@navop/cli 0.2.0

package/README.md

@@ -0,0 +1,24 @@
+# @navop/cli
+
+Terminal CLI and bundled Agent Skill for operating resources exposed by a running Navop desktop application.
+
+Install the latest published CLI globally, then use the `navop` executable:
+
+```bash
+npm install -g @navop/cli@latest
+navop --help
+navop status --json
+```
+
+The CLI discovers live tools and schemas from Navop and calls the authenticated Public MCP runtime. Navop remains authoritative for Tool Exposure, permissions, approvals, connection/session IDs, results, and auditing. SSH, SFTP, terminal, database, Redis, and MongoDB behavior stays in Navop; this package only maps command-line arguments to host schemas.
+
+Check and update the installed client with npm:
+
+```bash
+npm view @navop/cli version
+npm update -g @navop/cli
+navop --version
+navop status --json
+```
+
+The bundled `navop` Skill requires this global CLI and explains how to keep a compact command workflow in Agent context instead of carrying the complete MCP tool catalog in every turn.

package/dist/chunk-QRRIPLVN.js

@@ -0,0 +1,608 @@
+// src/arguments.ts
+import { NavopError } from "@navop/client";
+function buildToolArguments(argv, schema, fixed = {}) {
+  const properties = schema.properties ?? {};
+  const collected = collectFlags(argv, properties);
+  const result = { ...fixed };
+  for (const [flag, values] of collected) {
+    const name = flag.replaceAll("-", "_");
+    if (fixed[name] !== void 0) {
+      throw new NavopError("invalid_arguments", `option --${flag} is fixed by this command`);
+    }
+    const property = properties[name];
+    if (!property) throw new NavopError("invalid_arguments", `unknown option --${flag}`);
+    result[name] = convertValues(flag, values, property);
+  }
+  for (const required of schema.required ?? []) {
+    if (result[required] === void 0) {
+      throw new NavopError("invalid_arguments", `missing required option --${required.replaceAll("_", "-")}`);
+    }
+  }
+  return result;
+}
+function collectFlags(argv, properties) {
+  const flags = /* @__PURE__ */ new Map();
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (!token.startsWith("--")) throw new NavopError("invalid_arguments", `unexpected argument: ${token}`);
+    const negative = token.startsWith("--no-");
+    const name = token.slice(negative ? 5 : 2);
+    const inline = name.split("=", 2);
+    const key = inline[0];
+    const property = properties[key.replaceAll("-", "_")];
+    if (!property) throw new NavopError("invalid_arguments", `unknown option --${key}`);
+    if (negative && primaryType(property.type) !== "boolean") {
+      throw new NavopError("invalid_arguments", `option --no-${key} is only valid for booleans`);
+    }
+    let value = negative ? "false" : inline[1];
+    if (value === void 0 && argv[index + 1]?.startsWith("--") !== false) {
+      if (primaryType(property.type) !== "boolean") {
+        throw new NavopError("invalid_arguments", `--${key} requires a value`);
+      }
+      value = "true";
+    } else if (value === void 0) value = argv[++index];
+    const existing = flags.get(key) ?? [];
+    existing.push(value);
+    flags.set(key, existing);
+  }
+  return flags;
+}
+function convertValues(flag, values, schema) {
+  const type = primaryType(schema.type);
+  if (type === "array") return values.map((value) => convertScalar(flag, value, schema.items ?? {}));
+  if (values.length > 1) throw new NavopError("invalid_arguments", `option --${flag} was provided more than once`);
+  const converted = convertScalar(flag, values[0], schema);
+  if (schema.enum && !schema.enum.includes(converted)) {
+    throw new NavopError("invalid_arguments", `option --${flag} must be one of: ${schema.enum.join(", ")}`);
+  }
+  return converted;
+}
+function convertScalar(flag, value, schema) {
+  const type = primaryType(schema.type);
+  if (type === "boolean") {
+    if (value === "true") return true;
+    if (value === "false") return false;
+    throw invalidType(flag, "boolean");
+  }
+  if (type === "integer") {
+    const number = Number(value);
+    if (Number.isSafeInteger(number)) return number;
+    throw invalidType(flag, "integer");
+  }
+  if (type === "number") {
+    const number = Number(value);
+    if (Number.isFinite(number)) return number;
+    throw invalidType(flag, "number");
+  }
+  if (type === "object") {
+    try {
+      return JSON.parse(value);
+    } catch {
+      throw invalidType(flag, "JSON object");
+    }
+  }
+  return value;
+}
+function primaryType(type) {
+  if (Array.isArray(type)) return type.find((value) => value !== "null") ?? "string";
+  return type ?? "string";
+}
+function invalidType(flag, expected) {
+  return new NavopError("invalid_arguments", `option --${flag} must be a ${expected}`);
+}
+
+// src/catalog.ts
+import { NavopError as NavopError2 } from "@navop/client";
+var DOMAIN_COMMANDS = [
+  command("ssh exec", "ssh.exec", "Execute a command on an active SSH session"),
+  command("ssh diagnostics", "ssh.session_diagnostics", "Inspect an active SSH session"),
+  command("ssh command poll", "ssh.command.poll", "Poll a tracked SSH command"),
+  command("ssh command output", "ssh.command.output", "Read tracked SSH command output"),
+  command("ssh command cancel", "ssh.command.cancel", "Cancel a tracked SSH command"),
+  command("terminal read", "terminal.read", "Read visible terminal output"),
+  command("terminal exec", "terminal.exec", "Execute in a visible terminal"),
+  command("terminal interrupt", "terminal.control", "Interrupt a visible terminal", { action: "interrupt" }),
+  command("db schema", "db.schema", "Read database schema metadata"),
+  command("db tables", "db.tables", "List database tables"),
+  command("db describe", "db.describe_table", "Describe a database table"),
+  command("db sample", "db.sample_rows", "Read sample rows"),
+  command("db query", "db.query", "Run a read-only SQL query"),
+  command("db exec", "db.exec", "Execute a write-capable SQL script"),
+  command("redis connections", "redis.list_connections", "List active Redis connections"),
+  command("redis command", "redis.command", "Execute a Redis command"),
+  command("redis keys", "redis.keys", "List matching Redis keys"),
+  command("redis get", "redis.get", "Read a Redis value"),
+  command("redis set", "redis.set", "Write a Redis value"),
+  command("mongo connections", "mongo.list_connections", "List active MongoDB connections"),
+  command("mongo databases", "mongo.list_databases", "List MongoDB databases"),
+  command("mongo collections", "mongo.list_collections", "List MongoDB collections"),
+  command("mongo find", "mongo.find", "Find MongoDB documents"),
+  command("mongo aggregate", "mongo.aggregate", "Aggregate MongoDB documents"),
+  command("mongo count", "mongo.count", "Count MongoDB documents"),
+  command("mongo indexes", "mongo.list_indexes", "List MongoDB indexes"),
+  command("mongo index create", "mongo.create_index", "Create a MongoDB index"),
+  command("mongo index drop", "mongo.drop_index", "Drop a MongoDB index"),
+  command("mongo collection create", "mongo.create_collection", "Create a MongoDB collection"),
+  command("mongo database drop", "mongo.drop_database", "Drop a MongoDB database"),
+  command("mongo validation get", "mongo.get_validation", "Read MongoDB collection validation"),
+  command("mongo validation set", "mongo.set_validation", "Set MongoDB collection validation"),
+  command("mongo insert", "mongo.insert", "Insert a MongoDB document"),
+  command("mongo replace", "mongo.replace", "Replace a MongoDB document"),
+  command("mongo update", "mongo.update", "Update MongoDB document fields"),
+  command("mongo delete", "mongo.delete", "Delete a MongoDB document"),
+  command("mongo explain", "mongo.explain", "Explain a MongoDB find operation"),
+  command("sftp list", "sftp.list", "List a remote directory"),
+  command("sftp read", "sftp.read", "Read a remote file"),
+  command("sftp write", "sftp.write", "Write a remote file"),
+  command("sftp stat", "sftp.stat", "Inspect a remote path"),
+  command("sftp upload", "sftp.upload", "Upload a local path"),
+  command("sftp download", "sftp.download", "Download a remote path"),
+  command("connections list", "connections.list", "List saved connections"),
+  command("connections show", "connections.show", "Show a saved connection"),
+  command("connections find", "connections.find", "Find saved connections"),
+  command("connections kinds", "connections.list_kinds", "List connection kinds"),
+  command("connections schema", "connections.get_schema", "Get a connection kind schema"),
+  command("connections validate", "connections.validate", "Validate connection input"),
+  command("connections save", "connections.save", "Create or update a connection"),
+  command("connections delete", "connections.delete", "Delete a saved connection"),
+  command("connections test", "connections.test", "Test a saved connection"),
+  command("connections open", "connections.open_session", "Open a connection session"),
+  command("connections sessions", "connections.list_sessions", "List active sessions"),
+  command("workspace list", "workspaces.list", "List workspaces"),
+  command("workspace show", "workspaces.show", "Show a workspace"),
+  command("functions list", "internal_functions.list", "List Navop internal functions"),
+  command("functions call", "internal_functions.call", "Call a Navop internal function")
+];
+function resolveDomainCommand(tokens) {
+  const matches = DOMAIN_COMMANDS.filter((candidate) => prefixMatches(tokens, candidate.path));
+  const exact = matches.find((candidate) => candidate.path.length === tokens.length);
+  if (exact) return exact;
+  throw new NavopError2("invalid_arguments", `unknown command: navop ${tokens.join(" ")}`);
+}
+function commandChildren(path2) {
+  return DOMAIN_COMMANDS.filter((candidate) => prefixMatches(path2, candidate.path));
+}
+function command(path2, tool, summary, fixedArguments) {
+  return { path: path2.split(" "), tool, summary, ...fixedArguments ? { fixedArguments } : {} };
+}
+function prefixMatches(prefix, value) {
+  return prefix.every((token, index) => value[index] === token);
+}
+
+// src/help.ts
+var DOMAINS = [
+  ["status", "Show Navop runtime and MCP status"],
+  ["ssh", "Execute and manage SSH commands"],
+  ["terminal", "Operate visible Navop terminals"],
+  ["db", "Query and modify databases"],
+  ["redis", "Inspect and modify Redis"],
+  ["mongo", "Inspect and modify MongoDB"],
+  ["sftp", "Operate remote files over SFTP"],
+  ["connections", "Discover and manage saved connections"],
+  ["workspace", "Inspect Navop workspaces"],
+  ["functions", "List and call Navop internal functions"],
+  ["skill", "Print or install the Navop Agent Skill"],
+  ["tool", "Access a low-level Navop host tool"],
+  ["tools", "List tools reported by the running Navop host"],
+  ["schema", "Read one live host tool schema"],
+  ["call", "Call one live host tool"]
+];
+function rootHelp() {
+  return `Usage: navop <command> [options]
+
+Operate tools exposed by a running Navop desktop application.
+
+Commands:
+${DOMAINS.map(([name, summary]) => `  ${name.padEnd(16)}${summary}`).join("\n")}
+
+Global options:
+  --discovery <path>  Use an explicit discovery file
+  --json              Emit a stable JSON response
+  --timeout <ms>      Set the request timeout
+  -h, --help          Show help
+  -V, --version       Show version
+`;
+}
+function commandHelp(path2) {
+  const special = specialHelp(path2);
+  if (special) return special;
+  const children = commandChildren(path2);
+  const exact = DOMAIN_COMMANDS.find((candidate) => candidate.path.join(" ") === path2.join(" "));
+  if (exact) {
+    return `Usage: navop ${path2.join(" ")} [options]
+
+${exact.summary}.
+
+Options are validated against the schema exposed by the running Navop application.
+  --json              Emit a stable JSON response
+  --discovery <path>  Use an explicit discovery file
+  --timeout <ms>      Set the MCP request timeout
+  -h, --help          Show help
+`;
+  }
+  const direct = /* @__PURE__ */ new Map();
+  for (const candidate of children) {
+    const name = candidate.path[path2.length];
+    if (name) direct.set(name, candidate.summary);
+  }
+  if (direct.size === 0) return rootHelp();
+  return `Usage: navop ${path2.join(" ")} <command> [options]
+
+Commands:
+${[...direct].map(([name, summary]) => `  ${name.padEnd(16)}${summary}`).join("\n")}
+`;
+}
+function specialHelp(path2) {
+  const key = path2.join(" ");
+  const values = {
+    status: "Usage: navop status [--json] [--discovery <path>] [--timeout <ms>]\n",
+    skill: "Usage: navop skill print|install [--target codex|agents] [--scope user|project] [--force]\n",
+    tool: "Usage: navop tool list|schema <tool>|call <tool> [--arguments <json>|--file <path>|--stdin]\n"
+  };
+  return values[key];
+}
+function schemaHelp(path2, summary, schema, fixed = {}) {
+  const required = new Set(schema.required ?? []);
+  const properties = Object.entries(schema.properties ?? {}).filter(([name]) => fixed[name] === void 0);
+  const lines = properties.map(([name, property]) => {
+    const flag = `--${name.replaceAll("_", "-")}`;
+    const type = schemaType(property);
+    const marker = required.has(name) ? " (required)" : "";
+    const choices = property.enum ? ` [${property.enum.join("|")}]` : "";
+    return `  ${`${flag} <${type}>`.padEnd(28)}${property.description ?? ""}${choices}${marker}`.trimEnd();
+  });
+  return `Usage: navop ${path2.join(" ")} [options]
+
+${summary}.
+
+Options:
+${lines.join("\n")}
+  --json                      Emit a stable JSON response
+  --discovery <path>          Use an explicit discovery file
+  --timeout <ms>              Set the MCP request timeout
+  -h, --help                  Show help
+`;
+}
+function schemaType(property) {
+  const type = Array.isArray(property.type) ? property.type.find((value) => value !== "null") : property.type;
+  if (type === "integer") return "integer";
+  if (type === "number") return "number";
+  if (type === "boolean") return "boolean";
+  if (type === "array") return property.items?.type ?? "value";
+  if (type === "object") return "json";
+  return "string";
+}
+
+// src/skill.ts
+import { cp, mkdir, readFile, rm } from "fs/promises";
+import os from "os";
+import path from "path";
+import { fileURLToPath } from "url";
+import { NavopError as NavopError3 } from "@navop/client";
+var SKILL_ROOT = fileURLToPath(new URL("../skills/navop", import.meta.url));
+async function printSkill() {
+  return readFile(path.join(SKILL_ROOT, "SKILL.md"), "utf8");
+}
