@yoda.digital/iris-gateway 1.13.3

package/dist/cli/commands/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAiB5C,qBAAa,WAAY,SAAQ,OAAO;IACtC,OAAgB,KAAK,aAAc;IAEnC,OAAgB,KAAK,4BASlB;IAEH,OAAO,SAAsD;IAC7D,MAAM,SAAqD;IAC3D,OAAO,SAAsD;IAEvD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CA6C/B"}

package/dist/cli/commands/send.js

@@ -0,0 +1,64 @@
+import { Command, Option } from "clipanion";
+import { loadConfig } from "../../config/loader.js";
+import { getStateDir, ensureDir } from "../../config/paths.js";
+import { TelegramAdapter } from "../../channels/telegram/index.js";
+import { WhatsAppAdapter } from "../../channels/whatsapp/index.js";
+import { DiscordAdapter } from "../../channels/discord/index.js";
+import { SlackAdapter } from "../../channels/slack/index.js";
+const ADAPTER_FACTORIES = {
+    telegram: () => new TelegramAdapter(),
+    whatsapp: () => new WhatsAppAdapter(),
+    discord: () => new DiscordAdapter(),
+    slack: () => new SlackAdapter(),
+};
+export class SendCommand extends Command {
+    static paths = [["send"]];
+    static usage = Command.Usage({
+        description: "Send a one-shot message to a channel target (for testing/automation)",
+        examples: [
+            [
+                "Send a message via telegram",
+                'iris send telegram 123456789 "Hello from Iris"',
+            ],
+        ],
+    });
+    channel = Option.String({ name: "channel", required: true });
+    target = Option.String({ name: "target", required: true });
+    message = Option.String({ name: "message", required: true });
+    async execute() {
+        const config = loadConfig();
+        ensureDir(getStateDir());
+        const channelConfig = config.channels[this.channel];
+        if (!channelConfig) {
+            this.context.stdout.write(`Unknown channel: ${this.channel}\n` +
+                `Available channels: ${Object.keys(config.channels).join(", ") || "(none)"}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        const factory = ADAPTER_FACTORIES[channelConfig.type];
+        if (!factory) {
+            this.context.stdout.write(`Unsupported channel type: ${channelConfig.type}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        const abortController = new AbortController();
+        const adapter = factory();
+        try {
+            await adapter.start(channelConfig, abortController.signal);
+            const result = await adapter.sendText({
+                to: this.target,
+                text: this.message,
+            });
+            this.context.stdout.write(`Message sent. ID: ${result.messageId}\n`);
+        }
+        catch (err) {
+            this.context.stdout.write(`Failed to send message: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.exitCode = 1;
+        }
+        finally {
+            abortController.abort();
+            await adapter.stop();
+        }
+    }
+}
+//# sourceMappingURL=send.js.map

package/dist/cli/commands/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../../../src/cli/commands/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,MAAM,iBAAiB,GAAyC;IAC9D,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,eAAe,EAAE;IACrC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,eAAe,EAAE;IACrC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,cAAc,EAAE;IACnC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE;CAChC,CAAC;AAEF,MAAM,OAAO,WAAY,SAAQ,OAAO;IACtC,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnC,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EACT,sEAAsE;QACxE,QAAQ,EAAE;YACR;gBACE,6BAA6B;gBAC7B,gDAAgD;aACjD;SACF;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7D,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;QAEzB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,oBAAoB,IAAI,CAAC,OAAO,IAAI;gBAClC,uBAAuB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,CACjF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,6BAA6B,aAAa,CAAC,IAAI,IAAI,CACpD,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gBACpC,EAAE,EAAE,IAAI,CAAC,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,OAAO;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,qBAAqB,MAAM,CAAC,SAAS,IAAI,CAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAChF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;IACH,CAAC"}

