@xemahq/xema 0.13.0 → 0.14.0

package/dist/commands/down.js

@@ -1,11 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommand = registerCommand;
+const cli_errors_1 = require("../lib/cli-errors");
 const exit_codes_1 = require("../lib/exit-codes");
 const loader_1 = require("../runtime/config/loader");
 const schema_1 = require("../runtime/config/schema");
+const run_manifest_1 = require("../runtime/run-manifest");
 const docker_cli_1 = require("../runtime/runner/docker-cli");
 const helm_cli_1 = require("../runtime/runner/helm-cli");
+const managed_local_store_1 = require("../runtime/secrets/managed-local-store");
 function registerCommand(program) {
     program
         .command('down')
@@ -22,17 +25,40 @@ function registerCommand(program) {
         }
         catch (err) {
             const message = err instanceof Error ? err.message : String(err);
-            (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.GenericError, `xema down failed: ${message}`);
+            (0, exit_codes_1.exitWith)((0, cli_errors_1.lifecycleExitCode)(err), `xema down failed: ${message}`);
         }
     });
 }
 async function runDown(opts) {
-    const { config } = (0, loader_1.loadXemaConfig)({ explicit: opts.config });
+    const loaded = (0, cli_errors_1.asConfigError)(() => (0, loader_1.loadXemaConfig)({ explicit: opts.config }));
+    const { config } = loaded;
     if (config.app.substrate === schema_1.Substrate.Helm) {
         await runHelmDown(opts);
         return;
     }
-    await runContainerDown(opts);
+    if (config.app.substrate === schema_1.Substrate.Native) {
+        runNativeDown();
+        return;
+    }
+    await runContainerDown(opts, loaded.installationIdentity);
+}
+function runNativeDown() {
+    const { killed, skipped } = (0, run_manifest_1.reapStaleServices)();
+    for (const entry of killed) {
+        console.log(`  ✓ stopped ${entry.name} (pid ${String(entry.pid)}, port ${String(entry.port)})`);
+    }
+    for (const entry of skipped) {
+        console.log(`  ⚠ skipped ${entry.name} (pid ${String(entry.pid)}, port ${String(entry.port)}): ` +
+            'still alive but not confirmed a xema service — the PID was likely reused by an ' +
+            'unrelated process, so it was left untouched.');
+    }
+    if (killed.length === 0 && skipped.length === 0) {
+        console.log('No leftover native xema services to stop.');
+        return;
+    }
+    console.log(`Stopped ${String(killed.length)} service(s)` +
+        (skipped.length > 0 ? `, skipped ${String(skipped.length)}` : '') +
+        '.');
 }
 async function runHelmDown(opts) {
     const helm = new helm_cli_1.HelmCli();
@@ -56,7 +82,7 @@ async function runHelmDown(opts) {
             'data is retained; remove PVCs with `kubectl delete pvc` if intended.');
     }
 }
-async function runContainerDown(opts) {
+async function runContainerDown(opts, installationIdentity) {
     const docker = new docker_cli_1.DockerCli();
     if (!(await docker.available())) {
         console.log('No container runtime reachable — nothing to stop (native services stop with `xema up`).');
@@ -77,8 +103,16 @@ async function runContainerDown(opts) {
         console.log('Purging data volumes...');
         for (const component of Object.values(schema_1.InfraComponent)) {
             const volume = `xema-${component}-data`;
-            await docker.runQuiet(['volume', 'rm', volume]);
-            console.log(`  removed volume ${volume}`);
+            if (await docker.volumeExists(volume)) {
+                await docker.run(['volume', 'rm', volume]);
+                console.log(`  removed volume ${volume}`);
+            }
+        }
+        const credentialStore = new managed_local_store_1.ManagedLocalCredentialStore({
+            installationIdentity,
+        });
+        if (await credentialStore.purge()) {
+            console.log('  removed managed-local credential store');
         }
     }
     else {

