@nodetool-ai/pack-manager 0.0.0-stage → 0.8.9-beta.1

package/README.md

@@ -1,3 +1,5 @@
-# Temporary Holding Version
+# Pack manager
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Canonical authorized npm pack installation, removal, repair and CLI feature loading.
+Catalog metadata lives in `@nodetool-ai/pack-core` so execution processes do not
+depend on the installer.

package/dist/.nodetool-build-stamp

@@ -0,0 +1 @@
+2026-10-31T09:11:02.374Z

package/dist/child-exit.d.ts

@@ -0,0 +1,3 @@
+import type { SpawnSyncReturns } from "node:child_process";
+export declare function childExitCode(result: Pick<SpawnSyncReturns<unknown>, "status" | "signal" | "error">): number;
+//# sourceMappingURL=child-exit.d.ts.map

package/dist/child-exit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-exit.d.ts","sourceRoot":"","sources":["../src/child-exit.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,wBAAgB,aAAa,CAC3B,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,GACrE,MAAM,CAIR"}

package/dist/child-exit.js

@@ -0,0 +1,17 @@
+/**
+ * The exit code to pass on for a child run with `spawnSync`.
+ *
+ * `result.status` is null when the child was killed by a signal or never
+ * started (`result.error`), so `status ?? 0` reported a crashed or missing
+ * server as success. A signal maps to the shell's `128 + n`; anything else
+ * without a status is a failure.
+ */
+import { constants } from "node:os";
+export function childExitCode(result) {
+    if (result.status !== null)
+        return result.status;
+    if (result.signal)
+        return 128 + (constants.signals[result.signal] ?? 0);
+    return 1;
+}
+//# sourceMappingURL=child-exit.js.map

package/dist/child-exit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-exit.js","sourceRoot":"","sources":["../src/child-exit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,MAAM,UAAU,aAAa,CAC3B,MAAsE;IAEtE,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli-feature.d.ts

@@ -0,0 +1,30 @@
+import type { InstalledPackSnapshot } from "./packs/installed.js";
+import type { CatalogPack, NodeCatalogIndex } from "@nodetool-ai/pack-core/types";
+export interface CliFeatureRunner {
+    /** Arguments after the executable and script path, beginning with the selected command. */
+    readonly run: (argv: readonly string[]) => Promise<void>;
+    readonly resolveWorkflowPacks?: WorkflowPackResolver;
+    readonly initializeExecutionHost?: () => Promise<void>;
+}
+export type WorkflowPackResolver = (target: string, snapshot: InstalledPackSnapshot, catalog: NodeCatalogIndex) => Promise<{
+    readonly packs: readonly string[];
+    readonly runtimeLibraries: readonly string[];
+}>;
+export declare class CliFeatureNotInstalledError extends Error {
+    readonly code = "FEATURE_NOT_INSTALLED";
+    readonly featureIds: readonly string[];
+    constructor(featureId: string);
+}
+/** Validate the exported feature against the administrator's catalog selection. */
+export declare function verifyCliFeature(module: unknown, pack: CatalogPack): CliFeatureRunner;
+/** Load one explicitly selected command feature through the admitted pack tree. */
+export declare function loadInstalledCommandFeature(entryUrl: string, featureId: string, options?: {
+    readonly snapshot?: InstalledPackSnapshot;
+    readonly catalog?: NodeCatalogIndex;
+}): Promise<CliFeatureRunner>;
+/** Activate worker lifecycle integration only when its administrator-selected feature is installed. */
+export declare function initializeInstalledExecutionHost(entryUrl: string, options?: {
+    readonly snapshot?: InstalledPackSnapshot;
+    readonly catalog?: NodeCatalogIndex;
+}): Promise<void>;
+//# sourceMappingURL=cli-feature.d.ts.map

