@kya-os/cli 1.8.3 → 2.0.2

package/dist/utils/register-agent-identity.js

@@ -1,34 +0,0 @@
-import { mkdtempSync, rmSync } from "fs";
-import { tmpdir } from "os";
-import { join } from "path";
-export function createRegisterAgentIdentity(options) {
-    const cwdImpl = options.cwdImpl ?? (() => process.cwd());
-    const chdirImpl = options.chdirImpl ?? ((dir) => process.chdir(dir));
-    const mkdtempImpl = options.mkdtempImpl ?? ((prefix) => mkdtempSync(prefix));
-    const rmImpl = options.rmImpl ?? ((path) => rmSync(path, { recursive: true, force: true }));
-    return async ({ name }) => {
-        const originalCwd = cwdImpl();
-        const tempDir = mkdtempImpl(join(tmpdir(), "mcpi-profile-"));
-        try {
-            chdirImpl(tempDir);
-            const result = await options.enableMCPIdentityCLIImpl({
-                name,
-                endpoint: options.endpoint,
-                logLevel: "silent",
-                skipRegistration: false,
-            });
-            return {
-                did: result.identity.did,
-                claimUrl: result.metadata.claimUrl,
-                agentSlug: result.metadata.agentSlug,
-                privateKey: result.identity.privateKey,
-                publicKey: result.identity.publicKey,
-            };
-        }
-        finally {
-            chdirImpl(originalCwd);
-            rmImpl(tempDir);
-        }
-    };
-}
-//# sourceMappingURL=register-agent-identity.js.map

package/dist/utils/register-agent-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"register-agent-identity.js","sourceRoot":"","sources":["../../src/utils/register-agent-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA+D5B,MAAM,UAAU,2BAA2B,CACzC,OAA2C;IAE3C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvF,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,EAA+B,EAAE;QACrD,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC;gBACpD,IAAI;gBACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,gBAAgB,EAAE,KAAK;aACxB,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBAClC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;gBACpC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;gBACtC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;aACrC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/utils/review/did-web-key.d.ts

@@ -1,34 +0,0 @@
-/**
- * did:web -> raw Ed25519 public key resolution for `kya-os review verify`
- * (review-loop P9 commit 3).
- *
- * Scope v1: `did:web` only — the epic's reviewer DIDs are all
- * `did:web:knowthat.ai:agents:<slug>`. Reuses the SAME URL mapping and SSRF
- * defense `dco verify`'s PR-attribution check already established
- * (`didWebToHttpsUrl`, `checkDocumentHostIsSafe`) rather than re-deriving
- * either: the host here is exactly as untrusted (wire-supplied, from a
- * signed verdict's `proof.kid`) as the DID claimed in a PR body is there.
- *
- * @module cli/utils/review/did-web-key
- */
-import { type LookupLike } from "../dco/verify.js";
-export type DidWebKeyFailure = "unsupported-method" | "unresolvable" | "blocked-host" | "no-key";
-export interface DidWebKeyResult {
-    ok: boolean;
-    /** Raw 32-byte Ed25519 public key. Present only when `ok` is true. */
-    raw?: Buffer;
-    reason?: DidWebKeyFailure;
-    detail?: string;
-}
-export type FetchLike = (url: string, init?: {
-    signal?: AbortSignal;
-    redirect?: RequestInit["redirect"];
-}) => Promise<Response>;
-/**
- * Resolve a `did:web` identity to its raw 32-byte Ed25519 public key by
- * fetching its DID document. Fail-closed: any host-safety failure, network
- * error, non-200, invalid JSON, or missing key returns `{ ok: false, ... }`
- * rather than throwing.
- */
-export declare function resolveDidWebEd25519Key(did: string, fetchImpl?: FetchLike, lookupImpl?: LookupLike): Promise<DidWebKeyResult>;
-//# sourceMappingURL=did-web-key.d.ts.map

