@nac3/forge-cli 0.2.0-alpha.9 → 1.0.0

package/dist/commands/mobile.js

@@ -2,8 +2,8 @@ import { c, header } from '../ui/colors.js';
 import { Vault } from '../vault/store.js';
 import { configDir } from '../license/index.js';
 import { readLicense } from '../core/polar.js';
-import { encryptPairing, envelopeToQrString, generatePairingCode, validatePairingCode, } from '../core/pairing.js';
-const SECRET_SLOT = 'yf_server_api_key';
+import { deriveHandleKey, HANDLE_KEY_SLOT, ROOT_KEY_SLOT } from '../license/handle_key.js';
+import { encodePairingQr, } from '../core/pairing.js';
 export function registerMobileCommand(program) {
     const mobile = program
         .command('mobile')
@@ -17,74 +17,81 @@ export function registerMobileCommand(program) {
         .option('--json', 'emit machine-readable JSON (no ascii QR)')
         .action(async (opts) => { await runMobilePair(opts); });
 }
-export async function runMobilePair(opts) {
-    /* 1. Pull the server API key from the vault. */
-    let serverApiKey;
+/** Pure-ish builder: read vault secret + license handle, build +
+ *  encrypt the payload, return the code + QR string. No console
+ *  output -- callers (CLI + panel) render. */
+export async function assemblePairing(opts) {
+    /* 1. User handle from the local license (needed to derive the key). */
+    const lic = await readLicense();
+    const handle = lic.user_handle;
+    if (!handle) {
+        return { ok: false, error: 'No user_handle on the local license cache.', hint: 'yf license activate --user-handle <you@example.com>' };
+    }
+    /* 2. PND-047 -- the phone gets the PER-HANDLE key, never the global
+     * root. Prefer the migrated `yf_handle_key`; otherwise derive it from
+     * the legacy root. The phone stores it as its signing secret and emits
+     * v2 bearers; it never learns the root, so it cannot impersonate other
+     * handles. */
+    let pairingKey;
     try {
         const vault = await Vault.open({ configDir: configDir() });
-        if (!vault.has(SECRET_SLOT)) {
-            console.error(c.error('Vault slot "' + SECRET_SLOT + '" is empty.'));
-            console.error('  Run ' + c.code('yf vault set ' + SECRET_SLOT)
-                + ' with the value the parent server issued.');
-            process.exitCode = 1;
-            return;
+        if (vault.has(HANDLE_KEY_SLOT)) {
+            pairingKey = vault.get(HANDLE_KEY_SLOT);
+        }
+        else if (vault.has(ROOT_KEY_SLOT)) {
+            pairingKey = deriveHandleKey(vault.get(ROOT_KEY_SLOT), handle);
+        }
+        else {
+            return { ok: false, error: 'Vault has no worker auth key.', hint: 'yf vault set ' + ROOT_KEY_SLOT };
         }
-        serverApiKey = vault.get(SECRET_SLOT);
     }
     catch (err) {
-        console.error(c.error(err instanceof Error ? err.message : String(err)));
-        process.exitCode = 1;
-        return;
-    }
-    /* 2. Pull the user handle from the local Polar license. */
-    const lic = await readLicense();
-    const handle = lic.user_handle;
-    if (!handle) {
-        console.error(c.error('No user_handle on the local license cache.'));
-        console.error('  Run ' + c.code('yf license activate --user-handle <you@example.com>') + ' first.');
-        process.exitCode = 1;
-        return;
-    }
-    /* 3. Build the code + payload. */
-    let code = opts.code ?? generatePairingCode();
-    if (!validatePairingCode(code)) {
-        console.error(c.error('--code must be exactly 6 digits.'));
-        process.exitCode = 1;
-        return;
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
     }
+    /* 3. Payload (Option 3 -- code-less: the QR carries it directly). */
     const ttlMinutes = opts.ttl ? Number.parseFloat(opts.ttl) : 5;
     if (!Number.isFinite(ttlMinutes) || ttlMinutes <= 0 || ttlMinutes > 60) {
-        console.error(c.error('--ttl must be a positive number of minutes <= 60.'));
-        process.exitCode = 1;
-        return;
+        return { ok: false, error: 'ttl must be a positive number of minutes <= 60.' };
     }
     const expires = new Date(Date.now() + ttlMinutes * 60 * 1000).toISOString();
     const payload = {
         user_handle: handle,
-        server_api_key: serverApiKey,
+        /* PND-047 -- the PER-HANDLE key (never the global root); the phone
+         * stores it in its handle-key slot and signs v2 bearers. */
+        server_api_key: pairingKey,
+        key_kind: 'handle',
         hito4_base_url: opts.baseUrl ?? 'https://prompts.yujin.app',
         expires_at: expires,
     };
-    const envelope = await encryptPairing(payload, code);
-    const qrString = envelopeToQrString(envelope);
-    /* 4. Render. */
+    return { ok: true, qr: encodePairingQr(payload), expires_at: expires };
+}
+export async function runMobilePair(opts) {
+    const built = await assemblePairing(opts);
+    if (!built.ok) {
+        console.error(c.error(built.error ?? 'pairing failed'));
+        if (built.hint)
+            console.error('  Run ' + c.code(built.hint) + ' first.');
+        process.exitCode = 1;
+        return;
+    }
+    const expires = built.expires_at;
+    const qrString = built.qr;
+    /* 4. Render (Option 3 -- code-less: scan the QR, done). */
     if (opts.json) {
         process.stdout.write(JSON.stringify({
-            ok: true, code, expires_at: expires, qr: qrString,
+            ok: true, expires_at: expires, qr: qrString,
         }, null, 2) + '\n');
         return;
     }
     header('Yujin Forge -- pair a mobile device');
     console.log('');
-    console.log('  Code:        ' + c.brand(code));
     console.log('  Expires at:  ' + c.dim(expires));
     console.log('  QR payload:  ' + c.dim(qrString));
     console.log('');
     console.log(c.dim('On the phone:'));
     console.log(c.dim('  1. Open the Forge mobile app.'));
-    console.log(c.dim('  2. Tap "Pair with laptop" -> Scan QR.'));
-    console.log(c.dim('  3. Enter the 6-digit code above.'));
+    console.log(c.dim('  2. Tap "Pair with laptop" -> Scan QR. Done.'));
     console.log('');
-    console.log(c.warn('  The code + QR rotate. Keep them on screen only while the mobile is reading.'));
+    console.log(c.warn('  The QR carries your session for 5 min. Keep it on screen only while the mobile is reading.'));
 }
 //# sourceMappingURL=mobile.js.map

