@shield-agent/kya 0.21.0 → 0.23.0

package/dist/commands/investigate.d.ts

@@ -0,0 +1,13 @@
+/**
+ * kya investigate - deterministic detectors over the local trail: incident
+ * grouping plus markdown fix briefs shaped for coding agents. No LLM calls.
+ */
+import type { ParsedArgs } from "../parse-args.js";
+export interface InvestigateCliOptions {
+    readonly json: boolean;
+}
+export declare function investigateOptionsFromArgs(parsed: ParsedArgs): InvestigateCliOptions;
+export declare function runInvestigate(opts: InvestigateCliOptions, io: {
+    log: (s: string) => void;
+}, cwd: string, env: NodeJS.ProcessEnv): Promise<number>;
+//# sourceMappingURL=investigate.d.ts.map

package/dist/commands/investigate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigate.d.ts","sourceRoot":"","sources":["../../src/commands/investigate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAQnD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,UAAU,GAAG,qBAAqB,CAEpF;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,qBAAqB,EAC3B,EAAE,EAAE;IAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EAChC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/commands/investigate.js

@@ -0,0 +1,22 @@
+import { flagBool } from "../parse-args.js";
+import { readTrail } from "../trail.js";
+import { investigateTrail, renderInvestigateReport, } from "../investigate/index.js";
+export function investigateOptionsFromArgs(parsed) {
+    return { json: flagBool(parsed.flags, "json") };
+}
+export async function runInvestigate(opts, io, cwd, env) {
+    const events = readTrail(cwd, env);
+    const result = investigateTrail(events);
+    if (opts.json) {
+        io.log(JSON.stringify({
+            findings: result.findings,
+            incidents: result.incidents,
+            briefs: Object.fromEntries(result.briefs),
+        }, null, 2));
+    }
+    else {
+        io.log(renderInvestigateReport(result));
+    }
+    return 0;
+}
+//# sourceMappingURL=investigate.js.map

package/dist/commands/investigate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigate.js","sourceRoot":"","sources":["../../src/commands/investigate.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAMjC,MAAM,UAAU,0BAA0B,CAAC,MAAkB;IAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA2B,EAC3B,EAAgC,EAChC,GAAW,EACX,GAAsB;IAEtB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CACJ,IAAI,CAAC,SAAS,CACZ;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;SAC1C,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/notify-flush.d.ts

@@ -0,0 +1,2 @@
+export declare function runNotifyFlush(env: NodeJS.ProcessEnv, cwd: string): Promise<number>;
+//# sourceMappingURL=notify-flush.d.ts.map

package/dist/commands/notify-flush.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify-flush.d.ts","sourceRoot":"","sources":["../../src/commands/notify-flush.ts"],"names":[],"mappings":"AAWA,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CAqCjB"}

package/dist/commands/notify-flush.js

@@ -0,0 +1,47 @@
+/**
+ * kya notify-flush - internal helper spawned detached by hook/wrap (see
+ * src/notify/dispatch.ts). Delivers the event handed over in KYA_NOTIFY_EVENT
+ * to configured webhooks and the OTLP exporter, then exits. Never prints,
+ * never fails hard: it is a best-effort side channel.
+ */
+import { kyaHome, readFileConfig } from "../config.js";
+import { notifyOnTrailEvent } from "../notify/index.js";
+import { exportVerdictSpan, resolveOtlpExportConfig } from "../otel/exporter.js";
+export async function runNotifyFlush(env, cwd) {
+    const raw = env.KYA_NOTIFY_EVENT;
+    if (!raw)
+        return 0;
+    let event;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed.toolId !== "string" || typeof parsed.verdict !== "string") {
+            return 0;
+        }
+        event = parsed;
+    }
+    catch {
+        return 0;
+    }
+    // Project config wins over the global one (same precedence as resolveConfig).
+    const fileConfig = {
+        ...readFileConfig(kyaHome(env)),
+        ...readFileConfig(cwd),
+    };
+    await notifyOnTrailEvent(event, fileConfig, env).catch(() => undefined);
+    const otlp = resolveOtlpExportConfig(env, fileConfig);
+    if (otlp) {
+        await exportVerdictSpan({
+            ts: event.ts,
+            sessionId: event.sessionId,
+            toolId: event.toolId,
+            verdict: event.verdict,
+            reasonCode: event.reasonCode,
+            mode: event.mode,
+            ...(event.host ? { host: event.host } : {}),
+            ...(event.tokensIn !== undefined ? { tokensIn: event.tokensIn } : {}),
+            ...(event.tokensOut !== undefined ? { tokensOut: event.tokensOut } : {}),
+        }, otlp).catch(() => undefined);
+    }
+    return 0;
+}
+//# sourceMappingURL=notify-flush.js.map