package/dist/cli/commands/session.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "clipanion";
+export declare class SessionListCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    execute(): Promise<void>;
+}
+export declare class SessionResetCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    key: string;
+    execute(): Promise<void>;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/cli/commands/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAI5C,qBAAa,kBAAmB,SAAQ,OAAO;IAC7C,OAAgB,KAAK,aAAyB;IAE9C,OAAgB,KAAK,4BAGlB;IAEG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAuB/B;AAED,qBAAa,mBAAoB,SAAQ,OAAO;IAC9C,OAAgB,KAAK,aAA0B;IAE/C,OAAgB,KAAK,4BAQlB;IAEH,GAAG,SAAkD;IAE/C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAO/B"}

package/dist/cli/commands/session.js

@@ -0,0 +1,48 @@
+import { Command, Option } from "clipanion";
+import { getStateDir } from "../../config/paths.js";
+import { SessionMap } from "../../bridge/session-map.js";
+export class SessionListCommand extends Command {
+    static paths = [["session", "list"]];
+    static usage = Command.Usage({
+        description: "List all session mappings",
+        examples: [["List sessions", "iris session list"]],
+    });
+    async execute() {
+        const stateDir = getStateDir();
+        const sessionMap = new SessionMap(stateDir);
+        const entries = await sessionMap.list();
+        if (entries.length === 0) {
+            this.context.stdout.write("No active sessions.\n");
+            return;
+        }
+        this.context.stdout.write(`Active sessions (${entries.length}):\n`);
+        for (const entry of entries) {
+            const key = `${entry.channelId}:${entry.chatType}:${entry.chatId}`;
+            const lastActive = new Date(entry.lastActiveAt).toISOString();
+            this.context.stdout.write(`  ${key}\n` +
+                `    opencode-session: ${entry.openCodeSessionId}\n` +
+                `    sender: ${entry.senderId}\n` +
+                `    last active: ${lastActive}\n`);
+        }
+    }
+}
+export class SessionResetCommand extends Command {
+    static paths = [["session", "reset"]];
+    static usage = Command.Usage({
+        description: "Reset a specific session mapping",
+        examples: [
+            [
+                "Reset a session by key",
+                "iris session reset telegram:dm:123456",
+            ],
+        ],
+    });
+    key = Option.String({ name: "key", required: true });
+    async execute() {
+        const stateDir = getStateDir();
+        const sessionMap = new SessionMap(stateDir);
+        await sessionMap.reset(this.key);
+        this.context.stdout.write(`Session reset: ${this.key}\n`);
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/cli/commands/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/cli/commands/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,MAAM,OAAO,kBAAmB,SAAQ,OAAO;IAC7C,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE9C,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAExC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACnE,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,KAAK,GAAG,IAAI;gBACV,yBAAyB,KAAK,CAAC,iBAAiB,IAAI;gBACpD,eAAe,KAAK,CAAC,QAAQ,IAAI;gBACjC,oBAAoB,UAAU,IAAI,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;;AAGH,MAAM,OAAO,mBAAoB,SAAQ,OAAO;IAC9C,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAE/C,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE;YACR;gBACE,wBAAwB;gBACxB,uCAAuC;aACxC;SACF;KACF,CAAC,CAAC;IAEH,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC"}

package/dist/cli/commands/status.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "clipanion";
+export declare class StatusCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    execute(): Promise<void>;
+}
+//# sourceMappingURL=status.d.ts.map

package/dist/cli/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,qBAAa,aAAc,SAAQ,OAAO;IACxC,OAAgB,KAAK,aAAgB;IAErC,OAAgB,KAAK,4BAGlB;IAEG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAwC/B"}

