@namzu/cli 10.0.0 → 12.0.0

package/dist/config/load.js

@@ -23,7 +23,18 @@ import { join, resolve } from 'node:path';
 import { parse as yamlParse } from 'yaml';
 import { isFormatName } from '../output/index.js';
 import { DEFAULT_CONFIG } from './schema.js';
-export function loadConfig(opts = {}) {
+/**
+ * `loadConfig` plus the record of who won each key.
+ *
+ * A second entry point rather than widening `loadConfig` itself:
+ * `loadConfig` is exported from `../index.js` for embedded consumers, and
+ * `(opts?: LoadConfigOptions) => NamzuCliConfig` is a signature something out
+ * there may already depend on. `loadConfig` below is now defined in terms of
+ * this function precisely so the two cannot drift apart — there is one merge
+ * to reason about, not two copies of the same precedence logic kept in sync
+ * by hand.
+ */
+export function loadConfigWithProvenance(opts = {}) {
     const home = opts.home ?? homedir();
     const cwd = opts.cwd ?? process.cwd();
     const env = opts.env ?? process.env;
@@ -31,8 +42,25 @@ export function loadConfig(opts = {}) {
     const projectPath = resolve(cwd, 'namzu.config.json');
     const userCfg = readYamlIfExists(userPath);
     const projectCfg = readJsonIfExists(projectPath);
-    const envCfg = readEnv(env);
-    return mergeConfigs(DEFAULT_CONFIG, userCfg, projectCfg, envCfg);
+    const { config: envCfg, variables: envVariables } = readEnv(env);
+    return mergeConfigs(constantLayer(DEFAULT_CONFIG, { kind: 'default' }), constantLayer(userCfg, { kind: 'user-file', path: userPath }), constantLayer(projectCfg, { kind: 'project-file', path: projectPath }), {
+        config: envCfg,
+        sourceFor: (key) => {
+            const variable = envVariables[key];
+            // `readEnv` sets `variables[key]` in the same branch it sets
+            // `config[key]` — see `ENV_VARIABLE_NAMES` — so this is defined
+            // for every key this layer's config actually carries. Reaching
+            // `undefined` here means that pairing broke, which is a bug in
+            // this file, not a malformed environment.
+            if (variable === undefined) {
+                throw new Error(`no env variable recorded for config key '${key}'`);
+            }
+            return { kind: 'env', variable };
+        },
+    });
+}
+export function loadConfig(opts = {}) {
+    return loadConfigWithProvenance(opts).config;
 }
 /**
  * A config file namzu could not read.
@@ -143,19 +171,108 @@ const CONFIG_READERS = {
     // connection is attempted. Dropping it here would turn a mistake the
     // operator can see into a server that silently was never there.
     mcpServers: (v) => typeof v === 'object' && v !== null && !Array.isArray(v) ? v : undefined,
+    // Read field by field rather than shape-only, unlike the two above.
+    // Those hand their entries to a compiler that reports a bad one by name;
+    // this one is consumed directly, and a misspelled `require_isolation` or
+    // a string where a list belongs would otherwise become "no requirement"
+    // — a security control silently downgraded by a typo, which is the
+    // failure this whole change exists to remove.
+    sandbox: (v) => {
+        if (typeof v !== 'object' || v === null || Array.isArray(v))
+            return undefined;
+        const raw = v;
+        const enabled = typeof raw.enabled === 'boolean' ? raw.enabled : undefined;
+        const requireIsolation = Array.isArray(raw.requireIsolation)
+            ? raw.requireIsolation.filter((c) => c === 'filesystem' || c === 'network' || c === 'process')
+            : undefined;
+        return {
+            ...(enabled !== undefined ? { enabled } : {}),
+            ...(requireIsolation !== undefined ? { requireIsolation } : {}),
+        };
+    },
+    // Field by field, for the same reason as `sandbox` and one stronger:
+    // this one decides whether conversation content leaves the machine. A
+    // misspelled `redacters` read shape-only would become "no redactors"
+    // while the export still ran — redaction silently off, which is the one
+    // outcome a config typo must not be able to produce. So a malformed
+    // `redactors` drops the WHOLE sessionExport rather than the key, and the
+    // boot disclosure then reads "off" instead of "on with nothing
+    // installed".
