@zenalexa/unicli 0.213.0 → 0.213.3

package/dist/engine/kernel/compile.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Compile step — converts adapter manifests into immutable `CompiledCommand`
+ * entries keyed by `${site}.${cmd}`. Called once at loader boot; every
+ * subsequent invocation looks up O(1).
+ *
+ * Built on ajv 2020-12 strict mode + format-assertion so adapter schemas
+ * fail closed. `x-unicli` extension keywords are stripped before handing to
+ * ajv (strict mode rejects unknowns) but preserved in the introspection
+ * schema returned to describe.ts / MCP tools/list.
+ */
+import type { AdapterCommand, AdapterManifest } from "../../types.js";
+import type { CompiledCommand } from "./types.js";
+/**
+ * Compile one `AdapterCommand` into an immutable `CompiledCommand`. Called
+ * once per command per process; the validator is reused on every call.
+ */
+export declare function compileCommand(cmd: AdapterCommand): CompiledCommand;
+/**
+ * Eagerly compile every (adapter, command) in the registry. Intended to be
+ * called once at the tail of `loadAllAdapters()`; subsequent CLI / MCP /
+ * ACP calls look up by `${site}.${cmd}` in O(1).
+ */
+export declare function compileAll(registry: AdapterManifest[]): Map<string, CompiledCommand>;
+/** Expose the cache read-only for introspection (tests, describe.ts). */
+export declare function getCompiled(site: string, cmd: string): CompiledCommand | undefined;
+/** Internal — used by execute() for lazy cache fill on isolated unit tests. */
+export declare function setCompiled(key: string, compiled: CompiledCommand): void;
+/** Test hook — clear the cache between independent test files. */
+export declare function _resetCompiledCacheForTests(): void;
+//# sourceMappingURL=compile.d.ts.map

package/dist/engine/kernel/compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../../src/engine/kernel/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAEV,cAAc,EACd,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAiB,eAAe,EAAE,MAAM,YAAY,CAAC;AAmGjE;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,eAAe,CAiCnE;AAID;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,eAAe,EAAE,GAC1B,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAQ9B;AAED,yEAAyE;AACzE,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,eAAe,GAAG,SAAS,CAE7B;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI,CAExE;AAED,kEAAkE;AAClE,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/dist/engine/kernel/compile.js

