@oh-hai/cli 0.2.3 → 0.3.1

package/dist/commands/messaging/wire.d.ts

@@ -10,11 +10,17 @@ export type Runtime = "github-actions" | "cli" | "cloud" | "desktop" | "openclaw
 export type RequestMode = "select" | "input" | "confirm";
 /** Hub-attested resolver identity: `<type>:<id>` (spec §9.1). */
 export type Actor = `${"human" | "agent" | "system"}:${string}`;
+/** A §4 destination address (v0.5): `agent:<id>` or `agent:<id>#<sess_…>`. The FIRST `#` is the
+ *  separator, so a `#`-bearing agent id is inexpressible — matching the wire grammar exactly. */
+export type AgentAddress = `agent:${string}`;
 export interface AgentDescriptor {
     id: string;
     run_id: string;
     runtime: Runtime;
     project?: string;
+    /** v0.5 §4.1/§16.2: the submitter's own LIVE session. Binds the Caller mailbox for a response
+     *  and is client-originated lease renewal. Only legal on an envelope declaring >= 0.5. */
+    session?: string;
 }
 export interface ResponseOption {
     value: string;
@@ -44,8 +50,13 @@ export interface TaskAction {
     allowed_resolvers?: Actor[];
     callback?: Callback;
 }
+/** The wire versions this CLI composes. `0.3` is the unchanged human-inbox envelope; `0.5` is
+ *  stamped ONLY on an envelope that carries v0.5 addressing vocabulary (`to` / `agent.session`) —
+ *  the Hub routes schema validation by DECLARED minor and refuses either field on a pre-0.5
+ *  envelope (`422 invalid_field`), so the declared version has to move with the fields. */
+export type WireVersion = "0.3" | "0.5";
 interface BaseEnvelope {
-    ma2h_version: "0.3";
+    ma2h_version: WireVersion;
     created_at: string;
     agent: AgentDescriptor;
     title: string;
@@ -55,6 +66,9 @@ interface BaseEnvelope {
     /** Agent-owned, agent-integrity-sealed resume blob (`{ sealed: "MA2HSEALv1.…" }`, via `--state`).
      *  Opaque to the Hub (MUST NOT inspect/log — spec §9.3). Sealed by `state.ts` on submit. */
     state?: JsonObject;
+    /** v0.5 §4: an optional agent destination (`--to`). Absent = the human inbox, unchanged. Only
+     *  legal on an envelope declaring >= 0.5. */
+    to?: AgentAddress;
 }
 export interface NotifyMessage extends BaseEnvelope {
     type: "notify";
@@ -74,7 +88,19 @@ export type A2hMessage = NotifyMessage | AskMessage | TaskMessage;
 export type AskResolution = "answered" | "declined" | "cancelled" | "expired";
 export type TaskResolution = "completed" | "dismissed" | "expired";
 export type Resolution = AskResolution | TaskResolution;
-export type Status = "open" | "delivered" | Resolution;
+/** The v0.5 §14.2 DELIVERY-track states, reachable only on an ADDRESSED message (`to` present):
+ *  `queued` at accept, `acknowledged` once the addressee consumes the mailbox entry, `bounced`
+ *  when the destination goes terminal before it does. Distinct from the §7 RESOLUTION track above —
+ *  an addressed ask still reports `open` there, because `open` asserts nothing about delivery.
+ *
+ *  This mirror is hand-maintained (see the file header on why the CLI re-declares the wire types),
+ *  which is exactly why it was left behind when the server widened for v0.5 (#649 review residual):
+ *  a mirror that is merely stale is invisible until the day the new values arrive on the wire, and
+ *  addressed sends are the day. Un-widened, `messages list --status queued` would be rejected
+ *  locally as an invalid filter for a state the Hub plainly reports, and `isValidTypeStatus`
+ *  (http.ts) would reject a legitimate `queued` poll body as malformed. */
+export type DeliveryStatus = "queued" | "acknowledged" | "bounced";
+export type Status = "open" | "delivered" | DeliveryStatus | Resolution;
 export interface ResponseDetail {
     /** ask only: chosen option value (string) or the input object. Absent for task. */
     value?: string | JsonObject;
@@ -91,11 +117,28 @@ export interface A2hResponse {
     response?: ResponseDetail;
     state?: JsonObject;
 }
+/** Presence states a Hub may report for a destination (spec §15). `unknown` is the honest "no
+ *  visibility here" — never a claim of liveness — and MUST carry no `last_seen`. */
+export type PresenceState = "online" | "offline" | "unknown";
+/** The destination's §15 reachability at send time, REQUIRED on every addressed-submit ack
+ *  (v0.5 §8.1). Its presence doubles as the sender's version-misroute detector: a pre-0.5 Hub
+ *  cannot emit this object at all, so an addressed ack WITHOUT it proves the `to` was ignored and
+ *  the message filed in a human inbox instead. */
+export interface DestinationSnapshot {
+    state: PresenceState;
+    last_seen?: string;
+}
 export interface SubmitAck {
+    /** The verb's OWNING-track status (spec §8.1) — `open` for any ask/task, `delivered` for a
+     *  human-inbox notify, `queued` for an ADDRESSED notify. An idempotent replay returns the track's
+     *  CURRENT status, which for an addressed notify may already be `acknowledged` / `bounced` /
+     *  `expired` — hence the full `Status` here rather than the accept-time trio. */
     id: string;
-    status: "open" | "delivered";
+    status: Status;
     poll_url: string;
     review_url?: string;
+    /** Present on every ADDRESSED submit ack (v0.5 §8.1); absent on the human-inbox path. */
+    destination?: DestinationSnapshot;
 }
 /** GET /v1/messages/:id — the stored envelope plus its lifecycle status and terminal Response. */
 export type GetMessageBody = A2hMessage & {
@@ -130,4 +173,138 @@ export interface InboundDelivery {
 export interface InboxAckResult {
     acked: string[];
 }
+/** The delivered form of an addressed §4 envelope (spec §8.7.1). Hub-assigned `id`, Hub-attested
+ *  `from` (session-qualified when the sender presented one), and `to` — the address whose principal
+ *  AND session qualifier the §13.4 amendment makes the recipient check against its own identity. */
+export interface InterAgentMessage {
+    ma2h_version: string;
+    type: "notify" | "ask" | "task";
+    id: string;
+    from: string;
+    to: string;