+    telemetry: (v) => {
+        if (typeof v !== 'object' || v === null || Array.isArray(v))
+            return undefined;
+        const raw = v;
+        if (raw.sessionExport === undefined)
+            return {};
+        const se = raw.sessionExport;
+        if (typeof se !== 'object' || se === null || Array.isArray(se))
+            return undefined;
+        const entry = se;
+        // No destination, no export. There is nothing to fall back to and
+        // nothing safe to guess.
+        if (typeof entry.destination !== 'string' || entry.destination.length === 0)
+            return undefined;
+        let eventTypes;
+        if (entry.eventTypes !== undefined) {
+            if (!Array.isArray(entry.eventTypes))
+                return undefined;
+            if (!entry.eventTypes.every((t) => typeof t === 'string'))
+                return undefined;
+            eventTypes = entry.eventTypes;
+        }
+        let redactors;
+        if (entry.redactors !== undefined) {
+            if (!Array.isArray(entry.redactors))
+                return undefined;
+            if (!entry.redactors.every((r) => r === 'secrets'))
+                return undefined;
+            redactors = entry.redactors;
+        }
+        return {
+            sessionExport: {
+                destination: entry.destination,
+                ...(eventTypes !== undefined ? { eventTypes } : {}),
+                ...(redactors !== undefined ? { redactors } : {}),
+            },
+        };
+    },
+};
+export const ENV_VARIABLE_NAMES = {
+    format: 'NAMZU_FORMAT',
+    quiet: 'NAMZU_QUIET',
+    permissions: undefined,
+    mcpServers: undefined,
+    sandbox: undefined,
+    // Deliberately not env-settable. A `NAMZU_TELEMETRY_SESSION_EXPORT=/tmp/x`
+    // in a shell profile would start exporting conversation content with
+    // nothing in the config file to show for it — the disclosure would be
+    // honest and the *reason* would be invisible.
+    telemetry: undefined,
 };
 function readEnv(env) {
-    const out = {};
-    const format = env.NAMZU_FORMAT;
-    if (format && isFormatName(format)) {
-        out.format = format;
+    const config = {};
+    const variables = {};
+    const formatVar = ENV_VARIABLE_NAMES.format;
+    if (formatVar) {
+        const format = env[formatVar];
+        if (format && isFormatName(format)) {
+            config.format = format;
+            variables.format = formatVar;
+        }
     }
-    const quiet = env.NAMZU_QUIET;
-    if (quiet === '1' || quiet === 'true')
-        out.quiet = true;
-    if (quiet === '0' || quiet === 'false')
-        out.quiet = false;
-    return out;
+    const quietVar = ENV_VARIABLE_NAMES.quiet;
+    if (quietVar) {
+        const quiet = env[quietVar];
+        if (quiet === '1' || quiet === 'true') {
+            config.quiet = true;
+            variables.quiet = quietVar;
+        }
+        if (quiet === '0' || quiet === 'false') {
+            config.quiet = false;
+            variables.quiet = quietVar;
+        }
+    }
+    return { config, variables };
 }
 function sanitize(value) {
     const v = value;
@@ -171,13 +288,32 @@ function sanitize(value) {
     }
     return out;
 }
-// Returns `MutableConfig`, which is assignable to `NamzuCliConfig` because it
-// is derived from it. No cast — a field this function cannot carry is now a
-// compile error rather than a value that quietly never arrives.
-function mergeConfigs(...sources) {
+function constantLayer(config, source) {
+    return { config, sourceFor: () => source };
+}
+/**
+ * Merges cascade layers lowest-precedence first onto `MutableConfig`, with no
+ * cast on the result — see that type's own doc comment for why the cast used
+ * to be the bug this shape prevents. Still a per-key loop rather than
+ * `Object.assign`, now for two reasons instead of one: the original reason (a
+ * key `MutableConfig` cannot carry must fail to compile, not vanish) plus
+ * recording `ConfigProvenance` in the same pass a key is written, so a key
+ * can never land in one map and not the other.