package/dist/commands/down.js.map

@@ -1 +1 @@
-{"version":3,"file":"down.js","sourceRoot":"","sources":["../../src/commands/down.ts"],"names":[],"mappings":";;AAuBA,0CAoBC;AA3CD,kDAA8D;AAC9D,qDAA0D;AAC1D,qDAAqE;AACrE,6DAAyD;AACzD,yDAAqD;AAmBrD,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,OAAO,CAAC,+DAA+D,CAAC;SACxE,WAAW,CACV,+EAA+E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,iDAAiD,CACpD;SACA,MAAM,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;SAC7E,MAAM,CAAC,SAAS,EAAE,wEAAwE,CAAC;SAC3F,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAA,qBAAQ,EAAC,4BAAe,CAAC,YAAY,EAAE,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAiB;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,uBAAc,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAGD,KAAK,UAAU,WAAW,CAAC,IAAiB;IAC1C,MAAM,IAAI,GAAG,IAAI,kBAAO,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,SAAS,MAAM,CAAC,CAAC;QAC9F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAGf,OAAO,CAAC,GAAG,CACT,8EAA8E;YAC5E,sEAAsE,CACzE,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,KAAK,UAAU,gBAAgB,CAAC,IAAiB;IAC/C,MAAM,MAAM,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,yFAAyF,CAAC,CAAC;QACvG,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,uBAAc,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,QAAQ,SAAS,OAAO,CAAC;YACxC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}
+{"version":3,"file":"down.js","sourceRoot":"","sources":["../../src/commands/down.ts"],"names":[],"mappings":";;AA+BA,0CA0BC;AAzDD,kDAAqE;AACrE,kDAA6C;AAC7C,qDAA0D;AAC1D,qDAAqE;AACrE,0DAA4D;AAC5D,6DAAyD;AACzD,yDAAqD;AACrD,gFAAqF;AAwBrF,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,OAAO,CAAC,+DAA+D,CAAC;SACxE,WAAW,CACV,+EAA+E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,iDAAiD,CACpD;SACA,MAAM,CACL,iBAAiB,EACjB,kDAAkD,CACnD;SACA,MAAM,CACL,SAAS,EACT,wEAAwE,CACzE;SACA,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAA,qBAAQ,EAAC,IAAA,8BAAiB,EAAC,GAAG,CAAC,EAAE,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAiB;IACtC,MAAM,MAAM,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,CAAC,IAAA,uBAAc,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,KAAK,kBAAS,CAAC,MAAM,EAAE,CAAC;QAC9C,aAAa,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAC5D,CAAC;AAOD,SAAS,aAAa;IACpB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,gCAAiB,GAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CACT,eAAe,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CACnF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CACT,eAAe,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK;YAClF,iFAAiF;YACjF,8CAA8C,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CACT,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa;QAC3C,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CACN,CAAC;AACJ,CAAC;AAGD,KAAK,UAAU,WAAW,CAAC,IAAiB;IAC1C,MAAM,IAAI,GAAG,IAAI,kBAAO,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,SAAS,MAAM,CACjF,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAGf,OAAO,CAAC,GAAG,CACT,8EAA8E;YAC5E,sEAAsE,CACzE,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,KAAK,UAAU,gBAAgB,CAC7B,IAAiB,EACjB,oBAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACT,yFAAyF,CAC1F,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,uBAAc,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,QAAQ,SAAS,OAAO,CAAC;YACxC,IAAI,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,iDAA2B,CAAC;YACtD,oBAAoB;SACrB,CAAC,CAAC;QACH,IAAI,MAAM,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/commands/import.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA0BtD"}
+{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4BtD"}

package/dist/commands/import.js

@@ -9,7 +9,7 @@ function registerCommand(program) {
         .description('POSTs the manifest to control-plane-api to adopt matching live ' +
         'resources into the stack (no mutation). Prints how many were adopted ' +
         'and lists any declarations that matched nothing.')
-        .requiredOption('-f, --file <path>', 'path to the xema.yaml manifest')
+        .requiredOption('--file <path>', 'path to the xema.yaml manifest')
         .option('--stack <name>', 'stack to import into (default: manifest stack or "default")')
         .option('--endpoint <url>', 'control-plane endpoint (or env XEMA_ENDPOINT)')
         .option('--token <jwt>', 'org-admin bearer token (or env XEMA_TOKEN)')

package/dist/commands/import.js.map

@@ -1 +1 @@
-{"version":3,"file":"import.js","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":";;AAoBA,0CA0BC;AA9CD,wDAM8B;AAc9B,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,OAAO,CAAC,oDAAoD,CAAC;SAC7D,WAAW,CACV,iEAAiE;QAC/D,uEAAuE;QACvE,kDAAkD,CACrD;SACA,cAAc,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;SACrE,MAAM,CAAC,gBAAgB,EAAE,6DAA6D,CAAC;SACvF,MAAM,CAAC,kBAAkB,EAAE,+CAA+C,CAAC;SAC3E,MAAM,CAAC,eAAe,EAAE,4CAA4C,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAmB,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAW,EAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,4BAA4B,KAAK,IAAI,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;YACvD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../src/commands/import.ts"],"names":[],"mappings":";;AAoBA,0CA4BC;AAhDD,wDAM8B;AAc9B,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,OAAO,CAAC,oDAAoD,CAAC;SAC7D,WAAW,CACV,iEAAiE;QAC/D,uEAAuE;QACvE,kDAAkD,CACrD;SAGA,cAAc,CAAC,eAAe,EAAE,gCAAgC,CAAC;SACjE,MAAM,CAAC,gBAAgB,EAAE,6DAA6D,CAAC;SACvF,MAAM,CAAC,kBAAkB,EAAE,+CAA+C,CAAC;SAC3E,MAAM,CAAC,eAAe,EAAE,4CAA4C,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAmB,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAW,EAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,4BAA4B,KAAK,IAAI,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;YACvD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/installation.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerCommand(program: Command): void;
+//# sourceMappingURL=installation.d.ts.map

