@qodalis/cli 2.0.0-beta.13 → 2.0.0-beta.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qodalis/cli",
-  "version": "2.0.0-beta.13",
+  "version": "2.0.0-beta.14",
   "description": "Framework-agnostic CLI engine for @qodalis terminal applications.",
   "author": "Nicolae Lupei, Qodalis Solutions",
   "license": "MIT",
@@ -30,7 +30,7 @@
     "./assets/*": "./assets/*"
   },
   "dependencies": {
-    "@qodalis/cli-core": "2.0.0-beta.13",
+    "@qodalis/cli-core": "2.0.0-beta.14",
     "@xterm/xterm": "^5.5.0",
     "@xterm/addon-fit": "^0.10.0",
     "@xterm/addon-web-links": "^0.11.0",

package/public-api.d.mts

@@ -1,5 +1,5 @@
 import * as _qodalis_cli_core from '@qodalis/cli-core';
-import { ICliCommandProcessor, ICliCommandParameterDescriptor, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliKeyValueStore, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, CliState, CliEngineSnapshot, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, CliIcon } from '@qodalis/cli-core';
+import { ICliCommandProcessor, ICliCommandParameterDescriptor, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliKeyValueStore, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, ICliPermissionRegistry, CliPermissionDefinition, CliState, CliEngineSnapshot, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, CliIcon } from '@qodalis/cli-core';
 export { ICliUserSessionService_TOKEN, ICliUsersStoreService_TOKEN } from '@qodalis/cli-core';
 import { ITheme, Terminal, ITerminalAddon, ITerminalOptions, ITerminalInitOnlyOptions } from '@xterm/xterm';
 import * as rxjs from 'rxjs';
@@ -153,7 +153,7 @@ declare const CliKeyValueStore_TOKEN = "cli-key-value-store";
  */
 declare const SyntaxHighlighterRegistry_TOKEN = "syntax-highlighter-registry";
 
-declare const LIBRARY_VERSION = "2.0.0-beta.13";
+declare const LIBRARY_VERSION = "2.0.0-beta.14";
 declare const API_VERSION = 2;
 
 declare class CliAliasCommandProcessor implements ICliCommandProcessor {
@@ -163,7 +163,11 @@ declare class CliAliasCommandProcessor implements ICliCommandProcessor {
     processors?: ICliCommandProcessor[] | undefined;
     metadata?: CliProcessorMetadata | undefined;
     stateConfiguration?: CliStateConfiguration | undefined;
+    /** Shared aliases (used when no auth module is loaded) */
     userAliases: Record<string, string>;
+    private aliasState;
+    /** Aliases visible to the current principal */
+    aliasesFor(context: Pick<ICliExecutionContext, 'services'>): Record<string, string>;
     private stateSubscription?;
     constructor();
     writeDescription(context: ICliExecutionContext): void;
@@ -1124,6 +1128,11 @@ interface InputModeHost {
 interface PromptOptions {
     userName?: string;
     hideUserName?: boolean;
+    /**
+     * Shown (dimmed) instead of the user name when an auth module is loaded
+     * but nobody is signed in, e.g. `anonymous:/$`. Empty/undefined: nothing.
+     */
+    anonymousName?: string;
     contextProcessor?: string;
     pathProvider?: () => string | null;
 }
@@ -1419,6 +1428,14 @@ declare class CliCommandExecutor implements ICliCommandExecutorService {
      * parameter.  In that case the global handler must be skipped so the
      * processor can handle the flag itself.
      */
+    /**
+     * Runs all registered {@link ICliCommandGuard}s that apply to this command,
+     * in priority order. Returns the block message of the first guard that
+     * denies the command, or `undefined` when every guard allows it.
+     * A guard that throws is treated as a denial (fail closed).
+     */
+    private runGuards;
+    private guardDenial;
     private processorOwnsParameter;
 }
 
@@ -1804,6 +1821,13 @@ declare class CliBoot {
     getModuleRegistry(): CliModuleRegistry;
     boot(context: CliExecutionContext, modules: ICliModule[]): Promise<void>;
     private bootModule;
+    /**
+     * Sub-processors of an `extendsProcessor` processor are merged into the
+     * processor it extends, so they belong to that one: re-parent them so they
+     * inherit its access rules (`requiredPermissions` etc.) and help/root
+     * lookups resolve to the registered processor.
+     */
+    private adoptMergedSubProcessors;
     private buildCoreModule;
     /**
      * Topologically sort modules by their dependencies using DFS.
@@ -2068,6 +2092,14 @@ declare class CliNotifier implements ICliNotifier {
     private set;
 }
 