@@ -0,0 +1,167 @@
+/**
+ * Compile step — converts adapter manifests into immutable `CompiledCommand`
+ * entries keyed by `${site}.${cmd}`. Called once at loader boot; every
+ * subsequent invocation looks up O(1).
+ *
+ * Built on ajv 2020-12 strict mode + format-assertion so adapter schemas
+ * fail closed. `x-unicli` extension keywords are stripped before handing to
+ * ajv (strict mode rejects unknowns) but preserved in the introspection
+ * schema returned to describe.ts / MCP tools/list.
+ */
+import Ajv2020 from "ajv/dist/2020.js";
+import addFormats from "ajv-formats";
+let ajvSingleton;
+function getAjv() {
+    if (ajvSingleton)
+        return ajvSingleton;
+    const Ctor = (Ajv2020.default ??
+        Ajv2020);
+    const addFormatsFn = (addFormats
+        .default ?? addFormats);
+    ajvSingleton = new Ctor({
+        strict: true,
+        allErrors: false,
+        validateFormats: true,
+    });
+    addFormatsFn(ajvSingleton, { mode: "full" });
+    return ajvSingleton;
+}
+/** Map adapter-arg type tokens to JSON Schema `type` strings. */
+function jsonSchemaType(t) {
+    switch (t) {
+        case "int":
+            return "integer";
+        case "float":
+            return "number";
+        case "bool":
+            return "boolean";
+        default:
+            return "string";
+    }
+}
+function buildJsonSchema(args) {
+    const properties = {};
+    const required = [];
+    for (const a of args) {
+        const prop = { type: jsonSchemaType(a.type) };
+        if (a.description)
+            prop.description = a.description;
+        if (a.default !== undefined)
+            prop.default = a.default;
+        if (a.choices && a.choices.length > 0)
+            prop.enum = a.choices;
+        if (a.format)
+            prop.format = a.format;
+        // x-unicli-kind / x-unicli-accepts are non-standard extension keywords;
+        // Ajv is strict about unknown keywords, so we pass them through as
+        // annotations under a nested `x-unicli` bag that Ajv's schema cloner
+        // strips before compilation.
+        const ext = {};
+        if (a["x-unicli-kind"])
+            ext.kind = a["x-unicli-kind"];
+        if (a["x-unicli-accepts"])
+            ext.accepts = a["x-unicli-accepts"];
+        if (Object.keys(ext).length > 0)
+            prop["x-unicli"] = ext;
+        properties[a.name] = prop;
+        if (a.required)
+            required.push(a.name);
+    }
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties,
+        required,
+        additionalProperties: false,
+    };
+}
+function buildExample(args) {
+    const example = {};
+    for (const a of args) {
+        if (a.default !== undefined) {
+            example[a.name] = a.default;
+        }
+        else if (a.choices && a.choices.length > 0) {
+            example[a.name] = a.choices[0];
+        }
+        else {
+            switch (a.type) {
+                case "int":
+                    example[a.name] = 10;
+                    break;
+                case "float":
+                    example[a.name] = 0.5;
+                    break;
+                case "bool":
+                    example[a.name] = false;
+                    break;
+                default:
+                    example[a.name] = `<${a.name}>`;
+            }
+        }
+    }
+    return example;
+}
+/**
+ * Compile one `AdapterCommand` into an immutable `CompiledCommand`. Called
+ * once per command per process; the validator is reused on every call.
+ */
+export function compileCommand(cmd) {
+    const args = cmd.adapterArgs ?? [];
+    const jsonSchema = buildJsonSchema(args);
+    const ajv = getAjv();
+    // Strip `x-unicli` from the schema passed to Ajv — Ajv's strict mode
+    // rejects unknown keywords, but the original `jsonSchema` (kept for
+    // introspection) preserves them. Clone + prune.
+    const ajvSchema = JSON.parse(JSON.stringify(jsonSchema));
+    const props = ajvSchema.properties;
+    for (const key of Object.keys(props)) {
+        if ("x-unicli" in props[key])
+            delete props[key]["x-unicli"];
+    }
+    const validator = ajv.compile(ajvSchema);
+    const argByName = new Map(args.map((a) => [a.name, a]));
+    return {
+        jsonSchema,
+        example: buildExample(args),
+        channels: ["shell", "file", "stdin"],
+        argByName,
+        validate: (input) => {
+            const ok = validator(input);
+            if (ok)
+                return { ok: true };
+            return {
+                ok: false,
+                errors: validator.errors ?? [],
+            };
+        },
+    };
+}
+const compiledCache = new Map();
+/**
+ * Eagerly compile every (adapter, command) in the registry. Intended to be
+ * called once at the tail of `loadAllAdapters()`; subsequent CLI / MCP /
+ * ACP calls look up by `${site}.${cmd}` in O(1).
+ */
+export function compileAll(registry) {
+    compiledCache.clear();
+    for (const adapter of registry) {
+        for (const [cmdName, cmd] of Object.entries(adapter.commands)) {
+            compiledCache.set(`${adapter.name}.${cmdName}`, compileCommand(cmd));
+        }
+    }
+    return compiledCache;
+}
+/** Expose the cache read-only for introspection (tests, describe.ts). */
+export function getCompiled(site, cmd) {
+    return compiledCache.get(`${site}.${cmd}`);
+}
+/** Internal — used by execute() for lazy cache fill on isolated unit tests. */
+export function setCompiled(key, compiled) {
+    compiledCache.set(key, compiled);
+}
+/** Test hook — clear the cache between independent test files. */
+export function _resetCompiledCacheForTests() {
+    compiledCache.clear();
+}
+//# sourceMappingURL=compile.js.map