package/dist/commands/notify-flush.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify-flush.js","sourceRoot":"","sources":["../../src/commands/notify-flush.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAyB,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAsB,EACtB,GAAW;IAEX,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,8EAA8E;IAC9E,MAAM,UAAU,GAAG;QACjB,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,GAAG,cAAc,CAAC,GAAG,CAAC;KACH,CAAC;IACtB,MAAM,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,iBAAiB,CACrB;YACE,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,EACD,IAAI,CACL,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/orr.d.ts

@@ -1,5 +1,5 @@
 /**
- * kya orr run — Phase O1 read-only ORR board emitter.
+ * kya orr run - Phase O1 read-only ORR board emitter.
  * Reporting orchestrator only: not a second PEP; never mints principals or allows side effects.
  */
 import type { ParsedArgs } from "../parse-args.js";
@@ -72,9 +72,9 @@ export interface OrrRunOptions {
     readonly failOn?: "no_go" | "conditional";
     readonly quiet: boolean;
     readonly jsonStdout: boolean;
-    /** Optional OpenSSF Scorecard / readiness JSON. Evidence only — not a PEP. */
+    /** Optional OpenSSF Scorecard / readiness JSON. Evidence only - not a PEP. */
     readonly scorecardPath?: string;
-    /** Optional AgentShield SecurityReport JSON dump. Evidence only — not a PEP. */
+    /** Optional AgentShield SecurityReport JSON dump. Evidence only - not a PEP. */
     readonly agentshieldJsonPath?: string;
     /** Optional usage JSON (array). Observe-only showback. */
     readonly usagePath?: string;

package/dist/commands/orr.js

@@ -1,5 +1,5 @@
 /**
- * kya orr run — Phase O1 read-only ORR board emitter.
+ * kya orr run - Phase O1 read-only ORR board emitter.
  * Reporting orchestrator only: not a second PEP; never mints principals or allows side effects.
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, lstatSync, realpathSync, statSync, writeFileSync, } from "node:fs";
@@ -218,7 +218,7 @@ export function readScorecardEvidence(scorecardPath) {
                 category: "enterprise_readiness",
                 severity: "info",
                 title: "Scorecard file not found",
-                detail: `${scorecardPath} was requested as an optional producer. Evidence only — not a PEP.`,
+                detail: `${scorecardPath} was requested as an optional producer. Evidence only - not a PEP.`,
                 evidence: abs,
                 source_tool: "openssf.scorecard",
             },
@@ -346,7 +346,7 @@ export function runSaFirstPartyProbes(root) {
             category: "agent_factory_lifecycle",
             severity: "high",
             title: "Agent create path may be scope-auth only",
-            detail: "Factory doctrine: principal mint should be policy-gated (APPROVED). ORR reports only — does not mint.",
+            detail: "Factory doctrine: principal mint should be policy-gated (APPROVED). ORR reports only - does not mint.",
             evidence: "sa.first_party text probe",
         });
     }
@@ -361,7 +361,7 @@ export function runSaFirstPartyProbes(root) {
             category: "cost_budget_gates",
             severity: "info",
             title: "No in-loop step/token/retry ceilings detected",
-            detail: "Look for max_steps, max_tokens, max_retries, or maxCost in the agent loop. Soft gate only — ORR does not kill spend.",
+            detail: "Look for max_steps, max_tokens, max_retries, or maxCost in the agent loop. Soft gate only - ORR does not kill spend.",
             evidence: "sa.first_party text probe",
         });
     }
@@ -493,7 +493,7 @@ export function formatOrrMarkdown(report) {
             .join("\n");
     const showbackMd = formatShowbackMarkdown(report.showback);
     const cards = report.scorecards
-        .map((s) => `- \`${s.category}\` / \`${s.name}\`: **${s.result}** (${s.hardness})${s.note ? ` — ${s.note}` : ""}`)
+        .map((s) => `- \`${s.category}\` / \`${s.name}\`: **${s.result}** (${s.hardness})${s.note ? ` - ${s.note}` : ""}`)
         .join("\n");
     return `# ORR: ${report.target.name}
 