package/dist/utils/review/did-web-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"did-web-key.d.ts","sourceRoot":"","sources":["../../../src/utils/review/did-web-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,gBAAgB,GACxB,oBAAoB,GACpB,cAAc,GACd,cAAc,GACd,QAAQ,CAAC;AAEb,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAA;CAAE,KAChE,OAAO,CAAC,QAAQ,CAAC,CAAC;AA+BvB;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,SAA2C,EACtD,UAAU,GAAE,UAA0B,GACrC,OAAO,CAAC,eAAe,CAAC,CA4D1B"}

package/dist/utils/review/did-web-key.js

@@ -1,104 +0,0 @@
-/**
- * did:web -> raw Ed25519 public key resolution for `kya-os review verify`
- * (review-loop P9 commit 3).
- *
- * Scope v1: `did:web` only — the epic's reviewer DIDs are all
- * `did:web:knowthat.ai:agents:<slug>`. Reuses the SAME URL mapping and SSRF
- * defense `dco verify`'s PR-attribution check already established
- * (`didWebToHttpsUrl`, `checkDocumentHostIsSafe`) rather than re-deriving
- * either: the host here is exactly as untrusted (wire-supplied, from a
- * signed verdict's `proof.kid`) as the DID claimed in a PR body is there.
- *
- * @module cli/utils/review/did-web-key
- */
-import { didWebToHttpsUrl, checkDocumentHostIsSafe, defaultLookup, } from "../dco/verify.js";
-const RESOLVE_TIMEOUT_MS = 10000;
-/**
- * Pull the first Ed25519 (OKP) `publicKeyJwk` out of a DID document's
- * `verificationMethod` array. Mirrors
- * `packages/compute/src/didcomm/did-web.ts`'s `extractEd25519Jwk` exactly
- * (same kty/crv/x checks) — compute can't be imported from the CLI (see
- * this command's constraints), so the ~15-line check is duplicated rather
- * than shared; keep the two in sync if the JWK shape check ever changes.
- */
-function extractEd25519Jwk(doc) {
-    if (!doc || typeof doc !== "object")
-        return null;
-    const methods = doc.verificationMethod;
-    if (!Array.isArray(methods))
-        return null;
-    for (const method of methods) {
-        const jwk = method?.publicKeyJwk;
-        if (jwk &&
-            typeof jwk.kty === "string" &&
-            jwk.kty.toUpperCase() === "OKP" &&
-            jwk.crv === "Ed25519" &&
-            typeof jwk.x === "string") {
-            return { x: jwk.x };
-        }
-    }
-    return null;
-}
-/**
- * Resolve a `did:web` identity to its raw 32-byte Ed25519 public key by
- * fetching its DID document. Fail-closed: any host-safety failure, network
- * error, non-200, invalid JSON, or missing key returns `{ ok: false, ... }`
- * rather than throwing.
- */
-export async function resolveDidWebEd25519Key(did, fetchImpl = (url, init) => fetch(url, init), lookupImpl = defaultLookup) {
-    const documentUrl = didWebToHttpsUrl(did);
-    if (!documentUrl) {
-        return {
-            ok: false,
-            reason: "unsupported-method",
-            detail: "Only did:web identities can be resolved (v1 scope).",
-        };
-    }
-    const hostCheck = await checkDocumentHostIsSafe(documentUrl, lookupImpl);
-    if (!hostCheck.safe) {
-        return { ok: false, reason: hostCheck.reason, detail: hostCheck.detail };
-    }
-    let response;
-    try {
-        response = await fetchImpl(documentUrl, {
-            signal: AbortSignal.timeout(RESOLVE_TIMEOUT_MS),
-            // A redirect target is unverified — refusing to follow it keeps the
-            // host check above from being bypassable by a 3xx response, same
-            // reasoning as verifyPrAttribution's identical guard.
-            redirect: "manual",
-        });
-    }
-    catch (error) {
-        return {
-            ok: false,
-            reason: "unresolvable",
-            detail: error instanceof Error ? error.message : String(error),
-        };
-    }
-    if (!response.ok) {
-        return {
-            ok: false,
-            reason: "unresolvable",
-            detail: response.type === "opaqueredirect"
-                ? "Server returned a redirect, which is not followed."
-                : `HTTP ${response.status}`,
-        };
-    }
-    let document;
-    try {
-        document = await response.json();
-    }
-    catch {
-        return { ok: false, reason: "unresolvable", detail: "Response was not valid JSON." };
-    }
-    const jwk = extractEd25519Jwk(document);
-    if (!jwk) {
-        return {
-            ok: false,
-            reason: "no-key",
-            detail: "No Ed25519 verification key in DID document.",
-        };
-    }
-    return { ok: true, raw: Buffer.from(jwk.x, "base64url") };
-}
-//# sourceMappingURL=did-web-key.js.map