package/dist/cli-feature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-feature.d.ts","sourceRoot":"","sources":["../src/cli-feature.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAElF,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AACD,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACzH,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACjF,CAAC,CAAC;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,YAAY,SAAS,EAAE,MAAM,EAG5B;CACF;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAoBrF;AAED,mFAAmF;AACnF,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC3E,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuBjC;AAED,uGAAuG;AACvG,wBAAsB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC3E,GAAG,OAAO,CAAC,IAAI,CAAC,CAarB"}

package/dist/cli-feature.js

@@ -0,0 +1,89 @@
+import { z } from "zod";
+import { readCatalogIndex } from "@nodetool-ai/pack-core/catalog-data";
+import { resolveInstalledPack } from "@nodetool-ai/pack-core/installed-resolver";
+import { configureCliPackHost, loadCliPackSnapshot, loaderContextForSnapshot } from "./packs/host.js";
+export class CliFeatureNotInstalledError extends Error {
+    code = "FEATURE_NOT_INSTALLED";
+    featureIds;
+    constructor(featureId) {
+        super(`This command requires the ${featureId} feature. Run "nodetool packs add ${featureId}" and restart the command.`);
+        this.featureIds = [featureId];
+    }
+}
+/** Validate the exported feature against the administrator's catalog selection. */
+export function verifyCliFeature(module, pack) {
+    const descriptor = z.object({
+        id: z.literal(pack.id), apiVersion: z.literal(1),
+        requires: z.array(z.string()), capabilities: z.array(z.string())
+    });
+    const feature = z.object({
+        descriptor,
+        run: z.custom(value => typeof value === "function"),
+        resolveWorkflowPacks: z.custom(value => typeof value === "function").optional(),
+        initializeExecutionHost: z.custom(value => typeof value === "function").optional()
+    });
+    const parsed = z.object({ feature }).parse(module).feature;
+    if (new Set(parsed.descriptor.requires).size !== parsed.descriptor.requires.length ||
+        JSON.stringify([...parsed.descriptor.requires].sort()) !== JSON.stringify([...pack.requires].sort())) {
+        throw new Error(`CLI feature ${pack.id} prerequisites differ from its catalog`);
+    }
+    if (new Set(parsed.descriptor.capabilities).size !== parsed.descriptor.capabilities.length) {
+        throw new Error(`CLI feature ${pack.id} declares duplicate capabilities`);
+    }
+    return parsed;
+}
+/** Load one explicitly selected command feature through the admitted pack tree. */
+export async function loadInstalledCommandFeature(entryUrl, featureId, options = {}) {
+    if (!options.snapshot) {
+        configureCliPackHost(entryUrl, { catalog: options.catalog });
+    }
+    const snapshot = options.snapshot ?? await loadCliPackSnapshot();
+    const catalog = options.catalog ?? readCatalogIndex();
+    if (catalog.coreVersion !== snapshot.mode.coreVersion) {
+        throw new Error("Command catalog and CLI versions differ");
+    }
+    const matches = catalog.packs.filter(candidate => candidate.id === featureId);
+    if (matches.length !== 1) {
+        throw new Error(`Command feature ${featureId} must have exactly one catalog entry`);
+    }
+    const pack = matches[0];
+    if (!pack || pack.kind !== "cli-feature") {
+        throw new Error(`Catalog entry ${featureId} is not a CLI command feature`);
+    }
+    if (!snapshot.packs.some(candidate => candidate.id === pack.id)) {
+        throw new CliFeatureNotInstalledError(featureId);
+    }
+    for (const required of pack.requires) {
+        if (!snapshot.packs.some(candidate => candidate.id === required)) {
+            throw new Error(`CLI feature ${pack.id} requires installed pack ${required}`);
+        }
+    }
+    try {
+        const module = await import(resolveInstalledPack(pack, pack.npm.name, loaderContextForSnapshot(snapshot)));
+        return verifyCliFeature(module, pack);
+    }
+    catch (cause) {
+        throw new Error(`Loading configured CLI feature ${pack.id} failed`, { cause });
+    }
+}
+/** Activate worker lifecycle integration only when its administrator-selected feature is installed. */
+export async function initializeInstalledExecutionHost(entryUrl, options = {}) {
+    if (!options.snapshot) {
+        configureCliPackHost(entryUrl, { catalog: options.catalog });
+    }
+    const snapshot = options.snapshot ?? await loadCliPackSnapshot();
+    if (!snapshot.packs.some(candidate => candidate.id === "cli-admin")) {
+        return;
+    }
+    const feature = await loadInstalledCommandFeature(entryUrl, "cli-admin", { ...options, snapshot });
+    if (!feature.initializeExecutionHost) {
+        throw new Error("Configured CLI feature cli-admin does not provide its execution host initializer");
+    }
+    try {
+        await feature.initializeExecutionHost();
+    }
+    catch (cause) {
+        throw new Error("Initializing configured CLI feature cli-admin execution host failed", { cause });
+    }
+}
+//# sourceMappingURL=cli-feature.js.map

