@linzumi/cli 0.0.75-beta → 0.0.77-beta

package/README.md

@@ -58,7 +58,7 @@ Install the CLI or run it with `npx`:
 ```bash
 npm install -g @linzumi/cli@latest
 npx -y @linzumi/cli@latest signup
-npx -y @linzumi/cli@0.0.75-beta --version
+npx -y @linzumi/cli@0.0.77-beta --version
 linzumi --version
 ```
 

package/dist/index.js

@@ -376,12 +376,7 @@ function appendDownloadedAttachmentContext(input, attachments, options = {}) {
     "Do not mention that you are using the upload tool. Do not print an upload manifest or upload footer in the message.",
     "The MCP upload tool is the only supported path for attaching generated files to Linzumi messages."
   ];
-  return [
-    input,
-    ...attachmentContext,
-    "",
-    ...uploadInstructions
-  ].join("\n");
+  return [input, ...attachmentContext, "", ...uploadInstructions].join("\n");
 }
 function codexImageInputItemsForDownloadedAttachments(attachments) {
   return attachments.flatMap(
@@ -659,7 +654,11 @@ async function commanderAttachmentUploadRoots(cwdRealPath) {
   const roots = [
     { path: cwdRealPath, label: "runner cwd" }
   ];
-  const downloadsPath = resolve(homedir(), "Downloads");
+  const configuredHome = process.env.HOME?.trim();
+  const downloadsPath = resolve(
+    configuredHome === void 0 || configuredHome === "" ? homedir() : configuredHome,
+    "Downloads"
+  );
   try {
     const downloadsRealPath = await realpath(downloadsPath);
     if (!roots.some((root) => root.path === downloadsRealPath)) {
@@ -9603,7 +9602,7 @@ function defaultCliAuditLogFile() {
   return override === void 0 || override === "" ? join4(homedir4(), ".linzumi", "logs", "command-events.jsonl") : override;
 }
 function defaultRunnerLogFile() {
-  return join4(homedir4(), ".linzumi", "logs", "runner-events.jsonl");
+  return join4(homedir4(), ".linzumi", "logs", "linzumi-runner.log");
 }
 function redactForCliLog(value) {
   return redactObject(value);
@@ -14633,7 +14632,7 @@ var linzumiCliVersion, linzumiCliVersionText;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    linzumiCliVersion = "0.0.75-beta";
+    linzumiCliVersion = "0.0.77-beta";
     linzumiCliVersionText = `linzumi ${linzumiCliVersion}`;
   }
 });
@@ -15937,8 +15936,7 @@ import { existsSync as existsSync8, mkdirSync as mkdirSync8, readFileSync as rea
 import { homedir as homedir9 } from "node:os";
 import { dirname as dirname8, join as join12 } from "node:path";
 function defaultAuthFilePath() {
-  const base = process.env.KANDAN_HOME ?? join12(homedir9(), ".kandan");
-  return join12(base, "auth.json");
+  return join12(homedir9(), ".linzumi", "auth.json");
 }
 function readCachedLocalRunnerToken(kandanUrl, authFilePath = defaultAuthFilePath()) {
   if (!existsSync8(authFilePath)) {
@@ -16628,7 +16626,7 @@ var init_signupTaskSuggestions = __esm({
 
 // src/remoteCodexSandboxRunner.ts
 import { spawn as spawn7 } from "node:child_process";
-import { existsSync as existsSync9 } from "node:fs";
+import { existsSync as existsSync9, realpathSync as realpathSync5 } from "node:fs";
 import { dirname as dirname9, isAbsolute as isAbsolute3 } from "node:path";
 function createConfiguredRemoteCodexSandboxRunner(args) {
   const kind = normalizedSandboxKind(args.env.LINZUMI_REMOTE_CODEX_SANDBOX);