+ */
+function mergeConfigs(...layers) {
     const out = {};
-    for (const src of sources)
-        Object.assign(out, src);
-    return out;
+    const provenance = {};
+    for (const layer of layers) {
+        for (const key of Object.keys(layer.config)) {
+            // Same widened-view assignment as `sanitize`: a cast on the target,
+            // not the value, is what lets a generic key write onto a
+            // heterogeneous mapped type without silently dropping a field this
+            // function cannot carry.
+            ;
+            out[key] = layer.config[key];
+            provenance[key] = layer.sourceFor(key);
+        }
+    }
+    return { config: out, provenance };
 }
 //# sourceMappingURL=load.js.map

package/dist/config/load.js.map

@@ -1 +1 @@
-{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAA;AAGzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,OAAO,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AAWjE,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAErD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAE3B,OAAO,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACzC,wDAAwD;IAC/C,IAAI,CAAQ;IAErB,YAAY,IAAY,EAAE,OAAe,EAAE,OAA6B;QACvE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC3B,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC3B,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,aAAa,CAAC,IAAY;IAClC,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAI,KAAsC,EAAE,IAAI,CAAA;QAC1D,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAe;IACpD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACxB,IAAI,EACJ,GAAG,IAAI,6DAA6D,QAAQ,CAAC,MAAM,CAAC,EAAE,CACtF,CAAA;IACF,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC9D,CAAC;AA4BD,MAAM,cAAc,GAAkB;IACrC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,0EAA0E;IAC1E,uEAAuE;IACvE,sDAAsD;IACtD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAClB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAuB,CAAC,CAAC,CAAC,SAAS;IAChG,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAsB,CAAC,CAAC,CAAC,SAAS;CAC/F,CAAA;AAED,SAAS,OAAO,CAAC,GAAsB;IACtC,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAA;IAC/B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAA;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAA;IAC7B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAA;IACvD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,OAAO;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;IACzD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAA6B,EAAE,CAAC;QAC3E,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAE,SAAQ;QACzB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,mEAAmE;QACnE,iEAAiE;QACjE,IAAI,MAAM,KAAK,SAAS;YAAG,GAA+B,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;IACzE,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,gEAAgE;AAChE,SAAS,YAAY,CAAC,GAAG,OAAiC;IACzD,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAClD,OAAO,GAAG,CAAA;AACX,CAAC"}
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAA;AAGzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAGjD,OAAO,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AAuCjE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAA0B,EAAE;IAIpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAErD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;IAChD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAEhE,OAAO,YAAY,CAClB,aAAa,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAClD,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAC7D,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACtE;QACC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YAClC,6DAA6D;YAC7D,gEAAgE;YAChE,+DAA+D;YAC/D,+DAA+D;YAC/D,0CAA0C;YAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,GAAG,CAAC,CAAA;YACpE,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;QACjC,CAAC;KACD,CACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACtD,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACzC,wDAAwD;IAC/C,IAAI,CAAQ;IAErB,YAAY,IAAY,EAAE,OAAe,EAAE,OAA6B;QACvE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC3B,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC3B,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,aAAa,CAAC,IAAY;IAClC,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAI,KAAsC,EAAE,IAAI,CAAA;QAC1D,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,MAAe;IACpD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACxB,IAAI,EACJ,GAAG,IAAI,6DAA6D,QAAQ,CAAC,MAAM,CAAC,EAAE,CACtF,CAAA;IACF,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC9D,CAAC;AA4BD,MAAM,cAAc,GAAkB;IACrC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,0EAA0E;IAC1E,uEAAuE;IACvE,sDAAsD;IACtD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAClB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAuB,CAAC,CAAC,CAAC,SAAS;IAChG,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAsB,CAAC,CAAC,CAAC,SAAS;IAC/F,oEAAoE;IACpE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QAC7E,MAAM,GAAG,GAAG,CAAsD,CAAA;QAClE,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1E,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC3D,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAC3B,CAAC,CAAC,EAA6C,EAAE,CAChD,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,CACzD;YACF,CAAC,CAAC,SAAS,CAAA;QACZ,OAAO;YACN,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAA;IACF,CAAC;IACD,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,oEAAoE;IACpE,yEAAyE;IACzE,+DAA+D;IAC/D,cAAc;IACd,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QAC7E,MAAM,GAAG,GAAG,CAAgC,CAAA;QAC5C,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QAC9C,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAA;QAC5B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAA;QAChF,MAAM,KAAK,GAAG,EAA0E,CAAA;QAExF,kEAAkE;QAClE,yBAAyB;QACzB,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAE7F,IAAI,UAAyC,CAAA;QAC7C,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,OAAO,SAAS,CAAA;YACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC3E,UAAU,GAAG,KAAK,CAAC,UAA+B,CAAA;QACnD,CAAC;QAED,IAAI,SAA2D,CAAA;QAC/D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAA;YACrD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAA;YACpE,SAAS,GAAG,KAAK,CAAC,SAAiD,CAAA;QACpE,CAAC;QAED,OAAO;YACN,aAAa,EAAE;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD;SACD,CAAA;IACF,CAAC;CACD,CAAA;AAiBD,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IACnD,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,SAAS;IACtB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;IAClB,2EAA2E;IAC3E,qEAAqE;IACrE,sEAAsE;IACtE,8CAA8C;IAC9C,SAAS,EAAE,SAAS;CACpB,CAAA;AAKD,SAAS,OAAO,CAAC,GAAsB;IACtC,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,MAAM,SAAS,GAAqB,EAAE,CAAA;IAEtC,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAA;IAC3C,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;YACtB,SAAS,CAAC,MAAM,GAAG,SAAS,CAAA;QAC7B,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAA;IACzC,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;YACnB,SAAS,CAAC,KAAK,GAAG,QAAQ,CAAA;QAC3B,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;YACpB,SAAS,CAAC,KAAK,GAAG,QAAQ,CAAA;QAC3B,CAAC;IACF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAA6B,EAAE,CAAC;QAC3E,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAE,SAAQ;QACzB,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,mEAAmE;QACnE,iEAAiE;QACjE,IAAI,MAAM,KAAK,SAAS;YAAG,GAA+B,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;IACzE,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAgBD,SAAS,aAAa,CAAC,MAAqB,EAAE,MAAoB;IACjE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,GAAG,MAA8B;IAItD,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,UAAU,GAA6D,EAAE,CAAA;IAC/E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAA6B,EAAE,CAAC;YACzE,oEAAoE;YACpE,yDAAyD;YACzD,mEAAmE;YACnE,yBAAyB;YACzB,CAAC;YAAC,GAA+B,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC1D,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACvC,CAAC;IACF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;AACnC,CAAC"}

package/dist/config/schema.d.ts

@@ -30,6 +30,94 @@ export interface NamzuCliConfig {
      * means no external servers, which is what it meant before this existed.
      */
     readonly mcpServers?: McpServersConfig;
+    /**
+     * Isolation for the commands this CLI runs.
+     *
+     * Absent means ON. That is a change from every version before this one,
+     * where `sandboxProvider` appeared nowhere in this package and every
+     * tool call ran in the host process with the host environment — the
+     * isolation the documentation described held on no path at all.
+     *
+     * Named `sandbox` rather than `isolation` because the thing being
+     * configured is the sandbox; what it enforces is `requireIsolation`
+     * inside it, and collapsing the two would make "turn isolation off"
+     * ambiguous between "no sandbox" and "a sandbox that requires nothing".
+     */
+    readonly sandbox?: SandboxConfig;
+    /**
+     * Observability this CLI turns on for itself.
+     *
+     * Absent means none, which is what it meant before this existed —
+     * `sessionExport` in particular sends conversation content off the
+     * machine, so it is a thing an operator asks for by name and never
+     * something a default arranges.
+     */
+    readonly telemetry?: TelemetryConfig;
+}
+export interface TelemetryConfig {
+    /**
+     * Write this session's run events somewhere.
