@shrkcrft/cli 0.1.0-alpha.16 → 0.1.0-alpha.17

package/dist/command-registry.d.ts

@@ -111,6 +111,24 @@ export declare function extractGlobalCwd(argv: readonly string[]): {
     cwd?: string;
     rest: string[];
 };
+/** A request to compress a command's stdout, parsed from the global flags. */
+export interface IGlobalCompressDirective {
+    /** Force a content type for the compressor (else auto-detect). */
+    type?: string;
+    /** Query text that biases which lines/matches the compressor keeps. */
+    query?: string;
+}
+/**
+ * Extracts the global output-compression flags from anywhere in argv:
+ * `--compress` / `--ccr` (synonyms; turn it on) plus optional
+ * `--compress-type <t>` and `--compress-query <q>`. Returns the directive (when
+ * any was present) and the remaining argv with those flags removed — so the
+ * underlying command can be re-run cleanly without them (and never recurses).
+ */
+export declare function extractGlobalCompress(argv: readonly string[]): {
+    directive?: IGlobalCompressDirective;
+    rest: string[];
+};
 /**
  * Returns the absolute cwd for the current command:
  * 1. Command-level --cwd flag (if passed after the command)

package/dist/command-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-registry.d.ts","sourceRoot":"","sources":["../src/command-registry.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACrC,0EAA0E;IAC1E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CACjD;AAED;;;;;GAKG;AACH,UAAU,gBAAgB;IACxB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAMD,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,sEAAsE;IACtE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,6EAA6E;IAC7E,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoC;IACzD,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAE5D,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAIxC,0DAA0D;IAC1D,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAIjE;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAgBnE,qCAAqC;IACrC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKlD,uCAAuC;IACvC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKpD,iEAAiE;IACjE,OAAO,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAa9E,gCAAgC;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK9C,8BAA8B;IAC9B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAOhE,8DAA8D;IAC9D,KAAK,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,GAAG,SAAS;IAK3D,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC,UAAU,IAAI,SAAS,MAAM,EAAE;IAW/B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE;IAWpD,2EAA2E;IAC3E,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE;IAUzD,gBAAgB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAI/C,kBAAkB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAIjD,gDAAgD;IAChD,IAAI,IAAI,SAAS,eAAe,EAAE;IAQlC,oDAAoD;IACpD,OAAO,IAAI,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;KAAE,CAAC;IAMjG;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB;IAsBtD,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,UAAU;CAWnB;AAQD,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,gBAAqB,GAAG,UAAU,CAwC7F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAwBA;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAKnD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG7E;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK7E;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;CACrC;AAED,wBAAgB,QAAQ,CACtB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,gBAAqB,GAC7B,MAAM,EAAE,CAkCV;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQjE"}
+{"version":3,"file":"command-registry.d.ts","sourceRoot":"","sources":["../src/command-registry.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IACrC,0EAA0E;IAC1E,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;CACjD;AAED;;;;;GAKG;AACH,UAAU,gBAAgB;IACxB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAMD,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,sEAAsE;IACtE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,6EAA6E;IAC7E,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoC;IACzD,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAE5D,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAIxC,0DAA0D;IAC1D,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAIjE;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAgBnE,qCAAqC;IACrC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKlD,uCAAuC;IACvC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKpD,iEAAiE;IACjE,OAAO,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAa9E,gCAAgC;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK9C,8BAA8B;IAC9B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAOhE,8DAA8D;IAC9D,KAAK,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,GAAG,SAAS;IAK3D,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC,UAAU,IAAI,SAAS,MAAM,EAAE;IAW/B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE;IAWpD,2EAA2E;IAC3E,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE;IAUzD,gBAAgB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAI/C,kBAAkB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAIjD,gDAAgD;IAChD,IAAI,IAAI,SAAS,eAAe,EAAE;IAQlC,oDAAoD;IACpD,OAAO,IAAI,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;KAAE,CAAC;IAMjG;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB;IAsBtD,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,UAAU;CAWnB;AAQD,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,gBAAqB,GAAG,UAAU,CAwC7F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CA+BA;AAED,8EAA8E;AAC9E,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAC9D,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAkEA;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAKnD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG7E;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK7E;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;CACrC;AAED,wBAAgB,QAAQ,CACtB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,gBAAqB,GAC7B,MAAM,EAAE,CAkCV;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQjE"}