@@ -16785,6 +16783,10 @@ function macosSeatbeltProfile(request, exists) {
     `(allow file-read* (subpath ${sandboxString(path2)}))`,
     `(allow file-write* (subpath ${sandboxString(path2)}))`
   ]).join("\n");
+  const cwdRules = existingPathAliases(request.cwd).flatMap((path2) => [
+    `(allow file-read* (subpath ${sandboxString(path2)}))`,
+    `(allow file-write* (subpath ${sandboxString(path2)}))`
+  ]).join("\n");
   return [
     "(version 1)",
     "(deny default)",
@@ -16792,13 +16794,13 @@ function macosSeatbeltProfile(request, exists) {
     "(allow signal (target self))",
     "(allow sysctl-read)",
     "(allow file-read-metadata)",
+    '(allow file-read-data (literal "/"))',
     '(allow file-read* (literal "/dev/null"))',
     '(allow file-read* (literal "/dev/random"))',
     '(allow file-read* (literal "/dev/urandom"))',
     readableRules,
     writableTempRules,
-    `(allow file-read* (subpath ${sandboxString(request.cwd)}))`,
-    `(allow file-write* (subpath ${sandboxString(request.cwd)}))`
+    cwdRules
   ].join("\n");
 }
 function createBoundedOutputBuffer() {
@@ -16859,6 +16861,9 @@ function parentDirs(path2) {
 function uniqueStrings2(values) {
   return Array.from(new Set(values));
 }
+function existingPathAliases(path2) {
+  return uniqueStrings2([path2, realpathSync5(path2)]);
+}
 function sandboxString(value) {
   return JSON.stringify(value);
 }
@@ -16880,6 +16885,8 @@ var init_remoteCodexSandboxRunner = __esm({
     macosReadOnlyRoots = [
       "/System",
       "/Library",
+      "/etc",
+      "/private/etc",
       "/usr",
       "/bin",
       "/sbin",
@@ -16899,7 +16906,7 @@ import {
   mkdirSync as mkdirSync9,
   mkdtempSync as mkdtempSync4,
   readdirSync as readdirSync2,
-  realpathSync as realpathSync5,
+  realpathSync as realpathSync6,
   rmSync as rmSync4,
   statSync
 } from "node:fs";
@@ -19733,6 +19740,15 @@ read a message by ID/URL, read a thread by ID, read the scoped channel, or send
 a concise DM to the Commander owner when the task genuinely requires it.
 </linzumi_mcp>
 
+<coding_job_metadata>
+When you are working inside a coding-job thread, keep the job metadata current through the Linzumi MCP tools.
+At the beginning of a job, call linzumi_upsert_coding_job_plan with your current understanding of the goal, then call linzumi_replace_coding_job_plan_steps with an ordered list of steps to accomplish that goal.
+The plan is allowed to change. Rework it when the old plan is no longer a useful description of the work, but do not churn it for minor tactical adjustments.
+As you make progress, call linzumi_update_coding_job_plan_step to mark the active step and completed steps. Read the metadata first when you need current step ids or lock versions.
+When you open, discover, or choose the primary GitHub pull request for the job, call linzumi_link_coding_job_pull_request with the PR URL, repo owner/name, PR number, title, head/base branches, head/base SHAs, local worktree path, remote URL, and current dirty status. This link is what lets GitHub PR comments, files, commits, checks, deployments, and reviews appear automatically in the metadata overview.
+The plan and goal are user-visible, so keep titles short, descriptions concrete, and completion notes focused on what was verified.
