@rosthq/cli 0.7.155 → 0.7.157

package/README.md

@@ -96,11 +96,18 @@ rost onboard status
 rost onboard resume
 ```
 
-Every tenant-scoped `rost onboard` verb (and `rost seat create-complete`)
-authenticates with an existing implementation-bootstrap credential first and
-falls back to the user session, so the whole composite flow below runs without
-a personal login. (`rost onboard run` prints the public onboarding prompt
-offline and needs no credential.)
+Every tenant-scoped `rost onboard` verb (and `rost seat create-complete`) uses
+an existing implementation-bootstrap credential first. An absent credential
+leaves the ordinary owner-session path available; an expired, unreadable, or
+refused credential stops the command without retrying under another principal.
+Human decision commands are terminal in headless runs and remain available to
+an explicit interactive TTY owner. This includes the registry's
+`human_required` commands, all four `credential_flow` commands
+(`agent.configure_tools`, `credential.ingress`, `integration.connect_rest`, and
+`tenant.anthropic_key.save`), and the none-class human decisions for
+escalations, onboarding path selection, task proposals, Signal readings, error
+logs, and confirmation approve/reject/remint. (`rost onboard run` prints the
+public onboarding prompt offline and needs no credential.)
 
 Retain each allowed local business source before constructing the setup plan.
 The CLI reads the file and base64-encodes it client-side; the server computes
@@ -210,6 +217,6 @@ rost implementation access install-mcp --client codex
 rost implementation access install-mcp --client cursor
 ```
 
-The implementation credential is intentionally narrow and fail-closed. It can run vetted reads (for example `onboarding.status`, `graph.get`, `charter.get/list`, `compass.get_current`, `goal.list`, `agent.list_fleet`, `system.health`), stage human-gated proposals (`onboarding.setup`, `onboarding.activate`, `seat.create_complete`, `agent.create_custom`, `agent.create_from_template`, `compass.set`, `compass.approve_version`, `onboarding.finish`, `agent.run_now`), execute only the receipt-bound sandbox exception `onboarding.rehearse`, and close its own run. `seat.create_complete` stages one atomic complete-Seat proposal for an owner to approve; it never makes an optional agent live. `onboarding.activate` stages the one post-rehearsal owner decision and cannot approve itself. `agent.run_now` stages one manual production run at a time, bounded to agents this same implementation run's own setup receipt created and re-checked when the approved run dispatches; it arms no schedule. The rehearsal exception grants no general agent execution authority and cannot reach unrelated agents. Everything else, including other confirmation-free durable mutations and `confirmation.approve`, is denied. The policy module is `packages/commands/src/implementation-bootstrap-policy.ts` and is enforced by both the runtime guard and a CI drift test.
+The implementation credential is intentionally narrow and explicitly classified. It can run vetted reads (for example `onboarding.status`, `graph.get`, `charter.get/list`, `compass.get_current`, `goal.list`, `agent.list_fleet`, `system.health`), stage human-gated proposals (`onboarding.setup`, `onboarding.activate`, `seat.create_complete`, `agent.create_custom`, `agent.create_from_template`, `compass.set`, `compass.approve_version`, `onboarding.finish`, `agent.run_now`), execute only the receipt-bound sandbox exception `onboarding.rehearse`, and close its own run. `seat.create_complete` stages one atomic complete-Seat proposal for an owner to approve; it never makes an optional agent live. `onboarding.activate` stages the one post-rehearsal owner decision and cannot approve itself. `agent.run_now` stages one manual production run at a time, bounded to agents this same implementation run's own setup receipt created and re-checked when the approved run dispatches; it arms no schedule. The rehearsal exception grants no general agent execution authority and cannot reach unrelated agents. Everything outside the explicit class map, including other confirmation-free durable mutations and `confirmation.approve`, stays outside the bounded principal. The policy module is `packages/commands/src/implementation-bootstrap-policy.ts` and is enforced by both the runtime guard and a CI drift test.
 