package/dist/commands/installation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation.d.ts","sourceRoot":"","sources":["../../src/commands/installation.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmHtD"}

package/dist/commands/installation.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCommand = registerCommand;
+const node_path_1 = require("node:path");
+const cli_errors_1 = require("../lib/cli-errors");
+const exit_codes_1 = require("../lib/exit-codes");
+const loader_1 = require("../runtime/config/loader");
+const foreground_1 = require("../runtime/foreground");
+const installation_1 = require("../runtime/installation");
+function registerCommand(program) {
+    const installation = program
+        .command('installation')
+        .summary('Plan, apply, inspect, and diagnose this Xema installation')
+        .description('Compile xema.config.yaml through the canonical installation desired-state engine. ' +
+        'The existing config remains the only authoring authority.');
+    installation
+        .command('plan')
+        .summary('Compile and display a redacted deterministic installation plan')
+        .option('--config <path>', 'Path to xema.config.yaml')
+        .action(async (opts) => {
+        await runGuarded('plan', async () => {
+            const loaded = loadAndCompile(opts);
+            console.log((0, installation_1.formatInstallationPlan)((0, installation_1.planInstallation)(loaded.desired, new installation_1.InstallationStateStore())));
+        });
+    });
+    installation
+        .command('apply')
+        .summary('Apply the compiled installation plan through the shared launcher')
+        .option('--config <path>', 'Path to xema.config.yaml')
+        .option('--web', 'Also start the host-shell frontend', false)
+        .option('--detach', 'Return after container workloads are ready (container substrate only)', false)
+        .option('--allow-destructive', 'Authorize a reviewed destructive installation transition', false)
+        .action(async (opts) => {
+        await runGuarded('apply', async () => {
+            const loaded = loadAndCompile(opts);
+            const store = new installation_1.InstallationStateStore();
+            const preview = (0, installation_1.planInstallation)(loaded.desired, store);
+            console.log((0, installation_1.formatInstallationPlan)(preview));
+            const result = await (0, installation_1.applyInstallation)(loaded.desired, store, (onReady) => (0, foreground_1.bringUpForeground)({
+                config: loaded.config,
+                includeWeb: opts.web,
+                detach: opts.detach,
+                installationIdentity: loaded.installationIdentity,
+                onReady,
+            }), {
+                allowDestructive: opts.allowDestructive,
+                forceExecution: true,
+            });
+            console.log(result.executed
+                ? `Applied installation plan ${result.desired.planHash}.`
+                : `No changes — installation plan ${result.desired.planHash} is already applied.`);
+        });
+    });
+    installation
+        .command('status')
+        .summary('Compare desired, last-applied, and observed installation state')
+        .option('--config <path>', 'Path to xema.config.yaml')
+        .action(async (opts) => {
+        await runGuarded('status', async () => {
+            const loaded = loadAndCompile(opts);
+            const report = await (0, installation_1.installationStatus)(loaded.desired, loaded.config.app.substrate, new installation_1.InstallationStateStore());
+            console.log(JSON.stringify(report, null, 2));
+        });
+    });
+    installation
+        .command('support-bundle')
+        .summary('Write a redacted, integrity-hashed diagnostic bundle')
+        .option('--config <path>', 'Path to xema.config.yaml')
+        .option('--output <path>', 'Output JSON path')
+        .option('--force', 'Replace an existing output file', false)
+        .action(async (opts) => {
+        await runGuarded('support-bundle', async () => {
+            const loaded = loadAndCompile(opts);
+            const report = await (0, installation_1.installationStatus)(loaded.desired, loaded.config.app.substrate, new installation_1.InstallationStateStore());
+            const bundle = (0, installation_1.createSupportBundle)(loaded.config, loaded.desired, report);
+            const output = (0, node_path_1.resolve)(opts.output ?? `xema-support-${loaded.desired.installationId}.json`);
+            (0, installation_1.writeSupportBundle)(output, bundle, { overwrite: opts.force });
+            console.log(`Wrote redacted support bundle ${output} (${bundle.manifest.algorithm}:${bundle.manifest.payloadHash}).`);
+        });
+    });
+}
+function loadAndCompile(opts) {
+    return (0, cli_errors_1.asConfigError)(() => {
+        const loaded = (0, loader_1.loadXemaConfig)({ explicit: opts.config });
+        return {
+            config: loaded.config,
+            installationIdentity: loaded.installationIdentity,
+            desired: (0, installation_1.compileCurrentInstallation)(loaded.config, loaded.installationIdentity),
+        };
+    });
+}
+async function runGuarded(command, operation) {
+    try {
+        await operation();
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        (0, exit_codes_1.exitWith)((0, cli_errors_1.lifecycleExitCode)(error), `xema installation ${command} failed: ${message}`);
+    }
+}
+//# sourceMappingURL=installation.js.map