package/dist/engine/kernel/compile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../../src/engine/kernel/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,UAAU,MAAM,aAAa,CAAC;AAiBrC,IAAI,YAA+C,CAAC;AAEpD,SAAS,MAAM;IACb,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,IAAI,GAAG,CAAE,OAA4C,CAAC,OAAO;QACjE,OAAO,CAAY,CAAC;IACtB,MAAM,YAAY,GAAG,CAAE,UAA+C;SACnE,OAAO,IAAI,UAAU,CAGf,CAAC;IACV,YAAY,GAAG,IAAI,IAAI,CAAC;QACtB,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IACH,YAAY,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,SAAS,cAAc,CAAC,CAAqB;IAC3C,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,KAAK;YACR,OAAO,SAAS,CAAC;QACnB,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAkB;IACzC,MAAM,UAAU,GAA4C,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,CAAC,WAAW;YAAE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACpD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACtD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACrC,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,6BAA6B;QAC7B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,kBAAkB,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QACxD,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,8CAA8C;QACvD,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,QAAQ;QACR,oBAAoB,EAAE,KAAK;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAkB;IACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC9B,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,KAAK;oBACR,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACrB,MAAM;gBACR,KAAK,OAAO;oBACV,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;oBACtB,MAAM;gBACR,KAAK,MAAM;oBACT,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;oBACxB,MAAM;gBACR;oBACE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,qEAAqE;IACrE,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAGtD,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,UAAqD,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAkB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CACtC,CAAC;IACF,OAAO;QACL,UAAU;QACV,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;QAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAU;QAC7C,SAAS;QACT,QAAQ,EAAE,CAAC,KAAc,EAAE,EAAE;YAC3B,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE;aAC/B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEzD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,QAA2B;IAE3B,aAAa,CAAC,KAAK,EAAE,CAAC;IACtB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,GAAW;IAEX,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,QAAyB;IAChE,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,2BAA2B;IACzC,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC"}

package/dist/engine/kernel/execute.d.ts

@@ -0,0 +1,35 @@
+/**
+ * execute() — the bag-to-envelope pipeline every surface shares.
+ *
+ * Flow per invocation:
+ *   1. ajv validate(bag.args)              → fail-closed USAGE_ERROR on reject
+ *   2. hardenArgs(bag.args, argByName)     → schema-driven hardening
+ *   3. runPipeline() / command.func()      → actual work
+ *   4. build success envelope with live next_actions (runtime, not templated)
+ *
+ * Callers (CLI/MCP/ACP) format the returned `InvocationResult` for their
+ * transport; they do not rebuild envelopes.
+ */
+import type { ResolvedArgs } from "../args.js";
+import type { Invocation, InvocationResult } from "./types.js";
+/**
+ * Raised when execute() is called for a (site, cmd) pair that was not seen
+ * by `compileAll()` at loader boot. Signals a wiring bug (the loader forgot
+ * to prime the cache), not a user error.
+ */
+export declare class KernelLookupError extends Error {
+    constructor(key: string);
+}
+/**
+ * Look up an adapter + command pair and return an Invocation ready for
+ * execute(). Returns `null` if either the site or command is unknown —
+ * callers can emit their own "unknown command" envelope.
+ */
+export declare function buildInvocation(surface: Invocation["surface"], site: string, cmd: string, bag: ResolvedArgs): Invocation | null;
+/**
+ * Run a validated, hardened invocation end-to-end. Failure paths never
+ * throw — every error surfaces as `{ exitCode, error }` on the returned
+ * result so transport code can do uniform error handling.
+ */
+export declare function execute(inv: Invocation): Promise<InvocationResult>;
+//# sourceMappingURL=execute.d.ts.map

package/dist/engine/kernel/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../src/engine/kernel/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAgBH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG/D;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,GAAG,EAAE,MAAM;CAOxB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,EAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,YAAY,GAChB,UAAU,GAAG,IAAI,CAWnB;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsLxE"}