+    created_at: string;
+    title: string;
+    body?: string;
+    priority?: Priority;
+    tags?: string[];
+    context?: JsonValue[];
+    request?: JsonObject;
+    action?: JsonObject;
+    idempotency_key?: string;
+}
+/** A Hub-originated delivery-status notification to a SENDER (spec §8.7.1/§14.2); v0.5 uses it for
+ *  the bounce. Its `id` (`rcpt_…`) is the §8.7.1 ack key. */
+export interface ReceiptEntry {
+    ma2h_version: string;
+    type: "receipt";
+    id: string;
+    in_reply_to: string;
+    event: string;
+    prior: string;
+    at: string;
+    session: string;
+    to: string;
+}
+/** One drained (or streamed) §8.7.1 mailbox entry plus its detached `MA2H-Signature`. The kind is
+ *  the discriminating KEY, not a `type` field — the wire union the Hub emits. */
+export type InboxEntryDelivery = {
+    directive: InboundDirective;
+    signature: string;
+} | {
+    message: InterAgentMessage;
+    signature: string;
+} | {
+    response: A2hResponse;
+    signature: string;
+} | {
+    receipt: ReceiptEntry;
+    signature: string;
+};
+/** The kinds above, as a discriminator a caller can switch on / print. */
+export type InboxEntryKind = "directive" | "message" | "response" | "receipt";
+/** `active → closed` (an explicit DELETE) or `active → expired` (the lease lapsed). Terminal states
+ *  are immutable, and a lapsed lease READS `expired` to every reader before the reaper runs — so a
+ *  client never has to model the reaper's schedule. */
+export type SessionState = "active" | "closed" | "expired";
+/** The session RESOURCE as the Hub returns it (spec §16.1). The id is Hub-minted, non-secret, and
+ *  confers NOTHING on its own — every operation still requires the owning principal's credential,
+ *  so this is safe to print, log, and pass around as an address. */
+export interface Session {
+    id: string;
+    agent_id: string;
+    state: SessionState;
+    created_at: string;
+    /** Current lease expiry. Renewed only by client-originated activity (spec §16.2). */
+    expires_at: string;
+    last_seen?: string;
+    /** The §15.1 REACHABILITY conclusion the Hub states on the session resource (issue #654).
+     *  Distinct from `state`: `state` says whether the LEASE is standing, reachability additionally
+     *  requires client-originated activity inside the presence freshness window. Optional because a
+     *  Hub of an earlier minor does not emit it — and because an ABSENT field must never be read as
+     *  a claim either way. Read it, never re-derive it: the whole point of the Hub stating it once is
+     *  that `fleet ls`, the §8.1 submit ack, the web UI and this CLI cannot drift apart. */
+    reachability?: DestinationSnapshot;
+    ttl_seconds?: number;
+    closed_at?: string;
+    /** Present and `true` ONLY when an account human closed this session — the §16.4 operator
+     *  kill-switch (issue #683 §5). Absent for a lapsed lease and for the agent closing its own
+     *  session, so an ABSENT field is "nobody stopped this", never "unknown".
+     *
+     *  A supervised bridge branches on it: a lapse means "restart and register a fresh session", an
+     *  operator close means "a human stopped you — stay down". Optional because an older Hub does not
+     *  emit it, and falling back to the restart reading is the pre-#683 behaviour. */
+    closed_by_operator?: boolean;
+    run_id?: string;
+    label?: string;
+    kind?: string;
+    project?: string;
+    labels?: Record<string, string>;
+}
+/** `POST /v1/sessions` request body (spec §16.1). Every field is optional — the Hub owns the id,
+ *  the state and the lease; `ttl_seconds` is a REQUEST it clamps two-sidedly into its bounds. */
+export interface SessionRegisterRequest {
+    run_id?: string;
+    label?: string;
+    kind?: string;
+    project?: string;
+    labels?: Record<string, string>;
+    ttl_seconds?: number;
+}
+/** The subset of `GET /v1/capability` the CLI reads. Everything is optional: the document is
+ *  served by Hubs of several minors, and an absent object means "this Hub does not say", never
+ *  "disabled" — see `sessions.ts` on why an absent `inter_agent` in particular must not be read
+ *  as a refusal. */
+export interface HubCapability {
+    ma2h_version?: string;
+    /** The human→agent inbound leg (§8.0/§8.7). `oh-hai bridge` reads the v0.5 additions: whether the
+     *  drain takes `?session=`, and — when the OPTIONAL §8.7.2 SSE binding is offered — where it lives
+     *  and the ceiling on one hold. `stream_max_hold_seconds` is only the ADVERTISED ceiling: the
+     *  per-hold bound arrives on the stream's own `open` event as `hold_ms` and may be shorter (it is
+     *  the lesser of this and a margin before the presenting session's lease expiry), so anything
+     *  scheduled against a hold uses `hold_ms`, never this. */
+    inbound?: {
+        enabled?: boolean;
+        session_param?: boolean;
+        stream_url?: string;
+        stream_max_hold_seconds?: number;
+        max_batch?: number;
+        visibility_timeout_seconds?: number;
+    };
+    /** The §9.7/§9.8 signature freshness window in seconds. `oh-hai bridge` enforces it on a drained
+     *  entry's `t` before emitting anything (§13.4 step 1). */
+    replay_window_seconds?: number;
+    sessions?: {
+        enabled: boolean;
+        min_ttl_seconds?: number;
+        max_ttl_seconds?: number;
+        max_live_per_agent?: number;
+        agent_list_visibility?: boolean;
+        terminal_retention_seconds?: number;
+    };
+    inter_agent?: {
+        enabled: boolean;
+        entry_kinds?: string[];
+        sender_allowlists?: boolean;
+    };
+}
 export {};

package/dist/commands/notify.js

@@ -2,14 +2,20 @@
 // digest). The productized sibling of `scripts/notify.ts`: the bearer is resolved account-aware
 // (keychain/file/env, not raw env), output follows the `--json` envelope, and HTTP statuses map
 // to §7 exit codes. No idempotency key — a notify must not be retried (a retry posts a duplicate).