package/dist/commands/installation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation.js","sourceRoot":"","sources":["../../src/commands/installation.ts"],"names":[],"mappings":";;AAkCA,0CAmHC;AArJD,yCAAoC;AAEpC,kDAAqE;AACrE,kDAA6C;AAC7C,qDAA0D;AAC1D,sDAA0D;AAC1D,0DASiC;AAmBjC,SAAgB,eAAe,CAAC,OAAgB;IAC9C,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,cAAc,CAAC;SACvB,OAAO,CAAC,2DAA2D,CAAC;SACpE,WAAW,CACV,oFAAoF;QAClF,2DAA2D,CAC9D,CAAC;IAEJ,YAAY;SACT,OAAO,CAAC,MAAM,CAAC;SACf,OAAO,CAAC,gEAAgE,CAAC;SACzE,MAAM,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CACT,IAAA,qCAAsB,EACpB,IAAA,+BAAgB,EAAC,MAAM,CAAC,OAAO,EAAE,IAAI,qCAAsB,EAAE,CAAC,CAC/D,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,OAAO,CAAC;SAChB,OAAO,CAAC,kEAAkE,CAAC;SAC3E,MAAM,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;SACrD,MAAM,CAAC,OAAO,EAAE,oCAAoC,EAAE,KAAK,CAAC;SAC5D,MAAM,CACL,UAAU,EACV,uEAAuE,EACvE,KAAK,CACN;SACA,MAAM,CACL,qBAAqB,EACrB,0DAA0D,EAC1D,KAAK,CACN;SACA,MAAM,CAAC,KAAK,EAAE,IAA8B,EAAE,EAAE;QAC/C,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACnC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,qCAAsB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAA,+BAAgB,EAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,IAAA,qCAAsB,EAAC,OAAO,CAAC,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAiB,EACpC,MAAM,CAAC,OAAO,EACd,KAAK,EACL,CAAC,OAAO,EAAE,EAAE,CACV,IAAA,8BAAiB,EAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,IAAI,CAAC,GAAG;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,OAAO;aACR,CAAC,EACJ;gBACE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBAGvC,cAAc,EAAE,IAAI;aACrB,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,QAAQ;gBACb,CAAC,CAAC,6BAA6B,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG;gBACzD,CAAC,CAAC,kCAAkC,MAAM,CAAC,OAAO,CAAC,QAAQ,sBAAsB,CACpF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,QAAQ,CAAC;SACjB,OAAO,CAAC,gEAAgE,CAAC;SACzE,MAAM,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,UAAU,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAkB,EACrC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAC3B,IAAI,qCAAsB,EAAE,CAC7B,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,gBAAgB,CAAC;SACzB,OAAO,CAAC,sDAAsD,CAAC;SAC/D,MAAM,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;SACrD,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SAC7C,MAAM,CAAC,SAAS,EAAE,iCAAiC,EAAE,KAAK,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,IAAgC,EAAE,EAAE;QACjD,MAAM,UAAU,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAkB,EACrC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAC3B,IAAI,qCAAsB,EAAE,CAC7B,CAAC;YACF,MAAM,MAAM,GAAG,IAAA,kCAAmB,EAChC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CACP,CAAC;YACF,MAAM,MAAM,GAAG,IAAA,mBAAO,EACpB,IAAI,CAAC,MAAM,IAAI,gBAAgB,MAAM,CAAC,OAAO,CAAC,cAAc,OAAO,CACpE,CAAC;YACF,IAAA,iCAAkB,EAAC,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CACT,iCAAiC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,IAAI,CACzG,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,cAAc,CAAC,IAAyB;IAK/C,OAAO,IAAA,0BAAa,EAAC,GAAG,EAAE;QACxB,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,OAAO,EAAE,IAAA,yCAA0B,EACjC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,oBAAoB,CAC5B;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAe,EACf,SAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAA,qBAAQ,EACN,IAAA,8BAAiB,EAAC,KAAK,CAAC,EACxB,qBAAqB,OAAO,YAAY,OAAO,EAAE,CAClD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CActD"}
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CActD"}

package/dist/commands/logs.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommand = registerCommand;
-const node_child_process_1 = require("node:child_process");
 const exit_codes_1 = require("../lib/exit-codes");
 const docker_cli_1 = require("../runtime/runner/docker-cli");
 function registerCommand(program) {
@@ -44,18 +43,11 @@ async function runLogs(service, opts) {
         (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.NotFound, `No launcher-owned container named "${service}".`);
         return;
     }
-    await streamLogs(service, Boolean(opts.follow));
-}
-function streamLogs(service, follow) {
-    return new Promise((resolve, reject) => {
-        const args = ['logs'];
-        if (follow) {
-            args.push('-f');
-        }
-        args.push(service);
-        const child = (0, node_child_process_1.spawn)('docker', args, { stdio: 'inherit' });
-        child.on('error', reject);
-        child.on('exit', () => resolve());
-    });
+    const args = ['logs'];
+    if (opts.follow) {
+        args.push('-f');
+    }
+    args.push(service);
+    await docker.stream(args);
 }
 //# sourceMappingURL=logs.js.map