+/** Default {@link ICliPermissionRegistry}: permissions declared by modules. */
+declare class CliPermissionRegistry implements ICliPermissionRegistry {
+    private readonly definitions;
+    register(definitions: CliPermissionDefinition[], module?: string): void;
+    list(): CliPermissionDefinition[];
+    get(name: string): CliPermissionDefinition | undefined;
+}
+
 declare class OverlayAddon implements ITerminalAddon {
     private terminal;
     private overlayNode;
@@ -2146,6 +2178,12 @@ interface CliEngineOptions extends CliOptions {
     terminalOptions?: Partial<ITerminalOptions & ITerminalInitOnlyOptions>;
     /** Optional snapshot to restore on start() */
     snapshot?: CliEngineSnapshot;
+    /**
+     * Explicit URL of `qodalis_cli_wasm_bg.wasm` (optional accelerator). When
+     * omitted it is looked up next to the page (`document.baseURI`), then at
+     * `/assets/wasm/` and `/wasm/`; the CLI works without it.
+     */
+    wasmUrl?: string;
 }
 declare class CliEngine {
     private readonly container;
@@ -2324,6 +2362,8 @@ declare class CliServerConnection {
     private _basePath;
     private _wsReconnectAttempts;
     private _wsReconnectTimer;
+    /** True once this connection registered its `server-events:<name>` background service */
+    private _eventServiceRegistered;
     private static readonly WS_MAX_RECONNECT_ATTEMPTS;
     private static readonly WS_MAX_RECONNECT_DELAY_MS;
     private _healthCheckTimer;
@@ -2344,6 +2384,11 @@ declare class CliServerConnection {
      * ICliServerAuthTokenProviders), or falls back to config headers directly.
      */
     resolveAuthHeaders(): Record<string, string>;
+    /**
+     * WebSocket URL for this server with auth: single-use upgrade params from
+     * auth providers when available, otherwise headers copied into the URL.
+     */
+    buildWebSocketUrl(path: string): Promise<string>;
     connect(): Promise<void>;
     disconnect(): void;
     startHealthCheck(): void;
@@ -2358,6 +2403,13 @@ declare class CliServerConnection {
     ping(): Promise<boolean>;
     private connectEventSocket;
     private connectEventSocketDirect;
+    private connectEventSocketDirectAsync;
+    /**
+     * The server closes the event socket with 4401 when the session behind it
+     * ended (logout, revoke, expiry). Retrying with the same credentials cannot
+     * succeed; the auth layer reconnects the server when the session changes.
+     */
+    private isSessionEndedClose;
     private handleServerDisconnect;
     private closeEventSocket;
     private closeEventSocketDirect;
@@ -2392,6 +2444,7 @@ declare class CliServerProxyProcessor implements ICliCommandProcessor {
     metadata?: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor[];
     processors?: ICliCommandProcessor[];
+    acceptsRawInput?: boolean;
     /** Full command path from root to this processor (e.g. ["aws", "lambda", "list"]) */
     private readonly commandPath;
     constructor(connection: CliServerConnection, descriptor: CliServerCommandDescriptor, serverName: string, isNested?: boolean, parentPath?: string[]);
@@ -2420,6 +2473,7 @@ declare class CliServerMultiProxyProcessor implements ICliCommandProcessor {
     metadata?: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor[];
     processors?: ICliCommandProcessor[];
+    acceptsRawInput?: boolean;
     /** Full command path from root to this processor */
     private readonly commandPath;
     constructor(entries: MultiProxyEntry[], provider: DefaultServerProvider, parentPath?: string[]);
@@ -2434,9 +2488,12 @@ declare class CliServerManager implements DefaultServerProvider {
     private _logger?;
     private _cliLogger?;
     private _defaultServer;
+    /** Bare-name aliases this manager registered (only these are ever removed) */
+    private readonly _bareAliases;
     private _backgroundServices?;
     constructor(registry: ICliCommandProcessorRegistry, authService?: ICliServerAuthService | undefined);
     get defaultServer(): string | null;
+    preferredServer(): string | null;
     setDefaultServer(name: string | null): void;
     connectAll(servers: CliServerConfig[], logger?: {
         warn(msg: string): void;
@@ -2475,19 +2532,24 @@ declare class CliSshCommandProcessor implements ICliCommandProcessor {
     valueRequired: boolean;
     metadata: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor[];
-    private socket;
-    private context;
-    private resolved;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
-    onData(data: string, context: ICliExecutionContext): Promise<void>;
-    onResize(cols: number, rows: number, _context: ICliExecutionContext): void;
-    onDispose(_context: ICliExecutionContext): void;
+    /**
+     * Full-screen handler for one session: input, resize and disposal go to
+     * that session's socket only.
+     */
+    private fullScreenHandler;
     private resolveServer;
     private executeInteractive;
     private executeOneShot;
+    /** `ssh <server> <cmd...>` → `<cmd...>` exactly as typed */
+    private remoteCommandFromRaw;
     private buildShellUrl;
     private cleanup;
 }
+declare function describeShellClose(event: {
+    code?: number;
+    reason?: string;
+}, serverName: string): string | null;
 
