in .claude/settings.json, preserving every
- * other key. A file we cannot parse is left untouched: clobbering a user's
- * settings is worse than leaving the stock byline on.
- */
-export function updateClaudeSettings(cwd, options = {}) {
-    const path = join(cwd, ".claude", "settings.json");
-    return mergeJsonFile(path, { includeCoAuthoredBy: false }, options);
-}
-//# sourceMappingURL=claude-config.js.map

package/dist/utils/dco/claude-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claude-config.js","sourceRoot":"","sources":["../../../src/utils/dco/claude-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAWrD,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,kEAAkE;AAClE,gEAAgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,MAAM,IAAI,cAAc,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiC,EAAE;IACvE,MAAM,KAAK,GAAG;QACZ,eAAe;QACf,+CAA+C;QAC/C,EAAE;QACF,gIAAgI;QAChI,mTAAmT;QACnT,oCAAoC;QACpC,sBAAsB;QACtB,kGAAkG;QAClG,0GAA0G;KAC3G,CAAC;IACF,IAAI,MAAM,CAAC,0BAA0B,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,uXAAuX,EACvX,+CAA+C,EAC/C,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAID,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,KAAa,EACb,UAAgC,EAAE;IAElC,OAAO,iBAAiB,CACtB,GAAG,EACH,WAAW,EACX,eAAe,EACf,aAAa,EACb,KAAK,EACL,OAAO,CACR,CAAC;AACJ,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,UAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACnD,OAAO,aAAa,CAAC,IAAI,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC"}