+//
+// v0.5 (issue #657): `--to agent:<id>[#sess_…]` addresses ANOTHER AGENT instead of the human inbox.
+// An addressed notify acks `queued`, never `delivered` — its lifecycle is the §14.2 delivery track,
+// and the ack's `destination` snapshot is rendered verbatim rather than dressed up as liveness.
 import { CliError, buildOk, serializeEnvelope } from "../envelope.js";
 import { parseCommandArgs } from "./flags.js";
 import { buildNotify } from "./messaging/build.js";
+import { assertHubSpeaksAddressing } from "./messaging/capability.js";
 import { submitEnvelope } from "./messaging/http.js";
 import { resolveSubmitIdentity } from "./messaging/identity.js";
+import { SESSION_OPTIONS, closeOwnedSession, explicitSession, releasingOwnedSessionOnFailure, resolveSessionScope, } from "./messaging/session-scope.js";
 import { dryRunFlag, printDryRunEnvelope, printSubmitAck, resolveRunId, stringFlag } from "./messaging/shared.js";
 import { resolveState } from "./messaging/state.js";
-import { PRIORITIES, isPriority } from "./messaging/validate.js";
+import { PRIORITIES, isPriority, parseDestination } from "./messaging/validate.js";
 export async function notifyCommand(ctx) {
     const { values } = parseCommandArgs(ctx.argv, {
         title: { type: "string" },
@@ -18,6 +24,7 @@ export async function notifyCommand(ctx) {
         tag: { type: "string", multiple: true },
         "dry-run": { type: "boolean" },
         state: { type: "string" },
+        ...SESSION_OPTIONS,
     });
     // Seal an optional `--state` resume blob up front (requires MA2H_STATE_SEAL_KEY) so the
     // preview under --dry-run shows the sealed envelope. notify has no await/open leg.
@@ -35,34 +42,69 @@ export async function notifyCommand(ctx) {
     // Strict parse (not `=== true`): the `=`-form `--dry-run=true` still previews, and a malformed
     // value like `--dry-run=treu` fails as usage rather than falling through to a LIVE submit.
     const dryRun = dryRunFlag(values["dry-run"]);
+    // Parse `--to` BEFORE any credential work so a malformed address is a local usage error (exit 2),
+    // the same discipline `--priority` / `--resolver` follow. `--dry-run` previews it too.
+    const toRaw = stringFlag(values.to);
+    const destination = toRaw !== undefined ? parseDestination(toRaw) : undefined;
     // Under --dry-run neither a token nor a resolved account is required — the envelope is only
     // previewed. Use a placeholder agent id so the composed envelope stays inspectable. A real
     // submit resolves the bearer + account up front (auth/usage errors before composing).
+    // ONE run id per invocation: the session registration and the envelope must agree, or the
+    // `fleet ls` correlation between a session and the message it sent silently breaks.
+    const runId = resolveRunId();
     let agentId = ctx.config.account ?? "oh-hai/notify-bot";
     let token = ""; // reassigned on the real path below; dry-run returns before it's used
+    // Resolve an EXPLICIT session (`--session` / `MA2H_SESSION_ID`) on BOTH paths — it is local, so a
+    // preview that dropped it would misrepresent the live send twice over: no `agent.session`, and a
+    // `ma2h_version` of 0.3 where the real submit says 0.5. A captured `--dry-run` envelope is meant
+    // to be replayable, so it has to match what a live invocation would post. Only the network-backed
+    // AUTO-MINT is suppressed under --dry-run (a preview must create no durable Hub state).
+    const attached = explicitSession(values);
+    let scope = attached !== undefined ? { ...attached, owned: false } : undefined;
     if (!dryRun) {
+        // Gate BEFORE minting: a refused address must not leave a registered session behind. This is
+        // the same cached check `submitEnvelope` enforces as the un-forgettable backstop (one HTTP
+        // probe per process either way), run early so nothing durable is created for a send that
+        // cannot legally go.