package/dist/engine/kernel/execute.js

@@ -0,0 +1,221 @@
+/**
+ * execute() — the bag-to-envelope pipeline every surface shares.
+ *
+ * Flow per invocation:
+ *   1. ajv validate(bag.args)              → fail-closed USAGE_ERROR on reject
+ *   2. hardenArgs(bag.args, argByName)     → schema-driven hardening
+ *   3. runPipeline() / command.func()      → actual work
+ *   4. build success envelope with live next_actions (runtime, not templated)
+ *
+ * Callers (CLI/MCP/ACP) format the returned `InvocationResult` for their
+ * transport; they do not rebuild envelopes.
+ */
+import { runPipeline } from "../executor.js";
+import { hardenArgs, InputHardeningError } from "../harden.js";
+import { defaultSuccessNextActions, defaultErrorNextActions, } from "../../output/next-actions.js";
+import { errorTypeToCode, errorToAgentFields, mapErrorToExitCode, } from "../../output/error-map.js";
+import { resolveCommand } from "../../registry.js";
+import { ExitCode } from "../../types.js";
+import { getCompiled } from "./compile.js";
+import { newULID } from "./ulid.js";
+/**
+ * Raised when execute() is called for a (site, cmd) pair that was not seen
+ * by `compileAll()` at loader boot. Signals a wiring bug (the loader forgot
+ * to prime the cache), not a user error.
+ */
+export class KernelLookupError extends Error {
+    constructor(key) {
+        super(`KernelLookupError: compiled command not found: ${key}. ` +
+            "Loader must call compileAll() before execute() — call primeKernelCache() from discovery/loader.ts.");
+        this.name = "KernelLookupError";
+    }
+}
+/**
+ * Look up an adapter + command pair and return an Invocation ready for
+ * execute(). Returns `null` if either the site or command is unknown —
+ * callers can emit their own "unknown command" envelope.
+ */
+export function buildInvocation(surface, site, cmd, bag) {
+    const resolved = resolveCommand(site, cmd);
+    if (!resolved)
+        return null;
+    return {
+        adapter: resolved.adapter,
+        command: resolved.command,
+        cmdName: cmd,
+        bag,
+        surface,
+        trace_id: newULID(),
+    };
+}
+/**
+ * Run a validated, hardened invocation end-to-end. Failure paths never
+ * throw — every error surfaces as `{ exitCode, error }` on the returned
+ * result so transport code can do uniform error handling.
+ */
+export async function execute(inv) {
+    const startedAt = Date.now();
+    const key = `${inv.adapter.name}.${inv.cmdName}`;
+    const compiled = getCompiled(inv.adapter.name, inv.cmdName);
+    const warnings = [];
+    // Loader primes the kernel cache via primeKernelCache() after every
+    // registry mutation. A miss here means either a wiring bug or a test
+    // that registers an adapter without calling primeKernelCache() — throw
+    // a clear error instead of silently recompiling.
+    if (!compiled)
+        throw new KernelLookupError(key);
+    // 1. JSON Schema validation (fail-closed via ajv strict mode).
+    const v = compiled.validate(inv.bag.args);
+    if (!v.ok) {
+        const first = v.errors[0] ?? { message: "invalid arguments" };
+        const path = (first.instancePath ?? "").replace(/^\//, "");
+        const name = path || "args";
+        const err = {
+            code: "invalid_input",
+            message: `arg "${name}" ${first.message ?? "invalid"}`,
+            adapter_path: `src/adapters/${inv.adapter.name}/${inv.cmdName}.yaml`,
+            step: 0,
+            suggestion: `match the JSON Schema at \`unicli describe ${inv.adapter.name} ${inv.cmdName}\``,
+            retryable: false,
+        };
+        const durationMs = Date.now() - startedAt;
+        return {
+            results: [],
+            envelope: {
+                command: key,
+                duration_ms: durationMs,
+                adapter_version: inv.adapter.version,
+                surface: "web",
+                error: err,
+                next_actions: defaultErrorNextActions(inv.adapter.name, inv.cmdName, "invalid_input"),
+            },
+            durationMs,
+            exitCode: ExitCode.USAGE_ERROR,
+            warnings,
+            error: err,
+        };
+    }
+    // 2. Schema-driven hardening (ajv format-assertion + x-unicli-kind).
+    try {
+        const h = hardenArgs(inv.bag.args, compiled.argByName);
+        warnings.push(...h.warnings);
+    }
+    catch (err) {
+        if (err instanceof InputHardeningError) {
+            const agentErr = {
