@rosthq/cli 0.7.145 → 0.7.146
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/dist/commands/implementation-access.d.ts.map +1 -1
- package/dist/generator/manifest-types.d.ts +2 -1
- package/dist/generator/manifest-types.d.ts.map +1 -1
- package/dist/generator/runtime.d.ts.map +1 -1
- package/dist/implementation-bootstrap.d.ts +45 -0
- package/dist/implementation-bootstrap.d.ts.map +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +6602 -6463
- package/dist/index.js.map +4 -4
- package/dist/operations.d.ts +1 -0
- package/dist/operations.d.ts.map +1 -1
- package/dist/skills.d.ts +2 -0
- package/dist/skills.d.ts.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -211,3 +211,5 @@ rost implementation access install-mcp --client cursor
|
|
|
211
211
|
```
|
|
212
212
|
|
|
213
213
|
The implementation credential is intentionally narrow and fail-closed. It can run vetted reads (for example `onboarding.status`, `graph.get`, `charter.get/list`, `compass.get_current`, `goal.list`, `agent.list_fleet`, `system.health`), stage human-gated proposals (`onboarding.setup`, `onboarding.activate`, `seat.create_complete`, `agent.create_custom`, `agent.create_from_template`, `compass.set`, `compass.approve_version`, `onboarding.finish`), execute only the receipt-bound sandbox exception `onboarding.rehearse`, and close its own run. `seat.create_complete` stages one atomic complete-Seat proposal for an owner to approve; it never makes an optional agent live. `onboarding.activate` stages the one post-rehearsal owner decision and cannot approve itself. The rehearsal exception grants no general agent execution authority and cannot reach unrelated agents. Everything else, including other confirmation-free durable mutations and `confirmation.approve`, is denied. The policy module is `packages/commands/src/implementation-bootstrap-policy.ts` and is enforced by both the runtime guard and a CI drift test.
|
|
214
|
+
|
|
215
|
+
With **no** login session and an implementation credential present, the CLI runs every one of those classified commands over the credential — on `rost command <id> --json '<body>'` and on the ergonomic verbs that resolve to a classified command (`rost graph show`, `rost seat list`, `rost agent list-fleet`, `rost agent templates`, `rost goal list`, `rost system health`, `rost skills list`, `rost skills catalog`, `rost charter list`, `rost charter get`, `rost compass get-current`). A denied command is refused locally, before the credential reaches the network, and prints the same `Not logged in` message a CLI with no credential prints — sending it would put the bearer on the wire for a surface never entitled to see it. A usable login session takes precedence for these general verbs; the credential makes them reachable without a personal login, it does not replace a session you already have. Note that a Markdown-rendering `show` verb resolves to a `*.show_markdown` command the policy denies (so `rost compass show` stays session-only; use `rost compass get-current`), and `rost agent fleet-digest` is likewise denied (use `rost agent list-fleet`).