+        if (destination !== undefined)
+            await assertHubSpeaksAddressing(ctx, destination.address);
         const identity = await resolveSubmitIdentity(ctx);
         agentId = identity.agentId;
         token = identity.token;
+        scope = await resolveSessionScope(ctx, values, identity, destination !== undefined, runId);
     }
     const notify = buildNotify({
-        agent: { id: agentId, run_id: resolveRunId() },
+        agent: { id: agentId, run_id: runId, ...(scope !== undefined ? { session: scope.id } : {}) },
         title,
+        ...(destination !== undefined ? { to: destination.address } : {}),
         ...(body !== undefined ? { body } : {}),
         ...(priority !== undefined ? { priority } : {}),
         ...(tags.length > 0 ? { tags } : {}),
         ...(state !== undefined ? { state } : {}),
     });
     if (dryRun) {
+        // Say what the preview cannot show: a live addressed send with nothing attached would register a
+        // session and stamp it, so an envelope captured here is short exactly that field.
+        if (destination !== undefined && scope === undefined) {
+            ctx.io.err("note: a live --to send registers a session and adds `agent.session`; this preview cannot (it makes no Hub call).");
+        }
         printDryRunEnvelope(ctx, "notify", notify);
         return;
     }
-    const ack = await submitEnvelope(ctx, token, notify);
+    const ack = await releasingOwnedSessionOnFailure(ctx, token, scope, () => submitEnvelope(ctx, token, notify, {
+        ...(destination !== undefined ? { addressedTo: destination.address } : {}),
+    }));
+    // A notify has no return leg — it carries no idempotency key and must never be retried — so a
+    // session THIS process minted for it has nothing left to receive, and closing it frees the
+    // §16.1 live-session slot immediately instead of holding it for the whole lease. An ATTACHED
+    // session is untouched: it belongs to whoever exported it.
+    if (scope?.owned === true)
+        await closeOwnedSession(ctx, token, scope.id);
     if (ctx.json) {
-        ctx.io.log(serializeEnvelope(buildOk("notify", { id: ack.id })));
+        ctx.io.log(serializeEnvelope(buildOk("notify", { id: ack.id, status: ack.status, destination: ack.destination, to: destination?.address })));
     }
     else {
-        printSubmitAck(ctx, "notify posted", ack);
+        printSubmitAck(ctx, "notify posted", ack, false, destination !== undefined);
     }
 }
 //# sourceMappingURL=notify.js.map

package/dist/commands/notify.js.map

@@ -1 +1 @@
-{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../src/commands/notify.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,gGAAgG;AAChG,gGAAgG;AAChG,mGAAmG;AAEnG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE;QAC5C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC1B,CAAC,CAAC;IAEH,wFAAwF;IACxF,mFAAmF;IACnF,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,uBAAuB,QAAQ,uBAAuB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,+FAA+F;IAC/F,2FAA2F;IAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7C,4FAA4F;IAC5F,2FAA2F;IAC3F,sFAAsF;IACtF,IAAI,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,mBAAmB,CAAC;IACxD,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC,sEAAsE;IACtF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC3B,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAC9C,KAAK;QACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IAEH,IAAI,MAAM,EAAE,CAAC;QACX,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC"}
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../src/commands/notify.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,gGAAgG;AAChG,gGAAgG;AAChG,mGAAmG;AACnG,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,gGAAgG;AAEhG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,8BAA8B,EAC9B,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE;QAC5C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,GAAG,eAAe;KACnB,CAAC,CAAC;IAEH,wFAAwF;IACxF,mFAAmF;IACnF,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,qDAAqD,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,uBAAuB,QAAQ,uBAAuB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,+FAA+F;IAC/F,2FAA2F;IAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7C,kGAAkG;IAClG,uFAAuF;IACvF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,4FAA4F;IAC5F,2FAA2F;IAC3F,sFAAsF;IACtF,0FAA0F;IAC1F,oFAAoF;IACpF,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,mBAAmB,CAAC;IACxD,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC,sEAAsE;IACtF,kGAAkG;IAClG,iGAAiG;IACjG,iGAAiG;IACjG,kGAAkG;IAClG,wFAAwF;IACxF,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAiC,CAAC,CAAC;IACpE,IAAI,KAAK,GAA6B,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,6FAA6F;QAC7F,2FAA2F;QAC3F,yFAAyF;QACzF,qBAAqB;QACrB,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,yBAAyB,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC3B,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACvB,KAAK,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAiC,EAAE,QAAQ,EAAE,WAAW,KAAK,SAAS,EAAE,KAAK,CAAC,CAAC;IACxH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC5F,