package/dist/cli/commands/status.js

@@ -0,0 +1,43 @@
+import { Command } from "clipanion";
+import { loadConfig } from "../../config/loader.js";
+import { getConfigPath, getStateDir } from "../../config/paths.js";
+export class StatusCommand extends Command {
+    static paths = [["status"]];
+    static usage = Command.Usage({
+        description: "Show gateway status and diagnostics",
+        examples: [["Show status", "iris status"]],
+    });
+    async execute() {
+        const configPath = getConfigPath();
+        const stateDir = getStateDir();
+        let config;
+        try {
+            config = loadConfig();
+        }
+        catch (err) {
+            this.context.stdout.write(`Config: INVALID (${configPath})\n`);
+            this.context.stdout.write(`  Error: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        this.context.stdout.write(`Iris Gateway Status\n`);
+        this.context.stdout.write(`-------------------\n`);
+        this.context.stdout.write(`Config path: ${configPath}\n`);
+        this.context.stdout.write(`State dir:   ${stateDir}\n`);
+        this.context.stdout.write(`Gateway:     ${config.gateway.hostname}:${config.gateway.port}\n`);
+        this.context.stdout.write(`OpenCode:    ${config.opencode.hostname}:${config.opencode.port}\n`);
+        const channelEntries = Object.entries(config.channels);
+        if (channelEntries.length === 0) {
+            this.context.stdout.write(`Channels:    (none configured)\n`);
+        }
+        else {
+            this.context.stdout.write(`Channels:\n`);
+            for (const [id, ch] of channelEntries) {
+                const status = ch.enabled ? "enabled" : "disabled";
+                this.context.stdout.write(`  ${id}: ${ch.type} (${status})\n`);
+            }
+        }
+        this.context.stdout.write(`Security:    dm-policy=${config.security.defaultDmPolicy}\n`);
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/cli/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEnE,MAAM,OAAO,aAAc,SAAQ,OAAO;IACxC,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErC,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;KAC3C,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAE/B,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,UAAU,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,UAAU,KAAK,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACjE,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,UAAU,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,QAAQ,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,gBAAgB,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CACrE,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACzC,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;gBACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,0BAA0B,MAAM,CAAC,QAAQ,CAAC,eAAe,IAAI,CAC9D,CAAC;IACJ,CAAC"}

package/dist/cli/executor.d.ts

@@ -0,0 +1,19 @@
+import type { CliExecResult, CliHealthCheck } from "./types.js";
+import type { Logger } from "../logging/logger.js";
+export interface CliExecutorOpts {
+    allowedBinaries: string[];
+    timeout: number;
+    logger: Logger;
+}
+export declare class CliExecutor {
+    private readonly allowed;
+    private readonly timeout;
+    private readonly logger;
+    constructor(opts: CliExecutorOpts);
+    exec(binary: string, args: string[]): Promise<CliExecResult>;
+    probe(binary: string, healthCheck?: CliHealthCheck): Promise<{
+        available: boolean;
+        reason?: string;
+    }>;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/cli/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/cli/executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,IAAI,EAAE,eAAe;IAM3B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAgD5D,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAyB5G"}