+</coding_job_metadata>
+
 <task_instructions>
 Work only in the approved project folder unless the human explicitly asks for
 something else in the Linzumi thread. Start, inspect, and modify the local app
@@ -21700,7 +21716,7 @@ function configuredAllowedCwds(values, options = {}) {
       if (options.createMissing === true) {
         mkdirSync9(absolutePath, { recursive: true });
       }
-      const realPath = realpathSync5(absolutePath);
+      const realPath = realpathSync6(absolutePath);
       allowedCwds.push(
         ...realPath === absolutePath ? [realPath] : [realPath, absolutePath]
       );
@@ -21747,7 +21763,7 @@ function browseRunnerDirectory(control, options) {
   const requestId = stringValue(control.requestId) ?? null;
   const requestedPath = stringValue(control.path) ?? currentHomeDirectory();
   try {
-    const currentPath = realpathSync5(resolve7(expandUserPath(requestedPath)));
+    const currentPath = realpathSync6(resolve7(expandUserPath(requestedPath)));
     const stats = statSync(currentPath);
     if (!stats.isDirectory()) {
       return {
@@ -21870,7 +21886,7 @@ function createRunnerProject(control, options, allowedCwds) {
         error: cleanupError === void 0 ? `git_init_failed:${gitFailure}` : `git_init_cleanup_failed:${cleanupError}`
       };
     }
-    const projectRealPath = realpathSync5(projectPath);
+    const projectRealPath = realpathSync6(projectPath);
     const persistedAllowedCwds = addAllowedCwdForLinzumiUrl(
       projectRealPath,
       options.kandanUrl
@@ -42325,6 +42341,7 @@ function signupHelpText() {
     "",
     "Options:",
     "  --api-url <url>   Linzumi HTTP origin, default https://serve.linzumi.com",
+    "  --code-server-bin <path>  Custom development code-server executable",
     "  --force-signup    Ignore existing local signup auth and create a fresh login",
     "  --no-open         Print the launch URL without opening the browser",
     "  --debug-signup    Print the collected launch payload JSON after signup",
@@ -42343,6 +42360,7 @@ function signupPromptCancelMessage(error) {
 function parseSignupTuiOptions(args) {
   let serviceUrl = defaultLinzumiHttpUrl;
   let forceSignup = false;
+  let codeServerBin;
   let openBrowser2 = true;
   let debugLaunchPayload = false;
   for (let index = 0; index < args.length; index += 1) {
@@ -42368,11 +42386,26 @@ function parseSignupTuiOptions(args) {
         index += 1;
         break;
       }
+      case "--code-server-bin": {
+        const value = args[index + 1];
+        if (value === void 0 || value.startsWith("--")) {
+          throw new Error("missing value for --code-server-bin");
+        }
+        codeServerBin = value;
+        index += 1;
+        break;
+      }
       default:
         throw new Error(`invalid signup flag: ${arg ?? ""}`);
     }
   }
-  return { serviceUrl, forceSignup, openBrowser: openBrowser2, debugLaunchPayload };
+  return {
+    serviceUrl,
+    forceSignup,
+    ...codeServerBin === void 0 ? {} : { codeServerBin },
+    openBrowser: openBrowser2,
+    debugLaunchPayload
+  };
 }
 function signupAuthMatchesServiceUrl(auth, serviceUrl) {
   return comparableServiceUrl(auth.serviceUrl) === comparableServiceUrl(serviceUrl);
@@ -42628,6 +42661,7 @@ async function runSignupFlow(deps = {}) {
   const preflight = deps.preflight ?? defaultPreflightRuntime();
   const forceSignup = deps.forceSignup === true;
   const serviceUrl = deps.serviceUrl ?? defaultLinzumiHttpUrl;
+  const codeServerBin = deps.codeServerBin;
   const openBrowser2 = deps.openBrowser !== false;
   const debugLaunchPayload = deps.debugLaunchPayload === true;
   const openUrl = deps.openUrl ?? openUrlInBrowser;
@@ -42916,7 +42950,8 @@ async function runSignupFlow(deps = {}) {
         workspaceSlug: missionControl.workspace.slug,
         projectPath: starterProjectPath,
         selectedProjectPaths: missionControl.config.allowedCwds,
-        codexBin: verifiedCodexBin
+        codexBin: verifiedCodexBin,
+        ...codeServerBin === void 0 ? {} : { codeServerBin }
       });
       const starterTaskLaunches = await startSignupTasksForCommander(
         signupServerClient,
@@ -43650,6 +43685,7 @@ async function signupCommanderRunnerOptions(args, runnerId) {
   const editorRuntime = await resolveEditorRuntime({
     kandanUrl: args.serviceUrl,
     token: args.localRunnerAccessToken,
+    customCodeServerBin: args.codeServerBin,
     fetchImpl: trustedFetch(trust)
   });
   const dependencyStatus = await buildRunnerDependencyStatus({
