@sponsio/sdk 0.1.0-alpha.3 → 0.2.0-alpha.4

package/dist/cli/scan.js

@@ -0,0 +1,172 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runScanCli = runScanCli;
+/**
+ * ``sponsio scan`` — re-mine contracts from code, write/append to yaml.
+ *
+ * Mirrors the Python ``sponsio scan`` library-maintenance flow: AST
+ * scan a path, infer deterministic contracts heuristically, write a
+ * sponsio.yaml (or append to an existing one). Used *after* ``onboard``
+ * has set up the project, when you've added new tools and want to
+ * update the contract list.
+ *
+ * Differs from the default ``npx sponsio <patterns>`` mode (which
+ * emits a tools.json inventory) and from ``onboard`` (first-time
+ * setup, prints integration patch + framework detection). This is
+ * the maintenance command, silent except for the yaml output.
+ */
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const yaml = __importStar(require("js-yaml"));
+const index_1 = require("./index");
+const onboard_1 = require("./onboard");
+const HELP = "sponsio scan — AST-scan source for tools, write contracts to sponsio.yaml\n" +
+    "\n" +
+    "USAGE:\n" +
+    "  sponsio scan <patterns...> [options]\n" +
+    "\n" +
+    "ARGUMENTS:\n" +
+    "  <patterns...>     Glob(s) or directories to scan (default: src/**/*.{ts,tsx,js,jsx})\n" +
+    "\n" +
+    "OPTIONS:\n" +
+    "  -a, --agent <id>      Agent id stamped into yaml (default: agent)\n" +
+    "  -o, --out <file>      Output yaml path (default: sponsio.yaml; '-' = stdout)\n" +
+    "      --append          Merge into existing yaml's contracts list (deduped)\n" +
+    "      --mode <m>        runtime.mode if creating a new yaml (default: observe)\n" +
+    "  -h, --help            Show this help\n" +
+    "\n" +
+    "EXAMPLES:\n" +
+    "  sponsio scan ./src\n" +
+    "  sponsio scan 'src/tools/**/*.ts' -o sponsio.yaml\n" +
+    "  sponsio scan ./src --append\n" +
+    "  sponsio scan ./src -o -                   # print to stdout\n";
+function parseArgs(argv) {
+    const opts = {
+        patterns: [],
+        agent: "agent",
+        out: "sponsio.yaml",
+        append: false,
+        mode: "observe",
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "-h" || a === "--help") {
+            process.stdout.write(HELP);
+            process.exit(0);
+        }
+        if (a === "-a" || a === "--agent") {
+            opts.agent = argv[++i];
+            continue;
+        }
+        if (a === "-o" || a === "--out") {
+            opts.out = argv[++i];
+            continue;
+        }
+        if (a === "--append") {
+            opts.append = true;
+            continue;
+        }
+        if (a === "--mode") {
+            const v = argv[++i];
+            if (v !== "observe" && v !== "enforce") {
+                process.stderr.write(`--mode must be observe|enforce (got ${v})\n`);
+                process.exit(2);
+            }
+            opts.mode = v;
+            continue;
+        }
+        if (a.startsWith("-")) {
+            process.stderr.write(`unknown flag: ${a}\n${HELP}`);
+            process.exit(2);
+        }
+        opts.patterns.push(a);
+    }
+    if (opts.patterns.length === 0) {
+        opts.patterns = ["src/**/*.{ts,tsx,js,jsx}"];
+    }
+    return opts;
+}
+function mergeContracts(existing, fresh) {
+    const seen = new Set(existing.map((c) => c.E).filter(Boolean));
+    const out = [...existing];
+    for (const c of fresh) {
+        if (!seen.has(c.E)) {
+            out.push(c);
+            seen.add(c.E);
+        }
+    }
+    return out;
+}
+async function runScanCli(argv) {
+    const opts = parseArgs(argv);
+    const so = await (0, index_1.scan)(opts.patterns);
+    if (so.diagnostics.length) {
+        for (const d of so.diagnostics) {
+            process.stderr.write(`[${d.level}] ${d.filepath}:${d.line}  ${d.message}\n`);
+        }
+    }
+    const toolNames = so.tools.map((t) => t.function.name);
+    let payload;
+    if (opts.append && opts.out !== "-" && (0, node_fs_1.existsSync)((0, node_path_1.resolve)(opts.out))) {
+        const existing = yaml.load((0, node_fs_1.readFileSync)((0, node_path_1.resolve)(opts.out), "utf-8"));
+        const fresh = (0, onboard_1.suggestDetNlContracts)(toolNames);
+        const agents = existing.agents ?? {};
+        const block = agents[opts.agent] ?? { contracts: [] };
+        block.contracts = mergeContracts(block.contracts ?? [], fresh);
+        agents[opts.agent] = block;
+        existing.agents = agents;
+        existing.tools = so.tools;
+        payload = existing;
+    }
+    else {
+        payload = (0, onboard_1.buildFallbackPayload)(toolNames, { tools: so.tools }, opts.agent, opts.mode);
+    }
+    const header = "# Generated by: sponsio scan\n" +
+        `# Scanned ${so.tools.length} tool(s) across ${opts.patterns.length} pattern(s).\n` +
+        "# Review each contract before flipping to enforce.\n\n";
+    const text = header + yaml.dump(payload, { lineWidth: 100 });
+    if (opts.out === "-") {
+        process.stdout.write(text);
+        return;
+    }
+    const outPath = (0, node_path_1.resolve)(opts.out);
+    (0, node_fs_1.writeFileSync)(outPath, text, "utf-8");
+    process.stdout.write(`✓ wrote ${outPath}\n` +
+        `  tools:      ${so.tools.length}\n` +
+        `  contracts:  ${(payload.agents?.[opts.agent]?.contracts ?? []).length}\n` +
+        `  mode:       ${payload.runtime?.mode ?? "observe"}\n`);
+}
+//# sourceMappingURL=scan.js.map