package/dist/commands/mobile.js.map

@@ -1 +1 @@
-{"version":3,"file":"mobile.js","sourceRoot":"","sources":["../../src/commands/mobile.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,GAE7E,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,GAAG,mBAAmB,CAAC;AASxC,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0DAA0D,CAAC,CAAC;IAE3E,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,eAAe,EAAM,uCAAuC,CAAC;SACpE,MAAM,CAAC,iBAAiB,EAAI,wCAAwC,CAAC;SACrE,MAAM,CAAC,kBAAkB,EAAG,kDAAkD,CAAC;SAC/E,MAAM,CAAC,QAAQ,EAAa,0CAA0C,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,gDAAgD;IAChD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC;kBAC1D,2CAA2C,CAAC,CAAC;YACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,2DAA2D;IAC3D,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,GAAG,SAAS,CAAC,CAAC;QACpG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,kCAAkC;IAClC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;IAC9C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAmB;QAC9B,WAAW,EAAE,MAAM;QACnB,cAAc,EAAE,YAAY;QAC5B,cAAc,EAAE,IAAI,CAAC,OAAO,IAAI,2BAA2B;QAC3D,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAE9C,gBAAgB;IAChB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ;SAClD,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC,CAAC;AACvG,CAAC"}
+{"version":3,"file":"mobile.js","sourceRoot":"","sources":["../../src/commands/mobile.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EACL,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAS5B,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0DAA0D,CAAC,CAAC;IAE3E,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,eAAe,EAAM,uCAAuC,CAAC;SACpE,MAAM,CAAC,iBAAiB,EAAI,wCAAwC,CAAC;SACrE,MAAM,CAAC,kBAAkB,EAAG,kDAAkD,CAAC;SAC/E,MAAM,CAAC,QAAQ,EAAa,0CAA0C,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAcD;;8CAE8C;AAC9C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,uEAAuE;IACvE,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,IAAI,EAAE,qDAAqD,EAAE,CAAC;IACzI,CAAC;IACD;;;;kBAIc;IACd,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,eAAe,GAAG,aAAa,EAAE,CAAC;QACtG,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,qEAAqE;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAmB;QAC9B,WAAW,EAAE,MAAM;QACnB;oEAC4D;QAC5D,cAAc,EAAE,UAAU;QAC1B,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,IAAI,CAAC,OAAO,IAAI,2BAA2B;QAC3D,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAW,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAG,CAAC;IAE3B,2DAA2D;IAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ;SAC5C,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,8FAA8F,CAAC,CAAC,CAAC;AACtH,CAAC"}