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"implementation-access.d.ts","sourceRoot":"","sources":["../../src/commands/implementation-access.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAGzE,OAAO,EACL,8BAA8B,EAI/B,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"implementation-access.d.ts","sourceRoot":"","sources":["../../src/commands/implementation-access.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAGzE,OAAO,EACL,8BAA8B,EAI/B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,uCAAuC,CAAC;AAe/C,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAErF,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB,IAAI,6BAA6B,CAAC;IAC3D,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IACtE,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC,CAAC;AAEF,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAKD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAwJD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD;AAuHD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAOxF"}
|
|
@@ -10,6 +10,7 @@ export type ManifestField = {
|
|
|
10
10
|
};
|
|
11
11
|
export type ManifestCommandScope = "tenant_admin" | "tenant" | "seat" | "user";
|
|
12
12
|
export type ManifestConfirmation = "none" | "human_required" | "credential_flow" | "dangerous";
|
|
13
|
+
export type ManifestBootstrapClass = "read" | "stage" | "execute" | "lifecycle" | "deny";
|
|
13
14
|
export type CommandManifestEntry = {
|
|
14
15
|
id: string;
|
|
15
16
|
namespace: string;
|
|
@@ -22,7 +23,7 @@ export type CommandManifestEntry = {
|
|
|
22
23
|
fields: readonly ManifestField[];
|
|
23
24
|
hasComplexInput: boolean;
|
|
24
25
|
secretBlocked?: boolean;
|
|
25
|
-
|
|
26
|
+
bootstrapClass?: Exclude<ManifestBootstrapClass, "deny">;
|
|
26
27
|
help?: string;
|
|
27
28
|
example?: unknown;
|
|
28
29
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"manifest-types.d.ts","sourceRoot":"","sources":["../../src/generator/manifest-types.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,CAAC;AAKd,MAAM,MAAM,aAAa,GAAG;IAE1B,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAElB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/B,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAEvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAC/E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"manifest-types.d.ts","sourceRoot":"","sources":["../../src/generator/manifest-types.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,CAAC;AAKd,MAAM,MAAM,aAAa,GAAG;IAE1B,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAElB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/B,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAEvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAC/E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAQ/F,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;AAEzF,MAAM,MAAM,oBAAoB,GAAG;IAEjC,EAAE,EAAE,MAAM,CAAC;IAEX,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,oBAAoB,CAAC;IACnC,aAAa,EAAE,OAAO,CAAC;IAEvB,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAGjC,eAAe,EAAE,OAAO,CAAC;IASzB,aAAa,CAAC,EAAE,OAAO,CAAC;IAUxB,cAAc,CAAC,EAAE,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAEzD,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/generator/runtime.ts"],"names":[],"mappings":"AASA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE9E,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAKF,MAAM,MAAM,UAAU,GAAG,CACvB,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,EACpC,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,KACvD,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,UAAU,CAAC;CACjB,CAAC;AAGF,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEnF,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAOxC,eAAO,MAAM,oBAAoB,QAGoF,CAAC;AAMtH,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,OAAO,CAAC;IAId,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACpB,CAAC;AAKF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,GAAE,WAAW,CAAC,MAAM,CAAa,GAAG,WAAW,CA2CrG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAMrE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUnF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAahH;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAMhF;AAGD,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAQ1G;AAMD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhE;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAEjD;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAM1E;AAQD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAID,wBAAgB,OAAO,CACrB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,GAClC,OAAO,CAAC,MAAM,CAAC,CAUjB;
|
|
1
|
+
{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/generator/runtime.ts"],"names":[],"mappings":"AASA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE9E,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAKF,MAAM,MAAM,UAAU,GAAG,CACvB,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,EACpC,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,KACvD,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,UAAU,CAAC;CACjB,CAAC;AAGF,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEnF,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAOxC,eAAO,MAAM,oBAAoB,QAGoF,CAAC;AAMtH,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,OAAO,CAAC;IAId,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACpB,CAAC;AAKF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,GAAE,WAAW,CAAC,MAAM,CAAa,GAAG,WAAW,CA2CrG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAMrE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUnF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CAahH;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAMhF;AAGD,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAQ1G;AAMD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhE;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAEjD;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAM1E;AAQD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAID,wBAAgB,OAAO,CACrB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,GAClC,OAAO,CAAC,MAAM,CAAC,CAUjB;AAiBD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAkB7G;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,MAAM,CAuBR"}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
import { CommandClient, type CommandClientOptions } from "./command-client.js";
|
|
2
|
+
import type { ManifestBootstrapClass } from "./generator/manifest-types.js";
|
|
3
|
+
/**
|
|
4
|
+
* The implementation-bootstrap class for a command id, as bundled in this CLI
|
|
5
|
+
* build. FAIL-CLOSED: an id the manifest does not classify — because the policy
|
|
6
|
+
* denies it, because it is a typo, or because it is newer than this CLI — is
|
|
7
|
+
* `deny`. A stale manifest can only ever be too restrictive, never too permissive.