package/dist/cli/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/cli/scan.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgHA,gCA2CC;AA3JD;;;;;;;;;;;;;GAaG;AACH,qCAAkE;AAClE,yCAAoC;AACpC,8CAAgC;AAChC,mCAA6C;AAC7C,uCAAwE;AAExE,MAAM,IAAI,GACR,6EAA6E;IAC7E,IAAI;IACJ,UAAU;IACV,0CAA0C;IAC1C,IAAI;IACJ,cAAc;IACd,0FAA0F;IAC1F,IAAI;IACJ,YAAY;IACZ,uEAAuE;IACvE,kFAAkF;IAClF,+EAA+E;IAC/E,kFAAkF;IAClF,0CAA0C;IAC1C,IAAI;IACJ,aAAa;IACb,wBAAwB;IACxB,sDAAsD;IACtD,iCAAiC;IACjC,iEAAiE,CAAC;AAUpE,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAgB;QACxB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,SAAS;KAChB,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,KAAK,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,QAAqD,EACrD,KAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,IAAA,YAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEvD,IAAI,OAAgC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAA4B,CAAC;QAChG,MAAM,KAAK,GAAG,IAAA,+BAAqB,EAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAI,QAAQ,CAAC,MAAsF,IAAI,EAAE,CAAC;QACtH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACtD,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QAC3B,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;QAC1B,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAA,8BAAoB,EAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,MAAM,GACV,gCAAgC;QAChC,aAAa,EAAE,CAAC,KAAK,CAAC,MAAM,mBAAmB,IAAI,CAAC,QAAQ,CAAC,MAAM,gBAAgB;QACnF,wDAAwD,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAE7D,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,OAAO,IAAI;QACpB,iBAAiB,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI;QACpC,iBAAiB,CAAE,OAAO,CAAC,MAAoD,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI;QAC1H,iBAAkB,OAAO,CAAC,OAA6B,EAAE,IAAI,IAAI,SAAS,IAAI,CACjF,CAAC;AACJ,CAAC"}

package/dist/cli/skill.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ``sponsio skill install`` — drop the universal SKILL.md
+ * into Cursor / Claude Code / Codex skill directories so your
+ * coding agent knows how to ``onboard`` / ``scan`` /
+ * flip-to-enforce on every future project without re-pasting the
+ * one-prompt setup.
+ *
+ * Parity with Python's ``sponsio skill install``. The shipped
+ * SKILL.md is universal (covers both Python and TypeScript
+ * workflows) and lives at ``<pkg>/skills/SKILL.md`` inside the
+ * published ``@sponsio/sdk`` tarball. Available as a
+ * cross-language path since either CLI can install it.
+ */
+export declare function runSkillCli(argv: string[]): Promise<void>;
+//# sourceMappingURL=skill.d.ts.map

