@sublang/slc 0.1.0

package/dist/file-grants.js

@@ -0,0 +1,133 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2026 SubLang International <https://sublang.ai>
+/**
+ * Host-side per-run grant model for the file capability (FCAP-11..14; DR-008).
+ *
+ * A compiled phase artifact reaches files only through a {@link FileCapability}
+ * the host builds for that run. The capability is default-deny: an operation
+ * succeeds only when its path is inside the run root (enforced by the artifact-
+ * facing layer in `file-capability.ts`) and is covered by a {@link Grant} of the
+ * matching access. {@link buildRunGrants} encodes the policy — the only writable
+ * path is the run's `target` (compile) or `linked` (link), and read grants are
+ * the run's source/object inputs, its link target when applicable, and the
+ * recorded semantic-input closure, each enumerated as a file grant.
+ * {@link createGuardedCapability} wraps a run-root capability with that grant set,
+ * reporting `unauthorized` for any ungranted access.
+ *
+ * Directory listing and recursive directory reads are withheld: until a pinning
+ * extension defines directory listing and subtree identities, this model grants
+ * neither (DR-008), so a pinned phase cannot widen its closure at run time.
+ * Scope failures (`invalid_path`, `unauthorized`) are distinguished by
+ * {@link isScopeFailure} so the executor can fail them like a generic check rather
+ * than a phase `BLOCKED`. See specs/dev/file-capability.md.
+ */
+import { canonicalize, createFileCapability, } from './file-capability.js';
+import {} from './hash.js';
+/**
+ * Builds the default-deny grant set for a run (FCAP-12, FCAP-13).
+ *
+ * The only writable grant is the run's `target` (compile) or `linked` (link); read
+ * grants enumerate the source/object inputs, the link target when present, and the
+ * semantic-input closure. Directory listing and recursive reads are not granted.
+ */
+export function buildRunGrants(spec) {
+    const grants = [];
+    if (spec.kind === 'compile' && spec.target !== undefined) {
+        grants.push(fileGrant(spec.target, 'write', 'target'));
+    }
+    if (spec.kind === 'link' && spec.linked !== undefined) {
+        grants.push(fileGrant(spec.linked, 'write', 'linked'));
+    }
+    if (spec.source !== undefined) {
+        grants.push(fileGrant(spec.source, 'read', 'source'));
+    }
+    for (const object of spec.objects ?? []) {
+        grants.push(fileGrant(object, 'read', 'object'));
+    }
+    if (spec.linkTarget !== undefined) {
+        grants.push(fileGrant(spec.linkTarget, 'read', 'linkTarget'));
+    }
+    for (const input of spec.semanticInputs ?? []) {
+        grants.push(fileGrant(input.path, 'read', 'semanticInput', input.identity));
+    }
+    return grants;
+}
+/**
+ * Wraps a run-root capability with a grant set, denying every ungranted access
+ * (FCAP-11). Path validity and run-root containment are left to the wrapped
+ * capability, so an invalid or escaping path still reports `invalid_path`.
+ */
+export function createGuardedCapability(runRoot, grants) {
+    const inner = createFileCapability(runRoot);
+    return {
+        async read(path) {
+            return authorize(grants, path, 'read') ?? inner.read(path);
+        },
+        async list(path) {
+            return authorizeList(grants, path) ?? inner.list(path);
+        },
+        async write(path, bytes, opts) {
+            return authorize(grants, path, 'write') ?? inner.write(path, bytes, opts);
+        },
+    };
+}
+/** Reports whether a capability error is a host-enforced scope failure (FCAP-14). */
+export function isScopeFailure(code) {
+    return code === 'invalid_path' || code === 'unauthorized';
+}
+/**
+ * Returns an `unauthorized` denial when no grant covers `path` for `access`, or
+ * `null` to defer to the wrapped capability (which validates the path itself).
+ */
+function authorize(grants, path, access) {
+    const canonical = canonicalize(path);
+    if (canonical === null) {
+        return null;
+    }
+    if (!covers(grants, canonical, access)) {
+        return deny(`no ${access} grant covers "${path}"`);
+    }
+    return null;
+}
+function authorizeList(grants, path) {
+    const canonical = canonicalize(path);
+    if (canonical === null) {
+        return null;
+    }
+    const granted = grants.some((grant) => grant.access === 'read' &&
+        grant.path === canonical &&
+        grant.kind === 'directory' &&
+        grant.listing === true);
+    return granted ? null : deny(`no listing grant covers "${path}"`);
+}
+function covers(grants, canonical, access) {
+    return grants.some((grant) => {
+        if (grant.access !== access) {
+            return false;
+        }
+        if (grant.path === canonical) {
+            return true;
+        }
+        return (access === 'read' &&
+            grant.kind === 'directory' &&
+            grant.recursive === true &&
+            isUnder(grant.path, canonical));
+    });
+}
+function isUnder(ancestor, candidate) {
+    const prefix = ancestor === '/' ? '/' : `${ancestor}/`;
+    return candidate.startsWith(prefix);
+}
+function fileGrant(path, access, reason, identity) {
+    const canonical = canonicalize(path);
+    if (canonical === null) {
+        throw new Error(`grant path "${path}" is not a valid run-root path`);
+    }
+    return identity === undefined
+        ? { path: canonical, access, kind: 'file', reason }
+        : { path: canonical, access, kind: 'file', identity, reason };
+}
+function deny(diagnostic) {
+    return { ok: false, code: 'unauthorized', diagnostic };
+}
+//# sourceMappingURL=file-grants.js.map