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IAEH,IAAI,MAAM,EAAE,CAAC;QACX,iGAAiG;QACjG,kFAAkF;QAClF,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACrD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,kHAAkH,CAAC,CAAC;QACjI,CAAC;QACD,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,8BAA8B,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CACvE,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE;QACjC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CACH,CAAC;IAEF,8FAA8F;IAC9F,2FAA2F;IAC3F,6FAA6F;IAC7F,2DAA2D;IAC3D,IAAI,KAAK,EAAE,KAAK,KAAK,IAAI;QAAE,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAEzE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,iBAAiB,CACf,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAC9G,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/commands/registry.js

@@ -96,9 +96,15 @@ export const COMMANDS = [
             "oh-hai notify — fire-and-forget notification (status / FYI / digest).",
             "",
             "Usage: oh-hai notify --title <t> [--body <b>] [--priority <low|normal|high|urgent>]",
-            "                     [--tag <t>]... [--dry-run]",
+            "                     [--tag <t>]... [--to agent:<id>[#sess_…]] [--session <sess_…>]",
+            "                     [--no-session] [--dry-run]",
             "",
             "No idempotency key — a notify is fire-and-forget and must not be retried.",
+            "",
+            "--to addresses ANOTHER AGENT instead of the human inbox (v0.5 §4). Such a notify acks",
+            "`queued`, never `delivered` — it is sitting in a mailbox that may never be drained — and the",
+            "ack's destination reachability is printed exactly as the Hub reported it, including",
+            "'unknown', which means the Hub has no visibility and never that the addressee is down.",
         ].join("\n"),
     },
     {
@@ -111,10 +117,16 @@ export const COMMANDS = [
             "",
             "Usage: oh-hai ask submit --mode <select|input|confirm> --title <t>",
             "                         [--resolver human:<id>]... [--option k:Label]... [--schema <json>]",
+            "                         [--to agent:<id>[#sess_…]] [--session <sess_…>] [--no-session]",
             "       oh-hai ask await  --id <id> [--interval <ms>] [--await-timeout <ms>]",
             "",
             "Carries a REQUIRED idempotency key. --resolver is optional: with none, the account",
             "owner can answer (it needn't be hand-typed). See cli spec §4.4.",
+            "",
+            "--to asks ANOTHER AGENT rather than a human (v0.5 §4). The answer routes back to your own",
+            "SESSION, so one is registered if you have not attached one — and left open afterwards, since",
+            "closing it is what would make the reply undeliverable. The id is printed with an export line",
+            "so the invocation that awaits the answer can present the same session.",
         ].join("\n"),
     },
     {
@@ -127,10 +139,14 @@ export const COMMANDS = [
             "",
             "Usage: oh-hai task submit --instructions <text> --title <t> [--resolver human:<id>]...",
             "                          [--checklist <text>]... [--callback pull|push]",
+            "                          [--to agent:<id>[#sess_…]] [--session <sess_…>] [--no-session]",
             "       oh-hai task await  --id <id> [--interval <ms>] [--await-timeout <ms>]",
             "",
             "Terminal by default. --resolver is optional: with none, the account owner can mark",
             "it done. See cli spec §4.4.",
+            "",
+            "--to hands the action to ANOTHER AGENT rather than a human (v0.5 §4); as with ask, the",
+            "completion routes back to your session, which is registered if needed and left open.",
         ].join("\n"),
     },
     {
@@ -169,17 +185,123 @@ export const COMMANDS = [
             "mailbox. See cli spec §4.7.",
         ].join("\n"),
     },
+    {
+        name: "bridge",
+        summary: "supervised, loud-failure consumer of your session's mailbox (v0.5)",
+        issue: 658,
+        // `status` is the only subcommand; a bare `oh-hai bridge` RUNS the bridge, so the operand is
+        // optional and the handler parses it itself (parseSubcommandArgs would demand one).
+        subcommands: ["status"],
+        help: [
+            "oh-hai bridge — deliver your session's mail, or die saying why (cli spec §4.15).",
+            "",
+            "Usage: oh-hai bridge [--until-event | --stream] [--session <sess_…>] [--transport auto|sse|poll]",
+            "                     [--interval <ms>] [--max <n>] [--max-retries <n>]",
+            "                     [--allow-from agent:<id>[#sess_…] | any-in-account]... [--json]",
+            "       oh-hai bridge status",
+            "",
+            "Drains the v0.5 session-scoped mailbox (§8.7.1) — directives PLUS the inter-agent entry",
+            "kinds — over SSE where the Hub offers it (§8.7.2), else long-poll. --until-event (the",
+            "default) holds until the first entry, hands it over, acks, and exits 0: the primitive a",
+            "harness re-invokes. --stream never exits on entries. Under --json each entry is one NDJSON",