package/dist/cli/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../../src/cli/skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAiFH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqD/D"}

package/dist/cli/skill.js

@@ -0,0 +1,131 @@
+"use strict";
+/**
+ * ``sponsio skill install`` — drop the universal SKILL.md
+ * into Cursor / Claude Code / Codex skill directories so your
+ * coding agent knows how to ``onboard`` / ``scan`` /
+ * flip-to-enforce on every future project without re-pasting the
+ * one-prompt setup.
+ *
+ * Parity with Python's ``sponsio skill install``. The shipped
+ * SKILL.md is universal (covers both Python and TypeScript
+ * workflows) and lives at ``<pkg>/skills/SKILL.md`` inside the
+ * published ``@sponsio/sdk`` tarball. Available as a
+ * cross-language path since either CLI can install it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSkillCli = runSkillCli;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const HELP = [
+    "sponsio skill install — install the Sponsio Agent Skill",
+    "",
+    "USAGE:",
+    "  sponsio skill install [options]",
+    "",
+    "OPTIONS:",
+    "      --tool <name>  cursor | claude | codex | all  (default: all)",
+    "      --dest <path>  Override install location (skips auto-detect)",
+    "      --force        Overwrite any existing SKILL.md at the target",
+    "  -h, --help         Show this help",
+    "",
+    "DESTINATIONS:",
+    "  ~/.cursor/skills/sponsio/   — Cursor",
+    "  ~/.claude/skills/sponsio/   — Claude Code",
+    "  ~/.codex/skills/sponsio/    — Codex CLI",
+].join("\n") + "\n";
+function parseArgs(argv) {
+    const action = argv[0];
+    if (action !== "install") {
+        throw new Error(`sponsio skill: unknown action '${action}' (expected 'install')`);
+    }
+    const a = {
+        action: "install",
+        tool: "all",
+        force: false,
+        help: false,
+    };
+    for (let i = 1; i < argv.length; i++) {
+        const flag = argv[i];
+        if (flag === "-h" || flag === "--help")
+            a.help = true;
+        else if (flag === "--tool") {
+            const v = argv[++i];
+            if (v !== "cursor" && v !== "claude" && v !== "codex" && v !== "all") {
+                throw new Error(`--tool must be cursor|claude|codex|all, got ${v}`);
+            }
+            a.tool = v;
+        }
+        else if (flag === "--dest")
+            a.dest = argv[++i];
+        else if (flag === "--force")
+            a.force = true;
+        else
+            throw new Error(`unknown flag: ${flag}`);
+    }
+    return a;
+}
+function destinationsForTool(tool) {
+    const home = (0, node_os_1.homedir)();
+    const all = {
+        cursor: (0, node_path_1.join)(home, ".cursor", "skills", "sponsio"),
+        claude: (0, node_path_1.join)(home, ".claude", "skills", "sponsio"),
+        codex: (0, node_path_1.join)(home, ".codex", "skills", "sponsio"),
+    };
+    return tool === "all"
+        ? [all.cursor, all.claude, all.codex]
+        : [all[tool]];
+}
+function resolveSkillSource() {
+    // Published layout: ``<pkg>/skills/SKILL.md``. When running from
+    // source (monorepo dev), ``__dirname`` is ``ts-scanner/dist`` so
+    // ``../skills/SKILL.md`` lands correctly.
+    return (0, node_path_1.resolve)(__dirname, "..", "skills", "SKILL.md");
+}
+async function runSkillCli(argv) {
+    let args;
+    try {
+        args = parseArgs(argv);
+    }
+    catch (err) {
+        process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(2);
+    }
+    if (args.help) {
+        process.stdout.write(HELP);
+        return;
+    }
+    const src = resolveSkillSource();
+    if (!(0, node_fs_1.existsSync)(src)) {
+        process.stderr.write(`[sponsio] cannot locate SKILL.md at ${src} — did you build @sponsio/sdk?\n`);
+        process.exit(1);
+    }
+    const dests = args.dest ? [args.dest] : destinationsForTool(args.tool);
+    let installed = 0;
+    let skipped = 0;
+    for (const dest of dests) {
+        // ``--dest`` may point at either a directory or an explicit file
+        // path; treat a trailing segment of ``SKILL.md`` as the file form.
+        const targetIsFile = !!args.dest && dest.toLowerCase().endsWith("skill.md");
+        const target = targetIsFile ? dest : (0, node_path_1.join)(dest, "SKILL.md");
+        const targetDir = (0, node_path_1.dirname)(target);
+        if ((0, node_fs_1.existsSync)(target) && !args.force) {
+            process.stdout.write(`  skip  ${target} (already exists — pass --force to overwrite)\n`);
+            skipped++;
+            continue;
+        }
+        try {
+            await node_fs_1.promises.mkdir(targetDir, { recursive: true });
+            await node_fs_1.promises.copyFile(src, target);
+            process.stdout.write(`  ok    ${target}\n`);
+            installed++;
+        }
+        catch (err) {
+            process.stderr.write(`  fail  ${target}: ${err instanceof Error ? err.message : err}\n`);
+        }
+    }
+    process.stdout.write(`\nInstalled ${installed}, skipped ${skipped}, out of ${dests.length} target(s).\n`);
+    if (installed === 0 && skipped === 0)
+        process.exit(1);
+}
+//# sourceMappingURL=skill.js.map