 /**
  * Result of executing a command through the test harness.
@@ -2539,7 +2601,13 @@ declare class CliTestHarness {
     userSession?: ICliUserSession;
     /** Reader responses — set via setReaderResponses() for interactive commands */
     private readerResponses;
+    private userSessionProvider?;
     constructor();
+    /**
+     * Resolve `context.userSession` on every command from this function
+     * (e.g. a session service), instead of the value set via setUserSession().
+     */
+    setUserSessionProvider(provider: () => ICliUserSession | undefined): void;
     /**
      * Register a service in the test container.
      */
@@ -2632,4 +2700,4 @@ declare function getAccelerator(): ICliWasmAccelerator;
  */
 declare function isWasmAccelerated(): boolean;
 
-export { API_VERSION, CLi_Name_Art, CapturingTerminalWriter, type CdnSourceName, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, type CliEngineOptions, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliExecutionContext, type CliExecutionContextDeps, CliExecutionProcess, CliExportCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestHarness, type CliTestResult, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, type CliWelcomeMessageConfig, CliYesCommandProcessor, CommandParser, type CommandParserOutput, type CommandPart, type ConfigureState, type DefaultServerProvider, type DiffLine, type DiffType, type ICliEnvironment, ICliEnvironment_TOKEN, type ICliExecutionHost, ICliPingServerService_TOKEN, type ICliStateStoreManager, type ICliWasmAccelerator, type InitializeServicesOptions, type InitializeServicesResult, JsFallbackAccelerator, LIBRARY_VERSION, type MultiProxyEntry, OverlayAddon, type ParsedArg, type ParsedToken, ProcessExitedError, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, type TerminalSetupResult, type ThemeState, appendOutputToFile, appendStderrToFile, builtinProcessors, computeDiff, contextGlobalParameter, createServerModule, executeOnServer, expandEnvironmentVars, formatDiff, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, groupBy, helpGlobalParameter, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, isWasmAccelerated, miscProcessors, openLink, reconcileArgs, renderServerResponse, renderSingleOutput, substituteVars, systemProcessors, themeInfos, themes, tryExecuteScript, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };
+export { API_VERSION, CLi_Name_Art, CapturingTerminalWriter, type CdnSourceName, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, type CliEngineOptions, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliExecutionContext, type CliExecutionContextDeps, CliExecutionProcess, CliExportCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPermissionRegistry, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestHarness, type CliTestResult, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, type CliWelcomeMessageConfig, CliYesCommandProcessor, CommandParser, type CommandParserOutput, type CommandPart, type ConfigureState, type DefaultServerProvider, type DiffLine, type DiffType, type ICliEnvironment, ICliEnvironment_TOKEN, type ICliExecutionHost, ICliPingServerService_TOKEN, type ICliStateStoreManager, type ICliWasmAccelerator, type InitializeServicesOptions, type InitializeServicesResult, JsFallbackAccelerator, LIBRARY_VERSION, type MultiProxyEntry, OverlayAddon, type ParsedArg, type ParsedToken, ProcessExitedError, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, type TerminalSetupResult, type ThemeState, appendOutputToFile, appendStderrToFile, builtinProcessors, computeDiff, contextGlobalParameter, createServerModule, describeShellClose, executeOnServer, expandEnvironmentVars, formatDiff, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, groupBy, helpGlobalParameter, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, isWasmAccelerated, miscProcessors, openLink, reconcileArgs, renderServerResponse, renderSingleOutput, substituteVars, systemProcessors, themeInfos, themes, tryExecuteScript, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };

package/public-api.d.ts

@@ -1,5 +1,5 @@
 import * as _qodalis_cli_core from '@qodalis/cli-core';
-import { ICliCommandProcessor, ICliCommandParameterDescriptor, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliKeyValueStore, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, CliState, CliEngineSnapshot, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, CliIcon } from '@qodalis/cli-core';
+import { ICliCommandProcessor, ICliCommandParameterDescriptor, ICliCommandProcessorRegistry, ICliCommandChildProcessor, CliProcessorMetadata, CliStateConfiguration, ICliExecutionContext, CliProcessCommand, ICliCommandAuthor, CliThemeInfo, ICliExecutionProcess, ICliUserSession, ICliSpinner, ICliPercentageProgressBar, ICliTextAnimator, ICliTerminalWriter, ICliCommandExecutorService, ICliClipboard, ICliStateStore, CliOptions, ICliLogger, ICliServiceProvider, ICliTranslationService, ICliInputReader, ICliBackgroundServiceRegistry, ICliHttpClient, ICliNotifier, ICliManagedInterval, ICliManagedTimer, ICliKeyValueStore, ICliCompletionProvider, ICliFilePickerProvider, CliFullScreenOptions, ICliProcessRegistry, ICliBackgroundService, ICliServiceContext, ICliBackgroundServiceInfo, ICliServiceLogEntry, CliServiceEventHandler, ICliGlobalParameterHandler, CliForegroundColor, CliBackgroundColor, CliProvider, CliTableOptions, CliLogLevel, CliPercentageProgressBarUpdateValueOptions, CliTextAnimatorOptions, ICliModule, CliModuleRegistry, Package, ICliPingServerService, CliLineOptions, CliSelectOption, CliSelectOptions, CliMultiSelectOption, CliMultiSelectOptions, CliNumberOptions, CliDateOptions, CliFilePickerOptions, CliFileResult, ICliProcessRegisterOptions, ICliProcessEntry, ICliDragDropService, CliHttpRequestOptions, CliNotification, ICliPermissionRegistry, CliPermissionDefinition, CliState, CliEngineSnapshot, CliServerConfig, ICliServerAuthService, CliServerCommandDescriptor, CliServerCapabilities, CliServerResponse, CliServerOutput, CliIcon } from '@qodalis/cli-core';
 export { ICliUserSessionService_TOKEN, ICliUsersStoreService_TOKEN } from '@qodalis/cli-core';
 import { ITheme, Terminal, ITerminalAddon, ITerminalOptions, ITerminalInitOnlyOptions } from '@xterm/xterm';
 import * as rxjs from 'rxjs';
@@ -153,7 +153,7 @@ declare const CliKeyValueStore_TOKEN = "cli-key-value-store";
  */
 declare const SyntaxHighlighterRegistry_TOKEN = "syntax-highlighter-registry";
 
-declare const LIBRARY_VERSION = "2.0.0-beta.13";
+declare const LIBRARY_VERSION = "2.0.0-beta.14";
 declare const API_VERSION = 2;
 
 declare class CliAliasCommandProcessor implements ICliCommandProcessor {
@@ -163,7 +163,11 @@ declare class CliAliasCommandProcessor implements ICliCommandProcessor {
     processors?: ICliCommandProcessor[] | undefined;
     metadata?: CliProcessorMetadata | undefined;
     stateConfiguration?: CliStateConfiguration | undefined;
+    /** Shared aliases (used when no auth module is loaded) */
     userAliases: Record<string, string>;
+    private aliasState;
+    /** Aliases visible to the current principal */
+    aliasesFor(context: Pick<ICliExecutionContext, 'services'>): Record<string, string>;
     private stateSubscription?;
     constructor();
     writeDescription(context: ICliExecutionContext): void;
@@ -1124,6 +1128,11 @@ interface InputModeHost {
 interface PromptOptions {
     userName?: string;
     hideUserName?: boolean;
+    /**
+     * Shown (dimmed) instead of the user name when an auth module is loaded
+     * but nobody is signed in, e.g. `anonymous:/$`. Empty/undefined: nothing.
+     */
+    anonymousName?: string;
     contextProcessor?: string;
     pathProvider?: () => string | null;
 }
@@ -1419,6 +1428,14 @@ declare class CliCommandExecutor implements ICliCommandExecutorService {
      * parameter.  In that case the global handler must be skipped so the
      * processor can handle the flag itself.
      */
+    /**
+     * Runs all registered {@link ICliCommandGuard}s that apply to this command,
+     * in priority order. Returns the block message of the first guard that
+     * denies the command, or `undefined` when every guard allows it.
+     * A guard that throws is treated as a denial (fail closed).
+     */
+    private runGuards;
+    private guardDenial;
     private processorOwnsParameter;
 }
 