package/dist/cli-feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-feature.js","sourceRoot":"","sources":["../src/cli-feature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAatG,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,IAAI,GAAG,uBAAuB,CAAC;IAC/B,UAAU,CAAoB;IACvC,YAAY,SAAiB;QAC3B,KAAK,CAAC,6BAA6B,SAAS,qCAAqC,SAAS,4BAA4B,CAAC,CAAC;QACxH,IAAI,CAAC,UAAU,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,IAAiB;IACjE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;QACvB,UAAU;QACV,GAAG,EAAE,CAAC,CAAC,MAAM,CAA0B,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC;QAC5E,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAuB,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,QAAQ,EAAE;QACrG,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAsB,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,QAAQ,EAAE;KACxG,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;IAC3D,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM;QAChF,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,EAAE,wCAAwC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAgB,EAAE,SAAiB,EAAE,OAAO,GAE1F,EAAE;IACJ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,mBAAmB,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IACtD,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAAC,CAAC;IACtH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,sCAAsC,CAAC,CAAC;IAAC,CAAC;IAClH,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,+BAA+B,CAAC,CAAC;IAAC,CAAC;IACzH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,EAAE,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpH,OAAO,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,QAAgB,EAAE,OAAO,GAE5E,EAAE;IACJ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,mBAAmB,EAAE,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qEAAqE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC"}

package/dist/command-errors.d.ts

@@ -0,0 +1,8 @@
+import { type MissingRuntimeDetails } from "@nodetool-ai/protocol";
+import { type MissingPackDetails } from "@nodetool-ai/protocol";
+export declare function commandMissingPack(value: unknown): MissingPackDetails | null;
+export declare function commandMissingRuntime(value: unknown): MissingRuntimeDetails | null;
+/** Missing runtimes use the shared install-required exit code. */
+export declare function commandFailureExitCode(error: unknown): 1 | 3;
+export declare function printCommandError(err: unknown, json?: boolean): 1 | 3;
+//# sourceMappingURL=command-errors.d.ts.map

package/dist/command-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-errors.d.ts","sourceRoot":"","sources":["../src/command-errors.ts"],"names":[],"mappings":"AASA,OAAO,EAA4E,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC7I,OAAO,EAAmE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAWjI,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAK5E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,GAAG,IAAI,CAKlF;AAED,kEAAkE;AAClE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAE5D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAOrE"}