package/dist/cli/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../../src/cli/skill.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAiFH,kCAqDC;AApID,qCAAqD;AACrD,qCAAkC;AAClC,yCAAmD;AAYnD,MAAM,IAAI,GACR;IACE,yDAAyD;IACzD,EAAE;IACF,QAAQ;IACR,mCAAmC;IACnC,EAAE;IACF,UAAU;IACV,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,qCAAqC;IACrC,EAAE;IACF,eAAe;IACf,wCAAwC;IACxC,6CAA6C;IAC7C,2CAA2C;CAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEtB,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,wBAAwB,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,CAAC,GAAc;QACnB,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ;YAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;aACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ;YAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC5C,IAAI,IAAI,KAAK,SAAS;YAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;;YACvC,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU;IACrC,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;IACvB,MAAM,GAAG,GAAG;QACV,MAAM,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAClD,MAAM,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAClD,KAAK,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;KACjD,CAAC;IACF,OAAO,IAAI,KAAK,KAAK;QACnB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC;QACrC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB;IACzB,iEAAiE;IACjE,iEAAiE;IACjE,0CAA0C;IAC1C,OAAO,IAAA,mBAAO,EAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,IAAI,IAAe,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,GAAG,kCAAkC,CAC7E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,iEAAiE;QACjE,mEAAmE;QACnE,MAAM,YAAY,GAChB,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;QAClC,IAAI,IAAA,oBAAU,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,MAAM,iDAAiD,CACnE,CAAC;YACF,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,kBAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,IAAI,CAAC,CAAC;YAC5C,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,SAAS,aAAa,OAAO,YAAY,KAAK,CAAC,MAAM,eAAe,CACpF,CAAC;IACF,IAAI,SAAS,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/cli/tokens.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Truecolor palette mirroring ``sponsio/render/tokens.py`` so the TS
+ * scanner's stdout matches the Python wizard / runtime trace output
+ * pixel-for-pixel.  Single source of truth on the TS side — every
+ * other module in this package imports these helpers instead of
+ * sprinkling raw ``\x1b[31m`` / ``\x1b[32m`` codes.
+ *
+ * If you tweak the Python PALETTE, mirror the change here.  The
+ * cross-language test suite doesn't enforce parity (no shared
+ * runner), so it's a discipline thing.
+ */
+export declare const PALETTE: {
+    readonly brand: string;
+    readonly success: string;
+    readonly violation: string;
+    readonly warning: string;
+    readonly active: string;
+    readonly metadata: string;
+    readonly muted: string;
+    readonly rule: string;
+    readonly fg: string;
+};
+export declare const style: {
+    brand: (s: string, bold?: boolean) => string;
+    success: (s: string, bold?: boolean) => string;
+    violation: (s: string, bold?: boolean) => string;
+    warning: (s: string, bold?: boolean) => string;
+    metadata: (s: string) => string;
+    fg: (s: string) => string;
+};
+//# sourceMappingURL=tokens.d.ts.map