@@ -1804,6 +1821,13 @@ declare class CliBoot {
     getModuleRegistry(): CliModuleRegistry;
     boot(context: CliExecutionContext, modules: ICliModule[]): Promise<void>;
     private bootModule;
+    /**
+     * Sub-processors of an `extendsProcessor` processor are merged into the
+     * processor it extends, so they belong to that one: re-parent them so they
+     * inherit its access rules (`requiredPermissions` etc.) and help/root
+     * lookups resolve to the registered processor.
+     */
+    private adoptMergedSubProcessors;
     private buildCoreModule;
     /**
      * Topologically sort modules by their dependencies using DFS.
@@ -2068,6 +2092,14 @@ declare class CliNotifier implements ICliNotifier {
     private set;
 }
 
+/** Default {@link ICliPermissionRegistry}: permissions declared by modules. */
+declare class CliPermissionRegistry implements ICliPermissionRegistry {
+    private readonly definitions;
+    register(definitions: CliPermissionDefinition[], module?: string): void;
+    list(): CliPermissionDefinition[];
+    get(name: string): CliPermissionDefinition | undefined;
+}
+
 declare class OverlayAddon implements ITerminalAddon {
     private terminal;
     private overlayNode;
@@ -2146,6 +2178,12 @@ interface CliEngineOptions extends CliOptions {
     terminalOptions?: Partial<ITerminalOptions & ITerminalInitOnlyOptions>;
     /** Optional snapshot to restore on start() */
     snapshot?: CliEngineSnapshot;
+    /**
+     * Explicit URL of `qodalis_cli_wasm_bg.wasm` (optional accelerator). When
+     * omitted it is looked up next to the page (`document.baseURI`), then at
+     * `/assets/wasm/` and `/wasm/`; the CLI works without it.
+     */
+    wasmUrl?: string;
 }
 declare class CliEngine {
     private readonly container;
@@ -2324,6 +2362,8 @@ declare class CliServerConnection {
     private _basePath;
     private _wsReconnectAttempts;
     private _wsReconnectTimer;
+    /** True once this connection registered its `server-events:<name>` background service */
+    private _eventServiceRegistered;
     private static readonly WS_MAX_RECONNECT_ATTEMPTS;
     private static readonly WS_MAX_RECONNECT_DELAY_MS;
     private _healthCheckTimer;
@@ -2344,6 +2384,11 @@ declare class CliServerConnection {
      * ICliServerAuthTokenProviders), or falls back to config headers directly.
      */
     resolveAuthHeaders(): Record<string, string>;
+    /**
+     * WebSocket URL for this server with auth: single-use upgrade params from
+     * auth providers when available, otherwise headers copied into the URL.
+     */
+    buildWebSocketUrl(path: string): Promise<string>;
     connect(): Promise<void>;
     disconnect(): void;
     startHealthCheck(): void;
@@ -2358,6 +2403,13 @@ declare class CliServerConnection {
     ping(): Promise<boolean>;
     private connectEventSocket;
     private connectEventSocketDirect;
+    private connectEventSocketDirectAsync;
+    /**
+     * The server closes the event socket with 4401 when the session behind it
+     * ended (logout, revoke, expiry). Retrying with the same credentials cannot
+     * succeed; the auth layer reconnects the server when the session changes.
+     */
+    private isSessionEndedClose;
     private handleServerDisconnect;
     private closeEventSocket;
     private closeEventSocketDirect;
@@ -2392,6 +2444,7 @@ declare class CliServerProxyProcessor implements ICliCommandProcessor {
     metadata?: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor[];
     processors?: ICliCommandProcessor[];
+    acceptsRawInput?: boolean;
     /** Full command path from root to this processor (e.g. ["aws", "lambda", "list"]) */
     private readonly commandPath;
     constructor(connection: CliServerConnection, descriptor: CliServerCommandDescriptor, serverName: string, isNested?: boolean, parentPath?: string[]);
@@ -2420,6 +2473,7 @@ declare class CliServerMultiProxyProcessor implements ICliCommandProcessor {
     metadata?: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor[];
     processors?: ICliCommandProcessor[];
+    acceptsRawInput?: boolean;
     /** Full command path from root to this processor */
     private readonly commandPath;
     constructor(entries: MultiProxyEntry[], provider: DefaultServerProvider, parentPath?: string[]);
@@ -2434,9 +2488,12 @@ declare class CliServerManager implements DefaultServerProvider {
     private _logger?;
     private _cliLogger?;
     private _defaultServer;
+    /** Bare-name aliases this manager registered (only these are ever removed) */
+    private readonly _bareAliases;
     private _backgroundServices?;
     constructor(registry: ICliCommandProcessorRegistry, authService?: ICliServerAuthService | undefined);
     get defaultServer(): string | null;
+    preferredServer(): string | null;
     setDefaultServer(name: string | null): void;
     connectAll(servers: CliServerConfig[], logger?: {
         warn(msg: string): void;
@@ -2475,19 +2532,24 @@ declare class CliSshCommandProcessor implements ICliCommandProcessor {
     valueRequired: boolean;
     metadata: CliProcessorMetadata;
     parameters?: ICliCommandParameterDescriptor[];
-    private socket;
-    private context;
-    private resolved;
     processCommand(command: CliProcessCommand, context: ICliExecutionContext): Promise<void>;
-    onData(data: string, context: ICliExecutionContext): Promise<void>;
-    onResize(cols: number, rows: number, _context: ICliExecutionContext): void;
-    onDispose(_context: ICliExecutionContext): void;
+    /**
+     * Full-screen handler for one session: input, resize and disposal go to
+     * that session's socket only.
+     */
+    private fullScreenHandler;
     private resolveServer;
     private executeInteractive;
     private executeOneShot;
+    /** `ssh <server> <cmd...>` → `<cmd...>` exactly as typed */
+    private remoteCommandFromRaw;
     private buildShellUrl;
     private cleanup;
 }
+declare function describeShellClose(event: {
+    code?: number;
+    reason?: string;
+}, serverName: string): string | null;
 