package/dist/utils/review/did-web-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"did-web-key.js","sourceRoot":"","sources":["../../../src/utils/review/did-web-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,GAEd,MAAM,kBAAkB,CAAC;AAqB1B,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAElC;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,OAAO,GAAI,GAAwC,CAAC,kBAAkB,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAI,MAAqD,EAAE,YAAY,CAAC;QACjF,IACE,GAAG;YACH,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAC3B,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK;YAC/B,GAAG,CAAC,GAAG,KAAK,SAAS;YACrB,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,EACzB,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,YAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EACtD,aAAyB,aAAa;IAEtC,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,qDAAqD;SAC9D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACzE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE;YACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC/C,oEAAoE;YACpE,iEAAiE;YACjE,sDAAsD;YACtD,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,cAAc;YACtB,MAAM,EACJ,QAAQ,CAAC,IAAI,KAAK,gBAAgB;gBAChC,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE;SAChC,CAAC;IACJ,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,8CAA8C;SACvD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;AAC5D,CAAC"}

package/dist/utils/review/load-registry.d.ts

@@ -1,33 +0,0 @@
-/**
- * Reviewer registry loading for `kya-os review verify` (review-loop P9,
- * sm2 finding: a signature verifying is NOT the same guarantee as "this
- * signer is a recognized reviewer for this org" — see review.ts's own doc
- * comment on why this exists and how its absence is surfaced).
- *
- * Mirrors `packages/compute/src/didcomm/reviewer-registry.ts`'s resolution
- * order (`REVIEW_REGISTRY_PATH`, then `REVIEW_REGISTRY_JSON`) and its
- * "never return a partially valid registry" contract, reimplemented here
- * rather than imported: that loader lives in `@kya-os/compute`, which the
- * CLI must never import (compute is PID 1 in Fly workers; the CLI is a
- * published binary — same boundary `did-web-key.ts`'s doc comment notes).
- * `ReviewerRegistrySchema` itself IS shared, from `@kya-os/contracts/review`,
- * a pure Zod schema with no compute dependency.
- *
- * @module cli/utils/review/load-registry
- */
-import { type ReviewerRegistry } from "@kya-os/contracts/review";
-export interface LoadRegistryResult {
-    /** Present when a registry was found and validated. */
-    registry?: ReviewerRegistry;
-    /** Present when a registry source WAS configured but failed to load or validate — distinct from "none configured" (undefined `registry` with no `error` either). */
-    error?: string;
-}
-/**
- * Resolution order: an explicit path (the `--registry` flag), then
- * `REVIEW_REGISTRY_PATH`, then `REVIEW_REGISTRY_JSON`. Returns `{}` (both
- * fields undefined) when nothing is configured — the command treats that
- * as "membership checking unavailable," not an error, since it wasn't part
- * of this command's original required scope.
- */
-export declare function loadReviewerRegistryForVerify(explicitPath?: string): LoadRegistryResult;
-//# sourceMappingURL=load-registry.d.ts.map

package/dist/utils/review/load-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"load-registry.d.ts","sourceRoot":"","sources":["../../../src/utils/review/load-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEzF,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oKAAoK;IACpK,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAkBvF"}