package/dist/file-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-grants.js","sourceRoot":"","sources":["../src/file-grants.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0EAA0E;AAE1E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAKL,YAAY,EACZ,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAa,MAAM,WAAW,CAAC;AAiDtC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,MAAwB;IAExB,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI;YACb,OAAO,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI;YACb,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI;YAC3B,OAAO,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,cAAc,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAChB,MAAwB,EACxB,IAAa,EACb,MAAmB;IAEnB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,MAAM,kBAAkB,IAAI,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,MAAwB,EACxB,IAAa;IAEb,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,IAAI,KAAK,WAAW;QAC1B,KAAK,CAAC,OAAO,KAAK,IAAI,CACzB,CAAC;IACF,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,MAAM,CACb,MAAwB,EACxB,SAAiB,EACjB,MAAmB;IAEnB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CACL,MAAM,KAAK,MAAM;YACjB,KAAK,CAAC,IAAI,KAAK,WAAW;YAC1B,KAAK,CAAC,SAAS,KAAK,IAAI;YACxB,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,SAAiB;IAClD,MAAM,MAAM,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC;IACvD,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAChB,IAAa,EACb,MAAmB,EACnB,MAAmB,EACnB,QAAe;IAEf,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,gCAAgC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;QACnD,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,UAAkB;IAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AACzD,CAAC"}

package/dist/hash.d.ts

@@ -0,0 +1,14 @@
+/** A SHA-256 content hash as `sha256:<64 lowercase hex>` (DR-007). */
+export type Hash = `sha256:${string}`;
+/** Hashes exact bytes as `sha256:<64 lowercase hex>`, applying no normalization (DR-007). */
+export declare function hashBytes(bytes: Uint8Array): Hash;
+/**
+ * Reads a file and hashes its exact bytes (DR-007).
+ *
+ * Reads with no encoding so the bytes are hashed verbatim, without line-ending
+ * or text transformation.
+ */
+export declare function hashFile(path: string): Promise<Hash>;
+/** Reports whether a string is a well-formed `sha256:<64 lowercase hex>` hash (DR-007). */
+export declare function isHash(value: string): value is Hash;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAkBA,sEAAsE;AACtE,MAAM,MAAM,IAAI,GAAG,UAAU,MAAM,EAAE,CAAC;AAItC,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAEjD;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;AAED,2FAA2F;AAC3F,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,IAAI,CAEnD"}