+async function installSkill(options) {
+  const root = options.scope === "user" ? options.home ?? os.homedir() : options.cwd ?? process.cwd();
+  const target = path.join(root, options.target === "codex" ? ".codex" : ".agents", "skills", "navop");
+  await mkdir(path.dirname(target), { recursive: true });
+  try {
+    await mkdir(target, { recursive: false });
+  } catch (error) {
+    if (error?.code !== "EEXIST") throw error;
+    if (!options.force) throw new NavopError3("skill_exists", `Navop Skill already exists at ${target}`);
+    await rm(target, { recursive: true, force: true });
+    await mkdir(target, { recursive: true });
+  }
+  await cp(SKILL_ROOT, target, { recursive: true, force: false });
+  return target;
+}
+
+// src/runner.ts
+import { readFile as readFile2 } from "fs/promises";
+import { McpConnection, NavopError as NavopError4, readDiscovery, resolveDiscoveryPath } from "@navop/client";
+async function runCli(argv) {
+  const { args, options } = parseGlobalOptions(argv);
+  if (args.length === 0) return { text: rootHelp(), json: false };
+  if (hasHelp(args)) return { text: await helpFor(args, options), json: false };
+  if (args[0] === "status") return { result: await status(options), json: options.json };
+  if (args[0] === "tools") return { result: await toolCommand(["list", ...args.slice(1)], options), json: options.json };
+  if (args[0] === "schema") return { result: await toolCommand(["schema", ...args.slice(1)], options), json: options.json };
+  if (args[0] === "call") return { result: await toolCommand(["call", ...args.slice(1)], options), json: options.json };
+  if (args[0] === "skill") return { result: await skillCommand(args.slice(1)), json: options.json };
+  if (args[0] === "tool") return { result: await toolCommand(args.slice(1), options), json: options.json };
+  if (args.every((value) => !value.startsWith("--")) && commandChildren(args).some((candidate) => candidate.path.length > args.length)) {
+    return { text: commandHelp(args), json: false };
+  }
+  return { result: await domainCommand(args, options), json: options.json };
+}
+async function domainCommand(args, options) {
+  const flagIndex = args.findIndex((value) => value.startsWith("--"));
+  const commandTokens = flagIndex < 0 ? args : args.slice(0, flagIndex);
+  let toolArgs = flagIndex < 0 ? [] : args.slice(flagIndex);
+  const command2 = resolveDomainCommand(commandTokens);
+  const connection = await openConnection(options);
+  try {
+    const tool = await findTool(connection, command2.tool);
+    toolArgs = await expandConvenienceArguments(command2.tool, toolArgs);
+    const parsed = buildToolArguments(toolArgs, tool.inputSchema ?? {}, command2.fixedArguments);
+    return callTool(connection, command2.tool, parsed);
+  } finally {
+    connection.close();
+  }
+}
+async function status(options) {
+  const discoveryPath = await resolveDiscoveryPath(options.discovery);
+  const discovery = await readDiscovery(discoveryPath);
+  const connection = await McpConnection.connect(discovery, { ...timeoutOption(options), initialize: false });
+  try {
+    const server = await connection.initialize();
+    const tools = await listTools(connection);
+    const availableTools = tools.map((tool) => String(tool.name)).sort();
+    const runtime = await runtimeStatus(connection, tools);
+    const permissionMode = permissionModeFromServer(server);
+    const toolGroups = Array.isArray(runtime?.toolGroups) ? runtime.toolGroups : [];
+    const disabledToolGroups = toolGroups.filter((group) => group?.enabled === false);
+    return {
+      running: true,
+      discovery: { path: discoveryPath, app: discovery.app, pid: discovery.pid, host: discovery.host, port: discovery.port, mode: discovery.mode },
+      server,
+      toolCount: tools.length,
+      permissionMode,
+      availableTools,
+      runtime: runtime ?? null,
+      toolGroups,
+      disabledToolGroups,
+      guidance: capabilityGuidance(permissionMode, disabledToolGroups)
+    };
+  } finally {
+    connection.close();
+  }
+}
+async function toolCommand(args, options) {
+  const action = args[0];
+  const connection = await openConnection(options);
+  try {
+    if (action === "list") return listTools(connection);
+    const name = args[1];
+    if (!name) throw new NavopError4("invalid_arguments", `navop tool ${action ?? ""} requires a tool name`);
+    if (action === "schema") return findTool(connection, name);
+    if (action === "call") {
+      await findTool(connection, name);
+      return callTool(connection, name, await rawArguments(args.slice(2)));
+    }
+    throw new NavopError4("invalid_arguments", "Usage: navop tool list|schema <tool>|call <tool>");
+  } finally {
+    connection.close();
+  }
+}
+async function skillCommand(args) {
+  if (args[0] === "print") return { content: await printSkill() };
+  if (args[0] !== "install") throw new NavopError4("invalid_arguments", "Usage: navop skill print|install");
+  const options = simpleOptions(args.slice(1));
+  const target = options.get("target") ?? "codex";
+  const scope = options.get("scope") ?? "user";
+  if (target !== "codex" && target !== "agents") throw new NavopError4("invalid_arguments", "--target must be codex or agents");
+  if (scope !== "user" && scope !== "project") throw new NavopError4("invalid_arguments", "--scope must be user or project");
+  return { path: await installSkill({ target, scope, force: options.has("force") }) };
+}
+async function openConnection(options) {
+  const discovery = await readDiscovery(await resolveDiscoveryPath(options.discovery));
+  return McpConnection.connect(discovery, timeoutOption(options));
+}
+function timeoutOption(options) {
+  return options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs };
+}
+async function listTools(connection) {
+  const tools = [];
+  let cursor;
+  do {
+    const result = await connection.request("tools/list", cursor ? { cursor } : {});
+    tools.push(...result.tools ?? []);
+    cursor = result.nextCursor;
+  } while (cursor);
+  return tools;
+}
+async function findTool(connection, name) {
+  const tools = await listTools(connection);
+  const tool = tools.find((candidate) => candidate.name === name);
+  if (!tool) {
+    const runtime = await runtimeStatus(connection, tools);
+    const groupId = toolGroupForName(name);
+    const group = Array.isArray(runtime?.toolGroups) ? runtime.toolGroups.find((candidate) => candidate?.id === groupId) : void 0;
+    const groupAction = group?.enabled === false ? `Enable the ${groupId} tool group in ${runtime?.settingsPath ?? "Navop Settings > General > Tool Exposure"}` : `Inspect ${runtime?.settingsPath ?? "Navop Settings > General > Tool Exposure"} and the required connection/session`;
+    throw new NavopError4(
+      "tool_not_found",
+      `Navop tool is not available from the running host: ${name}. ${groupAction}, then retry discovery.`,
+      {
+        requiredTool: name,
+        requiredToolGroup: groupId,
+        toolGroup: group ?? null,
+        availableTools: tools.map((candidate) => candidate.name).sort(),
+        actions: [
+          "Enable MCP Server in Navop Settings > General > MCP",
+          groupAction,
+          "Open the connection or session required by the requested tool",
+          "Run navop status --json and navop tool list --json again"
+        ]
+      }
+    );
+  }
+  return tool;
+}
+async function runtimeStatus(connection, tools) {
+  if (!tools.some((tool) => tool?.name === "navop.runtime_status")) return void 0;
+  const result = await connection.request("tools/call", {
+    name: "navop.runtime_status",
+    arguments: {}
+  });
+  if (result?.isError) return void 0;
+  return result?.structuredContent ?? result;
+}
+function toolGroupForName(name) {
+  const prefix = name.split(".", 1)[0] ?? name;
+  if (prefix === "ssh") return "ssh";
+  if (prefix === "terminal") return "terminal_exec";
+  if (prefix === "db") return "database";
+  if (prefix === "mongo" || prefix === "mongodb") return "mongodb";
+  if (prefix === "internal_functions" || prefix === "functions") return "internal_functions";
+  return prefix;
+}
+function permissionModeFromServer(server) {
+  const instructions = typeof server?.instructions === "string" ? server.instructions : "";
+  const match = instructions.match(/permission_mode=(deny|ask|allow)/);
+  return match?.[1] ?? "unknown";
+}
+function capabilityGuidance(permissionMode, disabledToolGroups) {
+  const guidance = [
+    "Tool names and schemas come from the running Navop host through tools/list; the CLI and Skill are not capability authorities.",
+    "Tool availability also depends on Navop Tool Exposure settings and active connection sessions."
+  ];
+  if (disabledToolGroups.length > 0) {
+    guidance.push(
+      `Disabled host tool groups: ${disabledToolGroups.map((group) => group.id).join(", ")}. Enable only the groups needed by the user.`
+    );
+  }
+  if (permissionMode === "deny") guidance.push("Mutating tools are denied by the current permission mode.");
+  else if (permissionMode === "ask") guidance.push("Mutating tools require approval in Navop; never bypass a rejection.");
+  else if (permissionMode === "allow") guidance.push("Mutating tools run automatically; confirm user intent before destructive actions.");
+  else guidance.push("Inspect the Navop MCP permission profile before attempting mutations.");
+  return guidance;
+}
+async function callTool(connection, name, args) {
+  const result = await connection.request("tools/call", { name, arguments: args });
+  if (result?.isError) throw new NavopError4("tool_failed", toolMessage(result), result);
+  return result?.structuredContent ?? result;
+}
+function parseGlobalOptions(argv) {
+  const args = [];
+  const options = { json: false };
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (token === "--json") options.json = true;
+    else if (token === "--discovery") options.discovery = requiredValue(argv, ++index, token);
+    else if (token === "--timeout") options.timeoutMs = positiveInteger(requiredValue(argv, ++index, token), token);
+    else args.push(token);
+  }
+  return { args, options };
+}
+async function helpFor(args, options) {
+  const path2 = args.filter((value) => value !== "--help" && value !== "-h");
+  if (path2.length === 0) return rootHelp();
+  let command2;
+  try {
+    command2 = resolveDomainCommand(path2);
+  } catch {
+    return commandHelp(path2);
+  }
+  try {
+    const connection = await openConnection(options);
+    try {
+      const tool = await findTool(connection, command2.tool);
+      return schemaHelp(path2, command2.summary, tool.inputSchema ?? {}, command2.fixedArguments);
+    } finally {
+      connection.close();
+    }
+  } catch {
+    return commandHelp(path2);
+  }
+}
+function hasHelp(args) {
+  return args.includes("--help") || args.includes("-h");
+}
+async function expandConvenienceArguments(tool, args) {
+  let expanded = args;
+  if (tool.startsWith("db.") || tool.startsWith("sftp.")) {
+    expanded = replaceFlagAlias(expanded, "--connection", "--target");
+  }
+  if (tool.startsWith("redis.")) {
+    expanded = replaceFlagAlias(expanded, "--connection-id", "--target");
+  }
+  if (tool.startsWith("mongo.")) {
+    expanded = replaceFlagAlias(expanded, "--connection-id", "--target");
+  }
+  if (tool !== "sftp.write") return expanded;
+  const stdinIndex = expanded.indexOf("--stdin");
+  const fileIndex = expanded.indexOf("--content-file");
+  if (stdinIndex >= 0 && fileIndex >= 0) throw new NavopError4("invalid_arguments", "use only one of --stdin or --content-file");
+  if (stdinIndex >= 0) return replaceWithContent(expanded, stdinIndex, 1, await readStdin());
+  if (fileIndex >= 0) return replaceWithContent(expanded, fileIndex, 2, await readFile2(requiredValue(expanded, fileIndex + 1, "--content-file")));
+  return expanded;
+}
+function replaceFlagAlias(args, alias, canonical) {
+  const aliasIndex = args.indexOf(alias);
+  if (aliasIndex < 0) return args;
+  if (args.includes(canonical)) {
+    throw new NavopError4("invalid_arguments", `use only one of ${alias} or ${canonical}`);
+  }
+  const next = [...args];
+  next[aliasIndex] = canonical;
+  return next;
+}
+function replaceWithContent(args, index, count, content) {
+  const next = [...args];
+  next.splice(index, count, "--content-base64", Buffer.from(content).toString("base64"));
+  return next;
+}
+async function rawArguments(args) {
+  const options = simpleOptions(args);
+  const sources = [options.has("arguments"), options.has("file"), options.has("stdin")].filter(Boolean).length;
+  if (sources > 1) throw new NavopError4("invalid_arguments", "use only one of --arguments, --file, or --stdin");
+  let text = options.get("arguments") ?? "{}";
+  if (options.has("file")) text = await readFile2(options.get("file"), "utf8");
+  if (options.has("stdin")) text = await readStdin();
+  try {
+    const value = JSON.parse(text);
+    if (!value || Array.isArray(value) || typeof value !== "object") throw new Error();
+    return value;
+  } catch {
+    throw new NavopError4("invalid_arguments", "tool arguments must be a JSON object");
+  }
+}
+function simpleOptions(args) {
+  const options = /* @__PURE__ */ new Map();
+  for (let index = 0; index < args.length; index += 1) {
+    const token = args[index];
+    if (!token.startsWith("--")) throw new NavopError4("invalid_arguments", `unexpected argument: ${token}`);
+    const name = token.slice(2);
+    if (["force", "stdin"].includes(name)) options.set(name, "true");
+    else options.set(name, requiredValue(args, ++index, token));
+  }
+  return options;
+}
+function requiredValue(args, index, option) {
+  const value = args[index];
+  if (!value || value.startsWith("--")) throw new NavopError4("invalid_arguments", `${option} requires a value`);
+  return value;
+}
+function positiveInteger(value, option) {
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new NavopError4("invalid_arguments", `${option} must be a positive integer`);
+  return parsed;
+}
+function readStdin() {
+  return new Promise((resolve, reject) => {
+    let text = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (chunk) => {
+      text += chunk;
+    });
+    process.stdin.on("end", () => resolve(text));
+    process.stdin.on("error", reject);
+  });
+}
+function toolMessage(result) {
+  return result?.structuredContent?.message ?? result?.content?.[0]?.text ?? "Navop tool call failed";
+}
+
+export {
+  buildToolArguments,
+  DOMAIN_COMMANDS,
+  resolveDomainCommand,
+  rootHelp,
+  printSkill,
+  installSkill,
+  runCli
+};
+//# sourceMappingURL=chunk-QRRIPLVN.js.map