package/dist/command-registry.js

@@ -256,6 +256,13 @@ export function extractGlobalCwd(argv) {
     let cwd;
     for (let i = 0; i < argv.length; i += 1) {
         const t = argv[i];
+        // Honor the POSIX `--` end-of-options separator (as parseArgs does):
+        // everything after it is a literal positional, so a `--cwd` there must not
+        // be intercepted. Preserve `--` and the remainder verbatim.
+        if (t === '--') {
+            rest.push(...argv.slice(i));
+            break;
+        }
         if (t === '--cwd') {
             const next = argv[i + 1];
             if (next !== undefined && !next.startsWith('-')) {
@@ -277,6 +284,83 @@ export function extractGlobalCwd(argv) {
         cwd = nodePath.resolve(process.cwd(), cwd);
     return cwd === undefined ? { rest } : { cwd, rest };
 }
+/**
+ * Extracts the global output-compression flags from anywhere in argv:
+ * `--compress` / `--ccr` (synonyms; turn it on) plus optional
+ * `--compress-type <t>` and `--compress-query <q>`. Returns the directive (when
+ * any was present) and the remaining argv with those flags removed — so the
+ * underlying command can be re-run cleanly without them (and never recurses).
+ */
+export function extractGlobalCompress(argv) {
+    const rest = [];
+    let active = false;
+    let type;
+    let query;
+    const valued = (token, flag, set, i) => {
+        if (token === flag) {
+            const next = argv[i + 1];
+            if (next !== undefined && !next.startsWith('-')) {
+                set(next);
+                return true; // caller skips next
+            }
+            return false;
+        }
+        return false;
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const t = argv[i];
+        // Honor the POSIX `--` end-of-options separator exactly as parseArgs does:
+        // everything after it is a literal positional, so a compress-flag-shaped
+        // token there must NOT be intercepted (and the next token must not be
+        // swallowed as a value). Preserve `--` and the remainder verbatim for the
+        // child to re-parse.
+        if (t === '--') {
+            rest.push(...argv.slice(i));
+            break;
+        }
+        if (t === '--compress' || t === '--ccr') {
+            active = true;
+            continue;
+        }
+        if (t.startsWith('--compress-type=')) {
+            type = t.slice('--compress-type='.length);
+            active = true;
+            continue;
+        }
+        if (t.startsWith('--compress-query=')) {
+            query = t.slice('--compress-query='.length);
+            active = true;
+            continue;
+        }
+        if (t === '--compress-type') {
+            if (valued(t, '--compress-type', (v) => (type = v), i)) {
+                active = true;
+                i += 1;
+                continue;
+            }
+            active = true;
+            continue;
+        }
+        if (t === '--compress-query') {
+            if (valued(t, '--compress-query', (v) => (query = v), i)) {
+                active = true;
+                i += 1;
+                continue;
+            }
+            active = true;
+            continue;
+        }
+        rest.push(t);
+    }
+    if (!active)
+        return { rest };
+    const directive = {};
+    if (type !== undefined)
+        directive.type = type;
+    if (query !== undefined)
+        directive.query = query;
+    return { directive, rest };
+}
 /**
  * Returns the absolute cwd for the current command:
  * 1. Command-level --cwd flag (if passed after the command)

package/dist/commands/apply.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.command.d.ts","sourceRoot":"","sources":["../../src/commands/apply.command.ts"],"names":[],"mappings":"AAqDA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAyLhC,eAAO,MAAM,YAAY,EAAE,eAyrB1B,CAAC"}
+{"version":3,"file":"apply.command.d.ts","sourceRoot":"","sources":["../../src/commands/apply.command.ts"],"names":[],"mappings":"AAqDA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAyLhC,eAAO,MAAM,YAAY,EAAE,eAisB1B,CAAC"}

package/dist/commands/apply.command.js

@@ -179,7 +179,7 @@ async function runApplyBatchFromCli(args, batchPath) {
 export const applyCommand = {
     name: 'apply',
     description: 'Apply a previously-saved generation plan (sharkcraft.plan/v1 JSON). The CLI is the only write path; MCP never writes. Plans that live under .sharkcraft/sessions/<id>/plans/ automatically update the session metadata (signature + divergence + applied + validation).',
-    usage: 'shrk [--cwd <dir>] apply <plan.json> [--session <id>] [--force] [--allow-divergent] [--verify-signature] [--require-signature] [--dry-run] [--validate] [--report] [--json] [--trace] [--explain-dispatch] | shrk apply --asset-preview <draft.ts> --target <file> [--write] [--allow-unknown-target] [--reason <text>] | shrk apply --batch <plan.json> [--allow-divergent] [--dry-run] [--json]',
+    usage: 'shrk [--cwd <dir>] apply <plan.json> [--session <id>] [--force] [--allow-divergent] [--verify-signature] [--require-signature] [--no-verify-signature] [--dry-run] [--validate] [--report] [--json] [--trace] [--explain-dispatch] | shrk apply --asset-preview <draft.ts> --target <file> [--write] [--allow-unknown-target] [--reason <text>] | shrk apply --batch <plan.json> [--allow-divergent] [--dry-run] [--json]',
     async run(args) {
         // Asset-preview flow: paste-with-review for authoring drafts.
         // Distinct from the plan-based apply path: takes a TS draft and a
@@ -222,7 +222,15 @@ export const applyCommand = {
         const explainOnly = flagBool(args, 'explain-dispatch');
         let signatureStatus = DevSessionSignatureStatus.NotChecked;
         let signatureMessage;
-        if (verifySig) {
+        // A plan that CARRIES a signature self-enforces verification: the signature
+        // is the producer's tamper-evidence declaration, so a signed plan must not
+        // apply unverified just because the caller forgot --verify-signature
+        // (contract: "Apply requires --verify-signature for signed plans"). A
+        // tampered/invalid signature then refuses below. `--no-verify-signature` is
+        // the explicit escape hatch for sign-here / apply-there-without-the-secret.
+        const isSigned = Boolean(saved.signature);
+        const skipSig = flagBool(args, 'no-verify-signature') && !verifySig;
+        if (verifySig || (isSigned && !skipSig)) {
             const result = verifyPlan(saved);
             if (result.ok === true) {
                 signatureStatus = DevSessionSignatureStatus.Verified;