package/dist/commands/receipt-serve.d.ts

@@ -1,7 +1,7 @@
 /**
  * Hidden daemon entry: runs the live receipt server in the foreground and
  * publishes `.kya/receipt-server.json` (pid, url, token) once listening.
- * Spawned detached by `ensureReceiptDaemon` — never invoked by users directly.
+ * Spawned detached by `ensureReceiptDaemon` - never invoked by users directly.
  */
 import type { ResolvedConfig } from "../config.js";
 export declare function runReceiptServe(config: ResolvedConfig, input: {

package/dist/commands/receipt-serve.js

@@ -17,7 +17,7 @@ export async function runReceiptServe(config, input) {
         await live.waitUntilClosed;
     }
     finally {
-        // Only remove the state file if it is still ours — a successor daemon
+        // Only remove the state file if it is still ours - a successor daemon
         // spawned during our slow shutdown must not lose its state.
         clearDaemonState(config.cwd, process.pid);
     }

package/dist/commands/receipt.d.ts

@@ -34,13 +34,15 @@ export declare function runReceipt(config: ResolvedConfig, input: {
 }): Promise<ReceiptResult>;
 /**
  * `kya receipt --share`: build the redacted share payload from the current
- * window's receipt model and POST it to the hosted platform. Returns the
- * public URL on success; failures are returned (not thrown) as {ok:false}.
+ * window's receipt model and POST it to the hosted platform. Single attempt
+ * by default; input.shareRetries (max 3) opts into bounded backoff retries.
+ * Returns the public URL on success; failures are returned (not thrown).
  */
 export declare function runReceiptShare(config: ResolvedConfig, input: {
     sessionId?: string;
     days?: number;
     shareUrl?: string;
+    shareRetries?: number;
 }, env?: NodeJS.ProcessEnv): Promise<ShareResult>;
 export declare function receiptInputFromArgs(parsed: ParsedArgs): {
     sessionId: string | undefined;
@@ -48,6 +50,7 @@ export declare function receiptInputFromArgs(parsed: ParsedArgs): {
     open: boolean;
     outDir: string | undefined;
     searchQuery: string | undefined;
+    shareRetries: number;
 };
 export declare function formatReceiptHuman(r: ReceiptResult): string;
 export declare function openPath(target: string): void;

package/dist/commands/receipt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/commands/receipt.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAUnD,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,iDAAiD;AACjD,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;CACnC,CAAC;AAEF,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAEpE,wBAAsB,UAAU,CAC9B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAClG,OAAO,CAAC,aAAa,CAAC,CAwDxB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC/D,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,WAAW,CAAC,CAWtB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU;;;;;;EAUtD;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAa3D;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAS7C"}
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/commands/receipt.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAUnD,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,iDAAiD;AACjD,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;CACnC,CAAC;AAEF,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAEpE,wBAAsB,UAAU,CAC9B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAClG,OAAO,CAAC,aAAa,CAAC,CAwDxB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,EACtF,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,WAAW,CAAC,CAYtB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU;;;;;;;EAWtD;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAa3D;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAS7C"}