package/dist/chunk-QRRIPLVN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/arguments.ts","../src/catalog.ts","../src/help.ts","../src/skill.ts","../src/runner.ts"],"sourcesContent":["import { NavopError } from \"@navop/client\";\n\ninterface JsonSchema {\n  type?: string | string[];\n  properties?: Record<string, JsonSchema>;\n  required?: string[];\n  items?: JsonSchema;\n  enum?: unknown[];\n}\n\nexport function buildToolArguments(\n  argv: string[],\n  schema: JsonSchema,\n  fixed: Record<string, unknown> = {},\n): Record<string, unknown> {\n  const properties = schema.properties ?? {};\n  const collected = collectFlags(argv, properties);\n  const result: Record<string, unknown> = { ...fixed };\n  for (const [flag, values] of collected) {\n    const name = flag.replaceAll(\"-\", \"_\");\n    if (fixed[name] !== undefined) {\n      throw new NavopError(\"invalid_arguments\", `option --${flag} is fixed by this command`);\n    }\n    const property = properties[name];\n    if (!property) throw new NavopError(\"invalid_arguments\", `unknown option --${flag}`);\n    result[name] = convertValues(flag, values, property);\n  }\n  for (const required of schema.required ?? []) {\n    if (result[required] === undefined) {\n      throw new NavopError(\"invalid_arguments\", `missing required option --${required.replaceAll(\"_\", \"-\")}`);\n    }\n  }\n  return result;\n}\n\nfunction collectFlags(argv: string[], properties: Record<string, JsonSchema>): Map<string, string[]> {\n  const flags = new Map<string, string[]>();\n  for (let index = 0; index < argv.length; index += 1) {\n    const token = argv[index]!;\n    if (!token.startsWith(\"--\")) throw new NavopError(\"invalid_arguments\", `unexpected argument: ${token}`);\n    const negative = token.startsWith(\"--no-\");\n    const name = token.slice(negative ? 5 : 2);\n    const inline = name.split(\"=\", 2);\n    const key = inline[0]!;\n    const property = properties[key.replaceAll(\"-\", \"_\")];\n    if (!property) throw new NavopError(\"invalid_arguments\", `unknown option --${key}`);\n    if (negative && primaryType(property.type) !== \"boolean\") {\n      throw new NavopError(\"invalid_arguments\", `option --no-${key} is only valid for booleans`);\n    }\n    let value = negative ? \"false\" : inline[1];\n    if (value === undefined && argv[index + 1]?.startsWith(\"--\") !== false) {\n      if (primaryType(property.type) !== \"boolean\") {\n        throw new NavopError(\"invalid_arguments\", `--${key} requires a value`);\n      }\n      value = \"true\";\n    }\n    else if (value === undefined) value = argv[++index];\n    const existing = flags.get(key) ?? [];\n    existing.push(value!);\n    flags.set(key, existing);\n  }\n  return flags;\n}\n\nfunction convertValues(flag: string, values: string[], schema: JsonSchema): unknown {\n  const type = primaryType(schema.type);\n  if (type === \"array\") return values.map((value) => convertScalar(flag, value, schema.items ?? {}));\n  if (values.length > 1) throw new NavopError(\"invalid_arguments\", `option --${flag} was provided more than once`);\n  const converted = convertScalar(flag, values[0]!, schema);\n  if (schema.enum && !schema.enum.includes(converted)) {\n    throw new NavopError(\"invalid_arguments\", `option --${flag} must be one of: ${schema.enum.join(\", \")}`);\n  }\n  return converted;\n}\n\nfunction convertScalar(flag: string, value: string, schema: JsonSchema): unknown {\n  const type = primaryType(schema.type);\n  if (type === \"boolean\") {\n    if (value === \"true\") return true;\n    if (value === \"false\") return false;\n    throw invalidType(flag, \"boolean\");\n  }\n  if (type === \"integer\") {\n    const number = Number(value);\n    if (Number.isSafeInteger(number)) return number;\n    throw invalidType(flag, \"integer\");\n  }\n  if (type === \"number\") {\n    const number = Number(value);\n    if (Number.isFinite(number)) return number;\n    throw invalidType(flag, \"number\");\n  }\n  if (type === \"object\") {\n    try { return JSON.parse(value); } catch { throw invalidType(flag, \"JSON object\"); }\n  }\n  return value;\n}\n\nfunction primaryType(type: JsonSchema[\"type\"]): string {\n  if (Array.isArray(type)) return type.find((value) => value !== \"null\") ?? \"string\";\n  return type ?? \"string\";\n}\n\nfunction invalidType(flag: string, expected: string): NavopError {\n  return new NavopError(\"invalid_arguments\", `option --${flag} must be a ${expected}`);\n}\n","import { NavopError } from \"@navop/client\";\n\nexport interface DomainCommand {\n  path: string[];\n  tool: string;\n  summary: string;\n  fixedArguments?: Record<string, unknown>;\n}\n\nexport const DOMAIN_COMMANDS: DomainCommand[] = [\n  command(\"ssh exec\", \"ssh.exec\", \"Execute a command on an active SSH session\"),\n  command(\"ssh diagnostics\", \"ssh.session_diagnostics\", \"Inspect an active SSH session\"),\n  command(\"ssh command poll\", \"ssh.command.poll\", \"Poll a tracked SSH command\"),\n  command(\"ssh command output\", \"ssh.command.output\", \"Read tracked SSH command output\"),\n  command(\"ssh command cancel\", \"ssh.command.cancel\", \"Cancel a tracked SSH command\"),\n  command(\"terminal read\", \"terminal.read\", \"Read visible terminal output\"),\n  command(\"terminal exec\", \"terminal.exec\", \"Execute in a visible terminal\"),\n  command(\"terminal interrupt\", \"terminal.control\", \"Interrupt a visible terminal\", { action: \"interrupt\" }),\n  command(\"db schema\", \"db.schema\", \"Read database schema metadata\"),\n  command(\"db tables\", \"db.tables\", \"List database tables\"),\n  command(\"db describe\", \"db.describe_table\", \"Describe a database table\"),\n  command(\"db sample\", \"db.sample_rows\", \"Read sample rows\"),\n  command(\"db query\", \"db.query\", \"Run a read-only SQL query\"),\n  command(\"db exec\", \"db.exec\", \"Execute a write-capable SQL script\"),\n  command(\"redis connections\", \"redis.list_connections\", \"List active Redis connections\"),\n  command(\"redis command\", \"redis.command\", \"Execute a Redis command\"),\n  command(\"redis keys\", \"redis.keys\", \"List matching Redis keys\"),\n  command(\"redis get\", \"redis.get\", \"Read a Redis value\"),\n  command(\"redis set\", \"redis.set\", \"Write a Redis value\"),\n  command(\"mongo connections\", \"mongo.list_connections\", \"List active MongoDB connections\"),\n  command(\"mongo databases\", \"mongo.list_databases\", \"List MongoDB databases\"),\n  command(\"mongo collections\", \"mongo.list_collections\", \"List MongoDB collections\"),\n  command(\"mongo find\", \"mongo.find\", \"Find MongoDB documents\"),\n  command(\"mongo aggregate\", \"mongo.aggregate\", \"Aggregate MongoDB documents\"),\n  command(\"mongo count\", \"mongo.count\", \"Count MongoDB documents\"),\n  command(\"mongo indexes\", \"mongo.list_indexes\", \"List MongoDB indexes\"),\n  command(\"mongo index create\", \"mongo.create_index\", \"Create a MongoDB index\"),\n  command(\"mongo index drop\", \"mongo.drop_index\", \"Drop a MongoDB index\"),\n  command(\"mongo collection create\", \"mongo.create_collection\", \"Create a MongoDB collection\"),\n  command(\"mongo database drop\", \"mongo.drop_database\", \"Drop a MongoDB database\"),\n  command(\"mongo validation get\", \"mongo.get_validation\", \"Read MongoDB collection validation\"),\n  command(\"mongo validation set\", \"mongo.set_validation\", \"Set MongoDB collection validation\"),\n  command(\"mongo insert\", \"mongo.insert\", \"Insert a MongoDB document\"),\n  command(\"mongo replace\", \"mongo.replace\", \"Replace a MongoDB document\"),\n  command(\"mongo update\", \"mongo.update\", \"Update MongoDB document fields\"),\n  command(\"mongo delete\", \"mongo.delete\", \"Delete a MongoDB document\"),\n  command(\"mongo explain\", \"mongo.explain\", \"Explain a MongoDB find operation\"),\n  command(\"sftp list\", \"sftp.list\", \"List a remote directory\"),\n  command(\"sftp read\", \"sftp.read\", \"Read a remote file\"),\n  command(\"sftp write\", \"sftp.write\", \"Write a remote file\"),\n  command(\"sftp stat\", \"sftp.stat\", \"Inspect a remote path\"),\n  command(\"sftp upload\", \"sftp.upload\", \"Upload a local path\"),\n  command(\"sftp download\", \"sftp.download\", \"Download a remote path\"),\n  command(\"connections list\", \"connections.list\", \"List saved connections\"),\n  command(\"connections show\", \"connections.show\", \"Show a saved connection\"),\n  command(\"connections find\", \"connections.find\", \"Find saved connections\"),\n  command(\"connections kinds\", \"connections.list_kinds\", \"List connection kinds\"),\n  command(\"connections schema\", \"connections.get_schema\", \"Get a connection kind schema\"),\n  command(\"connections validate\", \"connections.validate\", \"Validate connection input\"),\n  command(\"connections save\", \"connections.save\", \"Create or update a connection\"),\n  command(\"connections delete\", \"connections.delete\", \"Delete a saved connection\"),\n  command(\"connections test\", \"connections.test\", \"Test a saved connection\"),\n  command(\"connections open\", \"connections.open_session\", \"Open a connection session\"),\n  command(\"connections sessions\", \"connections.list_sessions\", \"List active sessions\"),\n  command(\"workspace list\", \"workspaces.list\", \"List workspaces\"),\n  command(\"workspace show\", \"workspaces.show\", \"Show a workspace\"),\n  command(\"functions list\", \"internal_functions.list\", \"List Navop internal functions\"),\n  command(\"functions call\", \"internal_functions.call\", \"Call a Navop internal function\"),\n];\n\nexport function resolveDomainCommand(tokens: string[]): DomainCommand {\n  const matches = DOMAIN_COMMANDS.filter((candidate) => prefixMatches(tokens, candidate.path));\n  const exact = matches.find((candidate) => candidate.path.length === tokens.length);\n  if (exact) return exact;\n  throw new NavopError(\"invalid_arguments\", `unknown command: navop ${tokens.join(\" \")}`);\n}\n\nexport function commandChildren(path: string[]): DomainCommand[] {\n  return DOMAIN_COMMANDS.filter((candidate) => prefixMatches(path, candidate.path));\n}\n\nfunction command(path: string, tool: string, summary: string, fixedArguments?: Record<string, unknown>): DomainCommand {\n  return { path: path.split(\" \"), tool, summary, ...(fixedArguments ? { fixedArguments } : {}) };\n}\n\nfunction prefixMatches(prefix: string[], value: string[]): boolean {\n  return prefix.every((token, index) => value[index] === token);\n}\n","import { commandChildren, DOMAIN_COMMANDS } from \"./catalog.js\";\n\nconst DOMAINS: Array<[string, string]> = [\n  [\"status\", \"Show Navop runtime and MCP status\"],\n  [\"ssh\", \"Execute and manage SSH commands\"],\n  [\"terminal\", \"Operate visible Navop terminals\"],\n  [\"db\", \"Query and modify databases\"],\n  [\"redis\", \"Inspect and modify Redis\"],\n  [\"mongo\", \"Inspect and modify MongoDB\"],\n  [\"sftp\", \"Operate remote files over SFTP\"],\n  [\"connections\", \"Discover and manage saved connections\"],\n  [\"workspace\", \"Inspect Navop workspaces\"],\n  [\"functions\", \"List and call Navop internal functions\"],\n  [\"skill\", \"Print or install the Navop Agent Skill\"],\n  [\"tool\", \"Access a low-level Navop host tool\"],\n  [\"tools\", \"List tools reported by the running Navop host\"],\n  [\"schema\", \"Read one live host tool schema\"],\n  [\"call\", \"Call one live host tool\"],\n];\n\nexport function rootHelp(): string {\n  return `Usage: navop <command> [options]\\n\\nOperate tools exposed by a running Navop desktop application.\\n\\nCommands:\\n${DOMAINS.map(([name, summary]) => `  ${name.padEnd(16)}${summary}`).join(\"\\n\")}\\n\\nGlobal options:\\n  --discovery <path>  Use an explicit discovery file\\n  --json              Emit a stable JSON response\\n  --timeout <ms>      Set the request timeout\\n  -h, --help          Show help\\n  -V, --version       Show version\\n`;\n}\n\nexport function commandHelp(path: string[]): string {\n  const special = specialHelp(path);\n  if (special) return special;\n  const children = commandChildren(path);\n  const exact = DOMAIN_COMMANDS.find((candidate) => candidate.path.join(\" \") === path.join(\" \"));\n  if (exact) {\n    return `Usage: navop ${path.join(\" \")} [options]\\n\\n${exact.summary}.\\n\\nOptions are validated against the schema exposed by the running Navop application.