package/dist/hash.js

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2026 SubLang International <https://sublang.ai>
+/**
+ * Exact-byte SHA-256 hashing for pin currency (PIN-2, PIN-3; DR-007).
+ *
+ * Hashes are SHA-256 over the exact file bytes — with no line-ending or other
+ * text normalization — written as `sha256:` followed by 64 lowercase hexadecimal
+ * characters. This is the conservative identity the pin validator compares
+ * recorded hashes against, so any byte difference (including a line-ending
+ * change) yields a different hash. The DR-003 write-scope snapshot in
+ * `execution.ts` keeps its own raw-hex helper; this module owns the pin format.
+ * See specs/dev/pinning.md.
+ */
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+const HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;
+/** Hashes exact bytes as `sha256:<64 lowercase hex>`, applying no normalization (DR-007). */
+export function hashBytes(bytes) {
+    return `sha256:${createHash('sha256').update(bytes).digest('hex')}`;
+}
+/**
+ * Reads a file and hashes its exact bytes (DR-007).
+ *
+ * Reads with no encoding so the bytes are hashed verbatim, without line-ending
+ * or text transformation.
+ */
+export async function hashFile(path) {
+    return hashBytes(await readFile(path));
+}
+/** Reports whether a string is a well-formed `sha256:<64 lowercase hex>` hash (DR-007). */
+export function isHash(value) {
+    return HASH_PATTERN.test(value);
+}
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0EAA0E;AAE1E;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAK5C,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,OAAO,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Public entry point for the SubLang Compiler (slc).
+ *
+ * The `slc` bin orchestrator (`run`, plus `name`/`version`) lives in app.ts; the
+ * generic mechanics, execution boundary, interpreted executor, resolver, and
+ * configuration are re-exported from their modules.
+ */
+export * from './app.js';
+export * from './artifacts.js';
+export * from './cligent-agent.js';
+export * from './config.js';
+export * from './execution.js';
+export * from './interpreter.js';
+export * from './invocation.js';
+export * from './link.js';
+export * from './phase.js';
+export * from './pipeline.js';
+export * from './resolver.js';
+export * from './runner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,22 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2026 SubLang International <https://sublang.ai>
+/**
+ * Public entry point for the SubLang Compiler (slc).
+ *
+ * The `slc` bin orchestrator (`run`, plus `name`/`version`) lives in app.ts; the
+ * generic mechanics, execution boundary, interpreted executor, resolver, and
+ * configuration are re-exported from their modules.
+ */
+export * from './app.js';
+export * from './artifacts.js';
+export * from './cligent-agent.js';
+export * from './config.js';
+export * from './execution.js';
+export * from './interpreter.js';
+export * from './invocation.js';
+export * from './link.js';
+export * from './phase.js';
+export * from './pipeline.js';
+export * from './resolver.js';
+export * from './runner.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0EAA0E;AAE1E;;;;;;GAMG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/interpreter.d.ts

@@ -0,0 +1,48 @@
+import type { ExecuteRequest, PhaseExecutor } from './execution.js';
+/** A single agent invocation: a prompt plus per-run configuration. */
+export interface AgentRunRequest {
+    prompt: string;
+    cwd?: string;
+    model?: string;
+    /** Explicit backend continuation selection for Playbook player calls. */
+    resume?: string | false;
+    /** Explicit tool allowlist for isolated Playbook Captain control calls. */
+    allowedTools?: readonly string[];
+    signal: AbortSignal;
+}
+/** The normalized outcome of one agent invocation. */
+export interface AgentRunResult {
+    /** `success` when the agent finished cleanly; otherwise it did not. */
+    status: 'success' | 'error' | 'incomplete';
+    /** The agent's final textual report (its summary, or `BLOCKED:` lines). */
+    text: string;
+    /** Opaque backend continuation token, when the transport exposes one. */
+    resumeToken?: string;
+}
+/** The transport to a coding agent, backed by Cligent in production. */
+export interface AgentClient {
+    run(request: AgentRunRequest): Promise<AgentRunResult>;
+}
+/** Agent/model selection, applied as configuration not phase semantics (PHEXEC-13). */
+export interface InterpreterConfig {
+    model?: string;
+    cwd?: string;
+}
+/**
+ * Builds the agent-contract prompt for a phase from its definition and inputs
+ * (PHEXEC-11, PHEXEC-14, PHEXEC-15).
+ */
+export declare function buildPhasePrompt(opts: {
+    request: ExecuteRequest;
+    definition: string;
+}): string;
+/**
+ * Creates a {@link PhaseExecutor} that interprets a phase via one agent
+ * invocation (DR-004). Plugs into the DR-003 boundary (`runPhase`), which
+ * applies the generic checks to whatever the agent wrote.
+ */
+export declare function createInterpretedExecutor(opts: {
+    agent: AgentClient;
+    config?: InterpreterConfig;
+}): PhaseExecutor;
+//# sourceMappingURL=interpreter.d.ts.map