package/dist/commands/receipt.js

@@ -6,7 +6,7 @@ import { assertNoSecrets } from "../dash/render.js";
 import { loadReceiptModel, renderReceiptHtml, renderReceiptMarkdown, } from "../receipt/render-receipt.js";
 import { ensureReceiptDaemon } from "../receipt/daemon.js";
 import { receiptsDir } from "../trail.js";
-import { buildSharePayload, shareBaseUrl, shareReceiptPayload, } from "../receipt/share.js";
+import { buildSharePayload, clampShareRetries, shareBaseUrl, shareReceiptWithRetry, } from "../receipt/share.js";
 export const DEFAULT_RECEIPT_DAYS = 3;
 export async function runReceipt(config, input) {
     const sessionId = input.sessionId?.trim();
@@ -58,8 +58,9 @@ export async function runReceipt(config, input) {
 }
 /**
  * `kya receipt --share`: build the redacted share payload from the current
- * window's receipt model and POST it to the hosted platform. Returns the
- * public URL on success; failures are returned (not thrown) as {ok:false}.
+ * window's receipt model and POST it to the hosted platform. Single attempt
+ * by default; input.shareRetries (max 3) opts into bounded backoff retries.
+ * Returns the public URL on success; failures are returned (not thrown).
  */
 export async function runReceiptShare(config, input, env = process.env) {
     const sessionId = input.sessionId?.trim();
@@ -68,8 +69,9 @@ export async function runReceiptShare(config, input, env = process.env) {
         : DEFAULT_RECEIPT_DAYS;
     const model = loadReceiptModel({ cwd: config.cwd, sessionId, days, live: false });
     const payload = buildSharePayload(model);
-    return shareReceiptPayload(payload, {
+    return shareReceiptWithRetry(payload, {
         baseUrl: shareBaseUrl(input.shareUrl, env),
+        retries: input.shareRetries ?? 0,
     });
 }
 export function receiptInputFromArgs(parsed) {
@@ -81,6 +83,7 @@ export function receiptInputFromArgs(parsed) {
         open: parsed.flags["open"] === true || parsed.flags["open"] === "true",
         outDir: flagString(parsed.flags, "out", "out-dir", "outDir"),
         searchQuery: flagString(parsed.flags, "q", "query", "search"),
+        shareRetries: clampShareRetries(flagString(parsed.flags, "share-retries", "shareRetries")),
     };
 }
 export function formatReceiptHuman(r) {

package/dist/commands/receipt.js.map

@@ -1 +1 @@
-{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/commands/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AA6BtC,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAsB,EACtB,KAAmG;IAEnG,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,oBAAoB,CAAC;IAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE3D,8EAA8E;IAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS;QACT,IAAI;QACJ,IAAI,EAAE,KAAK;QACX,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,QAAQ,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACvD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE1B,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAElC,MAAM,IAAI,GAAqB;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QAC/B,IAAI;KACL,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAErB,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,MAAM,CAAC,GAAG;QACnB,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,YAAY,EAAE,MAAM,CAAC,MAAM;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,KAA+D,EAC/D,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,oBAAoB,CAAC;IAC3B,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,mBAAmB,CAAC,OAAO,EAAE;QAClC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC;QACzE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC9C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM;QACtE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;QAC5D,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAgB;IACjD,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,UAAU,GAAG;QAC9B,WAAW,CAAC,CAAC,UAAU,EAAE;QACzB,SAAS,CAAC,CAAC,QAAQ,EAAE;QACrB,SAAS,CAAC,CAAC,QAAQ,EAAE;QACrB,OAAO,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG;QAAE,OAAO;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/commands/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AA6BtC,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAsB,EACtB,KAAmG;IAEnG,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,oBAAoB,CAAC;IAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE3D,8EAA8E;IAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS;QACT,IAAI;QACJ,IAAI,EAAE,KAAK;QACX,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,QAAQ,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACvD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE1B,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAElC,MAAM,IAAI,GAAqB;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QAC/B,IAAI;KACL,CAAC;IAEF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAErB,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,MAAM,CAAC,GAAG;QACnB,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,YAAY,EAAE,MAAM,CAAC,MAAM;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,KAAsF,EACtF,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,oBAAoB,CAAC;IAC3B,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,qBAAqB,CAAC,OAAO,EAAE;QACpC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC;QAC1C,OAAO,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC;QACzE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC9C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM;QACtE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;QAC5D,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC7D,YAAY,EAAE,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAgB;IACjD,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,UAAU,GAAG;QAC9B,WAAW,CAAC,CAAC,UAAU,EAAE;QACzB,SAAS,CAAC,CAAC,QAAQ,EAAE;QACrB,SAAS,CAAC,CAAC,QAAQ,EAAE;QACrB,OAAO,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG;QAAE,OAAO;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACzF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/commands/serve-mcp.js