+     *
+     * The disclosure `@namzu/telemetry`'s `describeSessionExport` builds
+     * from this is printed at boot, because the operator configuring it and
+     * the person whose conversation leaves the machine are frequently not
+     * the same person.
+     */
+    readonly sessionExport?: SessionExportConfig;
+}
+export interface SessionExportConfig {
+    /**
+     * Absolute or cwd-relative path to a JSONL file, one record per line.
+     *
+     * A file, not a URL, and that is a limit rather than an oversight: a
+     * network destination needs retry, backpressure and a credential, and
+     * a CLI that shipped a half-built one would be offering an export that
+     * silently drops. A host that needs a collector builds a
+     * `SessionExportSink` and attaches the listener itself — that seam is
+     * the package's public surface.
+     */
+    readonly destination: string;
+    /**
+     * Which run event types to export. Absent means all of them.
+     *
+     * Not validated against the event union here: a name that matches no
+     * event exports nothing under it, and the boot disclosure prints the
+     * list verbatim, so a typo is visible rather than silently widening.
+     */
+    readonly eventTypes?: readonly string[];
+    /**
+     * Redactors to install, in order. `secrets` is the shipped one.
+     *
+     * An empty array means NO redaction, and it is spelled that way on
+     * purpose: omitting the key installs the default, so a config has to
+     * say `[]` to turn redaction off rather than reach it by forgetting.
+     */
+    readonly redactors?: readonly SessionExportRedactorName[];
+}
+/** The redactors this CLI can install by name. */
+export type SessionExportRedactorName = 'secrets';
+export interface SandboxConfig {
+    /**
+     * Run commands inside a sandbox. Default `true`.
+     *
+     * Setting it to `false` is a real choice with a real reason — a host
+     * that provides its own isolation, or a platform where the sandbox
+     * cannot start — and it is announced on startup rather than assumed.
+     * It is not a way to make a failing sandbox quiet.
+     */
+    readonly enabled?: boolean;
+    /**
+     * Controls this machine must actually enforce, or the CLI refuses to
+     * start.
+     *
+     * Empty by default, and the default is honest rather than safe: the
+     * available isolation differs per platform, so requiring anything by
+     * default would refuse to run on machines where the CLI works today.
+     * What the sandbox does and does not confine is reported on startup
+     * either way — an operator who needs a guarantee names it here and gets
+     * a refusal instead of a surprise.
+     */
+    readonly requireIsolation?: readonly ('filesystem' | 'network' | 'process')[];
 }
 export declare const DEFAULT_CONFIG: NamzuCliConfig;
 //# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;IAC5B,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CACtC;AAED,eAAO,MAAM,cAAc,EAAE,cAG3B,CAAA"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;IAC5B,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAA;IACtC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAA;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CACpC;AAED,MAAM,WAAW,eAAe;IAC/B;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAA;CAC5C;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAA;CACzD;AAED,kDAAkD;AAClD,MAAM,MAAM,yBAAyB,GAAG,SAAS,CAAA;AAEjD,MAAM,WAAW,aAAa;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC,EAAE,CAAA;CAC7E;AAED,eAAO,MAAM,cAAc,EAAE,cAG3B,CAAA"}

package/dist/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6BH,MAAM,CAAC,MAAM,cAAc,GAAmB,MAAM,CAAC,MAAM,CAAC;IAC3D,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,KAAK;CACZ,CAAC,CAAA"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyHH,MAAM,CAAC,MAAM,cAAc,GAAmB,MAAM,CAAC,MAAM,CAAC;IAC3D,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,KAAK;CACZ,CAAC,CAAA"}

package/dist/context/capabilities.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The tri-state probe for an optional package: not installed, installed and
+ * working, or installed and broken.
+ *
+ * Moved here from `doctor/checks/telemetry.ts`, where it was built once, for
+ * one package, and never generalised — so `namzu doctor` could tell a
+ * genuinely absent `@namzu/telemetry` from a broken one, but the BOOT PATH,
+ * which never called into `doctor/`, could not tell the same thing about
+ * `@namzu/sandbox`. A sandbox whose native binding fails to load in a
+ * container image resolves (`require.resolve` succeeds — the files are on
+ * disk) and then throws on import; with no probe at boot, that failure had
+ * no path to the operator except a stack trace from wherever the sandbox
+ * was first used, long after `namzu doctor` would have said `fail`.