package/dist/cli/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/cli/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqBH,eAAO,MAAM,OAAO;;;;;;;;;;CAUV,CAAC;AA0BX,eAAO,MAAM,KAAK;eACL,MAAM;iBACJ,MAAM;mBACJ,MAAM;iBACR,MAAM;kBACL,MAAM;YACZ,MAAM;CACf,CAAC"}

package/dist/cli/tokens.js

@@ -0,0 +1,73 @@
+"use strict";
+/**
+ * Truecolor palette mirroring ``sponsio/render/tokens.py`` so the TS
+ * scanner's stdout matches the Python wizard / runtime trace output
+ * pixel-for-pixel.  Single source of truth on the TS side — every
+ * other module in this package imports these helpers instead of
+ * sprinkling raw ``\x1b[31m`` / ``\x1b[32m`` codes.
+ *
+ * If you tweak the Python PALETTE, mirror the change here.  The
+ * cross-language test suite doesn't enforce parity (no shared
+ * runner), so it's a discipline thing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.style = exports.PALETTE = void 0;
+/* ─────────────────────────────────────────────────────────────────
+ * Truecolor escape helpers — keep payload structure identical to
+ * Python's so palette diffs read cleanly.
+ * ──────────────────────────────────────────────────────────────── */
+const RESET = "\x1b[0m";
+function rgb(hex) {
+    // ``#7DD3FC`` → ``\x1b[38;2;125;211;252m``
+    const m = /^#?([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})$/i.exec(hex);
+    if (!m)
+        throw new Error(`bad hex: ${hex}`);
+    const [, r, g, b] = m;
+    return `\x1b[38;2;${parseInt(r, 16)};${parseInt(g, 16)};${parseInt(b, 16)}m`;
+}
+/* ─────────────────────────────────────────────────────────────────
+ * Palette — keep 1:1 with sponsio/render/tokens.py:PALETTE.
+ * ──────────────────────────────────────────────────────────────── */
+exports.PALETTE = {
+    brand: rgb("#7DD3FC"), // cyan-300   — banner titles, CTA arrow
+    success: rgb("#86EFAC"), // green-300  — ✓, ACTIVE, PASS
+    violation: rgb("#FCA5A5"), // red-300    — ✗, BLOCKED, VIOLATED
+    warning: rgb("#FCD34D"), // amber-300  — soft fail, watchlist
+    active: rgb("#C4B5FD"), // violet-300 — contract state transitions
+    metadata: rgb("#64748B"), // slate-500  — timestamps, latencies, hints
+    muted: rgb("#94A3B8"), // slate-400  — fallback service label, dim text
+    rule: rgb("#475569"), // slate-600  — banner & divider lines
+    fg: rgb("#E2E8F0"), // slate-200  — default foreground
+};
+const BOLD = "\x1b[1m";
+/* ─────────────────────────────────────────────────────────────────
+ * Convenience wrappers — every place that wants to colorize a string
+ * goes through these.  Centralized so we can short-circuit when
+ * stdout isn't a TTY (`NO_COLOR` env var, piped output) without
+ * touching every call site.
+ * ──────────────────────────────────────────────────────────────── */
+const colorEnabled = () => {
+    if (process.env.NO_COLOR)
+        return false;
+    // ``TERM=dumb`` is the universal "no escapes" hint.
+    if (process.env.TERM === "dumb")
+        return false;
+    // When stdout is a pipe (`| cat`, CI logs) most colour systems
+    // turn off; do the same so byte-identical comparisons in tests
+    // don't have to strip escapes.
+    return Boolean(process.stdout.isTTY);
+};
+function paint(color, text, { bold = false } = {}) {
+    if (!colorEnabled())
+        return text;
+    return (bold ? BOLD : "") + color + text + RESET;
+}
+exports.style = {
+    brand: (s, bold = false) => paint(exports.PALETTE.brand, s, { bold }),
+    success: (s, bold = false) => paint(exports.PALETTE.success, s, { bold }),
+    violation: (s, bold = false) => paint(exports.PALETTE.violation, s, { bold }),
+    warning: (s, bold = false) => paint(exports.PALETTE.warning, s, { bold }),
+    metadata: (s) => paint(exports.PALETTE.metadata, s),
+    fg: (s) => paint(exports.PALETTE.fg, s),
+};
+//# sourceMappingURL=tokens.js.map