package/dist/interpreter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interpreter.d.ts","sourceRoot":"","sources":["../src/interpreter.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,cAAc,EAGd,aAAa,EACd,MAAM,gBAAgB,CAAC;AAExB,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACxB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;IAC3C,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACxD;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CA0CT;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B,GAAG,aAAa,CAoChB"}

package/dist/interpreter.js

@@ -0,0 +1,118 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2026 SubLang International <https://sublang.ai>
+/**
+ * Interpreted phase execution (DR-004).
+ *
+ * `createInterpretedExecutor` implements the {@link PhaseExecutor} boundary by
+ * prompting a coding agent once per phase (PHEXEC-12) with the phase or link
+ * definition and the phase inputs (PHEXEC-11), establishing the agent contract
+ * (PHEXEC-14) and allowing the agent to run definition-called tools and read
+ * cited content (PHEXEC-15). The agent is reached through an injected
+ * {@link AgentClient}; the Cligent-backed default lives in cligent-agent.ts so
+ * this core stays transport-free and testable. Agent and model selection are
+ * configuration, not phase semantics (PHEXEC-13). See
+ * specs/dev/phase-execution.md.
+ */
+import { readFile } from 'node:fs/promises';
+/**
+ * Builds the agent-contract prompt for a phase from its definition and inputs
+ * (PHEXEC-11, PHEXEC-14, PHEXEC-15).
+ */
+export function buildPhasePrompt(opts) {
+    const { request, definition } = opts;
+    const target = request.kind === 'compile' ? request.target : request.linked;
+    const inputs = request.kind === 'compile'
+        ? [
+            `source to read: ${request.source}`,
+            ...(request.references ?? []).map((path) => `reference to consult (read-only): ${path}`),
+        ]
+        : [
+            `object artifacts to read, in order: ${request.objects.join(', ')}`,
+            `link target module: ${request.linkTarget}`,
+            `options: ${formatOptions(request.options)}`,
+        ];
+    return [
+        'You are executing one phase of the SubLang Compiler (slc).',
+        'The phase definition below is authoritative; follow it exactly and add no rules of your own.',
+        '',
+        '--- DEFINITION ---',
+        definition,
+        '--- END DEFINITION ---',
+        '',
+        'Inputs:',
+        ...inputs.map((line) => `- ${line}`),
+        `- artifact to write: ${target}`,
+        '',
+        'Contract — you must:',
+        `- write only ${target}, creating or overwriting exactly that file;`,
+        '- not edit the sources, the phase or link definition, specs, link targets, object artifacts, or any other file;',
+        '- not commit or otherwise touch version control;',
+        '- produce a complete artifact, not a sketch or placeholder;',
+        '- add no domain semantics beyond what the source implies or the definition requires, and drop nothing the source states;',
+        '- preserve verbatim any content the definition requires to be preserved;',
+        '- run only the deterministic tools or commands the definition calls for, and read only the content it cites or references;',
+        '- verify the produced artifact against the definition before finishing.',
+        '',
+        'When done, reply with a concise summary of what you produced and any ambiguity you resolved.',
+        'If the inputs are malformed under the definition, or the definition is incompatible with them, do not guess: leave the artifact unwritten and reply with a line beginning "BLOCKED:" followed by the concrete reason(s).',
+    ].join('\n');
+}
+/**
+ * Creates a {@link PhaseExecutor} that interprets a phase via one agent
+ * invocation (DR-004). Plugs into the DR-003 boundary (`runPhase`), which
+ * applies the generic checks to whatever the agent wrote.
+ */
+export function createInterpretedExecutor(opts) {
+    const { agent } = opts;
+    const config = opts.config ?? {};
+    return {
+        async run(request, signal) {
+            const definition = await readFile(request.definitionPath, 'utf8');
+            const prompt = buildPhasePrompt({ request, definition });
+            const response = await agent.run({
+                prompt,
+                cwd: config.cwd,
+                model: config.model,
+                signal,
+            });
+            if (response.status !== 'success') {
+                const fallback = response.status === 'incomplete'
+                    ? 'agent did not finish'
+                    : 'agent reported an error';
+                return {
+                    status: 'error',
+                    diagnostics: textLines(response.text, fallback),
+                };
+            }
+            const blocked = blockedReasons(response.text);
+            if (blocked !== null) {
+                return { status: 'blocked', diagnostics: blocked };
+            }
+            return { status: 'ok', diagnostics: textLines(response.text) };
+        },
+    };
+}
+function formatOptions(options) {
+    if (options.length === 0)
+        return '(none)';
+    return options.map((option) => `${option.name}=${option.value}`).join(', ');
+}
+/** Returns the `BLOCKED:` diagnostic lines, or `null` when the agent did not block. */
+function blockedReasons(text) {
+    const lines = text.split(/\r?\n/).map((line) => line.trim());
+    const start = lines.findIndex((line) => /^BLOCKED\b/i.test(line));
+    if (start === -1)
+        return null;
+    const reasons = lines.slice(start).filter((line) => line.length > 0);
+    return reasons.length > 0 ? reasons : ['BLOCKED'];
+}
+function textLines(text, fallback) {
+    const lines = text
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    if (lines.length > 0)
+        return lines;
+    return fallback ? [fallback] : [];
+}
+//# sourceMappingURL=interpreter.js.map