package/dist/command-errors.js

@@ -0,0 +1,49 @@
+/**
+ * One failure shape for the harness commands.
+ *
+ * An agent that invoked a command with `--json` parses stdout. When the command
+ * crashes it used to get a stderr string and nothing to parse, so the failure
+ * was indistinguishable from a broken pipe. The human message still goes to
+ * stderr; `--json` additionally puts `{"error": …}` on stdout.
+ */
+import { z } from "zod";
+import { missingRuntimeDetailsOf, missingRuntimeDetailsSchema, missingRuntimeText } from "@nodetool-ai/protocol";
+import { missingPackDetailsOf, missingPackDetailsSchema, missingPackText } from "@nodetool-ai/protocol";
+const commandFailureSchema = z.object({
+    missingPack: missingPackDetailsSchema.optional().catch(undefined),
+    missingRuntime: missingRuntimeDetailsSchema.optional().catch(undefined),
+    server: z.object({
+        missingPack: missingPackDetailsSchema.optional().catch(undefined),
+        missingRuntime: missingRuntimeDetailsSchema.optional().catch(undefined)
+    }).optional().catch(undefined)
+});
+export function commandMissingPack(value) {
+    const details = missingPackDetailsOf(value);
+    if (details) {
+        return details;
+    }
+    const parsed = commandFailureSchema.safeParse(value);
+    return parsed.success ? parsed.data.missingPack ?? parsed.data.server?.missingPack ?? null : null;
+}
+export function commandMissingRuntime(value) {
+    const details = missingRuntimeDetailsOf(value);
+    if (details) {
+        return details;
+    }
+    const parsed = commandFailureSchema.safeParse(value);
+    return parsed.success ? parsed.data.missingRuntime ?? parsed.data.server?.missingRuntime ?? null : null;
+}
+/** Missing runtimes use the shared install-required exit code. */
+export function commandFailureExitCode(error) {
+    return commandMissingRuntime(error) || commandMissingPack(error) ? 3 : 1;
+}
+export function printCommandError(err, json) {
+    const missing = commandMissingRuntime(err);
+    const pack = commandMissingPack(err);
+    const message = missing ? missingRuntimeText(missing) : pack ? missingPackText(pack) : err instanceof Error ? err.message : String(err);
+    console.error(message);
+    if (json)
+        console.log(JSON.stringify(missing ? { error: "missing_runtime_package", ...missing } : pack ?? { error: message }, null, 2));
+    return commandFailureExitCode(err);
+}
+//# sourceMappingURL=command-errors.js.map

package/dist/command-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-errors.js","sourceRoot":"","sources":["../src/command-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,kBAAkB,EAA8B,MAAM,uBAAuB,CAAC;AAC7I,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,eAAe,EAA2B,MAAM,uBAAuB,CAAC;AAEjI,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjE,cAAc,EAAE,2BAA2B,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACjE,cAAc,EAAE,2BAA2B,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;KACxE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1G,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,qBAAqB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,IAAc;IAC5D,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxI,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC"}

package/dist/commands/authorized-pack-install.d.ts

@@ -0,0 +1,7 @@
+import { type InstallAuthorization } from "./pack-install-authorization.js";
+/** Renew a stale grant at most three times. Every renewal repeats command consent. */
+export declare function installWithCommandAuthorization(options: {
+    readonly authorize: () => Promise<InstallAuthorization | null>;
+    readonly install: (authorization: InstallAuthorization) => Promise<unknown>;
+}): Promise<boolean>;
+//# sourceMappingURL=authorized-pack-install.d.ts.map

package/dist/commands/authorized-pack-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-pack-install.d.ts","sourceRoot":"","sources":["../../src/commands/authorized-pack-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,KAAK,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5G,sFAAsF;AACtF,wBAAsB,+BAA+B,CAAC,OAAO,EAAE;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E,GAAG,OAAO,CAAC,OAAO,CAAC,CAWnB"}

package/dist/commands/authorized-pack-install.js

@@ -0,0 +1,20 @@
+import { StaleInstallAuthorizationError } from "./pack-install-authorization.js";
+/** Renew a stale grant at most three times. Every renewal repeats command consent. */
+export async function installWithCommandAuthorization(options) {
+    for (let renewal = 0;; renewal++) {
+        const authorization = await options.authorize();
+        if (!authorization) {
+            return false;
+        }
+        try {
+            await options.install(authorization);
+            return true;
+        }
+        catch (error) {
+            if (!(error instanceof StaleInstallAuthorizationError) || renewal >= 3) {
+                throw error;
+            }
+        }
+    }
+}
+//# sourceMappingURL=authorized-pack-install.js.map