-With **no** login session and an implementation credential present, the CLI runs every one of those classified commands over the credential — on `rost command <id> --json '<body>'` and on the ergonomic verbs that resolve to a classified command (`rost graph show`, `rost seat list`, `rost agent list-fleet`, `rost agent templates`, `rost goal list`, `rost system health`, `rost skills list`, `rost skills catalog`, `rost charter list`, `rost charter get`, `rost compass get-current`). A denied command is refused locally, before the credential reaches the network, and prints the same `Not logged in` message a CLI with no credential prints — sending it would put the bearer on the wire for a surface never entitled to see it. A usable login session takes precedence for these general verbs; the credential makes them reachable without a personal login, it does not replace a session you already have. Note that a Markdown-rendering `show` verb resolves to a `*.show_markdown` command the policy denies (so `rost compass show` stays session-only; use `rost compass get-current`), and `rost agent fleet-digest` is likewise denied (use `rost agent list-fleet`).
+With an implementation credential present, the CLI runs every classified command over that credential — on `rost command <id> --json '<body>'` and on the ergonomic verbs that resolve to a classified command (`rost graph show`, `rost seat list`, `rost agent list-fleet`, `rost agent templates`, `rost goal list`, `rost system health`, `rost skills list`, `rost skills catalog`, `rost charter list`, `rost charter get`, `rost compass get-current`) — even when a user session also exists. An expired, unreadable, unauthenticated, or refused implementation credential is terminal for that invocation; the CLI never silently replays the classified command as the owner. The complete human-only floor — `human_required`, `credential_flow`, and the explicit none-class decisions for escalations, onboarding path selection, task proposals, Signal readings, error logs, confirmation approve/reject/remint/dismiss/dismiss_stale/activation_set.list, `agent_grant_intervention.resume`, and `coach.draft_guide` — stops in a headless session while an explicit interactive TTY remains the deliberate owner path. A successful `implementation_access.complete` or `.abandon` clears the bearer and writes a local closed-run tombstone so headless bootstrap commands refuse owner fallthrough until a new `implementation access start`. Note that a Markdown-rendering `show` verb resolves to a `*.show_markdown` command outside the bounded surface (so `rost compass show` remains session-only; use `rost compass get-current`), and `rost agent fleet-digest` is likewise outside it (use `rost agent list-fleet`).

package/dist/acting-principal.d.ts

@@ -0,0 +1,82 @@
+import { z } from "zod";
+export declare const ACTING_PRINCIPAL_KINDS: readonly ["none", "unknown", "user_session", "implementation_bootstrap"];
+export declare const actingPrincipalSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        none: "none";
+        unknown: "unknown";
+        user_session: "user_session";
+        implementation_bootstrap: "implementation_bootstrap";
+    }>;
+    subject: z.ZodNullable<z.ZodString>;
+    email: z.ZodNullable<z.ZodString>;
+    tenant_id: z.ZodNullable<z.ZodString>;
+    tenant_name: z.ZodNullable<z.ZodString>;
+    role: z.ZodNullable<z.ZodString>;
+    source: z.ZodNullable<z.ZodString>;
+    principal_switch: z.ZodNullable<z.ZodString>;
+    note: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type ActingPrincipal = z.infer<typeof actingPrincipalSchema>;
+/** The canonical `none` projection — no credential resolved at all. */
+export declare function noneActingPrincipal(note?: string): ActingPrincipal;
+/**
+ * Decode the self-describing identity claims out of a session's own JWT. This
+ * is a LOCAL read of a token the CLI already holds — never a network call and
+ * never a signature check (the server re-authenticates every request). It is
+ * used only to render whose authority a command acts under, so every failure
+ * mode resolves to nulls rather than throwing: a non-JWT test token, a token
+ * with no email claim, or malformed base64 all yield an unresolved identity,
+ * which the projection reports as `user_session` with a null email — never a
+ * fabricated one.
+ */
+export declare function decodeSessionIdentity(accessToken: string | undefined): {
+    email: string | null;
+    tenantId: string | null;
+};
+/**
+ * Project the acting principal for a resolved user session. `accessToken` is
+ * the session's JWT (decoded locally for the email/tenant); `source` is the
+ * token store's describe() string. Identity that does not decode stays null —
+ * the projection is `user_session` with a null email, distinct from `none`.
+ */
+export declare function userSessionActingPrincipal(params: {
+    accessToken: string | undefined;
+    source: string | null;
+    tenantName?: string | null;
+}): ActingPrincipal;
+/**
+ * Project the acting principal for the bounded implementation-run credential.
+ * The tenant id and run id are proven facts carried on the credential itself;
+ * `source` is the credential store's describe() string. `otherCredential`,
+ * when set, records that a competing credential (typically the caller's own
+ * logged-in user session) was also available and this bounded principal was
+ * selected over it — the explicit switch note the dual-credential control
+ * requires.
+ */
+export declare function implementationActingPrincipal(params: {
+    tenantId: string;
+    implementationRunId: string;
+    source: string | null;
+    otherCredential?: string | null;
+}): ActingPrincipal;
+/**
+ * The one-line human header rendered BEFORE a command's payload. It states
+ * whose authority the command acts under and never renders an unproven
+ * identity as a proven one: `none`/`unknown` say exactly that, and a user
+ * session whose JWT did not decode reports the credential without inventing an
+ * email.
+ */
+export declare function renderActingPrincipalHeader(principal: ActingPrincipal): string;
+/**
+ * The stable --json envelope: the acting principal alongside the command's own
+ * result. Chosen over sibling-key injection because most --json command
+ * outputs are opaque to the CLI (it never inspects their shape), so a
+ * top-level envelope cannot collide with a result field and is uniform across
+ * every command. Documented in the PR so downstream consumers read
+ * `.output` for the former raw result.
+ */
+export declare function actingPrincipalEnvelope(principal: ActingPrincipal, output: unknown): {
+    acting_principal: ActingPrincipal;
+    output: unknown;
+};
+//# sourceMappingURL=acting-principal.d.ts.map