package/dist/utils/review/load-registry.js

@@ -1,62 +0,0 @@
-/**
- * Reviewer registry loading for `kya-os review verify` (review-loop P9,
- * sm2 finding: a signature verifying is NOT the same guarantee as "this
- * signer is a recognized reviewer for this org" — see review.ts's own doc
- * comment on why this exists and how its absence is surfaced).
- *
- * Mirrors `packages/compute/src/didcomm/reviewer-registry.ts`'s resolution
- * order (`REVIEW_REGISTRY_PATH`, then `REVIEW_REGISTRY_JSON`) and its
- * "never return a partially valid registry" contract, reimplemented here
- * rather than imported: that loader lives in `@kya-os/compute`, which the
- * CLI must never import (compute is PID 1 in Fly workers; the CLI is a
- * published binary — same boundary `did-web-key.ts`'s doc comment notes).
- * `ReviewerRegistrySchema` itself IS shared, from `@kya-os/contracts/review`,
- * a pure Zod schema with no compute dependency.
- *
- * @module cli/utils/review/load-registry
- */
-import { readFileSync } from "node:fs";
-import { ReviewerRegistrySchema } from "@kya-os/contracts/review";
-/**
- * Resolution order: an explicit path (the `--registry` flag), then
- * `REVIEW_REGISTRY_PATH`, then `REVIEW_REGISTRY_JSON`. Returns `{}` (both
- * fields undefined) when nothing is configured — the command treats that
- * as "membership checking unavailable," not an error, since it wasn't part
- * of this command's original required scope.
- */
-export function loadReviewerRegistryForVerify(explicitPath) {
-    const path = explicitPath ?? process.env.REVIEW_REGISTRY_PATH;
-    if (path) {
-        let raw;
-        try {
-            raw = readFileSync(path, "utf-8");
-        }
-        catch (error) {
-            return { error: `failed to read reviewer registry at "${path}": ${describeError(error)}` };
-        }
-        return parseRegistry(raw, `file "${path}"`);
-    }
-    const inline = process.env.REVIEW_REGISTRY_JSON;
-    if (inline) {
-        return parseRegistry(inline, "REVIEW_REGISTRY_JSON");
-    }
-    return {};
-}
-function parseRegistry(raw, sourceLabel) {
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (error) {
-        return { error: `failed to parse reviewer registry JSON from ${sourceLabel}: ${describeError(error)}` };
-    }
-    const result = ReviewerRegistrySchema.safeParse(parsed);
-    if (!result.success) {
-        return { error: `invalid reviewer registry from ${sourceLabel}: ${result.error.message}` };
-    }
-    return { registry: result.data };
-}
-function describeError(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-//# sourceMappingURL=load-registry.js.map

package/dist/utils/review/load-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"load-registry.js","sourceRoot":"","sources":["../../../src/utils/review/load-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAyB,MAAM,0BAA0B,CAAC;AASzF;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,YAAqB;IACjE,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC9D,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,wCAAwC,IAAI,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,IAAI,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,aAAa,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,WAAmB;IACrD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,+CAA+C,WAAW,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,kCAAkC,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/utils/review/verdict-verify.d.ts