@@ -43704,6 +43740,7 @@ function signupConnectRestartCommand(args) {
     "--workspace",
     args.workspaceSlug,
     ...args.codexBin === void 0 ? [] : ["--codex-bin", args.codexBin],
+    ...args.codeServerBin === void 0 ? [] : ["--code-server-bin", args.codeServerBin],
     "--cwd",
     args.projectPath,
     ...args.serviceUrl === defaultLinzumiHttpUrl ? [] : ["--api-url", args.serviceUrl]
@@ -45562,7 +45599,7 @@ secure mission control for all your agents on your computers
 init_runner();
 init_claudeCodeSession();
 init_authCache();
-import { existsSync as existsSync14, readFileSync as readFileSync16, realpathSync as realpathSync6 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync16, realpathSync as realpathSync7 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { resolve as resolve10 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
@@ -46453,8 +46490,8 @@ function commanderStatusDir() {
 function commanderStatusFile(runnerId, statusDir = commanderStatusDir()) {
   return join16(statusDir, `${safeRunnerId(runnerId)}.json`);
 }
-function defaultCommanderLogFile(runnerId, statusDir = commanderStatusDir()) {
-  return join16(statusDir, `${safeRunnerId(runnerId)}.log`);
+function defaultCommanderLogFile(runnerId) {
+  return join16(homedir11(), ".linzumi", "logs", `${safeRunnerId(runnerId)}.log`);
 }
 function commanderLogIsConnected(log) {
   return connectedMarkers.some((marker) => log.includes(marker));
@@ -46463,7 +46500,7 @@ function startCommanderDaemon(options) {
   const statusDir = options.statusDir ?? commanderStatusDir();
   const statusFile = commanderStatusFile(options.runnerId, statusDir);
   const logFile = resolve8(
-    options.logFile ?? defaultCommanderLogFile(options.runnerId, statusDir)
+    options.logFile ?? defaultCommanderLogFile(options.runnerId)
   );
   const entrypoint = options.entrypoint ?? currentEntrypoint();
   const nodeBin = options.nodeBin ?? process.execPath;
@@ -58496,6 +58533,11 @@ function createLinzumiMcpApiClient(options) {
     getMessage: (params) => request("GET", `${apiPrefix}/message`, params),
     getThread: (params) => request("GET", `${apiPrefix}/thread`, params),
     getChannel: (params) => request("GET", `${apiPrefix}/channel`, params),
+    getCodingJobMetadata: (params) => request("GET", `${apiPrefix}/coding-job-metadata`, params),
+    upsertCodingJobPlan: (params) => request("POST", `${apiPrefix}/coding-job-plan`, params),
+    replaceCodingJobPlanSteps: (params) => request("POST", `${apiPrefix}/coding-job-plan/steps`, params),
+    updateCodingJobPlanStep: (params) => request("POST", `${apiPrefix}/coding-job-plan/step`, params),
+    linkCodingJobPullRequest: (params) => request("POST", `${apiPrefix}/coding-job-primary-pr`, params),
     listVaultSecrets: (params) => request("GET", `${apiPrefix}/vault-secrets`, params),
     sendChannelMessage: (params) => request("POST", `${apiPrefix}/channel-message`, params),
     prepareMessageUploads: (params) => request("POST", `${apiPrefix}/message-uploads/prepare`, params),
@@ -58573,6 +58615,16 @@ Tools:
   linzumi_get_message   Read one message by scoped seq or Linzumi message URL.
   linzumi_get_thread    Read one bounded thread by ID.
   linzumi_get_channel   Read bounded recent messages and channel metadata.
+  linzumi_get_coding_job_metadata
+                        Read the current coding job goal, plan, and workflow metadata.
+  linzumi_upsert_coding_job_plan
+                        Set or update the coding job goal.
+  linzumi_replace_coding_job_plan_steps
+                        Replace the ordered coding job plan steps.
+  linzumi_update_coding_job_plan_step
+                        Update one coding job plan step status or note.
+  linzumi_link_coding_job_pull_request
+                        Link the coding job to its primary GitHub pull request.
   linzumi_list_vault_secrets
                         List vault secret names, descriptions, and owner scope.
   linzumi_send_channel_message
@@ -58660,6 +58712,123 @@ async function runMcpServer(args) {
     },
     async (params) => mcpJsonResult(await client.getChannel(params))
   );
+  server.tool(
+    "linzumi_get_coding_job_metadata",
+    "Read the active coding job workflow metadata for a thread, including the agent-owned goal, ordered plan steps, step lock versions, and workflow status.",
+    {
+      thread_id: external_exports2.string().uuid().optional().describe(
+        "Linzumi thread UUID. Defaults to the active coding job thread."