package/dist/acting-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-principal.d.ts","sourceRoot":"","sources":["../src/acting-principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0BxB,eAAO,MAAM,sBAAsB,0EAKzB,CAAC;AAEX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;kBAuBvB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAcpE,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,eAAe,CAElE;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAgCnD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GAAG,eAAe,CAalB;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,eAAe,CAclB;AAYD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAoB9E;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,eAAe,EAC1B,MAAM,EAAE,OAAO,GACd;IAAE,gBAAgB,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAExD"}

package/dist/acting-principal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=acting-principal.test.d.ts.map

package/dist/acting-principal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-principal.test.d.ts","sourceRoot":"","sources":["../src/acting-principal.test.ts"],"names":[],"mappings":""}

package/dist/commands/implementation-access.d.ts

@@ -1,6 +1,7 @@
 import { CommandClient } from "../command-client.js";
 import { pollDeviceAuthorizationHandoff } from "../device-auth.js";
 import { type ImplementationCredentialStore } from "../implementation-credential-store.js";
+import { type ImplementationRunTombstoneStore } from "../implementation-run-tombstone.js";
 export type ImplementationAccessAction = "start" | "status" | "complete" | "abandon";
 type CliIo = {
     stdout: Pick<NodeJS.WriteStream, "write">;
@@ -9,6 +10,7 @@ type CliIo = {
 export type ImplementationAccessDeps = {
     appUrl: string;
     createImplementationStore(): ImplementationCredentialStore;
+    createTombstoneStore?(): ImplementationRunTombstoneStore;
     pollDeviceAuthorizationHandoff: typeof pollDeviceAuthorizationHandoff;
     CommandClient: typeof CommandClient;
 };

package/dist/commands/implementation-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implementation-access.d.ts","sourceRoot":"","sources":["../../src/commands/implementation-access.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAGzE,OAAO,EACL,8BAA8B,EAI/B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,uCAAuC,CAAC;AAe/C,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAErF,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB,IAAI,6BAA6B,CAAC;IAC3D,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IACtE,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC,CAAC;AAEF,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAKD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAwJD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD;AAuHD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAOxF"}
+{"version":3,"file":"implementation-access.d.ts","sourceRoot":"","sources":["../../src/commands/implementation-access.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,EACL,8BAA8B,EAI/B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,oCAAoC,CAAC;AAe5C,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAErF,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB,IAAI,6BAA6B,CAAC;IAC3D,oBAAoB,CAAC,IAAI,+BAA+B,CAAC;IACzD,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IACtE,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC,CAAC;AAEF,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAKD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA2DjB;AA0JD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEtD;AAiID,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAOxF"}