\\n  --json              Emit a stable JSON response\\n  --discovery <path>  Use an explicit discovery file\\n  --timeout <ms>      Set the MCP request timeout\\n  -h, --help          Show help\\n`;\n  }\n  const direct = new Map<string, string>();\n  for (const candidate of children) {\n    const name = candidate.path[path.length];\n    if (name) direct.set(name, candidate.summary);\n  }\n  if (direct.size === 0) return rootHelp();\n  return `Usage: navop ${path.join(\" \")} <command> [options]\\n\\nCommands:\\n${[...direct].map(([name, summary]) => `  ${name.padEnd(16)}${summary}`).join(\"\\n\")}\\n`;\n}\n\nfunction specialHelp(path: string[]): string | undefined {\n  const key = path.join(\" \");\n  const values: Record<string, string> = {\n    status: \"Usage: navop status [--json] [--discovery <path>] [--timeout <ms>]\\n\",\n    skill: \"Usage: navop skill print|install [--target codex|agents] [--scope user|project] [--force]\\n\",\n    tool: \"Usage: navop tool list|schema <tool>|call <tool> [--arguments <json>|--file <path>|--stdin]\\n\",\n  };\n  return values[key];\n}\n\nexport function allCommandPaths(): string[] {\n  return DOMAIN_COMMANDS.map((command) => command.path.join(\" \"));\n}\n\nexport function schemaHelp(path: string[], summary: string, schema: any, fixed: Record<string, unknown> = {}): string {\n  const required = new Set<string>(schema.required ?? []);\n  const properties = Object.entries<any>(schema.properties ?? {}).filter(([name]) => fixed[name] === undefined);\n  const lines = properties.map(([name, property]) => {\n    const flag = `--${name.replaceAll(\"_\", \"-\")}`;\n    const type = schemaType(property);\n    const marker = required.has(name) ? \" (required)\" : \"\";\n    const choices = property.enum ? ` [${property.enum.join(\"|\")}]` : \"\";\n    return `  ${`${flag} <${type}>`.padEnd(28)}${property.description ?? \"\"}${choices}${marker}`.trimEnd();\n  });\n  return `Usage: navop ${path.join(\" \")} [options]\\n\\n${summary}.\\n\\nOptions:\\n${lines.join(\"\\n\")}\\n  --json                      Emit a stable JSON response\\n  --discovery <path>          Use an explicit discovery file\\n  --timeout <ms>              Set the MCP request timeout\\n  -h, --help                  Show help\\n`;\n}\n\nfunction schemaType(property: any): string {\n  const type = Array.isArray(property.type) ? property.type.find((value: string) => value !== \"null\") : property.type;\n  if (type === \"integer\") return \"integer\";\n  if (type === \"number\") return \"number\";\n  if (type === \"boolean\") return \"boolean\";\n  if (type === \"array\") return property.items?.type ?? \"value\";\n  if (type === \"object\") return \"json\";\n  return \"string\";\n}\n","import { cp, mkdir, readFile, rm } from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport { NavopError } from \"@navop/client\";\n\nexport interface SkillInstallOptions {\n  target: \"codex\" | \"agents\";\n  scope: \"user\" | \"project\";\n  force: boolean;\n  home?: string;\n  cwd?: string;\n}\n\nconst SKILL_ROOT = fileURLToPath(new URL(\"../skills/navop\", import.meta.url));\n\nexport async function printSkill(): Promise<string> {\n  return readFile(path.join(SKILL_ROOT, \"SKILL.md\"), \"utf8\");\n}\n\nexport async function installSkill(options: SkillInstallOptions): Promise<string> {\n  const root = options.scope === \"user\" ? options.home ?? os.homedir() : options.cwd ?? process.cwd();\n  const target = path.join(root, options.target === \"codex\" ? \".codex\" : \".agents\", \"skills\", \"navop\");\n  await mkdir(path.dirname(target), { recursive: true });\n  try {\n    await mkdir(target, { recursive: false });\n  } catch (error: any) {\n    if (error?.code !== \"EEXIST\") throw error;\n    if (!options.force) throw new NavopError(\"skill_exists\", `Navop Skill already exists at ${target}`);\n    await rm(target, { recursive: true, force: true });\n    await mkdir(target, { recursive: true });\n  }\n  await cp(SKILL_ROOT, target, { recursive: true, force: false });\n  return target;\n}\n","import { readFile } from \"node:fs/promises\";\n\nimport { buildToolArguments } from \"./arguments.js\";\nimport { commandChildren, resolveDomainCommand } from \"./catalog.js\";\nimport { McpConnection, NavopError, readDiscovery, resolveDiscoveryPath } from \"@navop/client\";\nimport { commandHelp, rootHelp, schemaHelp } from \"./help.js\";\nimport { installSkill, printSkill } from \"./skill.js\";\n\ninterface GlobalOptions {\n  json: boolean;\n  discovery?: string;\n  timeoutMs?: number;\n}\n\nexport async function runCli(argv: string[]): Promise<{ result?: unknown; text?: string; json: boolean }> {\n  const { args, options } = parseGlobalOptions(argv);\n  if (args.length === 0) return { text: rootHelp(), json: false };\n  if (hasHelp(args)) return { text: await helpFor(args, options), json: false };\n  if (args[0] === \"status\") return { result: await status(options), json: options.json };\n  if (args[0] === \"tools\") return { result: await toolCommand([\"list\", ...args.slice(1)], options), json: options.json };\n  if (args[0] === \"schema\") return { result: await toolCommand([\"schema\", ...args.slice(1)], options), json: options.json };\n  if (args[0] === \"call\") return { result: await toolCommand([\"call\", ...args.slice(1)], options), json: options.json };\n  if (args[0] === \"skill\") return { result: await skillCommand(args.slice(1)), json: options.json };\n  if (args[0] === \"tool\") return { result: await toolCommand(args.slice(1), options), json: options.json };\n  if (\n    args.every((value) => !value.startsWith(\"--\"))\n    && commandChildren(args).some((candidate) => candidate.path.length > args.length)\n  ) {\n    return { text: commandHelp(args), json: false };\n  }\n  return { result: await domainCommand(args, options), json: options.json };\n}\n\nasync function domainCommand(args: string[], options: GlobalOptions): Promise<unknown> {\n  const flagIndex = args.findIndex((value) => value.startsWith(\"--\"));\n  const commandTokens = flagIndex < 0 ? args : args.slice(0, flagIndex);\n  let toolArgs = flagIndex < 0 ? [] : args.slice(flagIndex);\n  const command = resolveDomainCommand(commandTokens);\n  const connection = await openConnection(options);\n  try {\n    const tool = await findTool(connection, command.tool);\n    toolArgs = await expandConvenienceArguments(command.tool, toolArgs);\n    const parsed = buildToolArguments(toolArgs, tool.inputSchema ?? {}, command.fixedArguments);\n    return callTool(connection, command.tool, parsed);\n  } finally {\n    connection.close();\n  }\n}\n\nasync function status(options: GlobalOptions): Promise<unknown> {\n  const discoveryPath = await resolveDiscoveryPath(options.discovery);\n  const discovery = await readDiscovery(discoveryPath);\n  const connection = await McpConnection.connect(discovery, { ...timeoutOption(options), initialize: false });\n  try {\n    const server = await connection.initialize();\n    const tools = await listTools(connection);\n    const availableTools = tools.map((tool) => String(tool.name)).sort();\n    const runtime = await runtimeStatus(connection, tools);\n    const permissionMode = permissionModeFromServer(server);\n    const toolGroups = Array.isArray(runtime?.toolGroups) ? runtime.toolGroups : [];\n    const disabledToolGroups = toolGroups.filter((group: any) => group?.enabled === false);\n    return {\n      running: true,\n      discovery: { path: discoveryPath, app: discovery.app, pid: discovery.pid, host: discovery.host, port: discovery.port, mode: discovery.mode },\n      server,\n      toolCount: tools.length,\n      permissionMode,\n      availableTools,\n      runtime: runtime ?? null,\n      toolGroups,\n      disabledToolGroups,\n      guidance: capabilityGuidance(permissionMode, disabledToolGroups),\n    };\n  } finally {\n    connection.close();\n  }\n}\n\nasync function toolCommand(args: string[], options: GlobalOptions): Promise<unknown> {\n  const action = args[0];\n  const connection = await openConnection(options);\n  try {\n    if (action === \"list\") return listTools(connection);\n    const name = args[1];\n    if (!name) throw new NavopError(\"invalid_arguments\", `navop tool ${action ?? \"\"} requires a tool name`);\n    if (action === \"schema\") return findTool(connection, name);\n    if (action === \"call\") {\n      await findTool(connection, name);\n      return callTool(connection, name, await rawArguments(args.slice(2)));\n    }\n    throw new NavopError(\"invalid_arguments\", \"Usage: navop tool list|schema <tool>|call <tool>\");\n  } finally {\n    connection.close();\n  }\n}\n\nasync function skillCommand(args: string[]): Promise<unknown> {\n  if (args[0] === \"print\") return { content: await printSkill() };\n  if (args[0] !== \"install\") throw new NavopError(\"invalid_arguments\", \"Usage: navop skill print|install\");\n  const options = simpleOptions(args.slice(1));\n  const target = options.get(\"target\") ?? \"codex\";\n  const scope = options.get(\"scope\") ?? \"user\";\n  if (target !== \"codex\" && target !== \"agents\") throw new NavopError(\"invalid_arguments\", \"--target must be codex or agents\");\n  if (scope !== \"user\" && scope !== \"project\") throw new NavopError(\"invalid_arguments\", \"--scope must be user or project\");\n  return { path: await installSkill({ target, scope, force: options.has(\"force\") }) };\n}\n\nasync function openConnection(options: GlobalOptions): Promise<McpConnection> {\n  const discovery = await readDiscovery(await resolveDiscoveryPath(options.discovery));\n  return McpConnection.connect(discovery, timeoutOption(options));\n}\n\nfunction timeoutOption(options: GlobalOptions): { timeoutMs?: number } {\n  return options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs };\n}\n\nasync function listTools(connection: McpConnection): Promise<any[]> {\n  const tools: any[] = [];\n  let cursor: string | undefined;\n  do {\n    const result = await connection.request(\"tools/list\", cursor ? { cursor } : {});\n    tools.push(...(result.tools ?? []));\n    cursor = result.nextCursor;\n  } while (cursor);\n  return tools;\n}\n\nasync function findTool(connection: McpConnection, name: string): Promise<any> {\n  const tools = await listTools(connection);\n  const tool = tools.find((candidate) => candidate.name === name);\n  if (!tool) {\n    const runtime = await runtimeStatus(connection, tools);\n    const groupId = toolGroupForName(name);\n    const group = Array.isArray(runtime?.toolGroups)\n      ? runtime.toolGroups.find((candidate: any) => candidate?.id === groupId)\n      : undefined;\n    const groupAction = group?.enabled === false\n      ? `Enable the ${groupId} tool group in ${runtime?.settingsPath ?? \"Navop Settings > General > Tool Exposure\"}`\n      : `Inspect ${runtime?.settingsPath ?? \"Navop Settings > General > Tool Exposure\"} and the required connection/session`;\n    throw new NavopError(\n      \"tool_not_found\",\n      `Navop tool is not available from the running host: ${name}. ${groupAction}, then retry discovery.`,\n      {\n        requiredTool: name,\n        requiredToolGroup: groupId,\n        toolGroup: group ?? null,\n        availableTools: tools.map((candidate) => candidate.name).sort(),\n        actions: [\n          \"Enable MCP Server in Navop Settings > General > MCP\",\n          groupAction,\n          \"Open the connection or session required by the requested tool\",\n          \"Run navop status --json and navop tool list --json again\",\n        ],\n      },\n    );\n  }\n  return tool;\n}\n\nasync function runtimeStatus(connection: McpConnection, tools: any[]): Promise<any | undefined> {\n  if (!tools.some((tool) => tool?.name === \"navop.runtime_status\")) return undefined;\n  const result = await connection.request(\"tools/call\", {\n    name: \"navop.runtime_status\",\n    arguments: {},\n  });\n  if (result?.isError) return undefined;\n  return result?.structuredContent ?? result;\n}\n\nfunction toolGroupForName(name: string): string {\n  const prefix = name.split(\".\", 1)[0] ?? name;\n  if (prefix === \"ssh\") return \"ssh\";\n  if (prefix === \"terminal\") return \"terminal_exec\";\n  if (prefix === \"db\") return \"database\";\n  if (prefix === \"mongo\" || prefix === \"mongodb\") return \"mongodb\";\n  if (prefix === \"internal_functions\" || prefix === \"functions\") return \"internal_functions\";\n  return prefix;\n}\n\nfunction permissionModeFromServer(server: any): \"deny\" | \"ask\" | \"allow\" | \"unknown\" {\n  const instructions = typeof server?.instructions === \"string\" ? server.instructions : \"\";\n  const match = instructions.match(/permission_mode=(deny|ask|allow)/);\n  return (match?.[1] as \"deny\" | \"ask\" | \"allow\" | undefined) ?? \"unknown\";\n}\n\nfunction capabilityGuidance(permissionMode: string, disabledToolGroups: any[]): string[] {\n  const guidance = [\n    \"Tool names and schemas come from the running Navop host through tools/list; the CLI and Skill are not capability authorities.