@@ -1,43 +0,0 @@
-/**
- * Local review-verdict proof verification for `kya-os review verify`
- * (review-loop P9 commit 3).
- *
- * Seam completed (was TEMPORARY pending review-loop P13's commit 0 / PR
- * #701, now merged): delegates the signature check to
- * `@kya-os/contracts/review/verify`'s `verifyReviewVerdictProof(body,
- * publicKeyRaw)` (the same raw-bytes shape `resolveDidWebEd25519Key`,
- * did-web-key.ts, already produces) rather than reimplementing the
- * SPKI-wrap Ed25519 verify locally. `verifyLocalReviewVerdictProof` stays
- * as a thin wrapper -- not deleted outright -- because contracts' function
- * returns a plain boolean with no way to distinguish a digest mismatch
- * from a signature failure, and `commands/review.ts` reports those as two
- * different human-readable reasons; this wrapper does the digest
- * pre-check itself (matching compute's `review.ts`'s identical seam) to
- * keep that distinction, then delegates for the signature half.
- *
- * @module cli/utils/review/verdict-verify
- */
-import { type ReviewVerdictBody } from "@kya-os/contracts/review";
-export type VerdictProofFailureReason = "digest" | "signature";
-export interface VerdictProofResult {
-    valid: boolean;
-    reason?: VerdictProofFailureReason;
-}
-/**
- * Verify a review verdict's proof against a RAW Ed25519 public key: that
- * `findingsDigest` matches `findings`, and that `proof.signature` was
- * produced by the private half of `publicKeyRaw`. Fail-closed — any
- * malformed input or key-import failure returns `{ valid: false, reason:
- * "signature" }` rather than throwing (contracts' `verifyReviewVerdictProof`
- * is itself fail-closed, never throws).
- */
-export declare function verifyLocalReviewVerdictProof(body: ReviewVerdictBody, publicKeyRaw: Buffer): VerdictProofResult;
-/**
- * Extract every fenced ```kya-os-signed-verdict block's raw contents from a
- * review or comment body. Returns the raw text (not yet parsed/validated) —
- * callers JSON.parse and `ReviewVerdictBodySchema.safeParse` each block
- * themselves, so a malformed block reports as one INVALID row rather than
- * aborting extraction of the others.
- */
-export declare function extractSignedVerdictBlocks(markdown: string): string[];
-//# sourceMappingURL=verdict-verify.d.ts.map

package/dist/utils/review/verdict-verify.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verdict-verify.d.ts","sourceRoot":"","sources":["../../../src/utils/review/verdict-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,iBAAiB,EACvB,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAOpB;AAID;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAMrE"}

package/dist/utils/review/verdict-verify.js

@@ -1,53 +0,0 @@
-/**
- * Local review-verdict proof verification for `kya-os review verify`
- * (review-loop P9 commit 3).
- *
- * Seam completed (was TEMPORARY pending review-loop P13's commit 0 / PR
- * #701, now merged): delegates the signature check to
- * `@kya-os/contracts/review/verify`'s `verifyReviewVerdictProof(body,
- * publicKeyRaw)` (the same raw-bytes shape `resolveDidWebEd25519Key`,
- * did-web-key.ts, already produces) rather than reimplementing the
- * SPKI-wrap Ed25519 verify locally. `verifyLocalReviewVerdictProof` stays
- * as a thin wrapper -- not deleted outright -- because contracts' function
- * returns a plain boolean with no way to distinguish a digest mismatch
- * from a signature failure, and `commands/review.ts` reports those as two
- * different human-readable reasons; this wrapper does the digest
- * pre-check itself (matching compute's `review.ts`'s identical seam) to
- * keep that distinction, then delegates for the signature half.
- *
- * @module cli/utils/review/verdict-verify
- */
-import { verifyReviewVerdictProof } from "@kya-os/contracts/review/verify";
-import { computeFindingsDigest, } from "@kya-os/contracts/review";
-/**
- * Verify a review verdict's proof against a RAW Ed25519 public key: that
- * `findingsDigest` matches `findings`, and that `proof.signature` was
- * produced by the private half of `publicKeyRaw`. Fail-closed — any
- * malformed input or key-import failure returns `{ valid: false, reason:
- * "signature" }` rather than throwing (contracts' `verifyReviewVerdictProof`
- * is itself fail-closed, never throws).
- */
-export function verifyLocalReviewVerdictProof(body, publicKeyRaw) {
-    if (computeFindingsDigest(body.findings) !== body.findingsDigest) {
-        return { valid: false, reason: "digest" };
-    }
-    return verifyReviewVerdictProof(body, publicKeyRaw)
-        ? { valid: true }
-        : { valid: false, reason: "signature" };
-}
-const SIGNED_VERDICT_FENCE = /```kya-os-signed-verdict\n([\s\S]*?)\n```/g;
-/**
- * Extract every fenced ```kya-os-signed-verdict block's raw contents from a
- * review or comment body. Returns the raw text (not yet parsed/validated) —
- * callers JSON.parse and `ReviewVerdictBodySchema.safeParse` each block
- * themselves, so a malformed block reports as one INVALID row rather than
- * aborting extraction of the others.
- */
-export function extractSignedVerdictBlocks(markdown) {
-    const blocks = [];
-    for (const match of markdown.matchAll(SIGNED_VERDICT_FENCE)) {
-        blocks.push(match[1]);
-    }
-    return blocks;
-}
-//# sourceMappingURL=verdict-verify.js.map

package/dist/utils/review/verdict-verify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verdict-verify.js","sourceRoot":"","sources":["../../../src/utils/review/verdict-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AASlC;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAuB,EACvB,YAAoB;IAEpB,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,EAAE,YAAY,CAAC;QACjD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/review-registry-writer.d.ts