package/dist/commands/nac3.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `yf nac3 ...` -- NAC-3 v3.x backend tools CLI (task #23 slice 3).
+ *
+ * Subcommands:
+ *   yf nac3 list-backend-tools             Show app.* tools declared
+ *                                          in this project's
+ *                                          yujin.forge.json
+ *                                          nac3_backend.tools[].
+ *   yf nac3 invoke-backend-tool <id> [--args <json>]
+ *                                          Manually invoke one tool
+ *                                          for testing (skips the
+ *                                          chat panel). Reads Vault
+ *                                          auth + sends HTTP +
+ *                                          prints response.
+ *   yf nac3 validate                       Parse + report errors
+ *                                          without invoking anything.
+ *
+ * ASCII-only.
+ */
+import { Command } from 'commander';
+export declare function registerNac3Command(program: Command): void;
+//# sourceMappingURL=nac3.d.ts.map

package/dist/commands/nac3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nac3.d.ts","sourceRoot":"","sources":["../../src/commands/nac3.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAoH1D"}

package/dist/commands/nac3.js

@@ -0,0 +1,125 @@
+import { loadBackendCatalogue, buildBackendToolStub } from '../nac3/backend_tools.js';
+export function registerNac3Command(program) {
+    const nac3 = program
+        .command('nac3')
+        .description('NAC-3 v3.x backend tools (task #23): inspect + invoke app.* tools declared by your project.');
+    nac3
+        .command('list-backend-tools')
+        .description('List the app.* backend tools declared in yujin.forge.json:nac3_backend.tools[].')
+        .option('--json', 'emit JSON instead of formatted output')
+        .action(async (opts) => {
+        const projectRoot = process.cwd();
+        const parsed = await loadBackendCatalogue(projectRoot);
+        if (opts.json) {
+            console.log(JSON.stringify(parsed, null, 2));
+            return;
+        }
+        if (parsed.errors.length > 0) {
+            console.error('Errors in nac3_backend section:');
+            for (const e of parsed.errors)
+                console.error('  - ' + e);
+        }
+        if (!parsed.catalogue) {
+            console.log('No nac3_backend section found in yujin.forge.json at ' + projectRoot + '.');
+            console.log('See docs/NAC3_SPEC_V3_BACKEND_TOOLS.md to declare app.* tools.');
+            if (parsed.warnings.length > 0) {
+                for (const w of parsed.warnings)
+                    console.warn('  warning: ' + w);
+            }
+            return;
+        }
+        const c = parsed.catalogue;
+        console.log('Backend catalogue:');
+        console.log('  base_url: ' + c.base_url);
+        console.log('  auth:     ' + c.auth.kind + (c.auth.vault_slot ? ' (vault: ' + c.auth.vault_slot + ')' : ''));
+        console.log('  tools:    ' + c.tools.length);
+        console.log('');
+        if (c.tools.length === 0) {
+            console.log('  (no tools declared)');
+            return;
+        }
+        console.log('Stubs (as they appear in the LLM prompt):');
+        for (const t of c.tools) {
+            console.log('  ' + buildBackendToolStub(t));
+        }
+        if (parsed.warnings.length > 0) {
+            console.log('');
+            for (const w of parsed.warnings)
+                console.warn('  warning: ' + w);
+        }
+    });
+    nac3
+        .command('invoke-backend-tool <tool_id>')
+        .description('Invoke one app.* tool manually for testing. Skips the chat panel; reads Vault auth + sends HTTP + prints response.')
+        .option('--args <json>', 'JSON-encoded args object', '{}')
+        .option('--no-redact', 'do NOT redact the printed response (default: redact)')
+        .action(async (toolId, opts) => {
+        const projectRoot = process.cwd();
+        const parsed = await loadBackendCatalogue(projectRoot);
+        if (!parsed.catalogue) {
+            console.error('error: no nac3_backend section in yujin.forge.json');
+            if (parsed.errors.length > 0) {
+                for (const e of parsed.errors)
+                    console.error('  - ' + e);
+            }