+                code: "invalid_input",
+                message: err.message,
+                adapter_path: `src/adapters/${inv.adapter.name}/${inv.cmdName}.yaml`,
+                step: 0,
+                suggestion: err.suggestion,
+                retryable: false,
+            };
+            const durationMs = Date.now() - startedAt;
+            return {
+                results: [],
+                envelope: {
+                    command: key,
+                    duration_ms: durationMs,
+                    adapter_version: inv.adapter.version,
+                    surface: "web",
+                    error: agentErr,
+                    next_actions: defaultErrorNextActions(inv.adapter.name, inv.cmdName, "invalid_input"),
+                },
+                durationMs,
+                exitCode: ExitCode.USAGE_ERROR,
+                warnings,
+                error: agentErr,
+            };
+        }
+        throw err;
+    }
+    // 3. Pipeline / func execution. runPipeline requires a ResolvedArgs bag
+    //    as of v0.213.3 P3 (D6); surface + trace_id are plumbed through so
+    //    YAML templates can reference ${{ surface }} / ${{ trace_id }}.
+    let results = [];
+    try {
+        if (inv.command.pipeline) {
+            results = await runPipeline(inv.command.pipeline, inv.bag, inv.adapter.base, {
+                site: inv.adapter.name,
+                strategy: inv.adapter.strategy,
+                surface: inv.surface,
+                trace_id: inv.trace_id,
+            });
+        }
+        else if (inv.command.func) {
+            const raw = await inv.command.func(null, inv.bag.args);
+            results = Array.isArray(raw) ? raw : [raw];
+        }
+        else {
+            const agentErr = {
+                code: "internal_error",
+                message: `command ${key} has neither pipeline nor func`,
+                adapter_path: `src/adapters/${inv.adapter.name}/${inv.cmdName}.yaml`,
+                step: 0,
+                suggestion: "the adapter manifest is broken; run `unicli repair` to regenerate",
+                retryable: false,
+            };
+            const durationMs = Date.now() - startedAt;
+            return {
+                results: [],
+                envelope: {
+                    command: key,
+                    duration_ms: durationMs,
+                    adapter_version: inv.adapter.version,
+                    surface: "web",
+                    error: agentErr,
+                },
+                durationMs,
+                exitCode: ExitCode.CONFIG_ERROR,
+                warnings,
+                error: agentErr,
+            };
+        }
+    }
+    catch (err) {
+        const adapterPath = `src/adapters/${inv.adapter.name}/${inv.cmdName}.yaml`;
+        const fields = errorToAgentFields(err, adapterPath, inv.adapter.name);
+        const agentErr = {
+            code: errorTypeToCode(err),
+            message: err instanceof Error ? err.message : String(err),
+            ...fields,
+        };
+        const durationMs = Date.now() - startedAt;
+        return {
+            results: [],
+            envelope: {
+                command: key,
+                duration_ms: durationMs,
+                adapter_version: inv.adapter.version,
+                surface: "web",
+                error: agentErr,
+                next_actions: defaultErrorNextActions(inv.adapter.name, inv.cmdName, agentErr.code),
+            },
+            durationMs,
+            exitCode: mapErrorToExitCode(err),
+            warnings,
+            error: agentErr,
+        };
+    }
+    // 4. Success envelope. next_actions built at runtime with the literal
+    //    site/cmd so adapter templates that legitimately carry `${site}` are
+    //    never mangled and `paginated` metadata flows through.
+    const durationMs = Date.now() - startedAt;
+    const nextActions = defaultSuccessNextActions(inv.adapter.name, inv.cmdName, {
+        supportsPagination: inv.command.paginated === true,
+    });
+    return {
+        results,
+        envelope: {
+            command: key,
+            duration_ms: durationMs,
+            adapter_version: inv.adapter.version,
+            surface: "web",
+            next_actions: nextActions,
+        },
+        durationMs,
+        exitCode: results.length === 0 ? ExitCode.EMPTY_RESULT : ExitCode.SUCCESS,
+        warnings,
+    };
+}
+//# sourceMappingURL=execute.js.map