@@ -1,52 +0,0 @@
-import { type ReviewerRegistry, type ReviewerRegistryEntry } from "@kya-os/contracts/review";
-/**
- * Generates/updates `~/.mcpi/review-registry.json` from the profiles just
- * created by `kya-os init`'s agent-profile stage. Deliberately MERGE-ONLY:
- * `orgId`/`orgRootDid`/`repos`/`quorumN` are org-wide values a single
- * developer's `init` run has no way to know, so a machine with no existing
- * registry gets no invented one -- only entries in an ALREADY-PRESENT file
- * are ever added or updated. A failed validation is reported, never
- * silently written (a bug, not a warning, per the spec).
- */
-export declare function reviewRegistryPath(): string;
-export type MergeReviewRegistryResult = {
-    status: "written";
-    path: string;
-    registry: ReviewerRegistry;
-} | {
-    status: "skipped-no-existing-registry";
-    path: string;
-} | {
-    status: "invalid-existing";
-    path: string;
-    error: string;
-} | {
-    status: "invalid-result";
-    path: string;
-    error: string;
-};
-export interface MergeReviewRegistryOptions {
-    path?: string;
-    /**
-     * agentDids (from `newEntries`) to promote to `fixes: true` IF their
-     * githubLogin has no `fixes: true` entry anywhere in the MERGED registry
-     * (existing entries plus this run's, not just this run's own batch).
-     * Never demotes an existing fixer and never gives one person two.
-     *
-     * This decision belongs here, not in the caller: a caller building
-     * `newEntries` sees only its own batch (e.g. "the first profile created
-     * THIS run"), so computing `fixes` there is correct on a machine's first
-     * `kya-os init` but wrong on every later run that adds one more profile
-     * for someone who already has a fixer -- the caller has no way to know
-     * that without re-reading the file this function already loads.
-     */
-    designateFixerCandidates?: string[];
-}
-/**
- * Merge freshly generated profile entries into the on-disk review registry,
- * keyed by `agentDid`: a matching entry is updated in place (same array
- * position), a new one is appended, and every entry this run didn't touch
- * (other people's, hand-added) is preserved untouched.
- */
-export declare function mergeReviewRegistry(newEntries: ReviewerRegistryEntry[], options?: MergeReviewRegistryOptions): MergeReviewRegistryResult;
-//# sourceMappingURL=review-registry-writer.d.ts.map

package/dist/utils/review-registry-writer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"review-registry-writer.d.ts","sourceRoot":"","sources":["../../src/utils/review-registry-writer.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAGlC;;;;;;;;GAQG;AAEH,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAC/D;IAAE,MAAM,EAAE,8BAA8B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;OAYG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,qBAAqB,EAAE,EACnC,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CAgE3B"}