package/dist/cli/executor.js

@@ -0,0 +1,75 @@
+import { execFile, execFileSync } from "node:child_process";
+export class CliExecutor {
+    allowed;
+    timeout;
+    logger;
+    constructor(opts) {
+        this.allowed = new Set(opts.allowedBinaries);
+        this.timeout = opts.timeout;
+        this.logger = opts.logger;
+    }
+    async exec(binary, args) {
+        if (!this.allowed.has(binary)) {
+            return {
+                ok: false,
+                error: `Binary '${binary}' not in sandbox allowlist`,
+                exitCode: -1,
+            };
+        }
+        return new Promise((resolve) => {
+            execFile(binary, args, { timeout: this.timeout, maxBuffer: 10 * 1024 * 1024 }, (error, stdout, stderr) => {
+                const output = stdout.trim();
+                if (error) {
+                    if (error.killed || error.code === "ETIMEDOUT") {
+                        resolve({
+                            ok: false,
+                            error: `Command timed out after ${this.timeout}ms`,
+                            exitCode: -1,
+                        });
+                        return;
+                    }
+                    resolve({
+                        ok: false,
+                        error: stderr.trim() || error.message,
+                        exitCode: error.code != null ? (typeof error.code === "number" ? error.code : 1) : 1,
+                    });
+                    return;
+                }
+                let data;
+                try {
+                    data = JSON.parse(output);
+                }
+                catch {
+                    data = output;
+                }
+                resolve({ ok: true, data, exitCode: 0 });
+            });
+        });
+    }
+    async probe(binary, healthCheck) {
+        // Check binary exists via which
+        try {
+            execFileSync("which", [binary], { timeout: 2000, stdio: "pipe" });
+        }
+        catch {
+            return { available: false, reason: `binary '${binary}' not found in PATH` };
+        }
+        if (!healthCheck) {
+            return { available: true };
+        }
+        // Run health check command
+        const [cmd, ...args] = healthCheck.command;
+        return new Promise((resolve) => {
+            execFile(cmd, args, { timeout: 2000 }, (error) => {
+                const exitCode = error?.code != null ? (typeof error.code === "number" ? error.code : 1) : 0;
+                if (exitCode === healthCheck.successExitCode) {
+                    resolve({ available: true });
+                }
+                else {
+                    resolve({ available: false, reason: `health check '${healthCheck.command.join(" ")}' exited ${exitCode}` });
+                }
+            });
+        });
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/cli/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/cli/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAU5D,MAAM,OAAO,WAAW;IACL,OAAO,CAAc;IACrB,OAAO,CAAS;IAChB,MAAM,CAAS;IAEhC,YAAY,IAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,IAAc;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,WAAW,MAAM,4BAA4B;gBACpD,QAAQ,EAAE,CAAC,CAAC;aACb,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YAC5C,QAAQ,CACN,MAAM,EACN,IAAI,EACJ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EACtD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAE7B,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBAC/C,OAAO,CAAC;4BACN,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE,2BAA2B,IAAI,CAAC,OAAO,IAAI;4BAClD,QAAQ,EAAE,CAAC,CAAC;yBACb,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,OAAO,CAAC;wBACN,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO;wBACrC,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qBACrF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,MAAM,CAAC;gBAChB,CAAC;gBAED,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,WAA4B;QACtD,gCAAgC;QAChC,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,MAAM,qBAAqB,EAAE,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,2BAA2B;QAC3B,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC;QAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC/C,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7F,IAAI,QAAQ,KAAK,WAAW,CAAC,eAAe,EAAE,CAAC;oBAC7C,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/cli/program.d.ts

@@ -0,0 +1,3 @@
+import { Cli } from "clipanion";
+export declare function createCli(): Cli;
+//# sourceMappingURL=program.d.ts.map

package/dist/cli/program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AA8BhC,wBAAgB,SAAS,IAAI,GAAG,CA+C/B"}

package/dist/cli/program.js

@@ -0,0 +1,49 @@
+import { Cli } from "clipanion";
+import { GatewayRunCommand } from "./commands/gateway.js";
+import { PairingApproveCommand, PairingListCommand, PairingRevokeCommand, } from "./commands/pairing.js";
+import { StatusCommand } from "./commands/status.js";
+import { SessionListCommand, SessionResetCommand, } from "./commands/session.js";
+import { ConfigShowCommand, ConfigValidateCommand, } from "./commands/config-cmd.js";
+import { SendCommand } from "./commands/send.js";
+import { CronListCommand, CronAddCommand, CronRemoveCommand, } from "./commands/cron-cmd.js";
+import { SecurityAllowlistListCommand, SecurityAllowlistAddCommand, } from "./commands/security.js";
+import { DoctorCommand } from "./commands/doctor.js";
+import { InitCommand } from "./commands/init.js";
+import { ScanCommand } from "./commands/scan.js";
+export function createCli() {
+    const cli = new Cli({
+        binaryLabel: "Iris",
+        binaryName: "iris",
+        binaryVersion: "0.2.0",
+    });
+    cli.register(GatewayRunCommand);
+    // Pairing commands
+    cli.register(PairingApproveCommand);
+    cli.register(PairingListCommand);
+    cli.register(PairingRevokeCommand);
+    // Status
+    cli.register(StatusCommand);
+    // Session commands
+    cli.register(SessionListCommand);
+    cli.register(SessionResetCommand);
+    // Config commands
+    cli.register(ConfigShowCommand);
+    cli.register(ConfigValidateCommand);
+    // Send command
+    cli.register(SendCommand);
+    // Cron commands
+    cli.register(CronListCommand);
+    cli.register(CronAddCommand);
+    cli.register(CronRemoveCommand);
+    // Security commands
+    cli.register(SecurityAllowlistListCommand);
+    cli.register(SecurityAllowlistAddCommand);
+    // Doctor
+    cli.register(DoctorCommand);
+    // Security scan
+    cli.register(ScanCommand);
+    // Init wizard
+    cli.register(InitCommand);
+    return cli;
+}
+//# sourceMappingURL=program.js.map