package/dist/engine/kernel/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../src/engine/kernel/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EACL,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,GAAW;QACrB,KAAK,CACH,kDAAkD,GAAG,IAAI;YACvD,oGAAoG,CACvG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA8B,EAC9B,IAAY,EACZ,GAAW,EACX,GAAiB;IAEjB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,GAAG;QACZ,GAAG;QACH,OAAO;QACP,QAAQ,EAAE,OAAO,EAAE;KACpB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAe;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,oEAAoE;IACpE,qEAAqE;IACrE,uEAAuE;IACvE,iDAAiD;IACjD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEhD,+DAA+D;IAC/D,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC;QAC5B,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,QAAQ,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE;YACtD,YAAY,EAAE,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,OAAO;YACpE,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,8CAA8C,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI;YAC7F,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE;gBACR,OAAO,EAAE,GAAG;gBACZ,WAAW,EAAE,UAAU;gBACvB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;gBACpC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG;gBACV,YAAY,EAAE,uBAAuB,CACnC,GAAG,CAAC,OAAO,CAAC,IAAI,EAChB,GAAG,CAAC,OAAO,EACX,eAAe,CAChB;aACF;YACD,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,WAAW;YAC9B,QAAQ;YACR,KAAK,EAAE,GAAG;SACX,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAe;gBAC3B,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,OAAO;gBACpE,IAAI,EAAE,CAAC;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,KAAK;aACjB,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE;oBACR,OAAO,EAAE,GAAG;oBACZ,WAAW,EAAE,UAAU;oBACvB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;oBACpC,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,QAAQ;oBACf,YAAY,EAAE,uBAAuB,CACnC,GAAG,CAAC,OAAO,CAAC,IAAI,EAChB,GAAG,CAAC,OAAO,EACX,eAAe,CAChB;iBACF;gBACD,UAAU;gBACV,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,QAAQ;gBACR,KAAK,EAAE,QAAQ;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,IAAI,OAAO,GAAc,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,OAAO,GAAG,MAAM,WAAW,CACzB,GAAG,CAAC,OAAO,CAAC,QAAQ,EACpB,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,OAAO,CAAC,IAAI,EAChB;gBACE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;gBACtB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACvB,CACF,CAAC;QACJ,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAa,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAe;gBAC3B,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,WAAW,GAAG,gCAAgC;gBACvD,YAAY,EAAE,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,OAAO;gBACpE,IAAI,EAAE,CAAC;gBACP,UAAU,EACR,mEAAmE;gBACrE,SAAS,EAAE,KAAK;aACjB,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE;oBACR,OAAO,EAAE,GAAG;oBACZ,WAAW,EAAE,UAAU;oBACvB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;oBACpC,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,QAAQ;iBAChB;gBACD,UAAU;gBACV,QAAQ,EAAE,QAAQ,CAAC,YAAY;gBAC/B,QAAQ;gBACR,KAAK,EAAE,QAAQ;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,OAAO,CAAC;QAC3E,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAe;YAC3B,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;YAC1B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACzD,GAAG,MAAM;SACV,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE;gBACR,OAAO,EAAE,GAAG;gBACZ,WAAW,EAAE,UAAU;gBACvB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;gBACpC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ;gBACf,YAAY,EAAE,uBAAuB,CACnC,GAAG,CAAC,OAAO,CAAC,IAAI,EAChB,GAAG,CAAC,OAAO,EACX,QAAQ,CAAC,IAAI,CACd;aACF;YACD,UAAU;YACV,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC;YACjC,QAAQ;YACR,KAAK,EAAE,QAAQ;SAChB,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,WAAW,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE;QAC3E,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI;KACnD,CAAC,CAAC;IACH,OAAO;QACL,OAAO;QACP,QAAQ,EAAE;YACR,OAAO,EAAE,GAAG;YACZ,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YACpC,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,WAAW;SAC1B;QACD,UAAU;QACV,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO;QACzE,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/engine/kernel/types.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Kernel types — Invocation, CompiledCommand, InvocationResult.
+ *
+ * Pure type declarations only; no runtime dependencies beyond shared domain
+ * types. Kept isolated so surfaces (MCP/ACP/CLI) can import types without
+ * pulling ajv / crypto.
+ */
+import type { ResolvedArgs } from "../args.js";
+import type { AgentContext, AgentError } from "../../output/envelope.js";
+import type { AdapterArg, AdapterCommand, AdapterManifest } from "../../types.js";
+export interface Invocation {
+    adapter: AdapterManifest;
+    command: AdapterCommand;
+    cmdName: string;
+    bag: ResolvedArgs;
+    surface: "cli" | "mcp" | "acp" | "bench" | "hub";
+    /** ULID — 26-char Crockford Base32, time-sortable and monotonic within ms. */
+    trace_id: string;
+}
+export type AjvValidateFn = {
+    (data: unknown): boolean;
+    errors?: Array<{
+        instancePath?: string;
+        keyword?: string;
+        message?: string;
+        params?: Record<string, unknown>;
+    }> | null;
+};
+export interface CompiledCommand {
+    jsonSchema: Record<string, unknown>;
+    example: Record<string, unknown>;
+    channels: readonly ["shell", "file", "stdin"];
+    argByName: Map<string, AdapterArg>;
+    validate: (args: unknown) => {
+        ok: true;
+    } | {
+        ok: false;
+        errors: NonNullable<AjvValidateFn["errors"]>;
+    };
+}
+export interface InvocationResult {
+    results: unknown[];
+    envelope: AgentContext;
+    durationMs: number;
+    exitCode: number;
+    warnings: string[];
+    error?: AgentError;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/engine/kernel/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/engine/kernel/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;IACjD,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,KAAK,CAAC;QACb,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC,GAAG,IAAI,CAAC;CACX,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,QAAQ,EAAE,CACR,IAAI,EAAE,OAAO,KAEX;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GACZ;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;KAAE,CAAC;CACjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB"}