+            process.exit(1);
+        }
+        let parsedArgs;
+        try {
+            parsedArgs = JSON.parse(opts.args);
+            if (typeof parsedArgs !== 'object' || parsedArgs === null) {
+                throw new Error('args must be a JSON object');
+            }
+        }
+        catch (e) {
+            console.error('error: --args must be a valid JSON object: ' + (e instanceof Error ? e.message : String(e)));
+            process.exit(1);
+        }
+        const { runAppBackendTool } = await import('../chat/tools/app_backend_dispatch.js');
+        const r = await runAppBackendTool({
+            toolId,
+            args: parsedArgs,
+            baseEntry: {
+                trace_id: 'cli_' + Date.now(),
+                forge_version: '0.2.0',
+                manifest_version: 'v1',
+            },
+            startedAt: Date.now(),
+            projectRoot,
+        });
+        if (r.is_error) {
+            console.error(JSON.stringify(r.result, null, 2));
+            process.exit(1);
+        }
+        console.log(JSON.stringify(r.result, null, 2));
+    });
+    nac3
+        .command('validate')
+        .description('Parse yujin.forge.json + report any nac3_backend errors. No HTTP.')
+        .action(async () => {
+        const projectRoot = process.cwd();
+        const parsed = await loadBackendCatalogue(projectRoot);
+        if (parsed.errors.length === 0 && parsed.warnings.length === 0) {
+            if (parsed.catalogue) {
+                console.log('OK: nac3_backend parsed cleanly. ' + parsed.catalogue.tools.length + ' tool(s).');
+            }
+            else {
+                console.log('OK: no nac3_backend section declared (this is fine; v3.0 default).');
+            }
+            return;
+        }
+        if (parsed.errors.length > 0) {
+            console.error('Errors:');
+            for (const e of parsed.errors)
+                console.error('  - ' + e);
+        }
+        if (parsed.warnings.length > 0) {
+            console.warn('Warnings:');
+            for (const w of parsed.warnings)
+                console.warn('  - ' + w);
+        }
+        if (parsed.errors.length > 0)
+            process.exit(1);
+    });
+}
+//# sourceMappingURL=nac3.js.map

package/dist/commands/nac3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nac3.js","sourceRoot":"","sources":["../../src/commands/nac3.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEtF,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6FAA6F,CAAC,CAAC;IAE9G,IAAI;SACD,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,iFAAiF,CAAC;SAC9F,MAAM,CAAC,QAAQ,EAAE,uCAAuC,CAAC;SACzD,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,uDAAuD,GAAG,WAAW,GAAG,GAAG,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7G,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,+BAA+B,CAAC;SACxC,WAAW,CAAC,oHAAoH,CAAC;SACjI,MAAM,CAAC,eAAe,EAAE,0BAA0B,EAAE,IAAI,CAAC;SACzD,MAAM,CAAC,aAAa,EAAE,sDAAsD,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAuC,EAAE,EAAE;QACxE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,6CAA6C,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC;YAChC,MAAM;YACN,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE;gBACT,QAAQ,EAAS,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE;gBACpC,aAAa,EAAI,OAAO;gBACxB,gBAAgB,EAAE,IAAI;aACvB;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;YACjG,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/onboard.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `yf onboard` -- guided, zero-friction first run.
+ *
+ * The single command a new user runs. It follows the canonical
+ * sequence: validate the license (auto-synced from Polar) FIRST, then
+ * help the user configure the minimum BYOK key. Forge automates every
+ * step it can and only stops for the two things that genuinely need the
+ * user: paying, and pasting their own provider key. When attached to a
+ * TTY it launches the matching sub-command inline so the user never has
+ * to discover the next step.
+ *
+ * ASCII-only.
+ */
+import type { Command } from 'commander';
+/** A usable brain = any BYOK provider key OR the Claude "Plan" mode
+ *  (subscription auth, which needs no API key). */
+export declare function hasBrainConfigured(): Promise<boolean>;
+export declare function registerOnboardCommand(program: Command): void;
+//# sourceMappingURL=onboard.d.ts.map