package/dist/cli/program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,cAAc,EACd,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;QAClB,WAAW,EAAE,MAAM;QACnB,UAAU,EAAE,MAAM;QAClB,aAAa,EAAE,OAAO;KACvB,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAEhC,mBAAmB;IACnB,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACpC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACjC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAEnC,SAAS;IACT,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAE5B,mBAAmB;IACnB,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACjC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAElC,kBAAkB;IAClB,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAEpC,eAAe;IACf,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE1B,gBAAgB;IAChB,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9B,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC7B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAEhC,oBAAoB;IACpB,GAAG,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC3C,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAE1C,SAAS;IACT,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAE5B,gBAAgB;IAChB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE1B,cAAc;IACd,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE1B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/registry.d.ts

@@ -0,0 +1,15 @@
+import type { CliToolDef, CliToolManifest } from "./types.js";
+export interface BuiltCommand {
+    binary: string;
+    args: string[];
+}
+export declare class CliToolRegistry {
+    private tools;
+    constructor(tools: Record<string, CliToolDef>);
+    buildCommand(toolName: string, action: string, args: Record<string, string>): BuiltCommand;
+    listTools(): string[];
+    getToolDef(toolName: string): CliToolDef | undefined;
+    removeTools(names: string[]): void;
+    getManifest(): CliToolManifest;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/cli/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/cli/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAA6B;gBAE9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;IAI7C,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,YAAY;IAuCf,SAAS,IAAI,MAAM,EAAE;IAIrB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAIpD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAMlC,WAAW,IAAI,eAAe;CAgB/B"}

package/dist/cli/registry.js

@@ -0,0 +1,64 @@
+export class CliToolRegistry {
+    tools;
+    constructor(tools) {
+        this.tools = { ...tools };
+    }
+    buildCommand(toolName, action, args) {
+        const toolDef = this.tools[toolName];
+        if (!toolDef) {
+            throw new Error(`Unknown CLI tool: ${toolName}`);
+        }
+        const actionDef = toolDef.actions[action];
+        if (!actionDef) {
+            throw new Error(`Unknown action '${action}' for tool '${toolName}'`);
+        }
+        const cmdArgs = [...actionDef.subcommand];
+        // Add positional args in order
+        if (actionDef.positional) {
+            for (const name of actionDef.positional) {
+                if (args[name] != null) {
+                    cmdArgs.push(args[name]);
+                }
+            }
+        }
+        // Add declared flags
+        if (actionDef.flags) {
+            for (const flag of actionDef.flags) {
+                if (args[flag] != null) {
+                    cmdArgs.push(`--${flag}=${args[flag]}`);
+                }
+            }
+        }
+        // Always append --json --no-input
+        cmdArgs.push("--json", "--no-input");
+        return { binary: toolDef.binary, args: cmdArgs };
+    }
+    listTools() {
+        return Object.keys(this.tools);
+    }
+    getToolDef(toolName) {
+        return this.tools[toolName];
+    }
+    removeTools(names) {
+        for (const name of names) {
+            delete this.tools[name];
+        }
+    }
+    getManifest() {
+        const manifest = {};
+        for (const [name, def] of Object.entries(this.tools)) {
+            manifest[name] = {
+                description: def.description,
+                actions: {},
+            };
+            for (const [actionName, actionDef] of Object.entries(def.actions)) {
+                manifest[name].actions[actionName] = {
+                    positional: actionDef.positional,
+                    flags: actionDef.flags,
+                };
+            }
+        }
+        return manifest;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/cli/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/cli/registry.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,eAAe;IAClB,KAAK,CAA6B;IAE1C,YAAY,KAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY,CACV,QAAgB,EAChB,MAAc,EACd,IAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,eAAe,QAAQ,GAAG,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAa,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAEpD,+BAA+B;QAC/B,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAErC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAED,SAAS;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW,CAAC,KAAe;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,WAAW;QACT,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,GAAG;gBACf,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,OAAO,EAAE,EAAE;aACZ,CAAC;YACF,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG;oBACnC,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,KAAK,EAAE,SAAS,CAAC,KAAK;iBACvB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/cli/types.d.ts