package/dist/commands/command-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-catalog.d.ts","sourceRoot":"","sources":["../../src/commands/command-catalog.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,QAAQ,cAAc;IACtB,iBAAiB,mBAAmB;IACpC,gBAAgB,kBAAkB;IAClC,YAAY,kBAAkB;IAC9B,SAAS,eAAe;IACxB,cAAc,oBAAoB;CACnC;AAED;;;;;;GAMG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AAED,8BAA8B;AAC9B,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,EAAE,OAAO;IACT,UAAU,gBAAgB;IAC1B,UAAU,eAAe;CAC1B;AAED;;;;;;GAMG;AACH,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;;;GAMG;AACH,oBAAY,gBAAgB;IAC1B,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,YAAY,iBAAiB;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,kCAAkC;IAClC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,oBAAoB,EA2hGzD,CAAC;AAEH,4DAA4D;AAC5D,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAWpD;AA0DD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAgGjE,CAAC;AAEH,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAExE;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAItE;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,SAAS,eAAe,EAAE,CAKnF;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAEpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,oBAAoB,GAAG,gBAAgB,CAQ1E;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAclE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAwC9D;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,wBAAwB,IAAI,SAAS,uBAAuB,EAAE,CAsB7E;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,SAAS,uBAAuB,EAAE,GACvC,MAAM,CAaR"}
+{"version":3,"file":"command-catalog.d.ts","sourceRoot":"","sources":["../../src/commands/command-catalog.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,QAAQ,cAAc;IACtB,iBAAiB,mBAAmB;IACpC,gBAAgB,kBAAkB;IAClC,YAAY,kBAAkB;IAC9B,SAAS,eAAe;IACxB,cAAc,oBAAoB;CACnC;AAED;;;;;;GAMG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AAED,8BAA8B;AAC9B,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,EAAE,OAAO;IACT,UAAU,gBAAgB;IAC1B,UAAU,eAAe;CAC1B;AAED;;;;;;GAMG;AACH,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;;;GAMG;AACH,oBAAY,gBAAgB;IAC1B,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,YAAY,iBAAiB;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,kCAAkC;IAClC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,oBAAoB,EA2hGzD,CAAC;AAEH,4DAA4D;AAC5D,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAWpD;AA0DD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAgGjE,CAAC;AAEH,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAExE;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAItE;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,SAAS,eAAe,EAAE,CAKnF;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAEpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,oBAAoB,GAAG,gBAAgB,CAQ1E;AAuFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAclE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAwC9D;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,wBAAwB,IAAI,SAAS,uBAAuB,EAAE,CAsB7E;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,SAAS,uBAAuB,EAAE,GACvC,MAAM,CAaR"}

package/dist/commands/command-catalog.js

@@ -3402,6 +3402,8 @@ const PRIMARY_VERBS_ALLOWLIST = new Set([
     'impact',
     'graph',
     'code-intel',
+    'compress',
+    'expand',
     // Generate code safely
     'gen',
     'apply',

package/dist/commands/compress.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compress.command.d.ts","sourceRoot":"","sources":["../../src/commands/compress.command.ts"],"names":[],"mappings":"AAQA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAgBhC;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,eAkE7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,eA0B3B,CAAC"}
+{"version":3,"file":"compress.command.d.ts","sourceRoot":"","sources":["../../src/commands/compress.command.ts"],"names":[],"mappings":"AAQA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAahC;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,eA+E7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,eA4B3B,CAAC"}