 /**
  * Result of executing a command through the test harness.
@@ -2539,7 +2601,13 @@ declare class CliTestHarness {
     userSession?: ICliUserSession;
     /** Reader responses — set via setReaderResponses() for interactive commands */
     private readerResponses;
+    private userSessionProvider?;
     constructor();
+    /**
+     * Resolve `context.userSession` on every command from this function
+     * (e.g. a session service), instead of the value set via setUserSession().
+     */
+    setUserSessionProvider(provider: () => ICliUserSession | undefined): void;
     /**
      * Register a service in the test container.
      */
@@ -2632,4 +2700,4 @@ declare function getAccelerator(): ICliWasmAccelerator;
  */
 declare function isWasmAccelerated(): boolean;
 
-export { API_VERSION, CLi_Name_Art, CapturingTerminalWriter, type CdnSourceName, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, type CliEngineOptions, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliExecutionContext, type CliExecutionContextDeps, CliExecutionProcess, CliExportCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestHarness, type CliTestResult, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, type CliWelcomeMessageConfig, CliYesCommandProcessor, CommandParser, type CommandParserOutput, type CommandPart, type ConfigureState, type DefaultServerProvider, type DiffLine, type DiffType, type ICliEnvironment, ICliEnvironment_TOKEN, type ICliExecutionHost, ICliPingServerService_TOKEN, type ICliStateStoreManager, type ICliWasmAccelerator, type InitializeServicesOptions, type InitializeServicesResult, JsFallbackAccelerator, LIBRARY_VERSION, type MultiProxyEntry, OverlayAddon, type ParsedArg, type ParsedToken, ProcessExitedError, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, type TerminalSetupResult, type ThemeState, appendOutputToFile, appendStderrToFile, builtinProcessors, computeDiff, contextGlobalParameter, createServerModule, executeOnServer, expandEnvironmentVars, formatDiff, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, groupBy, helpGlobalParameter, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, isWasmAccelerated, miscProcessors, openLink, reconcileArgs, renderServerResponse, renderSingleOutput, substituteVars, systemProcessors, themeInfos, themes, tryExecuteScript, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };
+export { API_VERSION, CLi_Name_Art, CapturingTerminalWriter, type CdnSourceName, CliAliasCommandProcessor, CliArgsParser, CliBackgroundServiceRegistry_TOKEN, CliBoot, CliCalCommandProcessor, CliCaptureCommandProcessor, CliClearCommandProcessor, CliClipboard, CliClipboardCommandProcessor, CliColorCommandProcessor, CliCommandExecutionContext, CliCommandExecutor, CliCommandHistory, CliCommandHistory_TOKEN, CliCommandProcessorRegistry, CliConfigureCommandProcessor, CliConvertCommandProcessor, CliDebugCommandProcessor, CliDefaultPingServerService, CliDiffCommandProcessor, CliDragDropService, CliEchoCommandProcessor, CliEngine, type