+            "envelope, forwarded byte-verbatim with its signature.",
+            "",
+            "The Hub BOUNDS every stream hold and closes it on purpose — that close is not an error, and",
+            "reconnecting is what renews your session lease (§16.2). Backoff is reserved for real faults.",
+            "",
+            "§13.4 is enforced before anything is printed: signature freshness + replay, entry shape, and",
+            "the addressee check INCLUDING the session qualifier. Acting on an addressed ask/task needs an",
+            "EXPLICIT --allow-from policy — there is no permissive default, by spec.",
+            "",
+            "Fatal exits are distinct so a supervisor can branch: 3 auth (stop — a human fixes it),",
+            "11 session terminal (restart), 12 verification failure (stop), 13 retries exhausted (restart),",
+            "14 a human closed your session — the §16.4 operator kill-switch (STOP; do not restart, and do",
+            "not open a replacement session — restarting is what silently undoes the human's decision).",
+            "Do NOT use a blanket restart-on-any-nonzero policy: it defeats all five. Put the stop classes",
+            "in RestartPreventExitStatus (2 3 12 14). See docs/guides/bridge-supervision.md.",
+        ].join("\n"),
+    },
+    {
+        name: "session",
+        summary: "open / read / close this run's addressing scope (v0.5 sessions)",
+        issue: 657,
+        subcommands: ["start", "close", "status"],
+        help: [
+            "oh-hai session — the MA2H v0.5 §16 session: an addressing scope for ONE live run.",
+            "",
+            "Usage: oh-hai session start  [--label <l>] [--kind <k>] [--project <p>] [--run-id <r>] [--ttl <seconds>]",
+            "       oh-hai session status [--id <sess_…>]",
+            "       oh-hai session close  [--id <sess_…>]",
+            "",
+            "`agent.id` names a machine principal many concurrent runs can share, so on its own it cannot",
+            "say WHICH run you are talking to. A session can: it is Hub-minted, lease-bound, and is the",
+            "thing `--to agent:<id>#<sess_…>` addresses — and the thing an addressed ask routes its answer",
+            "back to. `start` prints the id plus the `export MA2H_SESSION_ID=…` line that attaches later",
+            "invocations (attaching also RENEWS the lease, so an agent that keeps working stays live with",
+            "no keep-alive of its own). `status`/`close` default to that attached session when --id is",
+            "omitted; `close` is idempotent. A session id is NOT a credential — it is non-secret and",
+            "confers nothing; every call still presents your token, which is never printed.",
+        ].join("\n"),
+    },
+    {
+        name: "fleet",
+        summary: "list the agent sessions you can address with --to",
+        issue: 657,
+        subcommands: ["ls"],
+        help: [
+            "oh-hai fleet — discover the sessions this credential can see (cli spec §4.13).",
+            "",
+            "Usage: oh-hai fleet ls [--all] [--limit <n>] [--offset <n>]",
+            "",
+            "Prints one row per session with the exact ADDRESS to copy into `--to`, plus state, age,",
+            "label, kind and project. Live sessions only by default; --all includes closed/expired ones,",
+            "which the Hub retains for a window. The SCOPE is not a flag — you always see your own",
+            "sessions, and other agents' only where the Hub permits same-account listing (§16.4, off by",
+            "default). The command says which one it printed rather than letting a narrowed list read as",
+            "'nobody else is running'.",
+        ].join("\n"),
+    },
+    {
+        name: "messages",
+        summary: "list the agent's own submitted messages (history / dedupe)",
+        issue: 572,
+        subcommands: ["list"],
+        help: [
+            "oh-hai messages — read the messages THIS agent has submitted (cli spec §4.11).",
+            "",
+            "Usage: oh-hai messages list [--limit <n>] [--offset <n>] [--status <s>] [--type <t>]",
+            "",
+            "Lists the agent's OWN submitted messages (bearer-scoped — never the human inbox), newest",
+            "first, for history review or to dedupe before resubmitting. Each row shows the message's",
+            "status but NOT the resolved answer body (the list is a pure index) — pull a specific answer",
+            "by its id. Paginated: --limit (default 50, the Hub clamps to 200) / --offset page one window",
+            "per call; when a full page comes back, re-run with the printed --offset to continue. Filter",
+            "with --status (open | delivered | answered | declined | cancelled | expired | completed |",
+            "dismissed) and/or --type (notify | ask | task). Under --json the ok-envelope carries",
+            "{ messages, count, has_more, next_offset }.",
+        ].join("\n"),
+    },
     {
         name: "doctor",
-        summary: "config + keychain + connectivity + test-notify checks",
+        summary: "config + keychain + connectivity checks, and the end-to-end reachability self-test",