+      )
+    },
+    async (params) => mcpJsonResult(
+      await client.getCodingJobMetadata(
+        paramsWithDefaultThread(params, defaultThreadId)
+      )
+    )
+  );
+  server.tool(
+    "linzumi_upsert_coding_job_plan",
+    "Set or update the current coding job goal. Use this at job start and whenever the goal changes materially.",
+    {
+      thread_id: external_exports2.string().uuid().optional().describe(
+        "Linzumi thread UUID. Defaults to the active coding job thread."
+      ),
+      goal: external_exports2.string().min(1).max(1e4).describe("Concrete user-visible goal for this coding job.")
+    },
+    async (params) => mcpJsonResult(
+      await client.upsertCodingJobPlan(
+        paramsWithDefaultThread(params, defaultThreadId)
+      )
+    )
+  );
+  server.tool(
+    "linzumi_replace_coding_job_plan_steps",
+    "Replace the ordered coding job plan steps. Use this for the initial plan and for substantial rewrites when the old plan no longer fits the work.",
+    {
+      thread_id: external_exports2.string().uuid().optional().describe(
+        "Linzumi thread UUID. Defaults to the active coding job thread."
+      ),
+      goal: external_exports2.string().min(1).max(1e4).optional().describe(
+        "Required when no plan exists yet; updates the current coding job goal."
+      ),
+      steps: external_exports2.array(
+        external_exports2.object({
+          title: external_exports2.string().min(1).max(255),
+          description: external_exports2.string().min(1).max(1e4),
+          status: external_exports2.enum([
+            "pending",
+            "active",
+            "completed",
+            "blocked",
+            "canceled"
+          ]),
+          status_note: external_exports2.string().min(1).max(4e3).optional(),
+          completed_debrief: external_exports2.string().min(1).max(2e4).optional()
+        })
+      ).min(1).max(50).describe(
+        "Ordered user-visible plan steps. Completed steps must include completed_debrief."
+      )
+    },
+    async (params) => mcpJsonResult(
+      await client.replaceCodingJobPlanSteps(
+        paramsWithDefaultThread(params, defaultThreadId)
+      )
+    )
+  );
+  server.tool(
+    "linzumi_update_coding_job_plan_step",
+    "Update one coding job plan step status or note. Read metadata first and pass the current step lock_version.",
+    {
+      thread_id: external_exports2.string().uuid().optional().describe(
+        "Linzumi thread UUID. Defaults to the active coding job thread."
+      ),
+      step_id: external_exports2.string().uuid().describe("Step id returned by linzumi_get_coding_job_metadata."),
+      lock_version: external_exports2.number().int().positive().describe("Current step lock_version from metadata."),
+      status: external_exports2.enum(["pending", "active", "completed", "blocked", "canceled"]),
+      status_note: external_exports2.string().min(1).max(4e3).optional(),
+      completed_debrief: external_exports2.string().min(1).max(2e4).optional().describe("Required when marking a step completed.")
+    },
+    async (params) => mcpJsonResult(
+      await client.updateCodingJobPlanStep(
+        paramsWithDefaultThread(params, defaultThreadId)
+      )
+    )
+  );
+  server.tool(
+    "linzumi_link_coding_job_pull_request",
+    "Link the active coding job to its primary GitHub pull request so PR comments, files, commits, checks, deployments, and reviews can flow into the metadata view.",
+    {
+      thread_id: external_exports2.string().uuid().optional().describe(
+        "Linzumi thread UUID. Defaults to the active coding job thread."
+      ),
+      github_repo_owner: external_exports2.string().min(1).max(255),
+      github_repo_name: external_exports2.string().min(1).max(255),
+      github_pr_number: external_exports2.number().int().positive(),
+      github_pr_url: external_exports2.string().url(),
+      title: external_exports2.string().min(1).max(255),
+      body: external_exports2.string().min(1).max(1e5).optional(),
+      head_branch: external_exports2.string().min(1).max(255),
+      head_sha: external_exports2.string().min(7).max(64),
+      base_branch: external_exports2.string().min(1).max(255),
+      base_sha: external_exports2.string().min(7).max(64),
+      state: external_exports2.enum(["draft", "open", "closed", "merged"]).optional(),
+      is_draft: external_exports2.boolean().optional(),
+      review_status: external_exports2.enum(["unknown", "review_required", "approved", "changes_requested"]).optional(),
+      source_remote_url: external_exports2.string().min(1).max(1e3).describe(
+        "Git remote URL for the local job worktree; required when this job has no repo workspace yet."