@@ -19,7 +19,7 @@ export async function runServeMcp(config, options, client) {
             host: config.host,
             agentId: config.agentId,
             // Offline (KYA_OFFLINE=1, as `kya start`/`kya connect` wire for hosts):
-            // start keyless — initialize/tools/list work; tool calls still fail
+            // start keyless - initialize/tools/list work; tool calls still fail
             // closed at call time without a key.
             requireApiKey: !config.offline,
         });

package/dist/commands/start.d.ts

@@ -45,8 +45,8 @@ export interface GateBootstrapDeps {
 export declare function gateBootstrapEnabled(flag: boolean | undefined, env?: NodeJS.ProcessEnv): boolean;
 /**
  * Gate bootstrap for `kya start`: scaffold gateways.json, import third-party
- * servers discovered in host configs, then — only when there is something to
- * govern — install the binary, start the supervisor, and route the source
+ * servers discovered in host configs, then - only when there is something to
+ * govern - install the binary, start the supervisor, and route the source
  * hosts through the gateway (direct entries removed, originals backed up
  * under .kya/backups). Every step warns and continues: start never fails
  * because of the gateway, and host configs are only touched once the

package/dist/commands/start.js

@@ -6,9 +6,9 @@
  * `.cursor/mcp.json` in cwd), user-level MCP configs for hosts with evidence
  * of installation (config file present, or the host's config dir exists),
  * and PreToolUse hooks for hook-capable hosts (claude, grok, kimi).
- * All go through merge-only logic — never clobber. The gateway bootstrap
+ * All go through merge-only logic - never clobber. The gateway bootstrap
  * (bootstrapGate) then imports third-party MCP servers found in those host
- * configs into gateways.json and routes them through the local gateway —
+ * configs into gateways.json and routes them through the local gateway -
  * warn-and-continue throughout, skippable via --no-gate / KYA_GATE=off.
  */
 import { existsSync, readFileSync } from "node:fs";
@@ -38,8 +38,8 @@ function errMsg(err) {
 }
 /**
  * Gate bootstrap for `kya start`: scaffold gateways.json, import third-party
- * servers discovered in host configs, then — only when there is something to
- * govern — install the binary, start the supervisor, and route the source
+ * servers discovered in host configs, then - only when there is something to
+ * govern - install the binary, start the supervisor, and route the source
  * hosts through the gateway (direct entries removed, originals backed up
  * under .kya/backups). Every step warns and continues: start never fails
  * because of the gateway, and host configs are only touched once the
@@ -57,7 +57,7 @@ export async function bootstrapGate(config, input) {
         servers = readGateways(env).servers;
     }
     catch (err) {
-        warnings.push(`gateways.json needs a hand fix (${errMsg(err)}) — gateway bootstrap skipped`);
+        warnings.push(`gateways.json needs a hand fix (${errMsg(err)}) - gateway bootstrap skipped`);
         return {
             imported: [],
             serverCount: 0,
@@ -65,7 +65,7 @@ export async function bootstrapGate(config, input) {
             backups: [],
             rewiredHosts: [],
             warnings,
-            summary: "gateway: gateways.json is not usable — fix it by hand, then re-run kya start",
+            summary: "gateway: gateways.json is not usable - fix it by hand, then re-run kya start",
         };
     }
     const importedIds = imported.map((s) => s.id);
@@ -77,7 +77,7 @@ export async function bootstrapGate(config, input) {
             backups: [],
             rewiredHosts: [],
             warnings,
-            summary: "gateway: no third-party MCP servers found — add one to any host config and re-run kya start",
+            summary: "gateway: no third-party MCP servers found - add one to any host config and re-run kya start",
         };
     }
     const ensure = input.deps?.ensureBinary ?? ((e) => ensureGateBinary({ env: e }));
@@ -85,7 +85,7 @@ export async function bootstrapGate(config, input) {
         await ensure(env);
     }
     catch (err) {
-        warnings.push(`gateway binary could not be installed (${errMsg(err)}) — continuing without the gateway; host configs untouched`);
+        warnings.push(`gateway binary could not be installed (${errMsg(err)}) - continuing without the gateway; host configs untouched`);
         return {
             imported: importedIds,
             serverCount: servers.length,
@@ -93,7 +93,7 @@ export async function bootstrapGate(config, input) {
             backups: [],
             rewiredHosts: [],
             warnings,