\",\n    \"Tool availability also depends on Navop Tool Exposure settings and active connection sessions.\",\n  ];\n  if (disabledToolGroups.length > 0) {\n    guidance.push(\n      `Disabled host tool groups: ${disabledToolGroups.map((group: any) => group.id).join(\", \")}. Enable only the groups needed by the user.`,\n    );\n  }\n  if (permissionMode === \"deny\") guidance.push(\"Mutating tools are denied by the current permission mode.\");\n  else if (permissionMode === \"ask\") guidance.push(\"Mutating tools require approval in Navop; never bypass a rejection.\");\n  else if (permissionMode === \"allow\") guidance.push(\"Mutating tools run automatically; confirm user intent before destructive actions.\");\n  else guidance.push(\"Inspect the Navop MCP permission profile before attempting mutations.\");\n  return guidance;\n}\n\nasync function callTool(connection: McpConnection, name: string, args: Record<string, unknown>): Promise<unknown> {\n  const result = await connection.request(\"tools/call\", { name, arguments: args });\n  if (result?.isError) throw new NavopError(\"tool_failed\", toolMessage(result), result);\n  return result?.structuredContent ?? result;\n}\n\nfunction parseGlobalOptions(argv: string[]): { args: string[]; options: GlobalOptions } {\n  const args: string[] = [];\n  const options: GlobalOptions = { json: false };\n  for (let index = 0; index < argv.length; index += 1) {\n    const token = argv[index]!;\n    if (token === \"--json\") options.json = true;\n    else if (token === \"--discovery\") options.discovery = requiredValue(argv, ++index, token);\n    else if (token === \"--timeout\") options.timeoutMs = positiveInteger(requiredValue(argv, ++index, token), token);\n    else args.push(token);\n  }\n  return { args, options };\n}\n\nasync function helpFor(args: string[], options: GlobalOptions): Promise<string> {\n  const path = args.filter((value) => value !== \"--help\" && value !== \"-h\");\n  if (path.length === 0) return rootHelp();\n  let command;\n  try { command = resolveDomainCommand(path); } catch { return commandHelp(path); }\n  try {\n    const connection = await openConnection(options);\n    try {\n      const tool = await findTool(connection, command.tool);\n      return schemaHelp(path, command.summary, tool.inputSchema ?? {}, command.fixedArguments);\n    } finally { connection.close(); }\n  } catch { return commandHelp(path); }\n}\n\nfunction hasHelp(args: string[]): boolean {\n  return args.includes(\"--help\") || args.includes(\"-h\");\n}\n\nasync function expandConvenienceArguments(tool: string, args: string[]): Promise<string[]> {\n  let expanded = args;\n  if (tool.startsWith(\"db.\") || tool.startsWith(\"sftp.\")) {\n    expanded = replaceFlagAlias(expanded, \"--connection\", \"--target\");\n  }\n  if (tool.startsWith(\"redis.\")) {\n    expanded = replaceFlagAlias(expanded, \"--connection-id\", \"--target\");\n  }\n  if (tool.startsWith(\"mongo.\")) {\n    expanded = replaceFlagAlias(expanded, \"--connection-id\", \"--target\");\n  }\n  if (tool !== \"sftp.write\") return expanded;\n  const stdinIndex = expanded.indexOf(\"--stdin\");\n  const fileIndex = expanded.indexOf(\"--content-file\");\n  if (stdinIndex >= 0 && fileIndex >= 0) throw new NavopError(\"invalid_arguments\", \"use only one of --stdin or --content-file\");\n  if (stdinIndex >= 0) return replaceWithContent(expanded, stdinIndex, 1, await readStdin());\n  if (fileIndex >= 0) return replaceWithContent(expanded, fileIndex, 2, await readFile(requiredValue(expanded, fileIndex + 1, \"--content-file\")));\n  return expanded;\n}\n\nfunction replaceFlagAlias(args: string[], alias: string, canonical: string): string[] {\n  const aliasIndex = args.indexOf(alias);\n  if (aliasIndex < 0) return args;\n  if (args.includes(canonical)) {\n    throw new NavopError(\"invalid_arguments\", `use only one of ${alias} or ${canonical}`);\n  }\n  const next = [...args];\n  next[aliasIndex] = canonical;\n  return next;\n}\n\nfunction replaceWithContent(args: string[], index: number, count: number, content: string | Buffer): string[] {\n  const next = [...args];\n  next.splice(index, count, \"--content-base64\", Buffer.from(content).toString(\"base64\"));\n  return next;\n}\n\nasync function rawArguments(args: string[]): Promise<Record<string, unknown>> {\n  const options = simpleOptions(args);\n  const sources = [options.has(\"arguments\"), options.has(\"file\"), options.has(\"stdin\")].filter(Boolean).length;\n  if (sources > 1) throw new NavopError(\"invalid_arguments\", \"use only one of --arguments, --file, or --stdin\");\n  let text = options.get(\"arguments\") ?? \"{}\";\n  if (options.has(\"file\")) text = await readFile(options.get(\"file\")!, \"utf8\");\n  if (options.has(\"stdin\")) text = await readStdin();\n  try {\n    const value = JSON.parse(text);\n    if (!value || Array.isArray(value) || typeof value !== \"object\") throw new Error();\n    return value;\n  } catch { throw new NavopError(\"invalid_arguments\", \"tool arguments must be a JSON object\"); }\n}\n\nfunction simpleOptions(args: string[]): Map<string, string> {\n  const options = new Map<string, string>();\n  for (let index = 0; index < args.length; index += 1) {\n    const token = args[index]!;\n    if (!token.startsWith(\"--\")) throw new NavopError(\"invalid_arguments\", `unexpected argument: ${token}`);\n    const name = token.slice(2);\n    if ([\"force\", \"stdin\"].includes(name)) options.set(name, \"true\");\n    else options.set(name, requiredValue(args, ++index, token));\n  }\n  return options;\n}\n\nfunction requiredValue(args: string[], index: number, option: string): string {\n  const value = args[index];\n  if (!value || value.startsWith(\"--\")) throw new NavopError(\"invalid_arguments\", `${option} requires a value`);\n  return value;\n}\n\nfunction positiveInteger(value: string, option: string): number {\n  const parsed = Number(value);\n  if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new NavopError(\"invalid_arguments\", `${option} must be a positive integer`);\n  return parsed;\n}\n\nfunction readStdin(): Promise<string> {\n  return new Promise((resolve, reject) => {\n    let text = \"\";\n    process.stdin.setEncoding(\"utf8\");\n    process.stdin.on(\"data\", (chunk) => { text += chunk; });\n    process.stdin.on(\"end\", () => resolve(text));\n    process.stdin.on(\"error\", reject);\n  });\n}\n\nfunction toolMessage(result: any): string {\n  return result?.structuredContent?.message ?? result?.content?.[0]?.text ?? \"Navop tool call failed\";\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAUpB,SAAS,mBACd,MACA,QACA,QAAiC,CAAC,GACT;AACzB,QAAM,aAAa,OAAO,cAAc,CAAC;AACzC,QAAM,YAAY,aAAa,MAAM,UAAU;AAC/C,QAAM,SAAkC,EAAE,GAAG,MAAM;AACnD,aAAW,CAAC,MAAM,MAAM,KAAK,WAAW;AACtC,UAAM,OAAO,KAAK,WAAW,KAAK,GAAG;AACrC,QAAI,MAAM,IAAI,MAAM,QAAW;AAC7B,YAAM,IAAI,WAAW,qBAAqB,YAAY,IAAI,2BAA2B;AAAA,IACvF;AACA,UAAM,WAAW,WAAW,IAAI;AAChC,QAAI,CAAC,SAAU,OAAM,IAAI,WAAW,qBAAqB,oBAAoB,IAAI,EAAE;AACnF,WAAO,IAAI,IAAI,cAAc,MAAM,QAAQ,QAAQ;AAAA,EACrD;AACA,aAAW,YAAY,OAAO,YAAY,CAAC,GAAG;AAC5C,QAAI,OAAO,QAAQ,MAAM,QAAW;AAClC,YAAM,IAAI,WAAW,qBAAqB,6BAA6B,SAAS,WAAW,KAAK,GAAG,CAAC,EAAE;AAAA,IACxG;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAgB,YAA+D;AACnG,QAAM,QAAQ,oBAAI,IAAsB;AACxC,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,QAAQ,KAAK,KAAK;AACxB,QAAI,CAAC,MAAM,WAAW,IAAI,EAAG,OAAM,IAAI,WAAW,qBAAqB,wBAAwB,KAAK,EAAE;AACtG,UAAM,WAAW,MAAM,WAAW,OAAO;AACzC,UAAM,OAAO,MAAM,MAAM,WAAW,IAAI,CAAC;AACzC,UAAM,SAAS,KAAK,MAAM,KAAK,CAAC;AAChC,UAAM,MAAM,OAAO,CAAC;AACpB,UAAM,WAAW,WAAW,IAAI,WAAW,KAAK,GAAG,CAAC;AACpD,QAAI,CAAC,SAAU,OAAM,IAAI,WAAW,qBAAqB,oBAAoB,GAAG,EAAE;AAClF,QAAI,YAAY,YAAY,SAAS,IAAI,MAAM,WAAW;AACxD,YAAM,IAAI,WAAW,qBAAqB,eAAe,GAAG,6BAA6B;AAAA,IAC3F;AACA,QAAI,QAAQ,WAAW,UAAU,OAAO,CAAC;AACzC,QAAI,UAAU,UAAa,KAAK,QAAQ,CAAC,GAAG,WAAW,IAAI,MAAM,OAAO;AACtE,UAAI,YAAY,SAAS,IAAI,MAAM,WAAW;AAC5C,cAAM,IAAI,WAAW,qBAAqB,KAAK,GAAG,mBAAmB;AAAA,MACvE;AACA,cAAQ;AAAA,IACV,WACS,UAAU,OAAW,SAAQ,KAAK,EAAE,KAAK;AAClD,UAAM,WAAW,MAAM,IAAI,GAAG,KAAK,CAAC;AACpC,aAAS,KAAK,KAAM;AACpB,UAAM,IAAI,KAAK,QAAQ;AAAA,EACzB;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAc,QAAkB,QAA6B;AAClF,QAAM,OAAO,YAAY,OAAO,IAAI;AACpC,MAAI,SAAS,QAAS,QAAO,OAAO,IAAI,CAAC,UAAU,cAAc,MAAM,OAAO,OAAO,SAAS,CAAC,CAAC,CAAC;AACjG,MAAI,OAAO,SAAS,EAAG,OAAM,IAAI,WAAW,qBAAqB,YAAY,IAAI,8BAA8B;AAC/G,QAAM,YAAY,cAAc,MAAM,OAAO,CAAC,GAAI,MAAM;AACxD,MAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,SAAS,SAAS,GAAG;AACnD,UAAM,IAAI,WAAW,qBAAqB,YAAY,IAAI,oBAAoB,OAAO,KAAK,KAAK,IAAI,CAAC,EAAE;AAAA,EACxG;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAc,OAAe,QAA6B;AAC/E,QAAM,OAAO,YAAY,OAAO,IAAI;AACpC,MAAI,SAAS,WAAW;AACtB,QAAI,UAAU,OAAQ,QAAO;AAC7B,QAAI,UAAU,QAAS,QAAO;AAC9B,UAAM,YAAY,MAAM,SAAS;AAAA,EACnC;AACA,MAAI,SAAS,WAAW;AACtB,UAAM,SAAS,OAAO,KAAK;AAC3B,QAAI,OAAO,cAAc,MAAM,EAAG,QAAO;AACzC,UAAM,YAAY,MAAM,SAAS;AAAA,EACnC;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,SAAS,OAAO,KAAK;AAC3B,QAAI,OAAO,SAAS,MAAM,EAAG,QAAO;AACpC,UAAM,YAAY,MAAM,QAAQ;AAAA,EAClC;AACA,MAAI,SAAS,UAAU;AACrB,QAAI;AAAE,aAAO,KAAK,MAAM,KAAK;AAAA,IAAG,QAAQ;AAAE,YAAM,YAAY,MAAM,aAAa;AAAA,IAAG;AAAA,EACpF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAAkC;AACrD,MAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,KAAK,CAAC,UAAU,UAAU,MAAM,KAAK;AAC1E,SAAO,QAAQ;AACjB;AAEA,SAAS,YAAY,MAAc,UAA8B;AAC/D,SAAO,IAAI,WAAW,qBAAqB,YAAY,IAAI,cAAc,QAAQ,EAAE;AACrF;;;ACzGA,SAAS,cAAAA,mBAAkB;AASpB,IAAM,kBAAmC;AAAA,EAC9C,QAAQ,YAAY,YAAY,4CAA4C;AAAA,EAC5E,QAAQ,mBAAmB,2BAA2B,+BAA+B;AAAA,EACrF,QAAQ,oBAAoB,oBAAoB,4BAA4B;AAAA,EAC5E,QAAQ,sBAAsB,sBAAsB,iCAAiC;AAAA,EACrF,QAAQ,sBAAsB,sBAAsB,8BAA8B;AAAA,EAClF,QAAQ,iBAAiB,iBAAiB,8BAA8B;AAAA,EACxE,QAAQ,iBAAiB,iBAAiB,+BAA+B;AAAA,EACzE,QAAQ,sBAAsB,oBAAoB,gCAAgC,EAAE,QAAQ,YAAY,CAAC;AAAA,EACzG,QAAQ,aAAa,aAAa,+BAA+B;AAAA,EACjE,QAAQ,aAAa,aAAa,sBAAsB;AAAA,EACxD,QAAQ,eAAe,qBAAqB,2BAA2B;AAAA,EACvE,QAAQ,aAAa,kBAAkB,kBAAkB;AAAA,EACzD,QAAQ,YAAY,YAAY,2BAA2B;AAAA,EAC3D,QAAQ,WAAW,WAAW,oCAAoC;AAAA,EAClE,QAAQ,qBAAqB,0BAA0B,+BAA+B;AAAA,EACtF,QAAQ,iBAAiB,iBAAiB,yBAAyB;AAAA,EACnE,QAAQ,cAAc,cAAc,0BAA0B;AAAA,EAC9D,QAAQ,aAAa,aAAa,oBAAoB;AAAA,EACtD,QAAQ,aAAa,aAAa,qBAAqB;AAAA,EACvD,QAAQ,qBAAqB,0BAA0B,iCAAiC;AAAA,EACxF,QAAQ,mBAAmB,wBAAwB,wBAAwB;AAAA,EAC3E,QAAQ,qBAAqB,0BAA0B,0BAA0B;AAAA,EACjF,QAAQ,cAAc,cAAc,wBAAwB;AAAA,EAC5D,QAAQ,mBAAmB,mBAAmB,6BAA6B;AAAA,EAC3E,QAAQ,eAAe,eAAe,yBAAyB;AAAA,EAC/D,QAAQ,iBAAiB,sBAAsB,sBAAsB;AAAA,EACrE,QAAQ,sBAAsB,sBAAsB,wBAAwB;AAAA,EAC5E,QAAQ,oBAAoB,oBAAoB,sBAAsB;AAAA,EACtE,QAAQ,2BAA2B,2BAA2B,6BAA6B;AAAA,EAC3F,QAAQ,uBAAuB,uBAAuB,yBAAyB;AAAA,EAC/E,QAAQ,wBAAwB,wBAAwB,oCAAoC;AAAA,EAC5F,QAAQ,wBAAwB,wBAAwB,mCAAmC;AAAA,EAC3F,QAAQ,gBAAgB,gBAAgB,2BAA2B;AAAA,EACnE,QAAQ,iBAAiB,iBAAiB,4BAA4B;AAAA,EACtE,QAAQ,gBAAgB,gBAAgB,gCAAgC;AAAA,EACxE,QAAQ,gBAAgB,gBAAgB,2BAA2B;AAAA,EACnE,QAAQ,iBAAiB,iBAAiB,kCAAkC;AAAA,EAC5E,QAAQ,aAAa,aAAa,yBAAyB;AAAA,EAC3D,QAAQ,aAAa,aAAa,oBAAoB;AAAA,EACtD,QAAQ,cAAc,cAAc,qBAAqB;AAAA,EACzD,QAAQ,aAAa,aAAa,uBAAuB;AAAA,EACzD,QAAQ,eAAe,eAAe,qBAAqB;AAAA,EAC3D,QAAQ,iBAAiB,iBAAiB,wBAAwB;AAAA,EAClE,QAAQ,oBAAoB,oBAAoB,wBAAwB;AAAA,EACxE,QAAQ,oBAAoB,oBAAoB,yBAAyB;AAAA,EACzE,QAAQ,oBAAoB,oBAAoB,wBAAwB;AAAA,EACxE,QAAQ,qBAAqB,0BAA0B,uBAAuB;AAAA,EAC9E,QAAQ,sBAAsB,0BAA0B,8BAA8B;AAAA,EACtF,QAAQ,wBAAwB,wBAAwB,2BAA2B;AAAA,EACnF,QAAQ,oBAAoB,oBAAoB,+BAA+B;AAAA,EAC/E,QAAQ,sBAAsB,sBAAsB,2BAA2B;AAAA,EAC/E,QAAQ,oBAAoB,oBAAoB,yBAAyB;AAAA,EACzE,QAAQ,oBAAoB,4BAA4B,2BAA2B;AAAA,EACnF,QAAQ,wBAAwB,6BAA6B,sBAAsB;AAAA,EACnF,QAAQ,kBAAkB,mBAAmB,iBAAiB;AAAA,EAC9D,QAAQ,kBAAkB,mBAAmB,kBAAkB;AAAA,EAC/D,QAAQ,kBAAkB,2BAA2B,+BAA+B;AAAA,EACpF,QAAQ,kBAAkB,2BAA2B,gCAAgC;AACvF;AAEO,SAAS,qBAAqB,QAAiC;AACpE,QAAM,UAAU,gBAAgB,OAAO,CAAC,cAAc,cAAc,QAAQ,UAAU,IAAI,CAAC;AAC3F,QAAM,QAAQ,QAAQ,KAAK,CAAC,cAAc,UAAU,KAAK,WAAW,OAAO,MAAM;AACjF,MAAI,MAAO,QAAO;AAClB,QAAM,IAAIA,YAAW,qBAAqB,0BAA0B,OAAO,KAAK,GAAG,CAAC,EAAE;AACxF;AAEO,SAAS,gBAAgBC,OAAiC;AAC/D,SAAO,gBAAgB,OAAO,CAAC,cAAc,cAAcA,OAAM,UAAU,IAAI,CAAC;AAClF;AAEA,SAAS,QAAQA,OAAc,MAAc,SAAiB,gBAAyD;AACrH,SAAO,EAAE,MAAMA,MAAK,MAAM,GAAG,GAAG,MAAM,SAAS,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC,EAAG;AAC/F;AAEA,SAAS,cAAc,QAAkB,OAA0B;AACjE,SAAO,OAAO,MAAM,CAAC,OAAO,UAAU,MAAM,KAAK,MAAM,KAAK;AAC9D;;;ACrFA,IAAM,UAAmC;AAAA,EACvC,CAAC,UAAU,mCAAmC;AAAA,EAC9C,CAAC,OAAO,iCAAiC;AAAA,EACzC,CAAC,YAAY,iCAAiC;AAAA,EAC9C,CAAC,MAAM,4BAA4B;AAAA,EACnC,CAAC,SAAS,0BAA0B;AAAA,EACpC,CAAC,SAAS,4BAA4B;AAAA,EACtC,CAAC,QAAQ,gCAAgC;AAAA,EACzC,CAAC,eAAe,uCAAuC;AAAA,EACvD,CAAC,aAAa,0BAA0B;AAAA,EACxC,CAAC,aAAa,wCAAwC;AAAA,EACtD,CAAC,SAAS,wCAAwC;AAAA,EAClD,CAAC,QAAQ,oCAAoC;AAAA,EAC7C,CAAC,SAAS,+CAA+C;AAAA,EACzD,CAAC,UAAU,gCAAgC;AAAA,EAC3C,CAAC,QAAQ,yBAAyB;AACpC;AAEO,SAAS,WAAmB;AACjC,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAAmH,QAAQ,IAAI,CAAC,CAAC,MAAM,OAAO,MAAM,KAAK,KAAK,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACzM;AAEO,SAAS,YAAYC,OAAwB;AAClD,QAAM,UAAU,YAAYA,KAAI;AAChC,MAAI,QAAS,QAAO;AACpB,QAAM,WAAW,gBAAgBA,KAAI;AACrC,QAAM,QAAQ,gBAAgB,KAAK,CAAC,cAAc,UAAU,KAAK,KAAK,GAAG,MAAMA,MAAK,KAAK,GAAG,CAAC;AAC7F,MAAI,OAAO;AACT,WAAO,gBAAgBA,MAAK,KAAK,GAAG,CAAC;AAAA;AAAA,EAAiB,MAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EACrE;AACA,QAAM,SAAS,oBAAI,IAAoB;AACvC,aAAW,aAAa,UAAU;AAChC,UAAM,OAAO,UAAU,KAAKA,MAAK,MAAM;AACvC,QAAI,KAAM,QAAO,IAAI,MAAM,UAAU,OAAO;AAAA,EAC9C;AACA,MAAI,OAAO,SAAS,EAAG,QAAO,SAAS;AACvC,SAAO,gBAAgBA,MAAK,KAAK,GAAG,CAAC;AAAA;AAAA;AAAA,EAAsC,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,OAAO,MAAM,KAAK,KAAK,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA;AAC9J;AAEA,SAAS,YAAYA,OAAoC;AACvD,QAAM,MAAMA,MAAK,KAAK,GAAG;AACzB,QAAM,SAAiC;AAAA,IACrC,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AACA,SAAO,OAAO,GAAG;AACnB;AAMO,SAAS,WAAWC,OAAgB,SAAiB,QAAa,QAAiC,CAAC,GAAW;AACpH,QAAM,WAAW,IAAI,IAAY,OAAO,YAAY,CAAC,CAAC;AACtD,QAAM,aAAa,OAAO,QAAa,OAAO,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,MAAM,IAAI,MAAM,MAAS;AAC5G,QAAM,QAAQ,WAAW,IAAI,CAAC,CAAC,MAAM,QAAQ,MAAM;AACjD,UAAM,OAAO,KAAK,KAAK,WAAW,KAAK,GAAG,CAAC;AAC3C,UAAM,OAAO,WAAW,QAAQ;AAChC,UAAM,SAAS,SAAS,IAAI,IAAI,IAAI,gBAAgB;AACpD,UAAM,UAAU,SAAS,OAAO,KAAK,SAAS,KAAK,KAAK,GAAG,CAAC,MAAM;AAClE,WAAO,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC,GAAG,SAAS,eAAe,EAAE,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,EACvG,CAAC;AACD,SAAO,gBAAgBA,MAAK,KAAK,GAAG,CAAC;AAAA;AAAA,EAAiB,OAAO;AAAA;AAAA;AAAA,EAAkB,MAAM,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AACjG;AAEA,SAAS,WAAW,UAAuB;AACzC,QAAM,OAAO,MAAM,QAAQ,SAAS,IAAI,IAAI,SAAS,KAAK,KAAK,CAAC,UAAkB,UAAU,MAAM,IAAI,SAAS;AAC/G,MAAI,SAAS,UAAW,QAAO;AAC/B,MAAI,SAAS,SAAU,QAAO;AAC9B,MAAI,SAAS,UAAW,QAAO;AAC/B,MAAI,SAAS,QAAS,QAAO,SAAS,OAAO,QAAQ;AACrD,MAAI,SAAS,SAAU,QAAO;AAC9B,SAAO;AACT;;;AC5EA,SAAS,IAAI,OAAO,UAAU,UAAU;AACxC,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAE9B,SAAS,cAAAC,mBAAkB;AAU3B,IAAM,aAAa,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AAE5E,eAAsB,aAA8B;AAClD,SAAO,SAAS,KAAK,KAAK,YAAY,UAAU,GAAG,MAAM;AAC3D;AAEA,eAAsB,aAAa,SAA+C;AAChF,QAAM,OAAO,QAAQ,UAAU,SAAS,QAAQ,QAAQ,GAAG,QAAQ,IAAI,QAAQ,OAAO,QAAQ,IAAI;AAClG,QAAM,SAAS,KAAK,KAAK,MAAM,QAAQ,WAAW,UAAU,WAAW,WAAW,UAAU,OAAO;AACnG,QAAM,MAAM,KAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACrD,MAAI;AACF,UAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AAAA,EAC1C,SAAS,OAAY;AACnB,QAAI,OAAO,SAAS,SAAU,OAAM;AACpC,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAIA,YAAW,gBAAgB,iCAAiC,MAAM,EAAE;AAClG,UAAM,GAAG,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACjD,UAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAAA,EACzC;AACA,QAAM,GAAG,YAAY,QAAQ,EAAE,WAAW,MAAM,OAAO,MAAM,CAAC;AAC9D,SAAO;AACT;;;ACnCA,SAAS,YAAAC,iBAAgB;AAIzB,SAAS,eAAe,cAAAC,aAAY,eAAe,4BAA4B;AAU/E,eAAsB,OAAO,MAA6E;AACxG,QAAM,EAAE,MAAM,QAAQ,IAAI,mBAAmB,IAAI;AACjD,MAAI,KAAK,WAAW,EAAG,QAAO,EAAE,MAAM,SAAS,GAAG,MAAM,MAAM;AAC9D,MAAI,QAAQ,IAAI,EAAG,QAAO,EAAE,MAAM,MAAM,QAAQ,MAAM,OAAO,GAAG,MAAM,MAAM;AAC5E,MAAI,KAAK,CAAC,MAAM,SAAU,QAAO,EAAE,QAAQ,MAAM,OAAO,OAAO,GAAG,MAAM,QAAQ,KAAK;AACrF,MAAI,KAAK,CAAC,MAAM,QAAS,QAAO,EAAE,QAAQ,MAAM,YAAY,CAAC,QAAQ,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,QAAQ,KAAK;AACrH,MAAI,KAAK,CAAC,MAAM,SAAU,QAAO,EAAE,QAAQ,MAAM,YAAY,CAAC,UAAU,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,QAAQ,KAAK;AACxH,MAAI,KAAK,CAAC,MAAM,OAAQ,QAAO,EAAE,QAAQ,MAAM,YAAY,CAAC,QAAQ,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,OAAO,GAAG,MAAM,QAAQ,KAAK;AACpH,MAAI,KAAK,CAAC,MAAM,QAAS,QAAO,EAAE,QAAQ,MAAM,aAAa,KAAK,MAAM,CAAC,CAAC,GAAG,MAAM,QAAQ,KAAK;AAChG,MAAI,KAAK,CAAC,MAAM,OAAQ,QAAO,EAAE,QAAQ,MAAM,YAAY,KAAK,MAAM,CAAC,GAAG,OAAO,GAAG,MAAM,QAAQ,KAAK;AACvG,MACE,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,WAAW,IAAI,CAAC,KAC1C,gBAAgB,IAAI,EAAE,KAAK,CAAC,cAAc,UAAU,KAAK,SAAS,KAAK,MAAM,GAChF;AACA,WAAO,EAAE,MAAM,YAAY,IAAI,GAAG,MAAM,MAAM;AAAA,EAChD;AACA,SAAO,EAAE,QAAQ,MAAM,cAAc,MAAM,OAAO,GAAG,MAAM,QAAQ,KAAK;AAC1E;AAEA,eAAe,cAAc,MAAgB,SAA0C;AACrF,QAAM,YAAY,KAAK,UAAU,CAAC,UAAU,MAAM,WAAW,IAAI,CAAC;AAClE,QAAM,gBAAgB,YAAY,IAAI,OAAO,KAAK,MAAM,GAAG,SAAS;AACpE,MAAI,WAAW,YAAY,IAAI,CAAC,IAAI,KAAK,MAAM,SAAS;AACxD,QAAMC,WAAU,qBAAqB,aAAa;AAClD,QAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI;AACF,UAAM,OAAO,MAAM,SAAS,YAAYA,SAAQ,IAAI;AACpD,eAAW,MAAM,2BAA2BA,SAAQ,MAAM,QAAQ;AAClE,UAAM,SAAS,mBAAmB,UAAU,KAAK,eAAe,CAAC,GAAGA,SAAQ,cAAc;AAC1F,WAAO,SAAS,YAAYA,SAAQ,MAAM,MAAM;AAAA,EAClD,UAAE;AACA,eAAW,MAAM;AAAA,EACnB;AACF;AAEA,eAAe,OAAO,SAA0C;AAC9D,QAAM,gBAAgB,MAAM,qBAAqB,QAAQ,SAAS;AAClE,QAAM,YAAY,MAAM,cAAc,aAAa;AACnD,QAAM,aAAa,MAAM,cAAc,QAAQ,WAAW,EAAE,GAAG,cAAc,OAAO,GAAG,YAAY,MAAM,CAAC;AAC1G,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,UAAM,QAAQ,MAAM,UAAU,UAAU;AACxC,UAAM,iBAAiB,MAAM,IAAI,CAAC,SAAS,OAAO,KAAK,IAAI,CAAC,EAAE,KAAK;AACnE,UAAM,UAAU,MAAM,cAAc,YAAY,KAAK;AACrD,UAAM,iBAAiB,yBAAyB,MAAM;AACtD,UAAM,aAAa,MAAM,QAAQ,SAAS,UAAU,IAAI,QAAQ,aAAa,CAAC;AAC9E,UAAM,qBAAqB,WAAW,OAAO,CAAC,UAAe,OAAO,YAAY,KAAK;AACrF,WAAO;AAAA,MACL,SAAS;AAAA,MACT,WAAW,EAAE,MAAM,eAAe,KAAK,UAAU,KAAK,KAAK,UAAU,KAAK,MAAM,UAAU,MAAM,MAAM,UAAU,MAAM,MAAM,UAAU,KAAK;AAAA,MAC3I;AAAA,MACA,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,MACA,SAAS,WAAW;AAAA,MACpB;AAAA,MACA;AAAA,MACA,UAAU,mBAAmB,gBAAgB,kBAAkB;AAAA,IACjE;AAAA,EACF,UAAE;AACA,eAAW,MAAM;AAAA,EACnB;AACF;AAEA,eAAe,YAAY,MAAgB,SAA0C;AACnF,QAAM,SAAS,KAAK,CAAC;AACrB,QAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI;AACF,QAAI,WAAW,OAAQ,QAAO,UAAU,UAAU;AAClD,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,KAAM,OAAM,IAAIC,YAAW,qBAAqB,cAAc,UAAU,EAAE,uBAAuB;AACtG,QAAI,WAAW,SAAU,QAAO,SAAS,YAAY,IAAI;AACzD,QAAI,WAAW,QAAQ;AACrB,YAAM,SAAS,YAAY,IAAI;AAC/B,aAAO,SAAS,YAAY,MAAM,MAAM,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC;AAAA,IACrE;AACA,UAAM,IAAIA,YAAW,qBAAqB,kDAAkD;AAAA,EAC9F,UAAE;AACA,eAAW,MAAM;AAAA,EACnB;AACF;AAEA,eAAe,aAAa,MAAkC;AAC5D,MAAI,KAAK,CAAC,MAAM,QAAS,QAAO,EAAE,SAAS,MAAM,WAAW,EAAE;AAC9D,MAAI,KAAK,CAAC,MAAM,UAAW,OAAM,IAAIA,YAAW,qBAAqB,kCAAkC;AACvG,QAAM,UAAU,cAAc,KAAK,MAAM,CAAC,CAAC;AAC3C,QAAM,SAAS,QAAQ,IAAI,QAAQ,KAAK;AACxC,QAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK;AACtC,MAAI,WAAW,WAAW,WAAW,SAAU,OAAM,IAAIA,YAAW,qBAAqB,kCAAkC;AAC3H,MAAI,UAAU,UAAU,UAAU,UAAW,OAAM,IAAIA,YAAW,qBAAqB,iCAAiC;AACxH,SAAO,EAAE,MAAM,MAAM,aAAa,EAAE,QAAQ,OAAO,OAAO,QAAQ,IAAI,OAAO,EAAE,CAAC,EAAE;AACpF;AAEA,eAAe,eAAe,SAAgD;AAC5E,QAAM,YAAY,MAAM,cAAc,MAAM,qBAAqB,QAAQ,SAAS,CAAC;AACnF,SAAO,cAAc,QAAQ,WAAW,cAAc,OAAO,CAAC;AAChE;AAEA,SAAS,cAAc,SAAgD;AACrE,SAAO,QAAQ,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;AAC/E;AAEA,eAAe,UAAU,YAA2C;AAClE,QAAM,QAAe,CAAC;AACtB,MAAI;AACJ,KAAG;AACD,UAAM,SAAS,MAAM,WAAW,QAAQ,cAAc,SAAS,EAAE,OAAO,IAAI,CAAC,CAAC;AAC9E,UAAM,KAAK,GAAI,OAAO,SAAS,CAAC,CAAE;AAClC,aAAS,OAAO;AAAA,EAClB,SAAS;AACT,SAAO;AACT;AAEA,eAAe,SAAS,YAA2B,MAA4B;AAC7E,QAAM,QAAQ,MAAM,UAAU,UAAU;AACxC,QAAM,OAAO,MAAM,KAAK,CAAC,cAAc,UAAU,SAAS,IAAI;AAC9D,MAAI,CAAC,MAAM;AACT,UAAM,UAAU,MAAM,cAAc,YAAY,KAAK;AACrD,UAAM,UAAU,iBAAiB,IAAI;AACrC,UAAM,QAAQ,MAAM,QAAQ,SAAS,UAAU,IAC3C,QAAQ,WAAW,KAAK,CAAC,cAAmB,WAAW,OAAO,OAAO,IACrE;AACJ,UAAM,cAAc,OAAO,YAAY,QACnC,cAAc,OAAO,kBAAkB,SAAS,gBAAgB,0CAA0C,KAC1G,WAAW,SAAS,gBAAgB,0CAA0C;AAClF,UAAM,IAAIA;AAAA,MACR;AAAA,MACA,sDAAsD,IAAI,KAAK,WAAW;AAAA,MAC1E;AAAA,QACE,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,WAAW,SAAS;AAAA,QACpB,gBAAgB,MAAM,IAAI,CAAC,cAAc,UAAU,IAAI,EAAE,KAAK;AAAA,QAC9D,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,YAA2B,OAAwC;AAC9F,MAAI,CAAC,MAAM,KAAK,CAAC,SAAS,MAAM,SAAS,sBAAsB,EAAG,QAAO;AACzE,QAAM,SAAS,MAAM,WAAW,QAAQ,cAAc;AAAA,IACpD,MAAM;AAAA,IACN,WAAW,CAAC;AAAA,EACd,CAAC;AACD,MAAI,QAAQ,QAAS,QAAO;AAC5B,SAAO,QAAQ,qBAAqB;AACtC;AAEA,SAAS,iBAAiB,MAAsB;AAC9C,QAAM,SAAS,KAAK,MAAM,KAAK,CAAC,EAAE,CAAC,KAAK;AACxC,MAAI,WAAW,MAAO,QAAO;AAC7B,MAAI,WAAW,WAAY,QAAO;AAClC,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,WAAW,WAAW,WAAW,UAAW,QAAO;AACvD,MAAI,WAAW,wBAAwB,WAAW,YAAa,QAAO;AACtE,SAAO;AACT;AAEA,SAAS,yBAAyB,QAAmD;AACnF,QAAM,eAAe,OAAO,QAAQ,iBAAiB,WAAW,OAAO,eAAe;AACtF,QAAM,QAAQ,aAAa,MAAM,kCAAkC;AACnE,SAAQ,QAAQ,CAAC,KAA8C;AACjE;AAEA,SAAS,mBAAmB,gBAAwB,oBAAqC;AACvF,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,EACF;AACA,MAAI,mBAAmB,SAAS,GAAG;AACjC,aAAS;AAAA,MACP,8BAA8B,mBAAmB,IAAI,CAAC,UAAe,MAAM,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,IAC3F;AAAA,EACF;AACA,MAAI,mBAAmB,OAAQ,UAAS,KAAK,2DAA2D;AAAA,WAC/F,mBAAmB,MAAO,UAAS,KAAK,qEAAqE;AAAA,WAC7G,mBAAmB,QAAS,UAAS,KAAK,mFAAmF;AAAA,MACjI,UAAS,KAAK,uEAAuE;AAC1F,SAAO;AACT;AAEA,eAAe,SAAS,YAA2B,MAAc,MAAiD;AAChH,QAAM,SAAS,MAAM,WAAW,QAAQ,cAAc,EAAE,MAAM,WAAW,KAAK,CAAC;AAC/E,MAAI,QAAQ,QAAS,OAAM,IAAIA,YAAW,eAAe,YAAY,MAAM,GAAG,MAAM;AACpF,SAAO,QAAQ,qBAAqB;AACtC;AAEA,SAAS,mBAAmB,MAA4D;AACtF,QAAM,OAAiB,CAAC;AACxB,QAAM,UAAyB,EAAE,MAAM,MAAM;AAC7C,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,QAAQ,KAAK,KAAK;AACxB,QAAI,UAAU,SAAU,SAAQ,OAAO;AAAA,aAC9B,UAAU,cAAe,SAAQ,YAAY,cAAc,MAAM,EAAE,OAAO,KAAK;AAAA,aAC/E,UAAU,YAAa,SAAQ,YAAY,gBAAgB,cAAc,MAAM,EAAE,OAAO,KAAK,GAAG,KAAK;AAAA,QACzG,MAAK,KAAK,KAAK;AAAA,EACtB;AACA,SAAO,EAAE,MAAM,QAAQ;AACzB;AAEA,eAAe,QAAQ,MAAgB,SAAyC;AAC9E,QAAMC,QAAO,KAAK,OAAO,CAAC,UAAU,UAAU,YAAY,UAAU,IAAI;AACxE,MAAIA,MAAK,WAAW,EAAG,QAAO,SAAS;AACvC,MAAIF;AACJ,MAAI;AAAE,IAAAA,WAAU,qBAAqBE,KAAI;AAAA,EAAG,QAAQ;AAAE,WAAO,YAAYA,KAAI;AAAA,EAAG;AAChF,MAAI;AACF,UAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,QAAI;AACF,YAAM,OAAO,MAAM,SAAS,YAAYF,SAAQ,IAAI;AACpD,aAAO,WAAWE,OAAMF,SAAQ,SAAS,KAAK,eAAe,CAAC,GAAGA,SAAQ,cAAc;AAAA,IACzF,UAAE;AAAU,iBAAW,MAAM;AAAA,IAAG;AAAA,EAClC,QAAQ;AAAE,WAAO,YAAYE,KAAI;AAAA,EAAG;AACtC;AAEA,SAAS,QAAQ,MAAyB;AACxC,SAAO,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI;AACtD;AAEA,eAAe,2BAA2B,MAAc,MAAmC;AACzF,MAAI,WAAW;AACf,MAAI,KAAK,WAAW,KAAK,KAAK,KAAK,WAAW,OAAO,GAAG;AACtD,eAAW,iBAAiB,UAAU,gBAAgB,UAAU;AAAA,EAClE;AACA,MAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,eAAW,iBAAiB,UAAU,mBAAmB,UAAU;AAAA,EACrE;AACA,MAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,eAAW,iBAAiB,UAAU,mBAAmB,UAAU;AAAA,EACrE;AACA,MAAI,SAAS,aAAc,QAAO;AAClC,QAAM,aAAa,SAAS,QAAQ,SAAS;AAC7C,QAAM,YAAY,SAAS,QAAQ,gBAAgB;AACnD,MAAI,cAAc,KAAK,aAAa,EAAG,OAAM,IAAID,YAAW,qBAAqB,2CAA2C;AAC5H,MAAI,cAAc,EAAG,QAAO,mBAAmB,UAAU,YAAY,GAAG,MAAM,UAAU,CAAC;AACzF,MAAI,aAAa,EAAG,QAAO,mBAAmB,UAAU,WAAW,GAAG,MAAME,UAAS,cAAc,UAAU,YAAY,GAAG,gBAAgB,CAAC,CAAC;AAC9I,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAgB,OAAe,WAA6B;AACpF,QAAM,aAAa,KAAK,QAAQ,KAAK;AACrC,MAAI,aAAa,EAAG,QAAO;AAC3B,MAAI,KAAK,SAAS,SAAS,GAAG;AAC5B,UAAM,IAAIF,YAAW,qBAAqB,mBAAmB,KAAK,OAAO,SAAS,EAAE;AAAA,EACtF;AACA,QAAM,OAAO,CAAC,GAAG,IAAI;AACrB,OAAK,UAAU,IAAI;AACnB,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAgB,OAAe,OAAe,SAAoC;AAC5G,QAAM,OAAO,CAAC,GAAG,IAAI;AACrB,OAAK,OAAO,OAAO,OAAO,oBAAoB,OAAO,KAAK,OAAO,EAAE,SAAS,QAAQ,CAAC;AACrF,SAAO;AACT;AAEA,eAAe,aAAa,MAAkD;AAC5E,QAAM,UAAU,cAAc,IAAI;AAClC,QAAM,UAAU,CAAC,QAAQ,IAAI,WAAW,GAAG,QAAQ,IAAI,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,EAAE,OAAO,OAAO,EAAE;AACtG,MAAI,UAAU,EAAG,OAAM,IAAIA,YAAW,qBAAqB,iDAAiD;AAC5G,MAAI,OAAO,QAAQ,IAAI,WAAW,KAAK;AACvC,MAAI,QAAQ,IAAI,MAAM,EAAG,QAAO,MAAME,UAAS,QAAQ,IAAI,MAAM,GAAI,MAAM;AAC3E,MAAI,QAAQ,IAAI,OAAO,EAAG,QAAO,MAAM,UAAU;AACjD,MAAI;AACF,UAAM,QAAQ,KAAK,MAAM,IAAI;AAC7B,QAAI,CAAC,SAAS,MAAM,QAAQ,KAAK,KAAK,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM;AACjF,WAAO;AAAA,EACT,QAAQ;AAAE,UAAM,IAAIF,YAAW,qBAAqB,sCAAsC;AAAA,EAAG;AAC/F;AAEA,SAAS,cAAc,MAAqC;AAC1D,QAAM,UAAU,oBAAI,IAAoB;AACxC,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,QAAQ,KAAK,KAAK;AACxB,QAAI,CAAC,MAAM,WAAW,IAAI,EAAG,OAAM,IAAIA,YAAW,qBAAqB,wBAAwB,KAAK,EAAE;AACtG,UAAM,OAAO,MAAM,MAAM,CAAC;AAC1B,QAAI,CAAC,SAAS,OAAO,EAAE,SAAS,IAAI,EAAG,SAAQ,IAAI,MAAM,MAAM;AAAA,QAC1D,SAAQ,IAAI,MAAM,cAAc,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,SAAS,cAAc,MAAgB,OAAe,QAAwB;AAC5E,QAAM,QAAQ,KAAK,KAAK;AACxB,MAAI,CAAC,SAAS,MAAM,WAAW,IAAI,EAAG,OAAM,IAAIA,YAAW,qBAAqB,GAAG,MAAM,mBAAmB;AAC5G,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAe,QAAwB;AAC9D,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,EAAG,OAAM,IAAIA,YAAW,qBAAqB,GAAG,MAAM,6BAA6B;AAClI,SAAO;AACT;AAEA,SAAS,YAA6B;AACpC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO;AACX,YAAQ,MAAM,YAAY,MAAM;AAChC,YAAQ,MAAM,GAAG,QAAQ,CAAC,UAAU;AAAE,cAAQ;AAAA,IAAO,CAAC;AACtD,YAAQ,MAAM,GAAG,OAAO,MAAM,QAAQ,IAAI,CAAC;AAC3C,YAAQ,MAAM,GAAG,SAAS,MAAM;AAAA,EAClC,CAAC;AACH;AAEA,SAAS,YAAY,QAAqB;AACxC,SAAO,QAAQ,mBAAmB,WAAW,QAAQ,UAAU,CAAC,GAAG,QAAQ;AAC7E;","names":["NavopError","path","path","path","NavopError","readFile","NavopError","command","NavopError","path","readFile"]}