+      ),
+      runtime_worktree_root: external_exports2.string().min(1).max(1e3).describe(
+        "Absolute local worktree path for the coding job; required when this job has no repo workspace yet."
+      ),
+      dirty_status: external_exports2.enum(["unknown", "clean", "dirty"]).optional(),
+      dirty_summary: external_exports2.string().min(1).max(2e3).optional()
+    },
+    async (params) => mcpJsonResult(
+      await client.linkCodingJobPullRequest(
+        paramsWithDefaultThread(params, defaultThreadId)
+      )
+    )
+  );
   server.tool(
     "linzumi_upload_files",
     "Upload local files to Linzumi and attach them to a new, exact, or latest assistant message. Use silently; do not mention this tool in the visible reply.",
@@ -58957,6 +59126,13 @@ function targetWithDefaultThread(target, defaultThreadId) {
       return target;
   }
 }
+function paramsWithDefaultThread(params, defaultThreadId) {
+  const existingThreadId = stringValue(params.thread_id);
+  if (existingThreadId !== void 0 || defaultThreadId === void 0) {
+    return params;
+  }
+  return { ...params, thread_id: defaultThreadId };
+}
 function resolveLinzumiUploadUrl(kandanUrl, uploadUrl) {
   try {
     return new URL(uploadUrl).toString();
@@ -59557,6 +59733,7 @@ async function main(args) {
         await runSignupFlow2({
           forceSignup: options.forceSignup,
           serviceUrl: options.serviceUrl,
+          codeServerBin: options.codeServerBin,
           openBrowser: false,
           debugLaunchPayload: options.debugLaunchPayload,
           signupServerClient: false
@@ -59575,6 +59752,7 @@ async function main(args) {
         await runSignupFlow2({
           forceSignup: options.forceSignup,
           serviceUrl: options.serviceUrl,
+          codeServerBin: options.codeServerBin,
           openBrowser: options.openBrowser,
           debugLaunchPayload: options.debugLaunchPayload
         });
@@ -59741,7 +59919,7 @@ function runPathsCommand(args) {
       if (pathValue === void 0 || pathValue.trim() === "") {
         throw new Error("missing path for linzumi paths add");
       }
-      const trustedPath = realpathSync6(resolve10(expandUserPath(pathValue)));
+      const trustedPath = realpathSync7(resolve10(expandUserPath(pathValue)));
       if (linzumiUrl === void 0) {
         addAllowedCwd(pathValue);
       } else {
@@ -60628,7 +60806,7 @@ Codex:
   --approval-policy <value>   Approval-policy metadata shown in Linzumi
   --stream-flush-ms <ms>      Batch live Codex deltas before Linzumi persistence, default 150
   --fast                      Mark this runner as low-latency/fast in the availability message
-  --log-file <path>           JSONL event log path, default ~/.linzumi/logs/runner-events.jsonl
+  --log-file <path>           JSONL event log path, default ~/.linzumi/logs/linzumi-runner.log
   --allowed-cwd <paths>       Extra comma-separated roots where Linzumi may start local Codex sessions
   --forward-port <ports>      Comma-separated local TCP ports Linzumi may expose as authenticated previews
   --code-server-bin <path>    Custom development code-server executable. The default editor runtime is downloaded from Linzumi.
@@ -60710,7 +60888,7 @@ What it does:
 Options:
   --api-url <url>             Linzumi API URL used to select the stored scoped runner id
   --status-dir <path>         Status directory, default ~/.linzumi/commanders
-  --log-file <path>           Commander log path, default in the status dir
+  --log-file <path>           Commander log path, default ~/.linzumi/logs/<runner-id>.log
   --timeout-ms <ms>           Wait timeout, default 30000
 
 All normal Commander options such as --agent-token-file, --allowed-cwd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@linzumi/cli",
-  "version": "0.0.75-beta",
+  "version": "0.0.77-beta",
   "description": "Linzumi CLI — point a Codex agent at the real code on your laptop, with your team watching and steering from shared threads.",
   "type": "module",
   "bin": {