package/dist/commands/onboarding-preflight.d.ts

@@ -0,0 +1,86 @@
+import { z } from "zod";
+import { type ActingPrincipal } from "../acting-principal.js";
+type CliIo = {
+    stdout: Pick<NodeJS.WriteStream, "write">;
+    stderr: Pick<NodeJS.WriteStream, "write">;
+};
+export type PreflightCheckStatus = "pass" | "fail" | "unknown";
+export declare const preflightCheckSchema: z.ZodObject<{
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        unknown: "unknown";
+        pass: "pass";
+        fail: "fail";
+    }>;
+    detail: z.ZodString;
+}, z.core.$strict>;
+export declare const preflightResultSchema: z.ZodObject<{
+    ok: z.ZodBoolean;
+    acting_principal: z.ZodObject<{
+        kind: z.ZodEnum<{
+            none: "none";
+            unknown: "unknown";
+            user_session: "user_session";
+            implementation_bootstrap: "implementation_bootstrap";
+        }>;
+        subject: z.ZodNullable<z.ZodString>;
+        email: z.ZodNullable<z.ZodString>;
+        tenant_id: z.ZodNullable<z.ZodString>;
+        tenant_name: z.ZodNullable<z.ZodString>;
+        role: z.ZodNullable<z.ZodString>;
+        source: z.ZodNullable<z.ZodString>;
+        principal_switch: z.ZodNullable<z.ZodString>;
+        note: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    checks: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        status: z.ZodEnum<{
+            unknown: "unknown";
+            pass: "pass";
+            fail: "fail";
+        }>;
+        detail: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PreflightCheck = z.infer<typeof preflightCheckSchema>;
+export type PreflightResult = z.infer<typeof preflightResultSchema>;
+/**
+ * The implementation-credential fact the preflight reports. `present` carries
+ * the expiry decision and the store the credential was read from (`stored_in`);
+ * `error` is a store read failure (never proof of absence).
+ */
+export type PreflightImplementationCredential = {
+    kind: "present";
+    expired: boolean;
+    storedIn: string;
+} | {
+    kind: "absent";
+} | {
+    kind: "error";
+    detail: string;
+};
+export type PreflightDeps = {
+    json: boolean;
+    principal: ActingPrincipal;
+    sessionRefreshError: string | null;
+    implementationCredential: PreflightImplementationCredential;
+    cliVersion: string | null;
+    fetchLatestVersion: () => Promise<string | null>;
+    probeDeployment: () => Promise<{
+        ok: boolean;
+        status: number | null;
+        detail: string;
+    }>;
+    readOnboardingState: (() => Promise<{
+        ok: boolean;
+        alreadyOnboarded: boolean;
+        detail: string;
+    }>) | null;
+};
+/**
+ * Run the preflight and render it. Returns 0 only when EVERY check passed; any
+ * `fail` or `unknown` returns 1 (unproven is not green).
+ */
+export declare function runOnboardingPreflight(io: CliIo, deps: PreflightDeps): Promise<number>;
+export {};
+//# sourceMappingURL=onboarding-preflight.d.ts.map

package/dist/commands/onboarding-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-preflight.d.ts","sourceRoot":"","sources":["../../src/commands/onboarding-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAEhC,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AASF,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAE/D,eAAO,MAAM,oBAAoB;;;;;;;;kBAMtB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAMvB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,MAAM,iCAAiC,GACzC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,OAAO,CAAC;IAEd,SAAS,EAAE,eAAe,CAAC;IAO3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,wBAAwB,EAAE,iCAAiC,CAAC;IAE5D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAI1B,kBAAkB,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAIjD,eAAe,EAAE,MAAM,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAIvF,mBAAmB,EACf,CAAC,MAAM,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,GAC3E,IAAI,CAAC;CACV,CAAC;AAgIF;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B5F"}

package/dist/commands/onboarding-preflight.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=onboarding-preflight.test.d.ts.map

package/dist/commands/onboarding-preflight.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-preflight.test.d.ts","sourceRoot":"","sources":["../../src/commands/onboarding-preflight.test.ts"],"names":[],"mappings":""}