+ *
+ * `probeOptionalPackage` and `probeCapabilities` are that probe, extracted
+ * so the doctor's checks and the boot narrative (NZ-BOOT-05) read the SAME
+ * answer instead of two implementations that can drift.
+ *
+ * ## Resolving and loading are asked separately, on purpose
+ *
+ * A `try { await import(pkg) } catch { present = false }` cannot tell "not
+ * installed" from "installed and broken" — both throw, and collapsing them
+ * silently turns a machine that would fail loudly into one that reports
+ * "optional, skip it" while running degraded with nothing in the log to say
+ * why. `an-optional-dependency-may-not-degrade-a-check` exists for exactly
+ * this shape of bug.
+ *
+ * A code check on the thrown error is not enough to separate them either: a
+ * TRANSITIVE dependency of the target package that cannot resolve raises
+ * `ERR_MODULE_NOT_FOUND` identically to the target package itself being
+ * missing, so matching the error code would report a broken installation as
+ * no installation. `require.resolve` asks only about THIS specifier — it
+ * either finds `specifier` on disk or it does not — so it separates the two
+ * questions by construction rather than by reading a message or a code that
+ * may be reworded or reused upstream.
+ *
+ *   - `require.resolve` throws           → not on disk at all → `absent`
+ *   - resolves, then `import()` throws   → on disk, unusable  → `broken`
+ *   - resolves, then `import()` succeeds → on disk, working   → `present`
+ */
+export type CapabilityProbe = {
+    readonly state: 'present';
+    readonly specifier: string;
+    readonly version: string;
+} | {
+    readonly state: 'absent';
+    readonly specifier: string;
+} | {
+    readonly state: 'broken';
+    readonly specifier: string;
+    readonly error: Error;
+};
+/**
+ * The optional packages namzu runs without. Listed once so the doctor's
+ * per-package checks, the boot narrative's `capability` line (NZ-BOOT-05),
+ * and this module's own tests all read the SAME set — a capability added
+ * here with no check wired to it is exactly the gap
+ * `doctor/checks/__tests__/index.test.ts` fails the build on.
+ */
+export declare const NAMZU_OPTIONAL_CAPABILITIES: readonly ["@namzu/sandbox", "@namzu/files", "@namzu/computer-use", "@namzu/telemetry"];
+/**
+ * The `DoctorCheck.id` a capability's probe is registered under —
+ * `@namzu/computer-use` → `computer-use.installed`, matching the id
+ * `telemetryInstalledCheck` already shipped under before this module
+ * existed. A function rather than a literal table so the registration site
+ * and the test that enumerates it derive the SAME id from the SAME rule;
+ * two hardcoded copies is how one of them goes stale.
+ */
+export declare function capabilityCheckId(specifier: string): string;
+export declare function probeOptionalPackage(specifier: string): Promise<CapabilityProbe>;
+/**
+ * Probe every optional capability namzu knows about.
+ *
+ * Re-exported from the package index as of NZ-BOOT-05: `createAgentSession`
+ * (`packages/cli/src/tui/agent.ts`) is its first consumer, calling it once
+ * per session and turning the tri-state result into the
+ * `namzu.capability.detected` / `.broken` rows of the boot narrative. Kept
+ * module-internal until that commit — an exported symbol with no caller is
+ * the shape `declared-but-undriven` is about — and joins the public surface
+ * in the same commit that consumes it, per that convention's own remedy.
+ *
+ * Never rejects: `probeOptionalPackage` already turns every resolve/import
+ * failure into a `broken` record rather than a thrown one, so this
+ * `Promise.all` has nothing to catch — a broken package can degrade what
+ * the boot narrative SAYS, never abort the boot itself.