package/dist/engine/kernel/types.js

@@ -0,0 +1,9 @@
+/**
+ * Kernel types — Invocation, CompiledCommand, InvocationResult.
+ *
+ * Pure type declarations only; no runtime dependencies beyond shared domain
+ * types. Kept isolated so surfaces (MCP/ACP/CLI) can import types without
+ * pulling ajv / crypto.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/engine/kernel/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/engine/kernel/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/engine/kernel/ulid.d.ts

@@ -0,0 +1,21 @@
+/**
+ * ULID generator — 26-char Crockford Base32, time-sortable AND strictly
+ * monotonic within the same millisecond.
+ *
+ * Spec: https://github.com/ulid/spec#monotonicity
+ *
+ * Layout: 48 bits of ms timestamp (10 chars) + 80 bits of randomness (16 chars).
+ * When two ULIDs are generated in the same ms, the random component of the
+ * second is the first + 1 (BigInt increment). An 80-bit overflow (never seen
+ * in practice — ~10^24 events/ms) spins until the clock advances.
+ *
+ * Dependency-free: uses only node:crypto randomBytes.
+ */
+/**
+ * Generate a strictly monotonic 26-char ULID. Two calls in the same ms sort
+ * lexicographically in call order.
+ */
+export declare function newULID(): string;
+/** Test hook — reset module state so successive test runs are independent. */
+export declare function _resetULIDForTests(): void;
+//# sourceMappingURL=ulid.d.ts.map