package/dist/commands/compress.command.js

@@ -1,12 +1,10 @@
 import { readFileSync } from 'node:fs';
-import * as nodePath from 'node:path';
-import { compressContent, EContentType, FileCcrStore, } from '@shrkcrft/compress';
+import { Buffer } from 'node:buffer';
+import { compressContent, ECompressionStrategy, EContentType, } from '@shrkcrft/compress';
 import { flagBool, flagNumber, flagString, resolveCwd, } from "../command-registry.js";
 import { asJson } from "../output/format-output.js";
+import { ccrDir, openCcrStore } from "../output/ccr-store-config.js";
 const CONTENT_TYPES = new Set(Object.values(EContentType));
-function ccrDir(cwd) {
-    return nodePath.join(cwd, '.sharkcraft', 'ccr');
-}
 function readInput(args) {
     const positional = args.positional[0];
     const useStdin = flagBool(args, 'stdin') || positional === undefined || positional === '-';
@@ -24,7 +22,7 @@ function readInput(args) {
 export const compressCommand = {
     name: 'compress',
     description: 'Compress a blob (file or stdin) deterministically to cut tokens — JSON→table, logs/search/diffs→signal. Reversible via `shrk expand`.',
-    usage: 'shrk [--cwd <dir>] compress [<file>|-] [--stdin] [--type <content-type>] [--query <text>] [--max <n>] [--no-cache] [--json]',
+    usage: 'shrk [--cwd <dir>] compress [<file>|-] [--stdin] [--type <content-type>] [--query <text>] [--max <n>] [--lossless] [--no-cache] [--json]',
     run(args) {
         const cwd = resolveCwd(args);
         let content;
@@ -41,13 +39,15 @@ export const compressCommand = {
         }
         const opts = {};
         if (!flagBool(args, 'no-cache'))
-            opts.store = new FileCcrStore(ccrDir(cwd));
+            opts.store = openCcrStore(cwd);
         const query = flagString(args, 'query');
         if (query)
             opts.query = query;
         const max = flagNumber(args, 'max');
         if (max !== undefined && max > 0)
             opts.maxItems = Math.floor(max);
+        if (flagBool(args, 'lossless'))
+            opts.lossless = true;
         const type = flagString(args, 'type');
         if (type && CONTENT_TYPES.has(type))
             opts.contentType = type;
@@ -59,8 +59,11 @@ export const compressCommand = {
             process.stderr.write('warning: compressed lossily but the original was NOT cached (--no-cache) — ' +
                 'detail is unrecoverable; omit --no-cache to keep it retrievable via `shrk expand`.\n');
         }
+        const queryApplied = query !== undefined && query.length > 0;
         if (flagBool(args, 'json')) {
-            process.stdout.write(asJson({
+            // tokens are a deterministic ESTIMATE (chars/divisor heuristic), not a
+            // real BPE count — flagged so callers don't treat savedRatio as exact.
+            const base = {
                 contentType: result.contentType,
                 strategy: result.strategy,
                 lossy: result.lossy,
@@ -68,15 +71,25 @@ export const compressCommand = {
                 tokensAfter: result.savings.after,
                 tokensSaved: result.savings.saved,
                 savedRatio: result.savings.ratio,
+                tokensAreEstimated: true,
+                queryApplied,
                 ccrKey: result.ccrKey ?? null,
                 note: result.note,
-                compressed: result.compressed,
-            }) + '\n');
+            };
+            // Net-loss guard: on a passthrough/no-win blob the engine returns the
+            // VERBATIM original as `compressed`. Echoing it back inside the JSON
+            // envelope (plus scaffold) costs more tokens than the input. Signal
+            // passthrough and omit the duplicated content — the caller still has it.
+            const noWin = result.strategy === ECompressionStrategy.Passthrough || result.savings.saved <= 0;
+            const payload = noWin
+                ? { ...base, passthrough: true, inputBytes: Buffer.byteLength(content, 'utf8') }
+                : { ...base, compressed: result.compressed };
+            process.stdout.write(asJson(payload) + '\n');
             return 0;
         }
         process.stdout.write(result.compressed + '\n');
         const cached = result.ccrKey ? ` · original cached as ${result.ccrKey} (shrk expand ${result.ccrKey})` : '';
-        process.stderr.write(`${result.strategy}: ${result.savings.before} → ${result.savings.after} tokens (−${pct}%)${cached}\n`);
+        process.stderr.write(`${result.strategy}: ~${result.savings.before} → ~${result.savings.after} tokens (−${pct}%, est.)${cached}\n`);
         return 0;
     },
 };
@@ -95,7 +108,7 @@ export const expandCommand = {
             process.stderr.write('expand: a CCR key is required (e.g. `shrk expand a1b2c3d4e5f60718`).\n');
             return 1;
         }
-        const store = new FileCcrStore(ccrDir(cwd));
+        const store = openCcrStore(cwd);
         const entry = store.get(key);
         if (!entry) {
             process.stderr.write(`expand: no cached original for key "${key}" under ${ccrDir(cwd)}.\n`);
@@ -105,7 +118,9 @@ export const expandCommand = {
             process.stdout.write(asJson({ key: entry.key, bytes: entry.bytes, content: entry.content }) + '\n');
             return 0;
         }
-        process.stdout.write(entry.content + '\n');
+        // Write the cached original VERBATIM — appending a newline broke byte-for-byte
+        // round-trip (`compress … ; expand` must reproduce the input exactly).
+        process.stdout.write(entry.content);
         return 0;
     },
 };

package/dist/commands/deps-audit.command.js

@@ -256,6 +256,10 @@ function rootOfSpecifier(spec) {
 function isBuiltinModule(spec) {
     if (spec.startsWith('node:'))
         return true;
+    // Bun runtime builtins (`bun:test`, `bun:sqlite`, `bun:ffi`, …) are provided by
+    // the runtime, never an npm dependency — so they are not "missing".
+    if (spec.startsWith('bun:'))
+        return true;
     // Common bare-name builtins.
     return new Set([
         'fs', 'path', 'os', 'crypto', 'http', 'https', 'url', 'util', 'stream',