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+interface JsonSchema {
+    type?: string | string[];
+    properties?: Record<string, JsonSchema>;
+    required?: string[];
+    items?: JsonSchema;
+    enum?: unknown[];
+}
+declare function buildToolArguments(argv: string[], schema: JsonSchema, fixed?: Record<string, unknown>): Record<string, unknown>;
+
+interface DomainCommand {
+    path: string[];
+    tool: string;
+    summary: string;
+    fixedArguments?: Record<string, unknown>;
+}
+declare const DOMAIN_COMMANDS: DomainCommand[];
+declare function resolveDomainCommand(tokens: string[]): DomainCommand;
+
+declare function rootHelp(): string;
+
+declare function runCli(argv: string[]): Promise<{
+    result?: unknown;
+    text?: string;
+    json: boolean;
+}>;
+
+interface SkillInstallOptions {
+    target: "codex" | "agents";
+    scope: "user" | "project";
+    force: boolean;
+    home?: string;
+    cwd?: string;
+}
+declare function printSkill(): Promise<string>;
+declare function installSkill(options: SkillInstallOptions): Promise<string>;
+
+export { DOMAIN_COMMANDS, buildToolArguments, installSkill, printSkill, resolveDomainCommand, rootHelp, runCli };

package/dist/index.js

@@ -0,0 +1,19 @@
+import {
+  DOMAIN_COMMANDS,
+  buildToolArguments,
+  installSkill,
+  printSkill,
+  resolveDomainCommand,
+  rootHelp,
+  runCli
+} from "./chunk-QRRIPLVN.js";
+export {
+  DOMAIN_COMMANDS,
+  buildToolArguments,
+  installSkill,
+  printSkill,
+  resolveDomainCommand,
+  rootHelp,
+  runCli
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/navop.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/navop.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import {
+  runCli
+} from "./chunk-QRRIPLVN.js";
+
+// src/navop.ts
+import { exitCode } from "@navop/client";
+
+// src/output.ts
+import { NavopError } from "@navop/client";
+function success(result) {
+  return JSON.stringify({ ok: true, result });
+}
+function failure(error) {
+  const normalized = error instanceof NavopError ? error : new NavopError("protocol_error", error instanceof Error ? error.message : String(error));
+  return JSON.stringify({
+    ok: false,
+    code: normalized.code,
+    message: normalized.message,
+    ...normalized.details === void 0 ? {} : { details: normalized.details }
+  });
+}
+
+// package.json
+var package_default = {
+  name: "@navop/cli",
+  version: "0.2.0",
+  description: "Terminal CLI and Agent Skill for operating resources in a running Navop desktop application",
+  type: "module",
+  bin: { navop: "dist/navop.js" },
+  exports: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  files: ["dist", "skills", "README.md"],
+  engines: { node: ">=20" },
+  publishConfig: { access: "public" },
+  scripts: {
+    build: "tsup src/navop.ts src/index.ts --format esm --platform node --target node20 --clean --sourcemap --dts"
+  },
+  dependencies: { "@navop/client": "0.2.0" },
+  license: "MIT",
+  repository: { type: "git", url: "git+https://github.com/feigeCode/navop-mcp.git", directory: "packages/cli" },
+  keywords: ["navop", "cli", "terminal", "skill", "agent"]
+};
+
+// src/version.ts
+var PACKAGE_VERSION = package_default.version;
+
+// src/navop.ts
+async function main(argv) {
+  if (argv.includes("--version") || argv.includes("-V")) {
+    process.stdout.write(`${PACKAGE_VERSION}
+`);
+    return;
+  }
+  try {
+    const output = await runCli(argv);
+    if (output.text !== void 0) process.stdout.write(output.text);
+    else process.stdout.write(`${output.json ? success(output.result) : formatHuman(output.result)}
+`);
+  } catch (error) {
+    const json = argv.includes("--json");
+    (json ? process.stdout : process.stderr).write(`${json ? failure(error) : error instanceof Error ? error.message : String(error)}
+`);
+    process.exitCode = exitCode(error);
+  }
+}
+function formatHuman(value) {
+  if (value && typeof value === "object" && "content" in value) return String(value.content);
+  return typeof value === "string" ? value : JSON.stringify(value, null, 2);
+}
+main(process.argv.slice(2)).catch((error) => {
+  process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+  process.exitCode = exitCode(error);
+});
+//# sourceMappingURL=navop.js.map