package/dist/utils/review-registry-writer.js

@@ -1,79 +0,0 @@
-import { existsSync, readFileSync } from "fs";
-import { join, resolve } from "path";
-import { ReviewerRegistrySchema, } from "@kya-os/contracts/review";
-import { stateDir, writeFileAtomicSafe } from "./cli-kit/index.js";
-/**
- * Generates/updates `~/.mcpi/review-registry.json` from the profiles just
- * created by `kya-os init`'s agent-profile stage. Deliberately MERGE-ONLY:
- * `orgId`/`orgRootDid`/`repos`/`quorumN` are org-wide values a single
- * developer's `init` run has no way to know, so a machine with no existing
- * registry gets no invented one -- only entries in an ALREADY-PRESENT file
- * are ever added or updated. A failed validation is reported, never
- * silently written (a bug, not a warning, per the spec).
- */
-export function reviewRegistryPath() {
-    return resolve(process.env.MCPI_REVIEW_REGISTRY_PATH ||
-        join(stateDir("mcpi"), "review-registry.json"));
-}
-/**
- * Merge freshly generated profile entries into the on-disk review registry,
- * keyed by `agentDid`: a matching entry is updated in place (same array
- * position), a new one is appended, and every entry this run didn't touch
- * (other people's, hand-added) is preserved untouched.
- */
-export function mergeReviewRegistry(newEntries, options = {}) {
-    const path = options.path ?? reviewRegistryPath();
-    if (!existsSync(path)) {
-        return { status: "skipped-no-existing-registry", path };
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(readFileSync(path, "utf-8"));
-    }
-    catch (error) {
-        return {
-            status: "invalid-existing",
-            path,
-            error: `Could not parse ${path}: ${error instanceof Error ? error.message : String(error)}`,
-        };
-    }
-    const existing = ReviewerRegistrySchema.safeParse(parsed);
-    if (!existing.success) {
-        return {
-            status: "invalid-existing",
-            path,
-            error: `${path} fails schema validation: ${existing.error.message}`,
-        };
-    }
-    const byDid = new Map(existing.data.entries.map((e) => [e.agentDid, e]));
-    for (const entry of newEntries) {
-        byDid.set(entry.agentDid, entry);
-    }
-    if (options.designateFixerCandidates) {
-        const fixerLoginSeen = new Set(Array.from(byDid.values())
-            .filter((e) => e.fixes)
-            .map((e) => e.githubLogin));
-        for (const did of options.designateFixerCandidates) {
-            const entry = byDid.get(did);
-            if (!entry || fixerLoginSeen.has(entry.githubLogin))
-                continue;
-            byDid.set(did, { ...entry, fixes: true });
-            fixerLoginSeen.add(entry.githubLogin);
-        }
-    }
-    const merged = {
-        ...existing.data,
-        entries: Array.from(byDid.values()),
-    };
-    const validated = ReviewerRegistrySchema.safeParse(merged);
-    if (!validated.success) {
-        return {
-            status: "invalid-result",
-            path,
-            error: `Generated review registry fails schema validation: ${validated.error.message}`,
-        };
-    }
-    writeFileAtomicSafe(path, JSON.stringify(validated.data, null, 2) + "\n");
-    return { status: "written", path, registry: validated.data };
-}
-//# sourceMappingURL=review-registry-writer.js.map

package/dist/utils/review-registry-writer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"review-registry-writer.js","sourceRoot":"","sources":["../../src/utils/review-registry-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EACL,sBAAsB,GAGvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEnE;;;;;;;;GAQG;AAEH,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,CACZ,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CACjD,CAAC;AACJ,CAAC;AA0BD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAmC,EACnC,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAElD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI;YACJ,KAAK,EAAE,mBAAmB,IAAI,KAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;SACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,kBAAkB;YAC1B,IAAI;YACJ,KAAK,EAAE,GAAG,IAAI,6BAA6B,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAC7B,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBAAE,SAAS;YAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,GAAG,QAAQ,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;KACpC,CAAC;IAEF,MAAM,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,IAAI;YACJ,KAAK,EAAE,sDAAsD,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE;SACvF,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/utils/screen-manager.d.ts

@@ -1,10 +0,0 @@
-interface ScreenOptions {
-    requireInput: boolean;
-    inputKey?: string;
-    clearBefore?: boolean;
-    clearAfter?: boolean;
-    prompt?: string;
-}
-export declare function showScreen(content: string, options?: ScreenOptions): Promise<void>;
-export {};
-//# sourceMappingURL=screen-manager.d.ts.map

package/dist/utils/screen-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"screen-manager.d.ts","sourceRoot":"","sources":["../../src/utils/screen-manager.ts"],"names":[],"mappings":"AAGA,UAAU,aAAa;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAsC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/utils/screen-manager.js