package/dist/commands/onboarding.d.ts

@@ -1,4 +1,5 @@
 import { CommandClient } from "../command-client.js";
+import { type ActingPrincipal } from "../acting-principal.js";
 type CliIo = {
     stdout: Pick<NodeJS.WriteStream, "write">;
     stderr: Pick<NodeJS.WriteStream, "write">;
@@ -6,6 +7,7 @@ type CliIo = {
 export type OnboardingDeps = {
     makeClient(): Promise<CommandClient>;
     readFile?: (path: string) => Promise<Buffer>;
+    actingPrincipal?: ActingPrincipal;
 };
 /**
  * The largest source file this invocation can actually send: the smallest of the
@@ -44,12 +46,16 @@ export declare function runOnboarding(args: string[], io: CliIo, deps: Onboardin
  * the user-session path (runOnboarding) and the implementation-credential path
  * in index.ts, so both credentials get identical bodies and rendering.
  *
- * `onError` lets the implementation-credential caller intercept a dead-run
- * credential (fall through to the user session) before the error is printed.
+ * `onError` lets the implementation-credential caller intercept credential or
+ * policy errors before shared rendering; the caller handles an intercepted
+ * outcome as terminal rather than retrying under an owner session.
  */
-export declare function executeOnboardingInvocation(invocation: OnboardingInvocation, io: CliIo, client: CommandClient): Promise<number>;
+export declare function executeOnboardingInvocation(invocation: OnboardingInvocation, io: CliIo, client: CommandClient, options?: {
+    actingPrincipal?: ActingPrincipal;
+}): Promise<number>;
 export declare function executeOnboardingInvocation(invocation: OnboardingInvocation, io: CliIo, client: CommandClient, options: {
     onError: (error: unknown) => "handled" | "print";
+    actingPrincipal?: ActingPrincipal;
 }): Promise<number | "fall-through">;
 /**
  * Resolve the local file reads a parsed invocation deferred: the source bytes

package/dist/commands/onboarding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/commands/onboarding.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAMzE,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAI3B,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAGrC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C,CAAC;AAkDF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,EACrB,YAAY,GAAE,MAAsC,GACnD,MAAM,CAMR;AAqBD,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EACL,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,qBAAqB,GACrB,0BAA0B,GAC1B,kBAAkB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,OAAO,GAAG,cAAc,CAAC;IAInG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAepG;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,oBAAoB,EAChC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,CAAC,CAAC;AACnB,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,oBAAoB,EAChC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE;IAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,GAAG,OAAO,CAAA;CAAE,GAC5D,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;AAoCpC;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,oBAAoB,EAChC,YAAY,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAY,GACzD,OAAO,CAAC,IAAI,CAAC,CAqEf;AAgDD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CA+G9E;AA2FD,wBAAgB,eAAe,IAAI,MAAM,CAUxC;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,MAAM,EAAE,OAAO,GACd,MAAM,CAoBR"}
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/commands/onboarding.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAMhC,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAI3B,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAGrC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAI7C,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,CAAC;AAkDF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,EACrB,YAAY,GAAE,MAAsC,GACnD,MAAM,CAMR;AAqBD,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EACL,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,qBAAqB,GACrB,0BAA0B,GAC1B,kBAAkB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,OAAO,GAAG,cAAc,CAAC;IAInG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBpG;AAED;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,oBAAoB,EAChC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAA;CAAE,GAC9C,OAAO,CAAC,MAAM,CAAC,CAAC;AACnB,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,oBAAoB,EAChC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE;IAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,GAAG,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,eAAe,CAAA;CAAE,GAC/F,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;AAiDpC;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,oBAAoB,EAChC,YAAY,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAY,GACzD,OAAO,CAAC,IAAI,CAAC,CAqEf;AAgDD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CA+G9E;AA2FD,wBAAgB,eAAe,IAAI,MAAM,CAWxC;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,MAAM,EAAE,OAAO,GACd,MAAM,CAoBR"}