package/dist/commands/logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":";;AAgBA,0CAcC;AA9BD,2DAA2C;AAE3C,kDAA8D;AAC9D,6DAAyD;AAazD,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,WAAW,EAAE,yCAAyC,CAAC;SAChE,OAAO,CAAC,yCAAyC,CAAC;SAClD,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,IAAiB,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAA,qBAAQ,EAAC,4BAAe,CAAC,YAAY,EAAE,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAA2B,EAAE,IAAiB;IACnE,MAAM,MAAM,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAChC,IAAA,qBAAQ,EAAC,4BAAe,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAA,qBAAQ,EAAC,4BAAe,CAAC,QAAQ,EAAE,sCAAsC,OAAO,IAAI,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IACD,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,MAAe;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":";;AAcA,0CAcC;AA5BD,kDAA8D;AAC9D,6DAAyD;AAazD,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,WAAW,EAAE,yCAAyC,CAAC;SAChE,OAAO,CAAC,yCAAyC,CAAC;SAClD,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,IAAiB,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAA,qBAAQ,EAAC,4BAAe,CAAC,YAAY,EAAE,qBAAqB,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAA2B,EAAE,IAAiB;IACnE,MAAM,MAAM,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAChC,IAAA,qBAAQ,EAAC,4BAAe,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAA,qBAAQ,EAAC,4BAAe,CAAC,QAAQ,EAAE,sCAAsC,OAAO,IAAI,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IAGD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/objects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objects.d.ts","sourceRoot":"","sources":["../../src/commands/objects.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAetD"}
+{"version":3,"file":"objects.d.ts","sourceRoot":"","sources":["../../src/commands/objects.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyBtD"}

package/dist/commands/objects.js

@@ -1,17 +1,96 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommand = registerCommand;
+const control_plane_1 = require("../lib/control-plane");
 const exit_codes_1 = require("../lib/exit-codes");
+const object_registry_client_1 = require("../runtime/object-registry-client");
 function registerCommand(program) {
     const objects = program
         .command('objects')
-        .summary('Browse XemaObjects by Space');
+        .summary('Browse Xema objects (skills, agents, biomes, capabilities, …)');
     objects
-        .command('list <space>')
-        .description('List XemaObjects scoped to a Space (XVFS read)')
-        .action((space) => {
-        (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.NotImplemented, `xema objects list ${space}: requires object-registry-api in ` +
-            'the local composition (Phase J.2 follow-up).');
+        .command('list')
+        .description('List Xema objects visible to your token')
+        .option('--space <ref>', 'List objects under a SpaceRef URI (e.g. xema://orgs/acme/projects/foo)')
+        .option('--type <kind>', 'Filter by XemaObjectKind (e.g. skill, agent, biome, capability)')
+        .option('--limit <n>', 'Max rows to return (1–500)')
+        .option('--endpoint <url>', 'Platform API base URL fronting object-registry-api (or env XEMA_ENDPOINT)')
+        .option('--token <jwt>', 'User bearer token (or env XEMA_TOKEN)')
+        .action(async (opts) => {
+        await runObjectsList(opts);
     });
+    objects
+        .command('get <ref>')
+        .description('Resolve a single Xema object by canonical ref')
+        .option('--endpoint <url>', 'Platform API base URL fronting object-registry-api (or env XEMA_ENDPOINT)')
+        .option('--token <jwt>', 'User bearer token (or env XEMA_TOKEN)')
+        .action(async (ref, opts) => {
+        await runObjectsGet(ref, opts);
+    });
+}
+function parseLimit(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const n = Number(value);
+    if (!Number.isInteger(n) || n < 1 || n > 500) {
+        return (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.ConfigurationError, `--limit must be an integer in [1, 500], got "${value}".`);
+    }
+    return n;
+}
+function formatScope(scope) {
+    const segments = [scope.orgId, scope.projectId, scope.biomeId, scope.userId].filter((segment) => typeof segment === 'string' && segment.length > 0);
+    return segments.length > 0 ? `${scope.tier}:${segments.join('/')}` : scope.tier;
+}
+function renderTable(headers, rows) {
+    const widths = headers.map((header, col) => Math.max(header.length, ...rows.map((row) => (row[col] ?? '').length)));
+    const format = (cells) => cells.map((cell, col) => (cell ?? '').padEnd(widths[col] ?? 0)).join('  ').trimEnd();
+    const lines = [format(headers), format(widths.map((w) => '-'.repeat(w)))];
+    for (const row of rows) {
+        lines.push(format(row));
+    }
+    return lines.join('\n');
+}
+function printObjectsTable(objects, emptyMessage) {
+    if (objects.length === 0) {
+        console.log(emptyMessage);
+        return;
+    }
+    const rows = objects.map((o) => [
+        o.ref,
+        o.kind,
+        o.version,
+        o.lifecycle,
+        formatScope(o.scope),
+    ]);
+    console.log(renderTable(['REF', 'KIND', 'VERSION', 'LIFECYCLE', 'SCOPE'], rows));
+}
+async function runObjectsList(opts) {
+    if (opts.space !== undefined && opts.type !== undefined) {
+        return (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.ConfigurationError, '--space and --type cannot be combined: the by-space listing does not filter by kind.');
+    }
+    const target = (0, control_plane_1.resolveTarget)(opts);
+    const limit = parseLimit(opts.limit);
+    const query = {
+        ...(opts.space !== undefined ? { space: opts.space } : {}),
+        ...(opts.type !== undefined ? { kind: opts.type } : {}),
+        ...(limit !== undefined ? { limit } : {}),
+    };
+    const { objects, cursor } = await (0, object_registry_client_1.listObjects)(target, query);
+    const emptyMessage = opts.space !== undefined
+        ? `No objects found under space "${opts.space}".`
+        : 'No objects found.';
+    printObjectsTable(objects, emptyMessage);
+    if (objects.length > 0) {
+        console.log(`\n${objects.length} object(s)` +
+            `${cursor !== undefined ? ' — more available; raise --limit to page further.' : '.'}`);
+    }
+    (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.Ok);
+}
+async function runObjectsGet(ref, opts) {
+    const target = (0, control_plane_1.resolveTarget)(opts);
+    const object = await (0, object_registry_client_1.getObject)(target, ref);
+    console.log(JSON.stringify(object, null, 2));
+    (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.Ok);
 }
 //# sourceMappingURL=objects.js.map