package/dist/cli/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/cli/tokens.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAEH;;;sEAGsE;AAEtE,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,SAAS,GAAG,CAAC,GAAW;IACtB,2CAA2C;IAC3C,MAAM,CAAC,GAAG,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,aAAa,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AAC/E,CAAC;AAED;;sEAEsE;AAEzD,QAAA,OAAO,GAAG;IACrB,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,wCAAwC;IAC/D,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,+BAA+B;IACxD,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,oCAAoC;IAC/D,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,oCAAoC;IAC7D,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,0CAA0C;IAClE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,4CAA4C;IACtE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,gDAAgD;IACvE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,sCAAsC;IAC5D,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,kCAAkC;CAC9C,CAAC;AAEX,MAAM,IAAI,GAAG,SAAS,CAAC;AAEvB;;;;;sEAKsE;AAEtE,MAAM,YAAY,GAAG,GAAY,EAAE;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvC,oDAAoD;IACpD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9C,+DAA+D;IAC/D,+DAA+D;IAC/D,+BAA+B;IAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,SAAS,KAAK,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,IAAI,GAAG,KAAK,KAAyB,EAAE;IACnF,IAAI,CAAC,YAAY,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;AACnD,CAAC;AAEY,QAAA,KAAK,GAAG;IACnB,KAAK,EAAE,CAAC,CAAS,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAO,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IACrE,OAAO,EAAE,CAAC,CAAS,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAO,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IACzE,SAAS,EAAE,CAAC,CAAS,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IAC7E,OAAO,EAAE,CAAC,CAAS,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAO,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IACzE,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,eAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,EAAE,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,eAAO,CAAC,EAAE,EAAE,CAAC,CAAC;CACxC,CAAC"}

package/dist/cli/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * OpenAI function-calling shape — the common interchange format
+ * consumed by `sponsio/discovery/extractors/tool_inventory.py`.
+ */
+export interface OpenAITool {
+    type: "function";
+    function: {
+        name: string;
+        description: string;
+        parameters: JSONSchema;
+    };
+}
+export interface ScanOutput {
+    /** Tools found in the scanned source files. */
+    tools: OpenAITool[];
+    /** Per-file diagnostics — empty on a clean run. */
+    diagnostics: Diagnostic[];
+    /** Which framework-specific extractor produced each tool. */
+    provenance: Record<string, ToolProvenance>;
+}
+export interface ToolProvenance {
+    filepath: string;
+    line: number;
+    extractor: "vercel_ai" | "langchain_js" | "generic" | "generic_decorator";
+}
+export interface Diagnostic {
+    filepath: string;
+    line: number;
+    level: "warn" | "error";
+    message: string;
+}
+/** Minimal JSON Schema we emit — always a top-level `object`. */
+export interface JSONSchema {
+    type: "object";
+    properties: Record<string, JSONSchemaProperty>;
+    required?: string[];
+}
+export interface JSONSchemaProperty {
+    type: JSONSchemaType;
+    description?: string;
+    items?: JSONSchemaProperty;
+    enum?: (string | number | boolean)[];
+    properties?: Record<string, JSONSchemaProperty>;
+}
+export type JSONSchemaType = "string" | "number" | "integer" | "boolean" | "array" | "object" | "null";
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,UAAU,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,mDAAmD;IACnD,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,mBAAmB,CAAC;CAC3E;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,OAAO,GACP,QAAQ,GACR,MAAM,CAAC"}

package/dist/cli/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cli/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":""}

package/dist/cli/validate.d.ts

@@ -0,0 +1,19 @@
+/**
+ * ``sponsio validate`` — CI-friendly config check.
+ *
+ * Mirrors the first half of Python's ``sponsio validate`` command:
+ * parse sponsio.yaml, surface structural errors, and report what
+ * the TS runtime can / cannot handle. Exits non-zero when the file
+ * doesn't load or when --strict is set and the loader had to skip
+ * any unsupported yaml items.
+ *
+ * Usage:
+ *
+ *   sponsio validate                    # validates ./sponsio.yaml
+ *   sponsio validate ./config.yaml
+ *   sponsio validate --agent support_bot
+ *   sponsio validate --strict           # non-zero on any skip
+ *   sponsio validate --format json      # machine-readable
+ */
+export declare function runValidateCli(argv: string[]): Promise<void>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/cli/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/cli/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAiFH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsFlE"}