@@ -0,0 +1,40 @@
+export interface CliActionDef {
+    readonly subcommand: string[];
+    readonly positional?: string[];
+    readonly flags?: string[];
+}
+export interface CliHealthCheck {
+    readonly command: [string, ...string[]];
+    readonly successExitCode: number;
+}
+export interface CliToolDef {
+    readonly binary: string;
+    readonly description: string;
+    readonly actions: Record<string, CliActionDef>;
+    readonly healthCheck?: CliHealthCheck;
+}
+export interface CliSandboxConfig {
+    readonly allowedBinaries: string[];
+}
+export interface CliConfig {
+    readonly enabled: boolean;
+    readonly timeout: number;
+    readonly sandbox: CliSandboxConfig;
+    readonly tools: Record<string, CliToolDef>;
+}
+export interface CliExecResult {
+    readonly ok: boolean;
+    readonly data?: unknown;
+    readonly error?: string;
+    readonly exitCode: number;
+}
+export interface CliToolManifest {
+    [toolName: string]: {
+        description: string;
+        actions: Record<string, {
+            positional?: string[];
+            flags?: string[];
+        }>;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,QAAQ,EAAE,MAAM,GAAG;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;SAClB,CAAC,CAAC;KACJ,CAAC;CACH"}

package/dist/cli/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/cli/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":""}

package/dist/config/loader.d.ts

@@ -0,0 +1,4 @@
+import type { IrisConfig } from "./types.js";
+export declare function substituteEnv(raw: string): string;
+export declare function loadConfig(path?: string): IrisConfig;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQjD;AAED,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAgBpD"}

package/dist/config/loader.js

@@ -0,0 +1,31 @@
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { getConfigPath } from "./paths.js";
+import { parseConfig } from "./schema.js";
+const ENV_PATTERN = /\$\{env:([A-Z_][A-Z0-9_]*)\}/g;
+export function substituteEnv(raw) {
+    return raw.replace(ENV_PATTERN, (match, varName) => {
+        const value = process.env[varName];
+        if (value === undefined) {
+            throw new Error(`Missing environment variable: ${varName} (referenced as ${match})`);
+        }
+        return value;
+    });
+}
+export function loadConfig(path) {
+    const configPath = resolve(path ?? getConfigPath());
+    let content;
+    try {
+        content = readFileSync(configPath, "utf-8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return parseConfig({});
+        }
+        throw err;
+    }
+    const substituted = substituteEnv(content);
+    const raw = JSON.parse(substituted);
+    return parseConfig(raw);
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAEpD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAe,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,mBAAmB,KAAK,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC,CAAC;IAEpD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;IAC/C,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC"}

package/dist/config/paths.d.ts

@@ -0,0 +1,4 @@
+export declare function getStateDir(): string;
+export declare function getConfigPath(): string;
+export declare function ensureDir(dirPath: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/config/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAIA,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGjD"}

package/dist/config/paths.js

@@ -0,0 +1,14 @@
+import { mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export function getStateDir() {
+    return process.env["IRIS_STATE_DIR"] ?? join(homedir(), ".iris");
+}
+export function getConfigPath() {
+    return process.env["IRIS_CONFIG_PATH"] ?? "iris.config.json";
+}
+export function ensureDir(dirPath) {
+    mkdirSync(dirPath, { recursive: true });
+    return dirPath;
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC"}