         issue: 108,
         subcommands: [],
         help: [
             "oh-hai doctor — diagnose setup (config, keychain, connectivity).",
             "",
-            "Usage: oh-hai doctor [--test-notify]",
+            "Usage: oh-hai doctor [--test-notify] [--self-test]",
             "",
             "Local checks run offline; connectivity + --test-notify are network checks. See cli spec §4.6.",
+            "",
+            "--self-test proves the loop instead of a precondition: it registers a session, sends this agent a",
+            "message addressed to it, drains it back through the same §13.4 checks `oh-hai bridge` applies, acks",
+            "it, reports the reachability a human would see, and closes the session. Those steps are REQUIRED —",
+            "if the round trip does not complete, doctor exits non-zero. It sends real traffic, so it is opt-in.",
+            "",
+            "One side effect worth knowing: a session-scoped drain claims the PRINCIPAL's queued mail too",
+            "(first-claim-wins, §8.7.1), so on a busy agent the probe can briefly lease an entry meant for a",
+            "running bridge. It never acks those, so each returns to the queue when its lease lapses — delayed,",
+            "not lost — and the report names any it touched. Prefer running it when no bridge is mid-flight.",
         ].join("\n"),
     },
     {
@@ -195,6 +317,9 @@ export const COMMANDS = [
             "Writes a vendor-neutral OH HAI snippet into the agent-instruction files this machine's",
             "agents already read: the cross-vendor AGENTS.md (project-level by default; --global for",
             "the user-level convention path) plus any detected vendor files (CLAUDE.md, GEMINI.md, …).",
+            "The snippet covers BOTH directions — when to notify/ask/task a human, and how to stay",
+            "REACHABLE (open a session, run `oh-hai bridge --until-event` as a background task, and branch",
+            "on its exit code rather than looping blindly) plus the `--to` addressing conventions.",
             "Idempotent — a stable marked block it updates in place, never a duplicate; never a secret.",
             "--dry-run previews what it would touch; --yes skips the confirm (required under --json).",
         ].join("\n"),

package/dist/commands/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/commands/registry.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,mFAAmF;AACnF,kFAAkF;AAClF,kGAAkG;AAelG,MAAM,CAAC,MAAM,QAAQ,GAA2B;IAC9C;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,gEAAgE;YAChE,EAAE;YACF,qBAAqB;YACrB,EAAE;YACF,mFAAmF;YACnF,oFAAoF;YACpF,sFAAsF;YACtF,uFAAuF;YACvF,mDAAmD;SACpD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,+CAA+C;QACxD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,iEAAiE;YACjE,EAAE;YACF,wCAAwC;YACxC,uEAAuE;YACvE,EAAE;YACF,mFAAmF;YACnF,mFAAmF;YACnF,yEAAyE;YACzE,mFAAmF;YACnF,qCAAqC;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,kFAAkF;YAClF,EAAE;YACF,+CAA+C;YAC/C,EAAE;YACF,6DAA6D;SAC9D,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+EAA+E;QACxF,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,0EAA0E;YAC1E,EAAE;YACF,gCAAgC;YAChC,EAAE;YACF,kFAAkF;YAClF,qFAAqF;YACrF,sFAAsF;YACtF,iDAAiD;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,+EAA+E;QACxF,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,yEAAyE;YACzE,EAAE;YACF,8EAA8E;YAC9E,0DAA0D;YAC1D,8DAA8D;YAC9D,EAAE;YACF,kFAAkF;YAClF,uFAAuF;YACvF,sFAAsF;YACtF,8EAA8E;YAC9E,oFAAoF;YACpF,oDAAoD;SACrD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uCAAuC;QAChD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,uEAAuE;YACvE,EAAE;YACF,qFAAqF;YACrF,iDAAiD;YACjD,EAAE;YACF,2EAA2E;SAC5E,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAChC,IAAI,EAAE;YACJ,wCAAwC;YACxC,EAAE;YACF,oEAAoE;YACpE,6FAA6F;YAC7F,6EAA6E;YAC7E,EAAE;YACF,oFAAoF;YACpF,iEAAiE;SAClE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAChC,IAAI,EAAE;YACJ,6CAA6C;YAC7C,EAAE;YACF,wFAAwF;YACxF,0EAA0E;YAC1E,8EAA8E;YAC9E,EAAE;YACF,oFAAoF;YACpF,6BAA6B;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACzC,IAAI,EAAE;YACJ,gDAAgD;YAChD,EAAE;YACF,2BAA2B;YAC3B,6CAA6C;YAC7C,yDAAyD;YACzD,EAAE;YACF,oBAAoB;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,IAAI,EAAE;YACJ,yDAAyD;YACzD,EAAE;YACF,4EAA4E;YAC5E,EAAE;YACF,6EAA6E;YAC7E,6EAA6E;YAC7E,8EAA8E;YAC9E,8EAA8E;YAC9E,gFAAgF;YAChF,8EAA8E;YAC9E,mFAAmF;YACnF,+EAA+E;YAC/E,6BAA6B;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uDAAuD;QAChE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,kEAAkE;YAClE,EAAE;YACF,sCAAsC;YACtC,EAAE;YACF,+FAA+F;SAChG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,gFAAgF;YAChF,EAAE;YACF,oDAAoD;YACpD,EAAE;YACF,wFAAwF;YACxF,yFAAyF;YACzF,2FAA2F;YAC3F,4FAA4F;YAC5F,0FAA0F;SAC3F,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,yDAAyD;QAClE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,uFAAuF;YACvF,EAAE;YACF,iCAAiC;YACjC,EAAE;YACF,gGAAgG;YAChG,gGAAgG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;YAC/F,2EAA2E;SAC5E,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/commands/registry.