package/dist/interpreter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interpreter.js","sourceRoot":"","sources":["../src/interpreter.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0EAA0E;AAE1E;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AA0C5C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAGhC;IACC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5E,MAAM,MAAM,GACV,OAAO,CAAC,IAAI,KAAK,SAAS;QACxB,CAAC,CAAC;YACE,mBAAmB,OAAO,CAAC,MAAM,EAAE;YACnC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,qCAAqC,IAAI,EAAE,CACtD;SACF;QACH,CAAC,CAAC;YACE,uCAAuC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnE,uBAAuB,OAAO,CAAC,UAAU,EAAE;YAC3C,YAAY,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;SAC7C,CAAC;IAER,OAAO;QACL,4DAA4D;QAC5D,8FAA8F;QAC9F,EAAE;QACF,oBAAoB;QACpB,UAAU;QACV,wBAAwB;QACxB,EAAE;QACF,SAAS;QACT,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,wBAAwB,MAAM,EAAE;QAChC,EAAE;QACF,sBAAsB;QACtB,gBAAgB,MAAM,8CAA8C;QACpE,iHAAiH;QACjH,kDAAkD;QAClD,6DAA6D;QAC7D,0HAA0H;QAC1H,0EAA0E;QAC1E,4HAA4H;QAC5H,yEAAyE;QACzE,EAAE;QACF,8FAA8F;QAC9F,0NAA0N;KAC3N,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAGzC;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAEjC,OAAO;QACL,KAAK,CAAC,GAAG,CACP,OAAuB,EACvB,MAAmB;YAEnB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC;gBAC/B,MAAM;gBACN,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,KAAK,YAAY;oBAC9B,CAAC,CAAC,sBAAsB;oBACxB,CAAC,CAAC,yBAAyB,CAAC;gBAChC,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;iBAChD,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YACrD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAkC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,uFAAuF;AACvF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,QAAiB;IAChD,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC"}