package/dist/engine/kernel/ulid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ulid.d.ts","sourceRoot":"","sources":["../../../src/engine/kernel/ulid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAqCH;;;GAGG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAuBhC;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC"}

package/dist/engine/kernel/ulid.js

@@ -0,0 +1,76 @@
+/**
+ * ULID generator — 26-char Crockford Base32, time-sortable AND strictly
+ * monotonic within the same millisecond.
+ *
+ * Spec: https://github.com/ulid/spec#monotonicity
+ *
+ * Layout: 48 bits of ms timestamp (10 chars) + 80 bits of randomness (16 chars).
+ * When two ULIDs are generated in the same ms, the random component of the
+ * second is the first + 1 (BigInt increment). An 80-bit overflow (never seen
+ * in practice — ~10^24 events/ms) spins until the clock advances.
+ *
+ * Dependency-free: uses only node:crypto randomBytes.
+ */
+import { randomBytes } from "node:crypto";
+const CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+const MAX_80_BIT = (1n << 80n) - 1n;
+let lastMs = -1;
+let lastRand = 0n;
+function encodeTime(ms) {
+    const chars = [];
+    let t = ms;
+    for (let i = 9; i >= 0; i--) {
+        chars[i] = CROCKFORD[t % 32];
+        t = Math.floor(t / 32);
+    }
+    return chars.join("");
+}
+function encodeRand(rand) {
+    const chars = [];
+    let acc = rand;
+    for (let i = 15; i >= 0; i--) {
+        chars[i] = CROCKFORD[Number(acc & 31n)];
+        acc >>= 5n;
+    }
+    return chars.join("");
+}
+function freshRand() {
+    const bytes = randomBytes(10);
+    let acc = 0n;
+    for (const b of bytes)
+        acc = (acc << 8n) | BigInt(b);
+    return acc;
+}
+/**
+ * Generate a strictly monotonic 26-char ULID. Two calls in the same ms sort
+ * lexicographically in call order.
+ */
+export function newULID() {
+    let now = Date.now();
+    let rand;
+    if (now === lastMs) {
+        rand = lastRand + 1n;
+        // 80-bit overflow — spin until the clock advances. In practice
+        // unreachable (10^24 events/ms), but the spec requires handling it.
+        while (rand > MAX_80_BIT) {
+            const spun = Date.now();
+            if (spun > lastMs) {
+                now = spun;
+                rand = freshRand();
+                break;
+            }
+        }
+    }
+    else {
+        rand = freshRand();
+    }
+    lastMs = now;
+    lastRand = rand;
+    return encodeTime(now) + encodeRand(rand);
+}
+/** Test hook — reset module state so successive test runs are independent. */
+export function _resetULIDForTests() {
+    lastMs = -1;
+    lastRand = 0n;
+}
+//# sourceMappingURL=ulid.js.map

package/dist/engine/kernel/ulid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ulid.js","sourceRoot":"","sources":["../../../src/engine/kernel/ulid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAEpC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;AAChB,IAAI,QAAQ,GAAG,EAAE,CAAC;AAElB,SAAS,UAAU,CAAC,EAAU;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7B,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;QACxC,GAAG,KAAK,EAAE,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO;IACrB,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACrB,IAAI,IAAY,CAAC;IAEjB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,IAAI,GAAG,QAAQ,GAAG,EAAE,CAAC;QACrB,+DAA+D;QAC/D,oEAAoE;QACpE,OAAO,IAAI,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxB,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;gBAClB,GAAG,GAAG,IAAI,CAAC;gBACX,IAAI,GAAG,SAAS,EAAE,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,SAAS,EAAE,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,CAAC;IACb,QAAQ,GAAG,IAAI,CAAC;IAChB,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,CAAC,CAAC,CAAC;IACZ,QAAQ,GAAG,EAAE,CAAC;AAChB,CAAC"}