@@ -1,54 +0,0 @@
-import chalk from "chalk";
-import readline from "readline";
-export async function showScreen(content, options = { requireInput: true }) {
-    const { requireInput = true, inputKey = "Enter", clearBefore = true, clearAfter = false, prompt = "Press Enter to continue...", } = options;
-    if (clearBefore) {
-        console.clear();
-    }
-    console.log(content);
-    if (requireInput) {
-        console.log("\n" + chalk.gray(prompt));
-        await waitForKey(inputKey);
-    }
-    if (clearAfter) {
-        console.clear();
-    }
-}
-async function waitForKey(expectedKey = "Enter") {
-    return new Promise((resolve) => {
-        // Handle non-TTY environments (like CI)
-        if (!process.stdin.isTTY) {
-            // In non-TTY environments, just resolve immediately
-            resolve();
-            return;
-        }
-        readline.emitKeypressEvents(process.stdin);
-        process.stdin.setRawMode(true);
-        const handleKeypress = (str, key) => {
-            // Always cleanup first
-            process.stdin.setRawMode(false);
-            process.stdin.removeAllListeners("keypress");
-            process.stdin.pause();
-            // Check for the expected key
-            if (expectedKey === "Enter" && key && (key.name === "return" || key.name === "enter")) {
-                resolve();
-            }
-            else if (key && key.ctrl && key.name === "c") {
-                // Handle Ctrl+C gracefully
-                process.exit(0);
-            }
-            else if (expectedKey !== "Enter" && str === expectedKey) {
-                resolve();
-            }
-            else {
-                // If wrong key, re-enable and keep waiting
-                process.stdin.setRawMode(true);
-                process.stdin.on("keypress", handleKeypress);
-                process.stdin.resume();
-            }
-        };
-        process.stdin.on("keypress", handleKeypress);
-        process.stdin.resume();
-    });
-}
-//# sourceMappingURL=screen-manager.js.map

package/dist/utils/screen-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"screen-manager.js","sourceRoot":"","sources":["../../src/utils/screen-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAUhC,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,UAAyB,EAAE,YAAY,EAAE,IAAI,EAAE;IAE/C,MAAM,EACJ,YAAY,GAAG,IAAI,EACnB,QAAQ,GAAG,OAAO,EAClB,WAAW,GAAG,IAAI,EAClB,UAAU,GAAG,KAAK,EAClB,MAAM,GAAG,4BAA4B,GACtC,GAAG,OAAO,CAAC;IAEZ,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAErB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,cAAsB,OAAO;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,wCAAwC;QACxC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzB,oDAAoD;YACpD,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,cAAc,GAAG,CAAC,GAAW,EAAE,GAAiB,EAAE,EAAE;YACxD,uBAAuB;YACvB,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAEtB,6BAA6B;YAC7B,IAAI,WAAW,KAAK,OAAO,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;gBACtF,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/C,2BAA2B;gBAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,WAAW,KAAK,OAAO,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC1D,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,2CAA2C;gBAC3C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/should-install-dependency.d.ts

@@ -1,17 +0,0 @@
-/**
- * Decides whether `kya-os init` should install the missing `@kya-os/mcp-i`
- * dependency, given `--install`/`--no-install`/`--yes` and whether stdin is
- * a TTY. Pure decision logic, deliberately separated from init.ts's dynamic
- * `import("@kya-os/mcp-i")` retry (which stays inline there -- it exists to
- * survive monorepo CI ordering and isn't itself a seam) so this tri-state
- * flag interaction is exhaustively unit-testable on its own.
- */
-export interface ShouldInstallDependencyOptions {
-    /** true = --install, false = --no-install, undefined = neither passed. */
-    install?: boolean;
-    /** --yes: consents to installs only, never to registration/key decisions. */
-    yes?: boolean;
-}
-export type ConfirmInstallImpl = (message: string) => Promise<boolean>;
-export declare function shouldInstallDependency(options: ShouldInstallDependencyOptions, isTTY: boolean, confirmImpl: ConfirmInstallImpl): Promise<boolean>;
-//# sourceMappingURL=should-install-dependency.d.ts.map