package/dist/implementation-bootstrap.d.ts

@@ -2,13 +2,20 @@ import { CommandClient, type CommandClientOptions } from "./command-client.js";
 import type { ManifestBootstrapClass } from "./generator/manifest-types.js";
 /**
  * The implementation-bootstrap class for a command id, as bundled in this CLI
- * build. FAIL-CLOSED: an id the manifest does not classify — because the policy
- * denies it, because it is a typo, or because it is newer than this CLI — is
- * `deny`. A stale manifest can only ever be too restrictive, never too permissive.
+ * build. The manifest carries the positive class projection; an id outside that
+ * projection is not available to this principal (and is returned as `deny` for
+ * the instance gate). This projection is a local emission boundary only. The
+ * server's registry policy remains the authority, so a stale projection may be
+ * narrower or broader than the server's current view, but it cannot authorize a
+ * request the server rejects.
  */
 export declare function resolveImplementationBootstrapClass(commandId: string): ManifestBootstrapClass;
 /** Every command id this CLI build will send over the implementation credential, sorted. */
 export declare function implementationBootstrapCommandIds(): string[];
+/** Whether the production registry marks this id as a human-decision command. */
+export declare function isHumanDecisionCommand(commandId: string): boolean;
+/** Treat malformed or equal-to-now expiries as unusable before any network send. */
+export declare function isImplementationCredentialExpired(expiresAt: string, now?: Date): boolean;
 /**
  * Raised INSTEAD of sending a deny-class command over the implementation
  * credential. It carries the command id and nothing else — never the token, the
@@ -18,6 +25,16 @@ export declare class ImplementationBootstrapDeniedError extends Error {
     readonly commandId: string;
     constructor(commandId: string);
 }
+/** A stable operator message for a credential that cannot be retried as owner. */
+export declare function implementationCredentialExpiredMessage(hasUserSession: boolean): string;
+/** Refuse a noninteractive human-decision command while a bounded run is active. */
+export declare function implementationHumanDecisionMessage(commandId: string): string;
+/**
+ * A server response means the bearer is unusable only for authentication
+ * failures. Authorization/policy refusals are not liveness signals and must not
+ * trigger a more-privileged owner retry.
+ */
+export declare function isImplementationCredentialUnusable(error: unknown): boolean;
 /**
  * Build the implementation-bootstrap `CommandClient` — the ONLY sanctioned way to
  * construct one — with the class gate installed on the instance's `execute`.

package/dist/implementation-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implementation-bootstrap.d.ts","sourceRoot":"","sources":["../src/implementation-bootstrap.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAY5E;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAE7F;AAED,4FAA4F;AAC5F,wBAAgB,iCAAiC,IAAI,MAAM,EAAE,CAE5D;AAED;;;;GAIG;AACH,qBAAa,kCAAmC,SAAQ,KAAK;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mCAAmC,CACjD,iBAAiB,EAAE,OAAO,aAAa,EACvC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,GACpD,aAAa,CAUf"}
+{"version":3,"file":"implementation-bootstrap.d.ts","sourceRoot":"","sources":["../src/implementation-bootstrap.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,aAAa,EAAsB,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEnG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AA0D5E;;;;;;;;GAQG;AACH,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAE7F;AAED,4FAA4F;AAC5F,wBAAgB,iCAAiC,IAAI,MAAM,EAAE,CAE5D;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,oFAAoF;AACpF,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,OAAO,CAG9F;AAED;;;;GAIG;AACH,qBAAa,kCAAmC,SAAQ,KAAK;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B;AAED,kFAAkF;AAClF,wBAAgB,sCAAsC,CAAC,cAAc,EAAE,OAAO,GAAG,MAAM,CAStF;AAED,oFAAoF;AACpF,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAM5E;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQ1E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mCAAmC,CACjD,iBAAiB,EAAE,OAAO,aAAa,EACvC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,GACpD,aAAa,CAUf"}

package/dist/implementation-credential-store.d.ts

@@ -15,6 +15,24 @@ export type ImplementationCredentialStore = {
     clear(): Promise<void>;
     describe(): string;
 };
+export type ImplementationCredentialStoreBackend = "macOS Keychain" | "owner-only file store" | "Windows Credential Manager" | "Secret Service";
+/**
+ * No supported implementation-credential backend is configured for this
+ * platform. This is a genuine absence (there is nowhere a credential could
+ * be stored), unlike a failure after a backend has been selected.
+ */
+export declare class ImplementationCredentialStoreUnavailableError extends Error {
+    constructor(message?: string);
+}
+/**
+ * A backend was reached but could not produce a trustworthy credential result.
+ * The message intentionally carries only the backend class — never the
+ * subprocess error, stdout, stderr, credential path, or token material.
+ */
+export declare class ImplementationCredentialStoreReadError extends Error {
+    readonly backend: ImplementationCredentialStoreBackend;
+    constructor(backend: ImplementationCredentialStoreBackend);
+}
 export declare class ImplementationFileTokenStore implements ImplementationCredentialStore {
     private readonly filePath;
     constructor(filePath?: string);