-            summary: `gateway: ${servers.length} server${servers.length === 1 ? "" : "s"} configured but the binary is unavailable (offline?) — re-run kya start when online`,
+            summary: `gateway: ${servers.length} server${servers.length === 1 ? "" : "s"} configured but the binary is unavailable (offline?) - re-run kya start when online`,
         };
     }
     const runGate = input.deps?.runGate ?? ((c, e) => runGateRun(c, { env: e }));
@@ -102,7 +102,7 @@ export async function bootstrapGate(config, input) {
         run = await runGate(config, env);
     }
     catch (err) {
-        warnings.push(`gateway failed to start (${errMsg(err)}) — continuing without it; host configs untouched`);
+        warnings.push(`gateway failed to start (${errMsg(err)}) - continuing without it; host configs untouched`);
         return {
             imported: importedIds,
             serverCount: servers.length,
@@ -110,7 +110,7 @@ export async function bootstrapGate(config, input) {
             backups: [],
             rewiredHosts: [],
             warnings,
-            summary: "gateway: configured but the listener did not come up — see `kya gate doctor`",
+            summary: "gateway: configured but the listener did not come up - see `kya gate doctor`",
         };
     }
     // Route only entries the gateway actually imported from that host: the gate
@@ -143,13 +143,13 @@ export async function bootstrapGate(config, input) {
             rewiredHosts.push(host);
         }
         catch (err) {
-            warnings.push(`${host}: could not route through the gateway (${errMsg(err)}) — its existing servers are kept`);
+            warnings.push(`${host}: could not route through the gateway (${errMsg(err)}) - its existing servers are kept`);
         }
     }
     const addr = run.url.replace(/^https?:\/\//, "");
     const summary = importedIds.length
         ? `gateway: ${importedIds.length} server${importedIds.length === 1 ? "" : "s"} imported (${importedIds.join(", ")}), gateway running on ${addr}` +
-            (backups.length ? " — originals backed up to .kya/backups/" : "")
+            (backups.length ? " - originals backed up to .kya/backups/" : "")
         : `gateway: running on ${addr} (${servers.length} server${servers.length === 1 ? "" : "s"}: ${servers.map((s) => s.id).join(", ")})`;
     return {
         imported: importedIds,
@@ -174,12 +174,12 @@ function seedTrailIfEmpty(cwd) {
         verdict: "ALLOW",
         reasonCode: "ALLOW",
         mode: "observe",
-        summary: "KYA started — wire MCP in your host, then wrap tools here",
+        summary: "KYA started - wire MCP in your host, then wrap tools here",
     });
 }
 /**
  * Config dirs that count as evidence a host is installed even before its
- * config file exists (home dir itself never counts — ~/.claude.json's parent
+ * config file exists (home dir itself never counts - ~/.claude.json's parent
  * is ~). Any other host qualifies only when its config file already exists.
  */
 const EVIDENCE_DIRS = {
@@ -285,8 +285,8 @@ export async function runStart(config, input = {}) {
                 running: false,
                 backups: [],
                 rewiredHosts: [],
-                warnings: [`gateway bootstrap failed (${errMsg(err)}) — continuing without it`],
-                summary: "gateway: bootstrap failed — kya start continues without the gateway",
+                warnings: [`gateway bootstrap failed (${errMsg(err)}) - continuing without it`],
+                summary: "gateway: bootstrap failed - kya start continues without the gateway",
             };
         }
     }
@@ -327,10 +327,10 @@ export async function runStart(config, input = {}) {
         reportPid,
         reportReused,
         next: `${hostNotes} ` +
-            "The report runs in the background — reopen with `kya receipt --open`, " +
+            "The report runs in the background - reopen with `kya receipt --open`, " +
             "stop with `kya stop`." +
             (hooksWired.length
-                ? " Hooks take effect in new sessions — claude, grok, and kimi all load hooks at session start."
+                ? " Hooks take effect in new sessions - claude, grok, and kimi all load hooks at session start."
                 : ""),
     };
 }
@@ -343,7 +343,7 @@ export function formatStartHuman(r) {
             ? `wired hosts: ${r.wiredHosts.map((h) => `${h.label} (${h.path})`).join(", ")}`
             : undefined,
         r.hooksWired.length
-            ? `hooks: ${r.hooksWired.map((h) => h.label).join(", ")} (PreToolUse interception — applies to new sessions)`
+            ? `hooks: ${r.hooksWired.map((h) => h.label).join(", ")} (PreToolUse interception - applies to new sessions)`
             : undefined,
         r.gate ? r.gate.summary : undefined,
         ...(r.gate?.warnings.map((w) => `gateway warning: ${w}`) ?? []),