package/dist/commands/dev.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev.command.d.ts","sourceRoot":"","sources":["../../src/commands/dev.command.ts"],"names":[],"mappings":"AA6CA,OAAO,EAML,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AA67ChC,eAAO,MAAM,UAAU,EAAE,eAkExB,CAAC"}
+{"version":3,"file":"dev.command.d.ts","sourceRoot":"","sources":["../../src/commands/dev.command.ts"],"names":[],"mappings":"AA6CA,OAAO,EAML,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAi8ChC,eAAO,MAAM,UAAU,EAAE,eAkExB,CAAC"}

package/dist/commands/dev.command.js

@@ -672,7 +672,11 @@ async function validateSession(args) {
     const allVerifications = flagBool(args, 'all-verifications');
     const allowPackCommands = flagBool(args, 'allow-pack-commands');
     const wantStrict = flagBool(args, 'strict');
-    const wantReport = flagBool(args, 'report') !== false; // default: write report
+    // flagBool is two-valued (absent → false), so `flagBool(...) !== false` is
+    // false when the flag is absent — the opposite of the intended default. Read
+    // the raw value: write the report by default, opt out only via --report=false.
+    const reportFlag = args.flags.get('report');
+    const wantReport = reportFlag !== false && reportFlag !== 'false';
     const wantJson = flagBool(args, 'json');
     const startedAt = new Date().toISOString();
     const reportFileName = `validate-${startedAt.replace(/[:.]/g, '-')}.json`;

package/dist/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EACL,eAAe,EAIhB,MAAM,uBAAuB,CAAC;AAsX/B,wBAAgB,aAAa,IAAI,eAAe,CA2X/C;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BrE;AAkGD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CA4CxE"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EACL,eAAe,EAKhB,MAAM,uBAAuB,CAAC;AAuX/B,wBAAgB,aAAa,IAAI,eAAe,CA2X/C;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BrE;AAoHD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CA4CxE"}

package/dist/main.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { loadDotenv } from "./env/load-dotenv.js";
-import { CommandRegistry, extractGlobalCwd, parseArgs, } from "./command-registry.js";
+import { CommandRegistry, extractGlobalCompress, extractGlobalCwd, parseArgs, } from "./command-registry.js";
+import { runCommandWithCompression } from "./output/output-compression.js";
 import { initCommand } from "./commands/init.command.js";
 import { inspectCommand } from "./commands/inspect.command.js";
 import { doctorAcknowledgeCommand, doctorAcknowledgementsCommand, doctorCommand, doctorSuppressCommand, doctorSuppressionsCommand, } from "./commands/doctor.command.js";
@@ -545,8 +546,23 @@ async function isUsageEnabled(cwd) {
 async function runCliInner(argv) {
     const registry = buildRegistry();
     // Pre-parse the global --cwd so it can appear anywhere (incl. before the command).
-    const { cwd: globalCwd, rest: cleanArgv } = extractGlobalCwd(argv);
+    const { cwd: globalCwd, rest: cwdCleanArgv } = extractGlobalCwd(argv);
+    // Pre-parse the global --compress / --ccr output-compression flags.
+    const { directive: compressDirective, rest: cleanArgv } = extractGlobalCompress(cwdCleanArgv);
     const [first] = cleanArgv;
+    // `--compress` / `--ccr` on a real command: re-run it and compress its stdout.
+    // (Meta verbs like --help/--version and bare invocations are left untouched.)
+    if (compressDirective &&
+        first &&
+        first !== '--help' &&
+        first !== '-h' &&
+        first !== '--full-help' &&
+        first !== '--version' &&
+        first !== '-v' &&
+        first !== '--about') {
+        const childArgv = globalCwd ? ['--cwd', globalCwd, ...cleanArgv] : [...cleanArgv];
+        return runCommandWithCompression(childArgv, compressDirective, globalCwd ?? process.cwd());
+    }
     // bare invocation lands on the curated tiered view.
     if (!first) {
         const landing = await renderNoArgsLanding(globalCwd ?? process.cwd());

package/dist/output/ccr-store-config.d.ts

@@ -0,0 +1,18 @@
+import { TtlFileCcrStore } from '@shrkcrft/compress';
+/**
+ * Upper bound on cached CCR originals under `.sharkcraft/ccr/`. The store evicts
+ * the oldest entries past this on every `put`, so the compress cache stays
+ * bounded instead of growing without limit (the old `FileCcrStore` had no cap).
+ * Count-based (not time-based) so a previously-cached key never silently
+ * expires out from under a `shrk expand` until it is genuinely the oldest and
+ * the cap is exceeded.
+ */
+export declare const CCR_MAX_ENTRIES = 1000;
+/** Absolute path to the per-workspace CCR cache directory. */
+export declare function ccrDir(cwd: string): string;
+/**
+ * Open the bounded, cross-process CCR store the CLI write/read paths share.
+ * `ttlMs: 0` means no time expiry; `maxEntries` is the only bound.
+ */
+export declare function openCcrStore(cwd: string): TtlFileCcrStore;
+//# sourceMappingURL=ccr-store-config.d.ts.map