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,mFAAmF;AACnF,kFAAkF;AAClF,kGAAkG;AAelG,MAAM,CAAC,MAAM,QAAQ,GAA2B;IAC9C;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,gEAAgE;YAChE,EAAE;YACF,qBAAqB;YACrB,EAAE;YACF,mFAAmF;YACnF,oFAAoF;YACpF,sFAAsF;YACtF,uFAAuF;YACvF,mDAAmD;SACpD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,+CAA+C;QACxD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,iEAAiE;YACjE,EAAE;YACF,wCAAwC;YACxC,uEAAuE;YACvE,EAAE;YACF,mFAAmF;YACnF,mFAAmF;YACnF,yEAAyE;YACzE,mFAAmF;YACnF,qCAAqC;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,kFAAkF;YAClF,EAAE;YACF,+CAA+C;YAC/C,EAAE;YACF,6DAA6D;SAC9D,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+EAA+E;QACxF,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,0EAA0E;YAC1E,EAAE;YACF,gCAAgC;YAChC,EAAE;YACF,kFAAkF;YAClF,qFAAqF;YACrF,sFAAsF;YACtF,iDAAiD;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,+EAA+E;QACxF,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,yEAAyE;YACzE,EAAE;YACF,8EAA8E;YAC9E,0DAA0D;YAC1D,8DAA8D;YAC9D,EAAE;YACF,kFAAkF;YAClF,uFAAuF;YACvF,sFAAsF;YACtF,8EAA8E;YAC9E,oFAAoF;YACpF,oDAAoD;SACrD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uCAAuC;QAChD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,uEAAuE;YACvE,EAAE;YACF,qFAAqF;YACrF,qFAAqF;YACrF,iDAAiD;YACjD,EAAE;YACF,2EAA2E;YAC3E,EAAE;YACF,uFAAuF;YACvF,8FAA8F;YAC9F,qFAAqF;YACrF,wFAAwF;SACzF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAChC,IAAI,EAAE;YACJ,wCAAwC;YACxC,EAAE;YACF,oEAAoE;YACpE,6FAA6F;YAC7F,yFAAyF;YACzF,6EAA6E;YAC7E,EAAE;YACF,oFAAoF;YACpF,iEAAiE;YACjE,EAAE;YACF,2FAA2F;YAC3F,8FAA8F;YAC9F,8FAA8F;YAC9F,wEAAwE;SACzE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAChC,IAAI,EAAE;YACJ,6CAA6C;YAC7C,EAAE;YACF,wFAAwF;YACxF,0EAA0E;YAC1E,0FAA0F;YAC1F,8EAA8E;YAC9E,EAAE;YACF,oFAAoF;YACpF,6BAA6B;YAC7B,EAAE;YACF,wFAAwF;YACxF,sFAAsF;SACvF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACzC,IAAI,EAAE;YACJ,gDAAgD;YAChD,EAAE;YACF,2BAA2B;YAC3B,6CAA6C;YAC7C,yDAAyD;YACzD,EAAE;YACF,oBAAoB;SACrB,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,IAAI,EAAE;YACJ,yDAAyD;YACzD,EAAE;YACF,4EAA4E;YAC5E,EAAE;YACF,6EAA6E;YAC7E,6EAA6E;YAC7E,8EAA8E;YAC9E,8EAA8E;YAC9E,gFAAgF;YAChF,8EAA8E;YAC9E,mFAAmF;YACnF,+EAA+E;YAC/E,6BAA6B;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,oEAAoE;QAC7E,KAAK,EAAE,GAAG;QACV,6FAA6F;QAC7F,oFAAoF;QACpF,WAAW,EAAE,CAAC,QAAQ,CAAC;QACvB,IAAI,EAAE;YACJ,kFAAkF;YAClF,EAAE;YACF,kGAAkG;YAClG,wEAAwE;YACxE,sFAAsF;YACtF,6BAA6B;YAC7B,EAAE;YACF,yFAAyF;YACzF,uFAAuF;YACvF,yFAAyF;YACzF,4FAA4F;YAC5F,uDAAuD;YACvD,EAAE;YACF,6FAA6F;YAC7F,8FAA8F;YAC9F,EAAE;YACF,8FAA8F;YAC9F,+FAA+F;YAC/F,yEAAyE;YACzE,EAAE;YACF,wFAAwF;YACxF,gGAAgG;YAChG,+FAA+F;YAC/F,4FAA4F;YAC5F,+FAA+F;YAC/F,iFAAiF;SAClF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,iEAAiE;QAC1E,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;QACzC,IAAI,EAAE;YACJ,mFAAmF;YACnF,EAAE;YACF,0GAA0G;YAC1G,8CAA8C;YAC9C,8CAA8C;YAC9C,EAAE;YACF,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;YAC/F,6FAA6F;YAC7F,8FAA8F;YAC9F,2FAA2F;YAC3F,yFAAyF;YACzF,gFAAgF;SACjF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,mDAAmD;QAC5D,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE;YACJ,gFAAgF;YAChF,EAAE;YACF,6DAA6D;YAC7D,EAAE;YACF,yFAAyF;YACzF,6FAA6F;YAC7F,uFAAuF;YACvF,4FAA4F;YAC5F,6FAA6F;YAC7F,2BAA2B;SAC5B,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,4DAA4D;QACrE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE;YACJ,gFAAgF;YAChF,EAAE;YACF,sFAAsF;YACtF,EAAE;YACF,0FAA0F;YAC1F,0FAA0F;YAC1F,6FAA6F;YAC7F,8FAA8F;YAC9F,6FAA6F;YAC7F,2FAA2F;YAC3F,sFAAsF;YACtF,6CAA6C;SAC9C,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,oFAAoF;QAC7F,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,kEAAkE;YAClE,EAAE;YACF,oDAAoD;YACpD,EAAE;YACF,+FAA+F;YAC/F,EAAE;YACF,mGAAmG;YACnG,qGAAqG;YACrG,oGAAoG;YACpG,qGAAqG;YACrG,EAAE;YACF,8FAA8F;YAC9F,iGAAiG;YACjG,oGAAoG;YACpG,iGAAiG;SAClG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,gFAAgF;YAChF,EAAE;YACF,oDAAoD;YACpD,EAAE;YACF,wFAAwF;YACxF,yFAAyF;YACzF,2FAA2F;YAC3F,uFAAuF;YACvF,+FAA+F;YAC/F,uFAAuF;YACvF,4FAA4F;YAC5F,0FAA0F;SAC3F,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,yDAAyD;QAClE,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,EAAE;QACf,IAAI,EAAE;YACJ,uFAAuF;YACvF,EAAE;YACF,iCAAiC;YACjC,EAAE;YACF,gGAAgG;YAChG,gGAAgG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,+FAA+F;YAC/F,2EAA2E;SAC5E,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/dist/commands/self-test.d.ts

@@ -0,0 +1,17 @@
+import type { CommandContext } from "./context.js";
+/** One self-test step, shaped exactly like a `doctor` check so the two render through one reporter. */
+export interface SelfTestStep {
+    name: string;
+    status: "pass" | "warn" | "fail";
+    detail: string;
+    /** Set on a `fail` only — the code `doctor` returns. Every self-test failure is REQUIRED. */
+    exitCode?: number;
+}
+/**
+ * Run the end-to-end self-test and return its ordered steps.
+ *
+ * NEVER THROWS for a diagnosable failure: a self-test that threw would lose the steps that already
+ * passed, which are exactly what tells a human *where* the loop breaks. Every failure becomes a
+ * `fail` step carrying its exit code; the caller decides the process exit.
+ */
+export declare function runSelfTest(ctx: CommandContext): Promise<SelfTestStep[]>;