package/dist/implementation-credential-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implementation-credential-store.d.ts","sourceRoot":"","sources":["../src/implementation-credential-store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAUL,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAO1B,QAAA,MAAM,uCAAuC;;;;;;;kBAOlC,CAAC;AAEZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,MAAM,CAAC;CACpB,CAAC;AA6SF,qBAAa,4BAA6B,YAAW,6BAA6B;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAqB;IAEpD,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC;IAezD,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,QAAQ,IAAI,MAAM;YAIJ,cAAc;CAI7B;AAED,MAAM,MAAM,0CAA0C,GAAG;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,OAAO,GAAE,0CAA+C,GACvD,6BAA6B,CAmC/B"}
+{"version":3,"file":"implementation-credential-store.d.ts","sourceRoot":"","sources":["../src/implementation-credential-store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAUL,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAO1B,QAAA,MAAM,uCAAuC;;;;;;;kBAOlC,CAAC;AAEZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAC5C,gBAAgB,GAChB,uBAAuB,GACvB,4BAA4B,GAC5B,gBAAgB,CAAC;AAErB;;;;GAIG;AACH,qBAAa,6CAA8C,SAAQ,KAAK;gBAEpE,OAAO,SAAwE;CAKlF;AAED;;;;GAIG;AACH,qBAAa,sCAAuC,SAAQ,KAAK;IAC/D,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC;gBAE3C,OAAO,EAAE,oCAAoC;CAK1D;AAmVD,qBAAa,4BAA6B,YAAW,6BAA6B;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAqB;IAEpD,IAAI,IAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC;IAezD,KAAK,CAAC,UAAU,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,QAAQ,IAAI,MAAM;YAIJ,cAAc;CAI7B;AAaD,MAAM,MAAM,0CAA0C,GAAG;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,OAAO,GAAE,0CAA+C,GACvD,6BAA6B,CAmC/B"}

package/dist/implementation-run-tombstone.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+/** Durable local marker that a bounded implementation run closed and cleared its credential. */
+export declare const implementationRunTombstoneSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    implementation_run_id: z.ZodString;
+    status: z.ZodEnum<{
+        completed: "completed";
+        abandoned: "abandoned";
+    }>;
+    closed_at: z.ZodString;
+}, z.core.$strict>;
+export type ImplementationRunTombstone = z.infer<typeof implementationRunTombstoneSchema>;
+export type ImplementationRunTombstoneStore = {
+    read(): Promise<ImplementationRunTombstone | null>;
+    write(tombstone: ImplementationRunTombstone): Promise<void>;
+    clear(): Promise<void>;
+};
+export declare class ImplementationRunTombstoneFileStore implements ImplementationRunTombstoneStore {
+    private readonly filePath;
+    constructor(filePath?: string);
+    read(): Promise<ImplementationRunTombstone | null>;
+    write(tombstone: ImplementationRunTombstone): Promise<void>;
+    clear(): Promise<void>;
+}
+export type CreateImplementationRunTombstoneStoreOptions = {
+    env?: NodeJS.ProcessEnv;
+};
+export declare function createImplementationRunTombstoneStore(options?: CreateImplementationRunTombstoneStoreOptions): ImplementationRunTombstoneStore;
+export declare function implementationRunClosedMessage(tombstone: ImplementationRunTombstone, hasUserSession: boolean): string;
+export declare function recordImplementationRunClosed(store: ImplementationRunTombstoneStore, status: ImplementationRunTombstone["status"], fields: Pick<ImplementationRunTombstone, "tenant_id" | "implementation_run_id">, closedAt?: Date): Promise<void>;
+//# sourceMappingURL=implementation-run-tombstone.d.ts.map