package/dist/output/ccr-store-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ccr-store-config.d.ts","sourceRoot":"","sources":["../../src/output/ccr-store-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,8DAA8D;AAC9D,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAEzD"}

package/dist/output/ccr-store-config.js

@@ -0,0 +1,22 @@
+import * as nodePath from 'node:path';
+import { TtlFileCcrStore } from '@shrkcrft/compress';
+/**
+ * Upper bound on cached CCR originals under `.sharkcraft/ccr/`. The store evicts
+ * the oldest entries past this on every `put`, so the compress cache stays
+ * bounded instead of growing without limit (the old `FileCcrStore` had no cap).
+ * Count-based (not time-based) so a previously-cached key never silently
+ * expires out from under a `shrk expand` until it is genuinely the oldest and
+ * the cap is exceeded.
+ */
+export const CCR_MAX_ENTRIES = 1000;
+/** Absolute path to the per-workspace CCR cache directory. */
+export function ccrDir(cwd) {
+    return nodePath.join(cwd, '.sharkcraft', 'ccr');
+}
+/**
+ * Open the bounded, cross-process CCR store the CLI write/read paths share.
+ * `ttlMs: 0` means no time expiry; `maxEntries` is the only bound.
+ */
+export function openCcrStore(cwd) {
+    return new TtlFileCcrStore(ccrDir(cwd), { maxEntries: CCR_MAX_ENTRIES });
+}

package/dist/output/output-compression.d.ts

@@ -0,0 +1,15 @@
+import type { IGlobalCompressDirective } from '../command-registry.js';
+/**
+ * Implements the global `--compress` / `--ccr` flag: run a `shrk` command in a
+ * child process, capture its stdout, and emit a deterministically-compressed
+ * version (with the original cached for `shrk expand`). The command's own
+ * stderr is forwarded verbatim and its exit code is preserved.
+ *
+ * A SUBPROCESS (not in-process `process.stdout` capture) on purpose: some
+ * commands call `process.exit`, which would discard a buffered in-process
+ * capture mid-write; re-running the command isolates that and still yields the
+ * full output + real exit status. `childArgv` has already had the compress
+ * flags stripped, so the child never recurses.
+ */
+export declare function runCommandWithCompression(childArgv: readonly string[], directive: IGlobalCompressDirective, cwd: string): number;
+//# sourceMappingURL=output-compression.d.ts.map

package/dist/output/output-compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-compression.d.ts","sourceRoot":"","sources":["../../src/output/output-compression.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAQvE;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,SAAS,EAAE,wBAAwB,EACnC,GAAG,EAAE,MAAM,GACV,MAAM,CAgDR"}

package/dist/output/output-compression.js

@@ -0,0 +1,60 @@
+import { spawnSync } from 'node:child_process';
+import { compressContent } from '@shrkcrft/compress';
+import { openCcrStore } from "./ccr-store-config.js";
+import { resolveCompressType } from "./resolve-compress-type.js";
+// Command output can be large (a full knowledge dump, a wide graph). Allow up to
+// 64 MiB of captured stdout before spawnSync gives up.
+const MAX_BUFFER = 64 * 1024 * 1024;
+/**
+ * Implements the global `--compress` / `--ccr` flag: run a `shrk` command in a
+ * child process, capture its stdout, and emit a deterministically-compressed
+ * version (with the original cached for `shrk expand`). The command's own
+ * stderr is forwarded verbatim and its exit code is preserved.
+ *
+ * A SUBPROCESS (not in-process `process.stdout` capture) on purpose: some
+ * commands call `process.exit`, which would discard a buffered in-process
+ * capture mid-write; re-running the command isolates that and still yields the
+ * full output + real exit status. `childArgv` has already had the compress
+ * flags stripped, so the child never recurses.
+ */
+export function runCommandWithCompression(childArgv, directive, cwd) {
+    const runtime = process.argv[0];
+    const entry = process.argv[1];
+    if (!runtime || !entry) {
+        process.stderr.write('--compress: cannot determine the shrk entry point to re-run; emitting uncompressed.\n');
+        return 1;
+    }
+    // Resolve an explicit --compress-type up front so a typo is reported loudly
+    // (not silently auto-detected), even if the command ends up printing nothing.
+    const resolvedType = resolveCompressType(directive.type);
+    if (resolvedType.warning)
+        process.stderr.write(`${resolvedType.warning}\n`);
+    const res = spawnSync(runtime, [entry, ...childArgv], {
+        encoding: 'utf8',
+        maxBuffer: MAX_BUFFER,
+        env: process.env,
+    });
+    if (res.error) {
+        process.stderr.write(`--compress: failed to run the command (${res.error.message}); emitting nothing.\n`);
+        return 1;
+    }
+    // Forward the command's own stderr (warnings, summaries, errors) untouched.
+    if (res.stderr)
+        process.stderr.write(res.stderr);
+    const captured = res.stdout ?? '';
+    const code = res.status ?? (res.signal ? 1 : 0);
+    // Nothing on stdout (or the command failed) → don't fabricate output.
+    if (captured.length === 0)
+        return code;
+    const opts = { store: openCcrStore(cwd) };
+    if (directive.query)
+        opts.query = directive.query;
+    if (resolvedType.type)
+        opts.contentType = resolvedType.type;
+    const result = compressContent(captured, opts);
+    process.stdout.write(result.compressed.endsWith('\n') ? result.compressed : `${result.compressed}\n`);
+    const pct = Math.round(result.savings.ratio * 100);
+    const cached = result.ccrKey ? ` · original cached (shrk expand ${result.ccrKey})` : '';
+    process.stderr.write(`[--compress] ${result.strategy}: ~${result.savings.before} → ~${result.savings.after} tokens (−${pct}%, est.)${cached}\n`);
+    return code;
+}