package/dist/commands/authorized-pack-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-pack-install.js","sourceRoot":"","sources":["../../src/commands/authorized-pack-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAA6B,MAAM,iCAAiC,CAAC;AAE5G,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,OAGrD;IACC,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAChD,IAAI,CAAC,aAAa,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,8BAA8B,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/output.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Lightweight CLI output + prompt helpers.
+ *
+ * These are pure (only `node:readline`), so command modules can format tables /
+ * JSON and prompt the user without pulling in the heavy deploy stack that
+ * `deploy-helpers.ts` imports at top level. `deploy-helpers.ts` re-exports
+ * everything here for backward compatibility.
+ */
+/** Print a table to stdout. Missing values render as empty. */
+export declare function printTable<Row extends object>(rows: readonly Row[], columns?: string[]): void;
+export declare function asJson(data: unknown): void;
+export declare function printKv(rows: Record<string, unknown>): void;
+/** Prompt for a line on stdin (echoes). TTY only — exits if non-TTY. */
+export declare function promptLine(message: string, opts?: {
+    default?: string;
+}): Promise<string>;
+/** Prompt for hidden input (typed but not echoed). TTY only. */
+export declare function promptHidden(message: string): Promise<string>;
+/**
+ * Read a secret value: hidden input on a TTY, else the first line of stdin.
+ * Rejects when stdin ends before a line arrives, so `secrets store < /dev/null`
+ * fails instead of exiting 0 with nothing stored.
+ */
+export declare function readSecretValue(message: string, input?: NodeJS.ReadableStream & {
+    isTTY?: boolean;
+}): Promise<string>;
+/** Yes/no confirm. Non-TTY returns the `force` value (default: false). */
+export declare function confirm(message: string, opts?: {
+    force?: boolean;
+    default?: boolean;
+}): Promise<boolean>;
+//# sourceMappingURL=output.d.ts.map

package/dist/commands/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/commands/output.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,GAAG,SAAS,MAAM,EAC3C,IAAI,EAAE,SAAS,GAAG,EAAE,EACpB,OAAO,CAAC,EAAE,MAAM,EAAE,GACjB,IAAI,CA0CN;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE1C;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAM3D;AAED,wEAAwE;AACxE,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1B,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED,gEAAgE;AAChE,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuCnE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAM,CAAC,cAAc,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAkB,GACjE,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,0EAA0E;AAC1E,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5C,OAAO,CAAC,OAAO,CAAC,CAclB"}