package/dist/commands/objects.js.map

@@ -1 +1 @@
-{"version":3,"file":"objects.js","sourceRoot":"","sources":["../../src/commands/objects.ts"],"names":[],"mappings":";;AAWA,0CAeC;AA1BD,kDAA8D;AAW9D,SAAgB,eAAe,CAAC,OAAgB;IAC9C,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,SAAS,CAAC;SAClB,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAE1C,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,CAAC,KAAa,EAAE,EAAE;QACxB,IAAA,qBAAQ,EACN,4BAAe,CAAC,cAAc,EAC9B,qBAAqB,KAAK,oCAAoC;YAC5D,8CAA8C,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"objects.js","sourceRoot":"","sources":["../../src/commands/objects.ts"],"names":[],"mappings":";;AA4BA,0CAyBC;AArDD,wDAA6E;AAC7E,kDAA8D;AAC9D,8EAM2C;AAoB3C,SAAgB,eAAe,CAAC,OAAgB;IAC9C,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,SAAS,CAAC;SAClB,OAAO,CAAC,+DAA+D,CAAC,CAAC;IAE5E,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,wEAAwE,CAAC;SACjG,MAAM,CAAC,eAAe,EAAE,iEAAiE,CAAC;SAC1F,MAAM,CAAC,aAAa,EAAE,4BAA4B,CAAC;SACnD,MAAM,CAAC,kBAAkB,EAAE,2EAA2E,CAAC;SACvG,MAAM,CAAC,eAAe,EAAE,uCAAuC,CAAC;SAChE,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,kBAAkB,EAAE,2EAA2E,CAAC;SACvG,MAAM,CAAC,eAAe,EAAE,uCAAuC,CAAC;SAChE,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAuB,EAAE,EAAE;QACrD,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC;AAGD,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAC7C,OAAO,IAAA,qBAAQ,EACb,4BAAe,CAAC,kBAAkB,EAClC,gDAAgD,KAAK,IAAI,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAGD,SAAS,WAAW,CAAC,KAAsB;IACzC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CACjF,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAClF,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;AAClF,CAAC;AAGD,SAAS,WAAW,CAClB,OAA0B,EAC1B,IAAsC;IAEtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CACzC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAU,EAAE,CAClD,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACvF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiC,EAAE,YAAoB;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9B,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS;QACX,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;KACrB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAwB;IAGpD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO,IAAA,qBAAQ,EACb,4BAAe,CAAC,kBAAkB,EAClC,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,KAAK,GAAqB;QAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;IAEF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,oCAAW,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,YAAY,GAChB,IAAI,CAAC,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,iCAAiC,IAAI,CAAC,KAAK,IAAI;QACjD,CAAC,CAAC,mBAAmB,CAAC;IAC1B,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,MAAM,YAAY;YAC7B,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,GAAG,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,IAAA,qBAAQ,EAAC,4BAAe,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAuB;IAC/D,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,IAAA,kCAAS,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAA,qBAAQ,EAAC,4BAAe,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC"}