+ */
+export declare function probeCapabilities(): Promise<readonly CapabilityProbe[]>;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/context/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/context/capabilities.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,MAAM,eAAe,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAA;AAElF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,wFAK9B,CAAA;AAEV;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG3D;AA6ED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA+BtF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAI7E"}

package/dist/context/capabilities.js

@@ -0,0 +1,160 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, isAbsolute, join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+/**
+ * The optional packages namzu runs without. Listed once so the doctor's
+ * per-package checks, the boot narrative's `capability` line (NZ-BOOT-05),
+ * and this module's own tests all read the SAME set — a capability added
+ * here with no check wired to it is exactly the gap
+ * `doctor/checks/__tests__/index.test.ts` fails the build on.
+ */
+export const NAMZU_OPTIONAL_CAPABILITIES = [
+    '@namzu/sandbox',
+    '@namzu/files',
+    '@namzu/computer-use',
+    '@namzu/telemetry',
+];
+/**
+ * The `DoctorCheck.id` a capability's probe is registered under —
+ * `@namzu/computer-use` → `computer-use.installed`, matching the id
+ * `telemetryInstalledCheck` already shipped under before this module
+ * existed. A function rather than a literal table so the registration site
+ * and the test that enumerates it derive the SAME id from the SAME rule;
+ * two hardcoded copies is how one of them goes stale.
+ */
+export function capabilityCheckId(specifier) {
+    const name = specifier.split('/').pop() ?? specifier;
+    return `${name}.installed`;
+}
+/**
+ * Read the `version` of the package whose entry point resolved to
+ * `fromFile`, by walking UP the directory tree from that file to the
+ * nearest `package.json`.
+ *
+ * Not `require.resolve('<specifier>/package.json')`: a package built with a
+ * strict `exports` map does not expose its own manifest through that map —
+ * Node raises `ERR_PACKAGE_PATH_NOT_EXPORTED` — which would report an
+ * installed, loadable package as broken over a question nobody asked about
+ * its runtime behaviour. The entry file Node already resolved sits inside
+ * the package's own directory tree regardless of what the export map
+ * exposes, so climbing from there to the nearest manifest reads the version
+ * straight off disk without going through the map at all.
+ */
+function readVersionNear(fromFile) {
+    let dir = dirname(fromFile);
+    for (;;) {
+        const candidate = join(dir, 'package.json');
+        if (existsSync(candidate)) {
+            try {
+                const pkg = JSON.parse(readFileSync(candidate, 'utf8'));
+                if (typeof pkg.version === 'string')
+                    return pkg.version;
+            }
+            catch {
+                // A malformed package.json this close to a resolved entry file is
+                // not this function's problem to diagnose — keep climbing in case
+                // an ancestor directory holds the real one.
+            }
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            return '0.0.0'; // hit the filesystem root; nothing found
+        dir = parent;
+    }
+}
+/**
+ * Whether `specifier` is installed, and whether it loads.
+ *
+ * Never throws — every failure mode below (unresolvable, throws on import,
+ * throws something that is not an `Error`) is turned into a
+ * `CapabilityProbe` value, which is what lets `probeCapabilities` await all
+ * four in parallel with nothing to catch.
+ *
+ * The import goes through the RESOLVED path rather than the specifier, so
+ * one code path serves both a package name and a fixture file — the same
+ * arrangement `doctor/checks/telemetry.ts` used this for, kept because it
+ * is what lets a test drive all three states without being able to
+ * uninstall or break a real optional package inside a test run.
+ */
+/**
+ * Find a package's directory by walking `node_modules` upward, or null.
+ *
+ * This is the question the probe is actually asking — IS IT ON DISK — and
+ * neither module resolver answers it. `require.resolve` asks whether CJS may
+ * load the package's entry point, and every optional package here is
+ * ESM-only with an `exports` map that declares `import` and no `default`, so
+ * it throws `ERR_PACKAGE_PATH_NOT_EXPORTED` for a package that is installed
+ * and working. `import.meta.resolve` asks the right question but does not
+ * exist under the test runner's module transform, so a probe built on it
+ * cannot be exercised by the tests that are supposed to hold it.