package/dist/commands/stop.d.ts

@@ -1,5 +1,5 @@
 /**
- * `kya stop` — stop the background live-receipt server started by `kya start`.
+ * `kya stop` - stop the background live-receipt server started by `kya start`.
  * `--all` additionally sweeps orphaned `receipt-serve` daemons from other
  * cwds or older installs that the cwd state file does not know about.
  */

package/dist/commands/stop.js

@@ -1,5 +1,5 @@
 /**
- * `kya stop` — stop the background live-receipt server started by `kya start`.
+ * `kya stop` - stop the background live-receipt server started by `kya start`.
  * `--all` additionally sweeps orphaned `receipt-serve` daemons from other
  * cwds or older installs that the cwd state file does not know about.
  */
@@ -23,7 +23,7 @@ export async function runStop(cwd, options = {}) {
     let stale = false;
     if (state) {
         if (pidAlive(state.pid) && !isReceiptDaemonProcess(state.pid)) {
-            // Planted or recycled pid — never signal a foreign process.
+            // Planted or recycled pid - never signal a foreign process.
             clearDaemonState(cwd);
             stale = true;
         }
@@ -43,7 +43,7 @@ export async function runStop(cwd, options = {}) {
     if (options.all) {
         const platform = options.platform ?? process.platform;
         if (platform === "win32") {
-            // tasklist exposes no command lines, so orphans cannot be identified —
+            // tasklist exposes no command lines, so orphans cannot be identified -
             // report the limitation instead of claiming none are running.
             sweepUnsupported = true;
             extraStopped = [];
@@ -64,7 +64,7 @@ export async function runStop(cwd, options = {}) {
             extraStopped = extra;
         }
     }
-    // --all also stops the local gateway (kya gate run) — supervisor, binary
+    // --all also stops the local gateway (kya gate run) - supervisor, binary
     // child, plus orphan sweeps of stray gate-serve supervisors and kya-gate
     // binaries.
     let gateStopped = false;
@@ -104,13 +104,13 @@ export async function runStop(cwd, options = {}) {
 export function formatStopHuman(r) {
     const lines = [];
     if (r.stale) {
-        lines.push(`state file was stale (pid ${r.pid} is not the report server) — cleared it`);
+        lines.push(`state file was stale (pid ${r.pid} is not the report server) - cleared it`);
     }
     else {
         lines.push(r.stopped ? `stopped report server (pid ${r.pid})` : "no report server running");
     }
     if (r.sweepUnsupported) {
-        lines.push("sweep of other receipt daemons is not supported on this platform (win32) — any orphans must be stopped manually");
+        lines.push("sweep of other receipt daemons is not supported on this platform (win32) - any orphans must be stopped manually");
     }
     else if (r.extraStopped) {
         lines.push(r.extraStopped.length > 0

package/dist/commands/update.d.ts

@@ -0,0 +1,19 @@
+export type PackageManager = "npm" | "pnpm" | "yarn" | "volta" | "npx" | "unknown";
+export interface UpdateCommandIo {
+    readonly log: (msg: string) => void;
+    readonly error: (msg: string) => void;
+}
+export declare function detectPackageManager(execPath: string): PackageManager;
+export declare function buildInstallCommand(manager: PackageManager): {
+    command: string;
+    args: readonly string[];
+    hint?: string;
+} | null;
+export declare function manualUpdateCommand(): string;
+export interface UpdateCommandDeps {
+    readonly execPath?: string;
+    readonly run?: (command: string, args: readonly string[]) => Promise<number>;
+    readonly io?: UpdateCommandIo;
+}
+export declare function runUpdate(deps?: UpdateCommandDeps): Promise<number>;
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,CAAC;AAEnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAOD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAuBrE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,IAAI,CAmBP;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAUD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7E,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC;CAC/B;AAED,wBAAsB,SAAS,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B7E"}