package/dist/commands/plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/commands/plan.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqBtD"}
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/commands/plan.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuBtD"}

package/dist/commands/plan.js

@@ -11,7 +11,7 @@ function registerCommand(program) {
         'side-effect-free plan, then prints the per-resource diff (+ create, ' +
         '~ update, -/+ replace, - delete, = unchanged) with drift flagged. ' +
         'Read-only: always exits 0.')
-        .requiredOption('-f, --file <path>', 'path to the xema.yaml manifest')
+        .requiredOption('--file <path>', 'path to the xema.yaml manifest')
         .option('--stack <name>', 'stack to plan against (default: manifest stack or "default")')
         .option('--endpoint <url>', 'control-plane endpoint (or env XEMA_ENDPOINT)')
         .option('--token <jwt>', 'org-admin bearer token (or env XEMA_TOKEN)')

package/dist/commands/plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/commands/plan.ts"],"names":[],"mappings":";;AAqBA,0CAqBC;AA1CD,wDAM8B;AAC9B,oDAAgD;AAchD,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,OAAO,CAAC,uDAAuD,CAAC;SAChE,WAAW,CACV,qEAAqE;QACnE,sEAAsE;QACtE,oEAAoE;QACpE,4BAA4B,CAC/B;SACA,cAAc,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;SACrE,MAAM,CAAC,gBAAgB,EAAE,8DAA8D,CAAC;SACxF,MAAM,CAAC,kBAAkB,EAAE,+CAA+C,CAAC;SAC3E,MAAM,CAAC,eAAe,EAAE,4CAA4C,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAS,EAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,IAAA,wBAAU,EAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/commands/plan.ts"],"names":[],"mappings":";;AAqBA,0CAuBC;AA5CD,wDAM8B;AAC9B,oDAAgD;AAchD,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,OAAO,CAAC,uDAAuD,CAAC;SAChE,WAAW,CACV,qEAAqE;QACnE,sEAAsE;QACtE,oEAAoE;QACpE,4BAA4B,CAC/B;SAGA,cAAc,CAAC,eAAe,EAAE,gCAAgC,CAAC;SACjE,MAAM,CAAC,gBAAgB,EAAE,8DAA8D,CAAC;SACxF,MAAM,CAAC,kBAAkB,EAAE,+CAA+C,CAAC;SAC3E,MAAM,CAAC,eAAe,EAAE,4CAA4C,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAS,EAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,IAAA,wBAAU,EAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqBtD"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiBtD"}

package/dist/commands/run.js

@@ -1,18 +1,70 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerCommand = registerCommand;
+const control_plane_1 = require("../lib/control-plane");
 const exit_codes_1 = require("../lib/exit-codes");
+const capability_invoke_1 = require("../runtime/capability-invoke");
 function registerCommand(program) {
     program
-        .command('run <capability> [args...]')
-        .summary('Invoke a capability via the local Xema (STUB)')
-        .description('POSTs `{ ref, input }` to xema-capability-router. Requires a ' +
-        'running router on localhost; start one with `xema dev`. Full ' +
-        'input parsing + auth scaffolding lands in Phase J.2 follow-up.')
-        .option('--router-url <url>', 'Override the local router URL', 'http://localhost:7332')
-        .action((capability, args, _opts) => {
-        (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.NotImplemented, `xema run ${capability}${args.length > 0 ? ` ${args.join(' ')}` : ''}: ` +
-            'wire-up to capability-router pending Phase J.2 full composition.');
+        .command('run <capabilityRef>')
+        .summary('Invoke a capability via the platform capability-router')
+        .description('POSTs `{ ref, subject, environment, input }` to xema-capability-router ' +
+        '(`POST /capabilities/invoke`) and prints the result. The subject is ' +
+        'the token `sub`; the environment defaults to environment:project.')
+        .option('--input <json>', 'Invocation input as inline JSON or @file.json')
+        .option('--environment <ref>', 'Execution environment ref', capability_invoke_1.DEFAULT_ENVIRONMENT)
+        .option('--org <id>', 'Tenant org id (default: resolved from the token)')
+        .option('--endpoint <url>', 'Platform API base URL fronting capability-router (or env XEMA_ENDPOINT)')
+        .option('--token <jwt>', 'Bearer token (or env XEMA_TOKEN)')
+        .action(async (capabilityRef, opts) => {
+        await runCapability(capabilityRef, opts);
     });
 }
+async function runCapability(capabilityRef, opts) {
+    const target = (0, control_plane_1.resolveTarget)(opts);
+    let subject;
+    try {
+        subject = (0, capability_invoke_1.resolveSubject)(target.token);
+    }
+    catch (err) {
+        return (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.ConfigurationError, err instanceof Error ? err.message : String(err));
+    }
+    let environment;
+    try {
+        environment = (0, capability_invoke_1.parseEnvironment)(opts.environment);
+    }
+    catch (err) {
+        return (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.ConfigurationError, err instanceof Error ? err.message : String(err));
+    }
+    let input;
+    if (opts.input !== undefined) {
+        try {
+            input = (0, capability_invoke_1.parseInputObject)((0, capability_invoke_1.readInputSource)(opts.input));
+        }
+        catch (err) {
+            return (0, exit_codes_1.exitWith)(exit_codes_1.XemaCliExitCode.ConfigurationError, `--input: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    const request = {
+        ref: capabilityRef,
+        subject,
+        environment,
+        ...(input !== undefined ? { input } : {}),
+        ...(opts.org !== undefined ? { orgId: opts.org } : {}),
+    };
+    try {
+        const result = await (0, capability_invoke_1.invokeCapability)(target, request);
+        console.log((0, capability_invoke_1.formatInvokeResult)(result));
+        (0, exit_codes_1.exitWith)(result.status === 'denied'
+            ? exit_codes_1.XemaCliExitCode.GenericError
+            : exit_codes_1.XemaCliExitCode.Ok);
+    }
+    catch (err) {
+        if (err instanceof capability_invoke_1.CapabilityInvokeError) {
+            const code = err.status === 404 ? exit_codes_1.XemaCliExitCode.NotFound : exit_codes_1.XemaCliExitCode.GenericError;
+            return (0, exit_codes_1.exitWith)(code, err.message);
+        }
+        throw err;
+    }
+}
 //# sourceMappingURL=run.js.map