package/dist/commands/onboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.d.ts","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUzC;mDACmD;AACnD,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAa3D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2D7D"}

package/dist/commands/onboard.js

@@ -0,0 +1,126 @@
+import { spawnSync } from 'node:child_process';
+import { c, header } from '../ui/colors.js';
+import { ensureLicenseFresh } from '../license/auto_sync.js';
+import { readLicense as readPolarLicense, isActive as isPolarActive } from '../core/polar.js';
+import { readAllPlaintext } from '../core/provider_keys.js';
+import { readBrainConfig } from '../core/brain_config.js';
+import { computeOnboardingStep, onboardingGuidance } from '../onboarding/next_step.js';
+import { askConcierge } from '../onboarding/concierge_client.js';
+/** A usable brain = any BYOK provider key OR the Claude "Plan" mode
+ *  (subscription auth, which needs no API key). */
+export async function hasBrainConfigured() {
+    try {
+        const keys = await readAllPlaintext();
+        const brainSlots = ['anthropic_api_key', 'openai_api_key', 'google_ai_key', 'deepseek_api_key'];
+        if (brainSlots.some((s) => typeof keys[s] === 'string' && keys[s].length > 0)) {
+            return true;
+        }
+    }
+    catch { /* vault not ready -> treat as no key */ }
+    try {
+        const cfg = await readBrainConfig();
+        if (cfg.anthropic_mode === 'plan')
+            return true;
+    }
+    catch { /* no brain config yet */ }
+    return false;
+}
+export function registerOnboardCommand(program) {
+    program
+        .command('onboard')
+        .description('Guided first-run setup: validate your license (auto-synced) then configure your AI key.')
+        .option('--no-run', 'only print the next step; do not launch the sub-command')
+        .action(async (opts) => {
+        header('Yujin Forge -- setup');
+        console.log('');
+        console.log(c.dim('  Validating your license...'));
+        await ensureLicenseFresh({ force: true });
+        const polar = await readPolarLicense();
+        const hasLicense = isPolarActive(polar);
+        const hasBrain = await hasBrainConfigured();
+        const step = computeOnboardingStep({ hasLicense, hasBrain });
+        const g = onboardingGuidance(step);
+        console.log('');
+        console.log('  ' + c.info(g.title));
+        for (const line of g.lines)
+            console.log('  ' + c.dim(line));
+        console.log('');
+        if (step === 'ready') {
+            console.log('  ' + c.success('All set. Launch the panel: ') + c.code(g.command));
+            return;
+        }
+        console.log('  ' + c.dim('Next: ') + c.code(g.command));
+        const canRun = opts.run !== false && Boolean(process.stdin.isTTY) && Boolean(process.stdout.isTTY);
+        if (!canRun)
+            return;
+        /* When the license is active but the brain is not configured, offer
+         * the bounded concierge to guide BYOK setup before we drop the user
+         * into `yf keys setup`. License-gated + $1-capped on the worker. */
+        if (step === 'setup-keys') {
+            const prompts = (await import('prompts')).default;
+            const wants = await prompts({
+                type: 'confirm', name: 'go',
+                message: 'Want Yujin to guide you through picking + adding your key?',
+                initial: true,
+            });
+            if (wants.go)
+                await runConciergeChat();
+        }
+        /* Launch the matching sub-command inline, reusing this same binary
+         * so the flow stays DRY (no duplicated activate / keys logic). */
+        const sub = step === 'activate' ? ['license', 'activate'] : ['keys', 'setup'];
+        const entry = process.argv[1];
+        if (!entry)
+            return;
+        console.log('');
+        spawnSync(process.execPath, [entry, ...sub], { stdio: 'inherit' });
+        /* After keys setup, a fresh user is ready; nudge to chat. */
+        if (step === 'setup-keys') {
+            console.log('');
+            console.log('  ' + c.success('Done. Launch the panel: ') + c.code('yf chat'));
+        }
+    });
+}
+/** Interactive concierge loop. Bounded by the worker ($1/handle cap +
+ *  license gate); here we just relay the chat. Ends on an empty line, a
+ *  budget refusal, or a network error. */
+async function runConciergeChat() {
+    const prompts = (await import('prompts')).default;
+    const convo = [];
+    console.log('');
+    console.log('  ' + c.info('Yujin setup concierge') + c.dim('  (enter to skip)'));
+    /* Seed with a first question so the concierge opens with guidance. */
+    let first = true;
+    for (let turn = 0; turn < 12; turn++) {
+        const q = await prompts({
+            type: 'text', name: 'msg',
+            message: first ? 'Ask anything about setup (or enter to skip)' : 'You',
+        });
+        const text = String(q.msg ?? '').trim();
+        if (!text)
+            break;
+        first = false;
+        convo.push({ role: 'user', content: text });
+        const reply = await askConcierge(convo);
+        if (!reply.ok) {
+            if (reply.error === 'onboard_budget_exhausted') {
+                console.log('  ' + c.warn(reply.message || 'Setup help budget used. You are ready to add your own key.'));
+            }
+            else if (reply.error === 'no_active_license') {
+                console.log('  ' + c.warn(reply.message || 'The concierge needs an active license.'));
+            }
+            else {
+                console.log('  ' + c.dim('(concierge unavailable: ' + (reply.message || reply.error) + ')'));
+            }
+            break;
+        }
+        convo.push({ role: 'assistant', content: reply.text });
+        console.log('');
+        console.log('  ' + c.success('Yujin: ') + reply.text);
+        if (typeof reply.remaining_usd === 'number') {
+            console.log('  ' + c.dim('  (help budget left: $' + reply.remaining_usd.toFixed(2) + ')'));
+        }
+        console.log('');
+    }
+}
+//# sourceMappingURL=onboard.js.map