package/dist/invocation.d.ts

@@ -0,0 +1,64 @@
+/**
+ * CLI parsing and invocation routing (DR-001, DR-002).
+ *
+ * Implements PIPE-9 (`slc <pipeline>[.<phase>] <source> [-o <target>]`), PIPE-12
+ * (`slc <pipeline>.link <object>... <target>` with positional, not extension- or
+ * `--`-inferred, roles), PIPE-13 (`--link` selects the terminal link phase only
+ * for full-pipeline runs), and PIPE-14 (opaque `--link-option name=value` pairs).
+ * See specs/dev/pipeline.md.
+ */
+/** An opaque link option passed through to the link phase (PIPE-14). */
+export interface LinkOption {
+    name: string;
+    value: string;
+}
+/** A parsed `slc` invocation, routed to one of the four run forms. */
+export type Invocation = {
+    kind: 'full';
+    pipeline: string;
+    source: string;
+    output: string | null;
+    optimize: boolean;
+    noOptimize: boolean;
+    normalize: boolean;
+} | {
+    kind: 'phase';
+    pipeline: string;
+    phase: string;
+    source: string;
+    output: string | null;
+} | {
+    kind: 'full-link';
+    pipeline: string;
+    source: string;
+    linkTarget: string;
+    output: string | null;
+    options: LinkOption[];
+    optimize: boolean;
+    noOptimize: boolean;
+    normalize: boolean;
+} | {
+    kind: 'link';
+    pipeline: string;
+    objects: string[];
+    linkTarget: string;
+    output: string | null;
+    options: LinkOption[];
+};
+/** Machine-readable reason an invocation was refused. */
+export type CliErrorCode = 'no-pipeline' | 'operands' | 'unexpected-link' | 'unexpected-link-option' | 'unexpected-flag' | 'option-value' | 'invalid-link-option' | 'unknown-option' | 'duplicate-option';
+/** Raised when argv does not parse to a valid invocation (DR-001, DR-002). */
+export declare class CliError extends Error {
+    readonly code: CliErrorCode;
+    constructor(code: CliErrorCode, message: string);
+}
+/**
+ * Parses argv (without the node/script prefix) into a routed {@link Invocation}.
+ *
+ * Options (`-o`, `--link`, `--link-option`) may be interspersed with positionals;
+ * positional roles are assigned by position alone (PIPE-12).
+ *
+ * @throws {CliError} when the grammar is violated.
+ */
+export declare function parseInvocation(argv: readonly string[]): Invocation;
+//# sourceMappingURL=invocation.d.ts.map

package/dist/invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../src/invocation.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAEH,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAClB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB,CAAC;AAEN,yDAAyD;AACzD,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,UAAU,GACV,iBAAiB,GACjB,wBAAwB,GACxB,iBAAiB,GACjB,cAAc,GACd,qBAAqB,GACrB,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,8EAA8E;AAC9E,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;gBAEhB,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;CAKhD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAkInE"}