package/dist/commands/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":";;AAYA,0CAqBC;AAjCD,kDAA8D;AAY9D,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,4BAA4B,CAAC;SACrC,OAAO,CAAC,+CAA+C,CAAC;SACxD,WAAW,CACV,+DAA+D;QAC7D,+DAA+D;QAC/D,gEAAgE,CACnE;SACA,MAAM,CACL,oBAAoB,EACpB,+BAA+B,EAC/B,uBAAuB,CACxB;SACA,MAAM,CAAC,CAAC,UAAkB,EAAE,IAAc,EAAE,KAA4B,EAAE,EAAE;QAC3E,IAAA,qBAAQ,EACN,4BAAe,CAAC,cAAc,EAC9B,YAAY,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;YACtE,kEAAkE,CACrE,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":";;AAmCA,0CAiBC;AApDD,wDAA6E;AAC7E,kDAA8D;AAC9D,oEAWsC;AAsBtC,SAAgB,eAAe,CAAC,OAAgB;IAC9C,OAAO;SACJ,OAAO,CAAC,qBAAqB,CAAC;SAC9B,OAAO,CAAC,wDAAwD,CAAC;SACjE,WAAW,CACV,yEAAyE;QACvE,sEAAsE;QACtE,mEAAmE,CACtE;SACA,MAAM,CAAC,gBAAgB,EAAE,+CAA+C,CAAC;SACzE,MAAM,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,uCAAmB,CAAC;SAC/E,MAAM,CAAC,YAAY,EAAE,kDAAkD,CAAC;SACxE,MAAM,CAAC,kBAAkB,EAAE,yEAAyE,CAAC;SACrG,MAAM,CAAC,eAAe,EAAE,kCAAkC,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,aAAqB,EAAE,IAAgB,EAAE,EAAE;QACxD,MAAM,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,aAAqB,EAAE,IAAgB;IAClE,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,CAAC;IAEnC,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,kCAAc,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAA,qBAAQ,EACb,4BAAe,CAAC,kBAAkB,EAClC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,IAAA,oCAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAA,qBAAQ,EACb,4BAAe,CAAC,kBAAkB,EAClC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;IAED,IAAI,KAA0C,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,KAAK,GAAG,IAAA,oCAAgB,EAAC,IAAA,mCAAe,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAA,qBAAQ,EACb,4BAAe,CAAC,kBAAkB,EAClC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,aAAa;QAClB,OAAO;QACP,WAAW;QACX,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAgB,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,IAAA,sCAAkB,EAAC,MAAM,CAAC,CAAC,CAAC;QACxC,IAAA,qBAAQ,EACN,MAAM,CAAC,MAAM,KAAK,QAAQ;YACxB,CAAC,CAAC,4BAAe,CAAC,YAAY;YAC9B,CAAC,CAAC,4BAAe,CAAC,EAAE,CACvB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yCAAqB,EAAE,CAAC;YAIzC,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,4BAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAAe,CAAC,YAAY,CAAC;YAC/E,OAAO,IAAA,qBAAQ,EAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/commands/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuBtD"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyBzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+BtD"}