package/dist/commands/onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAAE,YAAY,EAAyB,MAAM,mCAAmC,CAAC;AAExF;mDACmD;AACnD,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAChG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,IAAI,CAAC,CAAC,CAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,cAAc,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,yFAAyF,CAAC;SACtG,MAAM,CAAC,UAAU,EAAE,yDAAyD,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE;QACxC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACnD,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB;;4EAEoE;QACpE,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;gBAC1B,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI;gBAC3B,OAAO,EAAE,4DAA4D;gBACrE,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,EAAE;gBAAE,MAAM,gBAAgB,EAAE,CAAC;QACzC,CAAC;QAED;0EACkE;QAClE,MAAM,GAAG,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEnE,6DAA6D;QAC7D,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;0CAE0C;AAC1C,KAAK,UAAU,gBAAgB;IAC7B,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAClD,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACjF,sEAAsE;IACtE,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC;YACtB,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;YACzB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,KAAK;SACvE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,MAAM;QACjB,KAAK,GAAG,KAAK,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,KAAK,CAAC,KAAK,KAAK,0BAA0B,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,4DAA4D,CAAC,CAAC,CAAC;YAC5G,CAAC;iBAAM,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,wCAAwC,CAAC,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,0BAA0B,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/operate.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `yf operate <verb>` -- Phase VI + cross-cutting of
+ * PRODUCT_WORKFLOW.md.
+ *
+ * Verbs (all thin shells -- they persist state + emit
+ * scaffolding markers; deeper implementations land in follow-up
+ * commits):
+ *
+ *   yf operate deploy-guided      step 16 -- guided deploy + smoke
+ *   yf operate manual-generate    step 17 -- generate per-locale manual
+ *   yf operate metrics            step 17 -- observability dashboards setup
+ *   yf operate iterate <type>     step 18 -- classify + route a new requirement
+ *   yf operate costs              cross-cutting 8.2
+ *   yf operate handoff            cross-cutting 8.5
+ *   yf operate backup-setup       cross-cutting 8.6
+ *   yf operate restore-drill      cross-cutting 8.6
+ *
+ * ASCII-only.
+ */
+import type { Command } from 'commander';
+export declare function registerOperateCommand(program: Command): void;
+//# sourceMappingURL=operate.d.ts.map

package/dist/commands/operate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operate.d.ts","sourceRoot":"","sources":["../../src/commands/operate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmczC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwE7D"}