package/dist/invocation.js

@@ -0,0 +1,148 @@
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-FileCopyrightText: 2026 SubLang International <https://sublang.ai>
+/** Raised when argv does not parse to a valid invocation (DR-001, DR-002). */
+export class CliError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'CliError';
+        this.code = code;
+    }
+}
+/**
+ * Parses argv (without the node/script prefix) into a routed {@link Invocation}.
+ *
+ * Options (`-o`, `--link`, `--link-option`) may be interspersed with positionals;
+ * positional roles are assigned by position alone (PIPE-12).
+ *
+ * @throws {CliError} when the grammar is violated.
+ */
+export function parseInvocation(argv) {
+    const positionals = [];
+    let output = null;
+    let link = null;
+    let optimize = false;
+    let noOptimize = false;
+    let normalize = false;
+    const options = [];
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === '-o') {
+            if (output !== null)
+                throw new CliError('duplicate-option', 'repeated -o');
+            output = takeValue(argv, ++i, '-o');
+        }
+        else if (arg === '--link') {
+            if (link !== null)
+                throw new CliError('duplicate-option', 'repeated --link');
+            link = takeValue(argv, ++i, '--link');
+        }
+        else if (arg === '--link-option') {
+            options.push(parseLinkOption(takeValue(argv, ++i, '--link-option')));
+        }
+        else if (arg === '-O' || arg === '--optimize') {
+            optimize = true;
+        }
+        else if (arg === '--no-optimize') {
+            noOptimize = true;
+        }
+        else if (arg === '--normalize') {
+            normalize = true;
+        }
+        else if (arg.startsWith('-') && arg !== '-') {
+            throw new CliError('unknown-option', `unknown option "${arg}"`);
+        }
+        else {
+            positionals.push(arg);
+        }
+    }
+    if (positionals.length === 0) {
+        throw new CliError('no-pipeline', 'missing <pipeline> operand');
+    }
+    const head = positionals[0];
+    const dot = head.indexOf('.');
+    const pipeline = dot === -1 ? head : head.slice(0, dot);
+    const phase = dot === -1 ? null : head.slice(dot + 1);
+    if (pipeline.length === 0 || phase === '') {
+        throw new CliError('no-pipeline', `invalid pipeline reference "${head}"`);
+    }
+    const rest = positionals.slice(1);
+    if (optimize && noOptimize) {
+        throw new CliError('duplicate-option', '-O/--optimize conflicts with --no-optimize');
+    }
+    if (phase !== null && (optimize || noOptimize || normalize)) {
+        throw new CliError('unexpected-flag', `${optimize ? '-O' : noOptimize ? '--no-optimize' : '--normalize'} is only valid for a full-pipeline invocation`);
+    }
+    if (phase === 'link') {
+        if (link !== null) {
+            throw new CliError('unexpected-link', '--link is not valid with a .link invocation');
+        }
+        if (rest.length < 2) {
+            throw new CliError('operands', '.link requires at least one object and a target');
+        }
+        return {
+            kind: 'link',
+            pipeline,
+            objects: rest.slice(0, -1),
+            linkTarget: rest[rest.length - 1],
+            output,
+            options,
+        };
+    }
+    if (phase !== null) {
+        if (link !== null) {
+            throw new CliError('unexpected-link', '--link is only valid for a full-pipeline invocation');
+        }
+        if (options.length > 0) {
+            throw new CliError('unexpected-link-option', '--link-option requires a link phase');
+        }
+        requireSingleSource(rest);
+        return { kind: 'phase', pipeline, phase, source: rest[0], output };
+    }
+    requireSingleSource(rest);
+    const source = rest[0];
+    if (link !== null) {
+        return {
+            kind: 'full-link',
+            pipeline,
+            source,
+            linkTarget: link,
+            output,
+            options,
+            optimize,
+            noOptimize,
+            normalize,
+        };
+    }
+    if (options.length > 0) {
+        throw new CliError('unexpected-link-option', '--link-option requires --link');
+    }
+    return {
+        kind: 'full',
+        pipeline,
+        source,
+        output,
+        optimize,
+        noOptimize,
+        normalize,
+    };
+}
+function takeValue(argv, index, flag) {
+    if (index >= argv.length) {
+        throw new CliError('option-value', `missing value for ${flag}`);
+    }
+    return argv[index];
+}
+function parseLinkOption(token) {
+    const eq = token.indexOf('=');
+    if (eq <= 0) {
+        throw new CliError('invalid-link-option', `--link-option must be name=value, got "${token}"`);
+    }
+    return { name: token.slice(0, eq), value: token.slice(eq + 1) };
+}
+function requireSingleSource(rest) {
+    if (rest.length !== 1) {
+        throw new CliError('operands', `expected exactly one <source>, got ${rest.length}`);
+    }
+}
+//# sourceMappingURL=invocation.js.map