package/dist/implementation-run-tombstone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation-run-tombstone.d.ts","sourceRoot":"","sources":["../src/implementation-run-tombstone.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,gGAAgG;AAChG,eAAO,MAAM,gCAAgC;;;;;;;;kBAKlC,CAAC;AAEZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,MAAM,MAAM,+BAA+B,GAAG;IAC5C,IAAI,IAAI,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IACnD,KAAK,CAAC,SAAS,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAcF,qBAAa,mCAAoC,YAAW,+BAA+B;IAC7E,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAyB;IAExD,IAAI,IAAI,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAelD,KAAK,CAAC,SAAS,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED,MAAM,MAAM,4CAA4C,GAAG;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,CAAC;AAEF,wBAAgB,qCAAqC,CACnD,OAAO,GAAE,4CAAiD,GACzD,+BAA+B,CAOjC;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,0BAA0B,EACrC,cAAc,EAAE,OAAO,GACtB,MAAM,CAUR;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,+BAA+B,EACtC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,EAC5C,MAAM,EAAE,IAAI,CAAC,0BAA0B,EAAE,WAAW,GAAG,uBAAuB,CAAC,EAC/E,QAAQ,OAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/index.d.ts

@@ -3,12 +3,15 @@ import { CommandClient } from "./command-client.js";
 import { loginWithBrowser, refreshCliSessionIfNeeded } from "./auth.js";
 import { loginWithDeviceCode } from "./device-auth.js";
 import { type TokenStore } from "./token-store.js";
+import { type ImplementationCredentialStore } from "./implementation-credential-store.js";
+import { type ImplementationRunTombstoneStore } from "./implementation-run-tombstone.js";
 type CliIo = {
     stdout: Pick<NodeJS.WriteStream, "write">;
     stderr: Pick<NodeJS.WriteStream, "write">;
     interactive?: boolean;
     confirm?: (question: string) => Promise<boolean>;
 };
+type ImplementationCredentialStoreFactory = () => ImplementationCredentialStore;
 export declare function createConfirmPrompt(input: NodeJS.ReadableStream, output: NodeJS.WritableStream): (question: string) => Promise<boolean>;
 type MainOptions = {
     store?: TokenStore;
@@ -17,6 +20,8 @@ type MainOptions = {
     deviceLogin?: typeof loginWithDeviceCode;
     refreshSession?: typeof refreshCliSessionIfNeeded;
     commandClient?: typeof CommandClient;
+    implementationCredentialStore?: ImplementationCredentialStoreFactory;
+    implementationRunTombstoneStore?: () => ImplementationRunTombstoneStore;
 };
 export declare function main(argv?: string[], options?: MainOptions): Promise<number>;
 export declare function isCliEntrypoint(moduleUrl: string, argvPath: string | undefined): boolean;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAMA,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAoB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AA+CrE,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAI1C,WAAW,CAAC,EAAE,OAAO,CAAC;IAOtB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD,CAAC;AAqIF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,CAAC,cAAc,EAC5B,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUxC;AAuBD,KAAK,WAAW,GAAG;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,KAAK,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACzC,cAAc,CAAC,EAAE,OAAO,yBAAyB,CAAC;IAGlD,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;CACtC,CAAC;AAEF,wBAAsB,IAAI,CAAC,IAAI,WAAwB,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4nBnG;AAohBD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUxF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAMA,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAoB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,sCAAsC,CAAC;AAW9C,OAAO,EAKL,KAAK,+BAA+B,EACrC,MAAM,mCAAmC,CAAC;AAoD3C,KAAK,KAAK,GAAG;IACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAI1C,WAAW,CAAC,EAAE,OAAO,CAAC;IAOtB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD,CAAC;AAoBF,KAAK,oCAAoC,GAAG,MAAM,6BAA6B,CAAC;AAwOhF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,CAAC,cAAc,EAC5B,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUxC;AAuBD,KAAK,WAAW,GAAG;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,EAAE,CAAC,EAAE,KAAK,CAAC;IACX,KAAK,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACzC,cAAc,CAAC,EAAE,OAAO,yBAAyB,CAAC;IAGlD,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;IAGrC,6BAA6B,CAAC,EAAE,oCAAoC,CAAC;IACrE,+BAA+B,CAAC,EAAE,MAAM,+BAA+B,CAAC;CACzE,CAAC;AAEF,wBAAsB,IAAI,CAAC,IAAI,WAAwB,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2yBnG;AA8uBD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUxF"}