package/dist/output/resolve-compress-type.d.ts

@@ -0,0 +1,22 @@
+import { EContentType } from '@shrkcrft/compress';
+/** Outcome of resolving a raw `--compress-type` string. */
+export interface IResolvedCompressType {
+    /** The forced content type — set only when the raw value named a valid one. */
+    type?: EContentType;
+    /**
+     * A user-facing warning, set when the raw value was non-empty but
+     * unrecognized. The caller surfaces it (on stderr) so an explicit-but-typo'd
+     * `--compress-type` is reported rather than silently dropped.
+     */
+    warning?: string;
+}
+/**
+ * Resolve a raw `--compress-type` flag value into a forced {@link EContentType}.
+ *
+ * An unrecognized, non-empty value is NOT silently ignored (the old behavior):
+ * it yields a `warning` listing the valid types, so the caller can tell the
+ * user their explicit choice was dropped before falling back to auto-detection.
+ * A missing or empty value is a no-op (auto-detect, no warning).
+ */
+export declare function resolveCompressType(raw: string | undefined): IResolvedCompressType;
+//# sourceMappingURL=resolve-compress-type.d.ts.map

package/dist/output/resolve-compress-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-compress-type.d.ts","sourceRoot":"","sources":["../../src/output/resolve-compress-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,2DAA2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,CAOlF"}

package/dist/output/resolve-compress-type.js

@@ -0,0 +1,21 @@
+import { EContentType } from '@shrkcrft/compress';
+/** The valid `--compress-type` values: the EContentType wire strings. */
+const VALID_TYPES = new Set(Object.values(EContentType));
+/**
+ * Resolve a raw `--compress-type` flag value into a forced {@link EContentType}.
+ *
+ * An unrecognized, non-empty value is NOT silently ignored (the old behavior):
+ * it yields a `warning` listing the valid types, so the caller can tell the
+ * user their explicit choice was dropped before falling back to auto-detection.
+ * A missing or empty value is a no-op (auto-detect, no warning).
+ */
+export function resolveCompressType(raw) {
+    if (raw === undefined || raw === '')
+        return {};
+    if (VALID_TYPES.has(raw))
+        return { type: raw };
+    const valid = [...VALID_TYPES].sort().join(', ');
+    return {
+        warning: `--compress: unknown --compress-type "${raw}"; auto-detecting instead. Valid types: ${valid}.`,
+    };
+}

package/dist/validation/run-validation-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-validation-loop.d.ts","sourceRoot":"","sources":["../../src/validation/run-validation-loop.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,2EAA2E;IAC3E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6EAA6E;IAC7E,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAqGnC"}
+{"version":3,"file":"run-validation-loop.d.ts","sourceRoot":"","sources":["../../src/validation/run-validation-loop.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,2EAA2E;IAC3E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,6EAA6E;IAC7E,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAyGnC"}