CliEngineOptions, CliEnvCommandProcessor, CliEnvironment, CliEvalCommandProcessor, CliExecutionContext, type CliExecutionContextDeps, CliExecutionProcess, CliExportCommandProcessor, CliFeedbackCommandProcessor, CliFontSizeCommandProcessor, CliFullScreenManager, CliHelpCommandProcessor, CliHistoryCommandProcessor, CliHotKeysCommandProcessor, CliHtopCommandProcessor, CliHttpClient, CliInputReader, CliJsonCommandProcessor, CliKeyValueStore, CliKeyValueStore_TOKEN, CliKillCommandProcessor, CliLogger, CliLoremCommandProcessor, CliModuleRegistry_TOKEN, CliNanoCommandProcessor, CliNotifier, CliOpenCommandProcessor, CliPackageManagerService, CliPackageManagerService_TOKEN, CliPackagesCommandProcessor, CliPermissionRegistry, CliPingCommandProcessor, CliProcessRegistry, CliProcessRegistry_TOKEN, CliProcessorsRegistry_TOKEN, CliPsCommandProcessor, CliRandomCommandProcessor, CliScreenCommandProcessor, CliSeqCommandProcessor, CliServerCommandProcessor, CliServerConnection, CliServerManager, CliServerManager_TOKEN, CliServerMultiProxyProcessor, CliServerProxyProcessor, CliServiceContainer, CliServicesCommandProcessor, CliSleepCommandProcessor, CliSnippetCommandProcessor, CliSshCommandProcessor, CliStateStore, CliStateStoreManager, CliStateStoreManager_TOKEN, CliTerminalProgressBar, CliTerminalSpinner, CliTerminalTextAnimator, CliTerminalWriter, CliTestHarness, type CliTestResult, CliThemeCommandProcessor, CliTimeCommandProcessor, CliTimerManager, CliTimestampCommandProcessor, CliUnAliasCommandProcessor, CliUnameCommandProcessor, CliUnsetCommandProcessor, CliUptimeCommandProcessor, CliVersionCommandProcessor, type CliWelcomeMessageConfig, CliYesCommandProcessor, CommandParser, type CommandParserOutput, type CommandPart, type ConfigureState, type DefaultServerProvider, type DiffLine, type DiffType, type ICliEnvironment, ICliEnvironment_TOKEN, type ICliExecutionHost, ICliPingServerService_TOKEN, type ICliStateStoreManager, type ICliWasmAccelerator, type InitializeServicesOptions, type InitializeServicesResult, JsFallbackAccelerator, LIBRARY_VERSION, type MultiProxyEntry, OverlayAddon, type ParsedArg, type ParsedToken, ProcessExitedError, ScriptLoaderService, SyntaxHighlighterRegistry_TOKEN, type TerminalSetupResult, type ThemeState, appendOutputToFile, appendStderrToFile, builtinProcessors, computeDiff, contextGlobalParameter, createServerModule, describeShellClose, executeOnServer, expandEnvironmentVars, formatDiff, getAccelerator, getCliNameArt, getGreetingBasedOnTime, getTerminalOptions, groupBy, helpGlobalParameter, hotkeysInfo, initWasmAccelerator, initializeServices, initializeTerminal, isWasmAccelerated, miscProcessors, openLink, reconcileArgs, renderServerResponse, renderSingleOutput, substituteVars, systemProcessors, themeInfos, themes, tryExecuteScript, versionGlobalParameter, waitForLayout, welcomeModule, writeOutputToFile, writeStderrToFile };