package/dist/commands/output.js

@@ -0,0 +1,150 @@
+/**
+ * Lightweight CLI output + prompt helpers.
+ *
+ * These are pure (only `node:readline`), so command modules can format tables /
+ * JSON and prompt the user without pulling in the heavy deploy stack that
+ * `deploy-helpers.ts` imports at top level. `deploy-helpers.ts` re-exports
+ * everything here for backward compatibility.
+ */
+import { createInterface } from "node:readline";
+/** Print a table to stdout. Missing values render as empty. */
+export function printTable(rows, columns) {
+    if (rows.length === 0) {
+        console.log("(no results)");
+        return;
+    }
+    // Render every cell up front, keyed by column name. A table prints whatever
+    // column names the caller asked for off rows of any object shape, so the
+    // lookup is by name — not by a property the row type declares.
+    const cells = rows.map((row) => new Map(Object.entries(row).map(([column, value]) => [
+        column,
+        String(value ?? "")
+    ])));
+    const cols = columns ?? Object.keys(rows[0]);
+    // Compute widths in a loop rather than Math.max(...spread): a large table
+    // would spread thousands of args into one call, risking a max-arguments
+    // RangeError and extra allocations.
+    const widths = cols.map((c) => {
+        let width = c.length;
+        for (const rendered of cells) {
+            const len = (rendered.get(c) ?? "").length;
+            if (len > width) {
+                width = len;
+            }
+        }
+        return width;
+    });
+    const sep = widths.map((w) => "─".repeat(w + 2)).join("┼");
+    const header = cols.map((c, i) => ` ${c.padEnd(widths[i])} `).join("│");
+    console.log(header);
+    console.log(sep);
+    for (const rendered of cells) {
+        console.log(cols
+            .map((c, i) => ` ${(rendered.get(c) ?? "").padEnd(widths[i])} `)
+            .join("│"));
+    }
+}
+export function asJson(data) {
+    console.log(JSON.stringify(data, null, 2));
+}
+export function printKv(rows) {
+    const list = Object.entries(rows).map(([key, value]) => ({
+        key,
+        value: String(value ?? "")
+    }));
+    printTable(list, ["key", "value"]);
+}
+/** Prompt for a line on stdin (echoes). TTY only — exits if non-TTY. */
+export async function promptLine(message, opts) {
+    if (!process.stdin.isTTY) {
+        console.error(`Missing value for interactive prompt: ${message}`);
+        process.exit(1);
+    }
+    const rl = createInterface({
+        input: process.stdin,
+        output: process.stderr
+    });
+    return new Promise((resolve) => {
+        const suffix = opts?.default ? ` [${opts.default}]` : "";
+        rl.question(`${message}${suffix}: `, (answer) => {
+            rl.close();
+            const trimmed = answer.trim();
+            resolve(trimmed || (opts?.default ?? ""));
+        });
+    });
+}
+/** Prompt for hidden input (typed but not echoed). TTY only. */
+export async function promptHidden(message) {
+    if (!process.stdin.isTTY) {
+        console.error(`Missing value for interactive prompt: ${message}`);
+        process.exit(1);
+    }
+    process.stderr.write(message);
+    return new Promise((resolve) => {
+        let value = "";
+        const stdin = process.stdin;
+        const wasRaw = stdin.isRaw;
+        stdin.setRawMode(true);
+        stdin.resume();
+        stdin.setEncoding("utf8");
+        const onData = (data) => {
+            for (const ch of data) {
+                if (ch === "\r" || ch === "\n") {
+                    stdin.setRawMode(wasRaw ?? false);
+                    stdin.pause();
+                    stdin.removeListener("data", onData);
+                    process.stderr.write("\n");
+                    resolve(value);
+                    return;
+                }
+                if (ch === "\x03") {
+                    stdin.setRawMode(wasRaw ?? false);
+                    stdin.pause();
+                    process.exit(130);
+                }
+                // DEL (\x7f, most terminals) or BS (\b) erases the last character.
+                if (ch === "\x7f" || ch === "\b") {
+                    value = value.slice(0, -1);
+                    continue;
+                }
+                value += ch;
+            }
+        };
+        stdin.on("data", onData);
+    });
+}
+/**
+ * Read a secret value: hidden input on a TTY, else the first line of stdin.
+ * Rejects when stdin ends before a line arrives, so `secrets store < /dev/null`
+ * fails instead of exiting 0 with nothing stored.
+ */
+export async function readSecretValue(message, input = process.stdin) {
+    if (input.isTTY)
+        return promptHidden(message);
+    const rl = createInterface({ input, terminal: false });
+    try {
+        for await (const line of rl)
+            return line;
+    }
+    finally {
+        rl.close();
+    }
+    throw new Error("stdin ended before a value was read");
+}
+/** Yes/no confirm. Non-TTY returns the `force` value (default: false). */
+export async function confirm(message, opts) {
+    if (opts?.force) {
+        return true;
+    }
+    if (!process.stdin.isTTY) {
+        return false;
+    }
+    const defaultYes = opts?.default ?? false;
+    const hint = defaultYes ? "[Y/n]" : "[y/N]";
+    const answer = await promptLine(`${message} ${hint}`);
+    if (!answer) {
+        return defaultYes;
+    }
+    return /^y(es)?$/i.test(answer);
+}
+//# sourceMappingURL=output.js.map