package/dist/validation/run-validation-loop.js

@@ -25,7 +25,11 @@ export async function runValidationLoop(options) {
         const ver = cfg?.verificationCommands ?? [];
         const wantIds = new Set(options.verificationIds);
         for (const v of ver) {
-            const shouldRun = options.allVerifications || wantIds.has(v.id);
+            // `--all-verifications` auto-runs commands, so it must respect the
+            // explicit `trusted: false` opt-out (a command the project marked
+            // untrusted must not be executed en masse). An explicit `--verification
+            // <id>` still runs it — naming it by id IS the opt-in.
+            const shouldRun = (options.allVerifications && v.trusted !== false) || wantIds.has(v.id);
             if (!shouldRun)
                 continue;
             commands.push({ id: v.id, command: v.command, trusted: v.trusted !== false });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shrkcrft/cli",
-  "version": "0.1.0-alpha.16",
+  "version": "0.1.0-alpha.17",
   "description": "SharkCraft CLI (`shrk`): structured project intelligence for AI coding agents.",
   "license": "MIT",
   "author": "SharkCraft contributors",
@@ -47,38 +47,38 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@shrkcrft/core": "^0.1.0-alpha.16",
-    "@shrkcrft/compress": "^0.1.0-alpha.16",
-    "@shrkcrft/config": "^0.1.0-alpha.16",
-    "@shrkcrft/workspace": "^0.1.0-alpha.16",
-    "@shrkcrft/knowledge": "^0.1.0-alpha.16",
-    "@shrkcrft/context": "^0.1.0-alpha.16",
-    "@shrkcrft/rules": "^0.1.0-alpha.16",
-    "@shrkcrft/paths": "^0.1.0-alpha.16",
-    "@shrkcrft/templates": "^0.1.0-alpha.16",
-    "@shrkcrft/plugin-api": "^0.1.0-alpha.16",
-    "@shrkcrft/dashboard": "^0.1.0-alpha.16",
-    "@shrkcrft/dashboard-api": "^0.1.0-alpha.16",
-    "@shrkcrft/pipelines": "^0.1.0-alpha.16",
-    "@shrkcrft/presets": "^0.1.0-alpha.16",
-    "@shrkcrft/boundaries": "^0.1.0-alpha.16",
-    "@shrkcrft/graph": "^0.1.0-alpha.16",
-    "@shrkcrft/rule-graph": "^0.1.0-alpha.16",
-    "@shrkcrft/structural-search": "^0.1.0-alpha.16",
-    "@shrkcrft/impact-engine": "^0.1.0-alpha.16",
-    "@shrkcrft/context-planner": "^0.1.0-alpha.16",
-    "@shrkcrft/architecture-guard": "^0.1.0-alpha.16",
-    "@shrkcrft/framework-scanners": "^0.1.0-alpha.16",
-    "@shrkcrft/api-surface-diff": "^0.1.0-alpha.16",
-    "@shrkcrft/quality-gates": "^0.1.0-alpha.16",
-    "@shrkcrft/migrate": "^0.1.0-alpha.16",
-    "@shrkcrft/generator": "^0.1.0-alpha.16",
-    "@shrkcrft/importer": "^0.1.0-alpha.16",
-    "@shrkcrft/inspector": "^0.1.0-alpha.16",
-    "@shrkcrft/ai": "^0.1.0-alpha.16",
-    "@shrkcrft/embeddings": "^0.1.0-alpha.16",
-    "@shrkcrft/shared": "^0.1.0-alpha.16",
-    "@shrkcrft/mcp-server": "^0.1.0-alpha.16",
+    "@shrkcrft/core": "^0.1.0-alpha.17",
+    "@shrkcrft/compress": "^0.1.0-alpha.17",
+    "@shrkcrft/config": "^0.1.0-alpha.17",
+    "@shrkcrft/workspace": "^0.1.0-alpha.17",
+    "@shrkcrft/knowledge": "^0.1.0-alpha.17",
+    "@shrkcrft/context": "^0.1.0-alpha.17",
+    "@shrkcrft/rules": "^0.1.0-alpha.17",
+    "@shrkcrft/paths": "^0.1.0-alpha.17",
+    "@shrkcrft/templates": "^0.1.0-alpha.17",
+    "@shrkcrft/plugin-api": "^0.1.0-alpha.17",
+    "@shrkcrft/dashboard": "^0.1.0-alpha.17",
+    "@shrkcrft/dashboard-api": "^0.1.0-alpha.17",
+    "@shrkcrft/pipelines": "^0.1.0-alpha.17",
+    "@shrkcrft/presets": "^0.1.0-alpha.17",
+    "@shrkcrft/boundaries": "^0.1.0-alpha.17",
+    "@shrkcrft/graph": "^0.1.0-alpha.17",
+    "@shrkcrft/rule-graph": "^0.1.0-alpha.17",
+    "@shrkcrft/structural-search": "^0.1.0-alpha.17",
+    "@shrkcrft/impact-engine": "^0.1.0-alpha.17",
+    "@shrkcrft/context-planner": "^0.1.0-alpha.17",
+    "@shrkcrft/architecture-guard": "^0.1.0-alpha.17",
+    "@shrkcrft/framework-scanners": "^0.1.0-alpha.17",
+    "@shrkcrft/api-surface-diff": "^0.1.0-alpha.17",
+    "@shrkcrft/quality-gates": "^0.1.0-alpha.17",
+    "@shrkcrft/migrate": "^0.1.0-alpha.17",
+    "@shrkcrft/generator": "^0.1.0-alpha.17",
+    "@shrkcrft/importer": "^0.1.0-alpha.17",
+    "@shrkcrft/inspector": "^0.1.0-alpha.17",
+    "@shrkcrft/ai": "^0.1.0-alpha.17",
+    "@shrkcrft/embeddings": "^0.1.0-alpha.17",
+    "@shrkcrft/shared": "^0.1.0-alpha.17",
+    "@shrkcrft/mcp-server": "^0.1.0-alpha.17",
     "@huggingface/transformers": "^3.7.5"
   },
   "publishConfig": {