|
|
8
|
+
*/
|
|
9
|
+
export declare function resolveImplementationBootstrapClass(commandId: string): ManifestBootstrapClass;
|
|
10
|
+
/** Every command id this CLI build will send over the implementation credential, sorted. */
|
|
11
|
+
export declare function implementationBootstrapCommandIds(): string[];
|
|
12
|
+
/**
|
|
13
|
+
* Raised INSTEAD of sending a deny-class command over the implementation
|
|
14
|
+
* credential. It carries the command id and nothing else — never the token, the
|
|
15
|
+
* request, or any part of the credential (invariant #5).
|
|
16
|
+
*/
|
|
17
|
+
export declare class ImplementationBootstrapDeniedError extends Error {
|
|
18
|
+
readonly commandId: string;
|
|
19
|
+
constructor(commandId: string);
|
|
20
|
+
}
|
|
21
|
+
/**
|
|
22
|
+
* Build the implementation-bootstrap `CommandClient` — the ONLY sanctioned way to
|
|
23
|
+
* construct one — with the class gate installed on the instance's `execute`.
|
|
24
|
+
*
|
|
25
|
+
* "Only" is enforced, not asserted: this module holds the sole occurrence of
|
|
26
|
+
* `credentialKind: "implementation_bootstrap"` in `apps/cli/src`, and a test in
|
|
27
|
+
* implementation-bootstrap-routing.test.ts scans the source tree to keep it that
|
|
28
|
+
* way. A second construction site would be ungated by construction, and would
|
|
29
|
+
* quietly reopen the non-emission property below for whatever it sends.
|
|
30
|
+
*
|
|
31
|
+
* The gate is bound to the instance rather than applied at each call site on
|
|
32
|
+
* purpose. Call sites are not a reliable boundary: most CLI sends flow through a
|
|
33
|
+
* wrapper's shared `run` callback, but bespoke sub-handlers reach for
|
|
34
|
+
* `client.execute` directly (`skills install` / `skills sync` do, via
|
|
35
|
+
* `executeSkillCommand`), and `printCommandOutput` can follow a 409 with its own
|
|
36
|
+
* `confirmation.approve` call. Gating the instance means a deny-class command
|
|
37
|
+
* cannot be emitted by ANY of them, including one added later that never learns
|
|
38
|
+
* this rule exists.
|
|
39
|
+
*
|
|
40
|
+
* `CommandClientCtor` is threaded through rather than closed over so the `main()`
|
|
41
|
+
* test seam (`options.commandClient`) still applies — the guard wraps whatever
|
|
42
|
+
* constructor is in play.
|
|
43
|
+
*/
|
|
44
|
+
export declare function createImplementationBootstrapClient(CommandClientCtor: typeof CommandClient, options: Omit<CommandClientOptions, "credentialKind">): CommandClient;
|
|
45
|
+
//# sourceMappingURL=implementation-bootstrap.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"implementation-bootstrap.d.ts","sourceRoot":"","sources":["../src/implementation-bootstrap.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAY5E;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAE7F;AAED,4FAA4F;AAC5F,wBAAgB,iCAAiC,IAAI,MAAM,EAAE,CAE5D;AAED;;;;GAIG;AACH,qBAAa,kCAAmC,SAAQ,KAAK;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mCAAmC,CACjD,iBAAiB,EAAE,OAAO,aAAa,EACvC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,GACpD,aAAa,CAUf"}
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAMA,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAoB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAMA,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAoB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AA8CrE,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAI1C,WAAW,CAAC,EAAE,OAAO,CAAC;IAOtB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD,CAAC;AAqIF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,CAAC,cAAc,EAC5B,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUxC;AAID,KAAK,WAAW,GAAG;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,KAAK,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACzC,cAAc,CAAC,EAAE,OAAO,yBAAyB,CAAC;IAGlD,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;CACtC,CAAC;AAEF,wBAAsB,IAAI,CAAC,IAAI,WAAwB,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+kBnG;AAohBD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUxF"}
|