+ *
+ * Walking for `<dir>/node_modules/<specifier>/package.json` is resolver-
+ * agnostic, works in both, and is what "installed" means. It follows pnpm's
+ * symlinked layout the same way Node does — `existsSync` resolves the link.
+ */
+function findPackageDir(specifier, fromFile) {
+    let dir = dirname(fromFile);
+    for (;;) {
+        const candidate = join(dir, 'node_modules', specifier, 'package.json');
+        if (existsSync(candidate))
+            return dirname(candidate);
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+export async function probeOptionalPackage(specifier) {
+    // A test drives all three states with a fixture FILE, because there is no
+    // way to uninstall or break a real optional package inside a test run.
+    if (isAbsolute(specifier)) {
+        try {
+            await import(pathToFileURL(specifier).href);
+            return { state: 'present', specifier, version: readVersionNear(specifier) };
+        }
+        catch (err) {
+            return {
+                state: 'broken',
+                specifier,
+                error: err instanceof Error ? err : new Error(String(err)),
+            };
+        }
+    }
+    const packageDir = findPackageDir(specifier, fileURLToPath(import.meta.url));
+    if (!packageDir)
+        return { state: 'absent', specifier };
+    try {
+        await import(specifier);
+        return { state: 'present', specifier, version: readVersionNear(join(packageDir, 'index.js')) };
+    }
+    catch (err) {
+        // On disk and unusable. Kept apart from `absent` because the two send a
+        // reader to different places: "install it" is useless advice to
+        // somebody who already has.
+        return {
+            state: 'broken',
+            specifier,
+            error: err instanceof Error ? err : new Error(String(err)),
+        };
+    }
+}
+/**
+ * Probe every optional capability namzu knows about.
+ *
+ * Re-exported from the package index as of NZ-BOOT-05: `createAgentSession`
+ * (`packages/cli/src/tui/agent.ts`) is its first consumer, calling it once
+ * per session and turning the tri-state result into the
+ * `namzu.capability.detected` / `.broken` rows of the boot narrative. Kept
+ * module-internal until that commit — an exported symbol with no caller is
+ * the shape `declared-but-undriven` is about — and joins the public surface
+ * in the same commit that consumes it, per that convention's own remedy.
+ *
+ * Never rejects: `probeOptionalPackage` already turns every resolve/import
+ * failure into a `broken` record rather than a thrown one, so this
+ * `Promise.all` has nothing to catch — a broken package can degrade what
+ * the boot narrative SAYS, never abort the boot itself.
+ */
+export async function probeCapabilities() {
+    return Promise.all(NAMZU_OPTIONAL_CAPABILITIES.map((specifier) => probeOptionalPackage(specifier)));
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/context/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/context/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AA+CvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,kBAAkB;CACT,CAAA;AAEV;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAA;IACpD,OAAO,GAAG,IAAI,YAAY,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,QAAgB;IACxC,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3B,SAAS,CAAC;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QAC3C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAA0B,CAAA;gBAChF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;oBAAE,OAAO,GAAG,CAAC,OAAO,CAAA;YACxD,CAAC;YAAC,MAAM,CAAC;gBACR,kEAAkE;gBAClE,kEAAkE;gBAClE,4CAA4C;YAC7C,CAAC;QACF,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAA,CAAC,yCAAyC;QAC5E,GAAG,GAAG,MAAM,CAAA;IACb,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;;GAeG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAE,QAAgB;IAC1D,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3B,SAAS,CAAC;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;QACtE,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC/B,GAAG,GAAG,MAAM,CAAA;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC3D,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAA;YAC3C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAA;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,KAAK,EAAE,QAAQ;gBACf,SAAS;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aAC1D,CAAA;QACF,CAAC;IACF,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;IACtD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QACvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,EAAE,CAAA;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,wEAAwE;QACxE,gEAAgE;QAChE,4BAA4B;QAC5B,OAAO;YACN,KAAK,EAAE,QAAQ;YACf,SAAS;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC1D,CAAA;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACtC,OAAO,OAAO,CAAC,GAAG,CACjB,2BAA2B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAC/E,CAAA;AACF,CAAC"}