package/dist/navop.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/navop.ts","../src/output.ts","../package.json","../src/version.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { exitCode } from \"@navop/client\";\nimport { failure, success } from \"./output.js\";\nimport { runCli } from \"./runner.js\";\nimport { PACKAGE_VERSION } from \"./version.js\";\n\nasync function main(argv: string[]): Promise<void> {\n  if (argv.includes(\"--version\") || argv.includes(\"-V\")) {\n    process.stdout.write(`${PACKAGE_VERSION}\\n`);\n    return;\n  }\n  try {\n    const output = await runCli(argv);\n    if (output.text !== undefined) process.stdout.write(output.text);\n    else process.stdout.write(`${output.json ? success(output.result) : formatHuman(output.result)}\\n`);\n  } catch (error) {\n    const json = argv.includes(\"--json\");\n    (json ? process.stdout : process.stderr).write(`${json ? failure(error) : error instanceof Error ? error.message : String(error)}\\n`);\n    process.exitCode = exitCode(error);\n  }\n}\n\nfunction formatHuman(value: unknown): string {\n  if (value && typeof value === \"object\" && \"content\" in value) return String((value as { content: unknown }).content);\n  return typeof value === \"string\" ? value : JSON.stringify(value, null, 2);\n}\n\nmain(process.argv.slice(2)).catch((error) => {\n  process.stderr.write(`${error instanceof Error ? error.message : String(error)}\\n`);\n  process.exitCode = exitCode(error);\n});\n","import { NavopError } from \"@navop/client\";\n\nexport function success(result: unknown): string {\n  return JSON.stringify({ ok: true, result });\n}\n\nexport function failure(error: unknown): string {\n  const normalized = error instanceof NavopError\n    ? error\n    : new NavopError(\"protocol_error\", error instanceof Error ? error.message : String(error));\n  return JSON.stringify({\n    ok: false,\n    code: normalized.code,\n    message: normalized.message,\n    ...(normalized.details === undefined ? {} : { details: normalized.details }),\n  });\n}\n","{\n  \"name\": \"@navop/cli\",\n  \"version\": \"0.2.0\",\n  \"description\": \"Terminal CLI and Agent Skill for operating resources in a running Navop desktop application\",\n  \"type\": \"module\",\n  \"bin\": { \"navop\": \"dist/navop.js\" },\n  \"exports\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"files\": [\"dist\", \"skills\", \"README.md\"],\n  \"engines\": { \"node\": \">=20\" },\n  \"publishConfig\": { \"access\": \"public\" },\n  \"scripts\": {\n    \"build\": \"tsup src/navop.ts src/index.ts --format esm --platform node --target node20 --clean --sourcemap --dts\"\n  },\n  \"dependencies\": { \"@navop/client\": \"0.2.0\" },\n  \"license\": \"MIT\",\n  \"repository\": { \"type\": \"git\", \"url\": \"git+https://github.com/feigeCode/navop-mcp.git\", \"directory\": \"packages/cli\" },\n  \"keywords\": [\"navop\", \"cli\", \"terminal\", \"skill\", \"agent\"]\n}\n","import packageJson from \"../package.json\" with { type: \"json\" };\n\nexport const PACKAGE_VERSION = packageJson.version;\n"],"mappings":";;;;;;AACA,SAAS,gBAAgB;;;ACDzB,SAAS,kBAAkB;AAEpB,SAAS,QAAQ,QAAyB;AAC/C,SAAO,KAAK,UAAU,EAAE,IAAI,MAAM,OAAO,CAAC;AAC5C;AAEO,SAAS,QAAQ,OAAwB;AAC9C,QAAM,aAAa,iBAAiB,aAChC,QACA,IAAI,WAAW,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAC3F,SAAO,KAAK,UAAU;AAAA,IACpB,IAAI;AAAA,IACJ,MAAM,WAAW;AAAA,IACjB,SAAS,WAAW;AAAA,IACpB,GAAI,WAAW,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,WAAW,QAAQ;AAAA,EAC5E,CAAC;AACH;;;AChBA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,aAAe;AAAA,EACf,MAAQ;AAAA,EACR,KAAO,EAAE,OAAS,gBAAgB;AAAA,EAClC,SAAW;AAAA,EACX,OAAS;AAAA,EACT,OAAS,CAAC,QAAQ,UAAU,WAAW;AAAA,EACvC,SAAW,EAAE,MAAQ,OAAO;AAAA,EAC5B,eAAiB,EAAE,QAAU,SAAS;AAAA,EACtC,SAAW;AAAA,IACT,OAAS;AAAA,EACX;AAAA,EACA,cAAgB,EAAE,iBAAiB,QAAQ;AAAA,EAC3C,SAAW;AAAA,EACX,YAAc,EAAE,MAAQ,OAAO,KAAO,kDAAkD,WAAa,eAAe;AAAA,EACpH,UAAY,CAAC,SAAS,OAAO,YAAY,SAAS,OAAO;AAC3D;;;AChBO,IAAM,kBAAkB,gBAAY;;;AHI3C,eAAe,KAAK,MAA+B;AACjD,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AACrD,YAAQ,OAAO,MAAM,GAAG,eAAe;AAAA,CAAI;AAC3C;AAAA,EACF;AACA,MAAI;AACF,UAAM,SAAS,MAAM,OAAO,IAAI;AAChC,QAAI,OAAO,SAAS,OAAW,SAAQ,OAAO,MAAM,OAAO,IAAI;AAAA,QAC1D,SAAQ,OAAO,MAAM,GAAG,OAAO,OAAO,QAAQ,OAAO,MAAM,IAAI,YAAY,OAAO,MAAM,CAAC;AAAA,CAAI;AAAA,EACpG,SAAS,OAAO;AACd,UAAM,OAAO,KAAK,SAAS,QAAQ;AACnC,KAAC,OAAO,QAAQ,SAAS,QAAQ,QAAQ,MAAM,GAAG,OAAO,QAAQ,KAAK,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AACpI,YAAQ,WAAW,SAAS,KAAK;AAAA,EACnC;AACF;AAEA,SAAS,YAAY,OAAwB;AAC3C,MAAI,SAAS,OAAO,UAAU,YAAY,aAAa,MAAO,QAAO,OAAQ,MAA+B,OAAO;AACnH,SAAO,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,OAAO,MAAM,CAAC;AAC1E;AAEA,KAAK,QAAQ,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU;AAC3C,UAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAClF,UAAQ,WAAW,SAAS,KAAK;AACnC,CAAC;","names":[]}

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@navop/cli",
+  "version": "0.2.0",
+  "description": "Terminal CLI and Agent Skill for operating resources in a running Navop desktop application",
+  "type": "module",
+  "bin": { "navop": "dist/navop.js" },
+  "exports": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": ["dist", "skills", "README.md"],
+  "engines": { "node": ">=20" },
+  "publishConfig": { "access": "public" },
+  "scripts": {
+    "build": "tsup src/navop.ts src/index.ts --format esm --platform node --target node20 --clean --sourcemap --dts"
+  },
+  "dependencies": { "@navop/client": "0.2.0" },
+  "license": "MIT",
+  "repository": { "type": "git", "url": "git+https://github.com/feigeCode/navop-mcp.git", "directory": "packages/cli" },
+  "keywords": ["navop", "cli", "terminal", "skill", "agent"]
+}

package/skills/navop/SKILL.md

@@ -0,0 +1,77 @@
+---
+name: navop
+description: Use terminal commands to discover and operate resources exposed by a running Navop desktop application through its host-authoritative Public MCP runtime.
+---
+
+# Navop
+
+Use this Skill when an AI Agent needs to operate Navop resources from a terminal. It keeps a compact workflow in context and loads command help or live schemas only when needed, so the Agent does not carry the complete Navop tool catalog in every turn. This can reduce repeated tool-definition tokens and other context overhead; the amount depends on the client and the number of exposed tools.
+
+The CLI still connects internally to Navop's authenticated loopback Public MCP runtime. Navop remains authoritative for Tool Exposure, permissions, approvals, resource IDs, sessions, results, and audit records. The CLI does not implement SSH, SFTP, terminal, database, Redis, or MongoDB business logic.
+
+The Navop CLI must be installed globally before this Skill can operate resources. Check the command, and install the latest client when it is missing:
+
+```bash
+navop --version
+npm install -g @navop/cli@latest
+navop --version
+```
+
+Every Agent-initiated command must include `--json`. Start with:
+
+```bash
+navop status --json
+```
+
+Read the status result before choosing a tool:
+
+- If Public MCP is unavailable, ask the user to start Navop and enable **Settings > General > MCP > MCP Server**.
+- Inspect `permissionMode`, `availableTools`, `toolGroups`, `disabledToolGroups`, and `guidance`.
+- Treat the running host's `tools/list` response and `navop.runtime_status` result as authoritative. The npm package and this Skill do not define the host's complete tool set.
+- If a tool is unavailable, report its exact name and host-reported tool-group state. Ask the user to enable that group under the returned `settingsPath` and open the required connection or session.
+- `deny` blocks mutations. `ask` requires approval in Navop. `allow` runs mutations automatically, but still requires clear user intent for destructive actions.
+- Never claim a capability is enabled merely because the CLI has a convenience command; the live `availableTools` list is authoritative.
+
+Discover the current client and available command surface when needed:
+
+```bash
+navop --help
+navop tool list --json
+navop tool schema <tool-name> --json
+navop db query --help
+```
+
+If a domain command is exposed in help, use its help and then validate flags against the live schema. Otherwise call the exact host tool:
+
+```bash
+navop tool call <tool-name> --arguments '<json-object-matching-live-schema>' --json
+```
+
+Never invent a command, tool name, flag, argument, resource ID, or session ID from examples in this Skill. Discover resource and session methods from `tool list`, inspect their schemas, and use only IDs returned by Navop.
+
+## Updating the npm client
+
+Check the registry and installed executable when diagnosing a stale client:
+
+```bash
+npm view @navop/cli version
+navop --version
+```
+
+Update the installed CLI before using features that require a newer client:
+
+```bash
+npm install -g @navop/cli@latest
+npm update -g @navop/cli
+navop --version
+navop status --json
+```
+
+Prefer reads before writes. Preserve Navop permission and approval decisions. Never work around a denial. Do not retry a mutating operation after timeout or connection loss because its outcome may be unknown. Do not interrupt or control a visible terminal unless the user explicitly requests that action.
+
+Read these references as needed:
+
+- [commands.md](references/commands.md): dynamic command discovery and Bash examples.
+- [workflows.md](references/workflows.md): safe discovery and execution sequences.
+- [safety.md](references/safety.md): approvals, writes, terminal ownership, and retry rules.
+- [errors.md](references/errors.md): JSON envelope, exit codes, and recovery behavior.

package/skills/navop/references/commands.md

@@ -0,0 +1,65 @@
+# Dynamic command discovery
+
+All Agent calls include `--json`. Add `--discovery <path>` only when the user or host supplies an explicit discovery file.
+
+The running Navop host is authoritative for tool names, descriptions, annotations, and input schemas:
+
+```bash
+navop status --json
+navop --help
+navop tool list --json
+navop tool schema <tool-name> --json
+navop tool call <tool-name> --arguments '<json-object-matching-live-schema>' --json
+```
+
+Compatibility aliases are available when useful:
+
+```bash
+navop tools --json
+navop schema <tool-name> --json
+navop call <tool-name> --arguments '<json-object>' --json
+```
+
+## Representative Bash commands
+
+First discover the connection or session IDs with the live host tools. Replace every placeholder with an ID returned by Navop, and inspect the domain help/schema before executing:
+
+```bash
+navop connections list --json
+navop connections sessions --json
+
+navop ssh exec \
+  --target <ssh-session-id> \
+  --command 'uname -a' \
+  --json
+
+navop sftp list \
+  --connection <ssh-connection-id-or-name> \
+  --path /var/log \
+  --json
+
+navop redis get \
+  --connection-id <redis-connection-id-or-name> \
+  --key app:status \
+  --json
+
+navop mongo find \
+  --connection-id <mongo-session-id> \
+  --database app \
+  --collection users \
+  --filter '{"active":true}' \
+  --limit 20 \
+  --json
+
+navop db query \
+  --connection <database-connection-id-or-name> \
+  --sql 'SELECT 1' \
+  --json
+
+navop terminal read \
+  --target <terminal-session-id> \
+  --lines 80 \
+  --json
+```
+
+These are convenience mappings, not a promise that every host exposes every domain. When a convenience command is absent or does not match the live schema, use `tool list`, `tool schema`, and `tool call`.

package/skills/navop/references/errors.md

@@ -0,0 +1,26 @@
+# JSON and errors
+
+Successful `--json` output:
+
+```json
+{"ok":true,"result":{}}
+```
+
+Failed `--json` output:
+
+```json
+{"ok":false,"code":"...","message":"...","details":{}}
+```
+
+Exit codes:
+
+- `0`: success
+- `2`: invalid CLI arguments or an existing Skill target
+- `3`: Navop is not running or Public MCP is unavailable
+- `4`: discovery or MCP protocol error
+- `5`: requested Navop tool is not exposed
+- `6`: tool failure, permission denial, or approval rejection
+- `8`: timeout
+- `9`: connection closed
+
+For exit `3`, ask the user to start Navop and enable **Settings > General > MCP > MCP Server**. For exit `5`, report the exact missing tool and ask the user to enable its group under **Settings > General > Tool Exposure** and open the relevant connection/session. For exit `6`, report the denial or tool error; never bypass it. For exits `8` or `9`, retry read-only discovery when appropriate, but do not retry mutations automatically.

package/skills/navop/references/safety.md

@@ -0,0 +1,14 @@
+# Safety and ownership
+
+Navop is the only implementation, permission, approval, session, and audit boundary. The CLI must not bypass it.
+
+- Respect approval rejection and permission denial as final for the attempted operation.
+- Prefer read-only commands before mutations.
+- Do not retry a mutation after timeout or connection loss; the outcome may be unknown.
+- Do not send arbitrary bytes to a visible terminal.
+- Do not map Agent cancellation to terminal interruption.
+- Use `navop terminal interrupt ... --json` only after an explicit user request to interrupt the visible foreground process.
+- Do not expose or print the discovery token.
+- Do not guess connection or session identifiers.
+- Do not silently overwrite a Skill or an SFTP/local file target.
+- Do not use the low-level tool interface to bypass a safer domain workflow.

package/skills/navop/references/workflows.md

@@ -0,0 +1,16 @@
+# Safe workflows
+
+## Discover a target
+
+1. Run `navop status --json`.
+2. Run `navop tool list --json` and identify a host-provided read-only resource or session discovery tool.
+3. Run `navop tool schema <tool-name> --json`.
+4. Call that discovery tool and use only an ID returned by Navop.
+
+Never infer an ID from a title, hostname, tab label, or earlier conversation.
+
+## Choose an operation
+
+Use live tool annotations and descriptions. Prefer a tool with `readOnlyHint=true` before a mutating tool. Inspect the live input schema instead of relying on remembered flags or examples.
+
+If a call returns a command, job, or continuation ID, discover matching status/output methods from `tool list`; do not rerun the original mutation merely to retrieve its result.