package/dist/commands/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/commands/output.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CACxB,IAAoB,EACpB,OAAkB;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,GAAG,CACL,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAoB,EAAE,CAAC;QAC7D,MAAM;QACN,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;KACpB,CAAC,CACH,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC9C,0EAA0E;IAC1E,wEAAwE;IACxE,oCAAoC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC3C,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;gBAChB,KAAK,GAAG,GAAG,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,IAAI;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC;aAChE,IAAI,CAAC,GAAG,CAAC,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAa;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAA6B;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,GAAG;QACH,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;KAC3B,CAAC,CAAC,CAAC;IACJ,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,IAA2B;IAE3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAC/B,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;oBAClC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;oBAClB,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;oBAClC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;gBACD,mEAAmE;gBACnE,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBACjC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBACD,KAAK,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,KAAK,GAAgD,OAAO,CAAC,KAAK;IAElE,IAAI,KAAK,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;AACzD,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,OAAe,EACf,IAA6C;IAE7C,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/commands/pack-install-authorization.d.ts

@@ -0,0 +1,40 @@
+import { type InstallSelection, type InstallPacksRequest } from "../packs/install-selection.js";
+declare const AUTHORIZATION: unique symbol;
+export interface InstallAuthorization {
+    readonly [AUTHORIZATION]: true;
+}
+export type InstallCommandContext = "packs-add" | "packs-restore" | "packs-remove" | "packs-repair" | "run" | "debug" | "node-run" | "workflows-run" | "serve" | "mcp-serve" | "headless-job" | "chat" | "agent-tool";
+export type InstallAuthorizationSource = "explicit" | "flag" | "environment" | "prompt";
+interface AuthorizedScope {
+    readonly requestedPacks: ReadonlySet<string>;
+    readonly requestedLibraries: ReadonlySet<string>;
+    readonly operation: "install" | "remove" | "repair";
+    readonly source: InstallAuthorizationSource;
+    readonly root: string;
+    readonly coreVersion: string;
+    readonly mode: InstallSelection["mode"];
+    readonly packs: ReadonlySet<string>;
+    readonly libraries: ReadonlySet<string>;
+    readonly scripts: ReadonlySet<string>;
+    readonly bootstrap: ReadonlySet<string>;
+    readonly mutationPaths: ReadonlySet<string>;
+}
+export declare function installPromptMessage(selection: InstallSelection): string;
+/** Only this CLI command module constructs live authorizations. JSON cannot reproduce one. */
+export declare function authorizePackInstallCommand(options: {
+    readonly request: InstallPacksRequest;
+    readonly command: InstallCommandContext;
+    readonly installMissing?: boolean;
+    readonly confirm?: boolean;
+    readonly prompt?: (options: {
+        message: string;
+        default: false;
+    }) => Promise<boolean>;
+}): Promise<InstallAuthorization | null>;
+export declare function assertLiveInstallAuthorization(value: InstallAuthorization): void;
+export declare class StaleInstallAuthorizationError extends Error {
+    constructor();
+}
+export declare function assertInstallAuthorizationScope(value: InstallAuthorization, selection: InstallSelection, operation?: AuthorizedScope["operation"], request?: InstallPacksRequest): void;
+export {};
+//# sourceMappingURL=pack-install-authorization.d.ts.map

package/dist/commands/pack-install-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-install-authorization.d.ts","sourceRoot":"","sources":["../../src/commands/pack-install-authorization.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAKzH,QAAA,MAAM,aAAa,eAAsC,CAAC;AAC1D,MAAM,WAAW,oBAAoB;IAAG,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAA;CAAE;AACxE,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,KAAK,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,GAClJ,OAAO,GAAG,WAAW,GAAG,cAAc,GAAG,MAAM,GAAG,YAAY,CAAC;AACjE,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAC;AACxF,UAAU,eAAe;IACvB,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7C;AAID,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,CAmBxE;AAED,8FAA8F;AAC9F,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACtF,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CA0BvC;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAGhF;AACD,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,cAAmK;CACpK;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,GAAE,eAAe,CAAC,WAAW,CAAa,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAmClM"}