axexec 1.7.0 → 2.0.1

package/README.md

@@ -18,6 +18,12 @@ axexec is **not** a security boundary. It does not restrict filesystem or networ
 npm install -g axexec
 ```
 
+## Prerequisites
+
+- Node.js 22.14+
+- npx (included with Node.js) for one-off runs; pnpm (optional) for local development workflows
+- jq for JSONL pipeline examples
+
 ## Requirements
 
 Install the agent CLIs you plan to use:
@@ -45,40 +51,53 @@ export AXEXEC_COPILOT_PATH=/opt/copilot/bin/copilot
 ```bash
 # Run a prompt with an agent
 axexec --agent claude "Add error handling to auth.ts"
-axexec -a codex "Fix the bug in main.ts"
-axexec -a gemini "Refactor the utils module"
-axexec -a opencode "Add logging"
-axexec -a copilot "Write tests"
+axexec --agent codex "Fix the bug in main.ts"
+axexec --agent gemini "Refactor the utils module"
+axexec --agent opencode "Add logging"
+axexec --agent copilot "Write tests"
 
 # Run with explicit credentials JSON (from axauth export)
-axexec -a claude --credentials-file ./creds.json "Review this PR"
+axexec --agent claude --credentials-file ./creds.json "Review this PR"
 
 # Specify a model
-axexec -a claude --model opus "Review this PR"
-axexec -a gemini --model gemini-2.5-pro "Refactor utils"
+axexec --agent claude --model opus "Review this PR"
+axexec --agent gemini --model gemini-2.5-pro "Refactor utils"
 
 # Set permissions
-axexec -a claude --allow 'read,glob,bash:git *' "Check git history"  # best-effort
+axexec --agent claude --allow 'read,glob,bash:git *' "Check git history"  # best-effort
 
 # Output normalized JSONL event stream
-axexec -a claude -f jsonl "Add tests" | jq 'select(.type == "tool.call")'
+axexec --agent claude --format jsonl "Add tests" | jq 'select(.type == "tool.call")'
 
 # List available agents
 axexec --list-agents
 ```
 
+Examples use long flags for clarity; short flags like `-a`, `-m`, and `-f` are still supported.
+
+## Output Formats
+
+axexec supports `--format jsonl|tsv`:
+
+- `jsonl`: one JSON object per line (machine-friendly)
+- `tsv`: tab-separated values (human-friendly)
+- Default is TSV; when stdout is a TTY and `--format` is omitted, output is truncated for readability
+- Use `--format tsv` to force full TSV (not applicable to `--list-agents`, which always outputs TSV)
+- Always set `--format` explicitly in pipelines
+- TSV output starts with `time` and `event type` as the first two columns for all events
+
 ## Pipeline Examples
 
 ### Count event types
 
 ```bash
-axexec -a claude "Summarize the change" | cut -f2 | sort | uniq -c | sort -rn
+axexec --agent claude --format tsv "Summarize the change" | cut -f2 | sort | uniq -c | sort -rn
 ```
 
 ### Filter tool calls
 
 ```bash
-axexec -a claude -f jsonl "Audit dependencies" | jq 'select(.type == "tool.call")'
+axexec --agent claude --format jsonl "Audit dependencies" | jq 'select(.type == "tool.call")'
 ```
 
 ### Filter available agents by package
@@ -98,7 +117,7 @@ axexec --list-agents | tail -n +2 | awk -F'\t' '$3 ~ /openai/ {print $1}'
 --provider <provider>      Provider for OpenCode (e.g., anthropic, openai, google, opencode)
 --allow <perms>            Allow permissions (best-effort, comma-separated)
 --deny <perms>             Deny permissions (best-effort, comma-separated)
--f, --format <fmt>         Output format: jsonl, tsv (default: tsv, truncated on TTY)
+-f, --format <fmt>         Output format: jsonl, tsv (default: tsv; if stdout is TTY and --format is omitted, output is truncated)
 --raw-log <file>           Write raw agent output to file
 --debug                    Enable debug mode (logs unknown events)
 --verbose                  Show agent stderr output
@@ -110,15 +129,14 @@ axexec --list-agents | tail -n +2 | awk -F'\t' '$3 ~ /openai/ {print $1}'
 
 ## Supported Agents
 
-| Agent    | Package                   | API Key Env Var         |
-| -------- | ------------------------- | ----------------------- |
-| claude   | @anthropic-ai/claude-code | ANTHROPIC_API_KEY       |
-| codex    | @openai/codex             | OPENAI_API_KEY          |
-| gemini   | @google/gemini-cli        | GEMINI_API_KEY          |
-| opencode | opencode-ai               | AX_OPENCODE_CREDENTIALS |
-| copilot  | @github/copilot           | GITHUB_TOKEN            |
+`axexec` supports: `claude`, `codex`, `gemini`, `opencode`, `copilot`.
+
+Canonical references:
 
-OpenCode requires `AX_OPENCODE_CREDENTIALS` with provider-specific credentials (see [CI/CD Credentials](#cicd-credentials)).
+- Agent/package metadata: `axshared` (`axshared/README.md`)
+- Credential environment variable mapping: `axauth/README.md`
+
+OpenCode requires `AX_OPENCODE_CREDENTIALS` with provider-specific credentials (see [CI/CD Usage](#cicd-usage)).
 
 ## Event Stream
 
@@ -138,7 +156,8 @@ axexec normalizes all agent output to a standard event stream:
 
 ### Using Credential Environment Variables
 
-For CI/CD pipelines, credentials can be passed via environment variables:
+For CI/CD pipelines, credentials can be passed via `AX_*_CREDENTIALS` environment variables.
+Canonical variable names are documented in `axauth/README.md`.
 
 ```bash
 # Export credentials locally (one-time setup)
@@ -150,23 +169,15 @@ axauth export --agent claude --output creds.json --no-password
 axexec --agent claude --prompt "Review this PR"
 ```
 
-| Agent    | Credential Env Var      |
-| -------- | ----------------------- |
-| claude   | AX_CLAUDE_CREDENTIALS   |
-| codex    | AX_CODEX_CREDENTIALS    |
-| gemini   | AX_GEMINI_CREDENTIALS   |
-| opencode | AX_OPENCODE_CREDENTIALS |
-| copilot  | AX_COPILOT_CREDENTIALS  |
-
 ### Using Standard API Keys
 
 You can also use standard environment variables directly:
 
 ```bash
-ANTHROPIC_API_KEY=sk-... axexec -a claude "Review code"
-OPENAI_API_KEY=sk-... axexec -a codex "Fix bug"
-GEMINI_API_KEY=... axexec -a gemini "Refactor"
-GITHUB_TOKEN=ghp_... axexec -a copilot "Write tests"
+ANTHROPIC_API_KEY=sk-... axexec --agent claude "Review code"
+OPENAI_API_KEY=sk-... axexec --agent codex "Fix bug"
+GEMINI_API_KEY=... axexec --agent gemini "Refactor"
+GITHUB_TOKEN=ghp_... axexec --agent copilot "Write tests"
 ```
 
 For Claude, `CLAUDE_CODE_OAUTH_TOKEN` (generated via `claude setup-token`) also works.
@@ -179,15 +190,15 @@ field must match your `--provider` flag:
 ```bash
 # Anthropic
 AX_OPENCODE_CREDENTIALS='{"agent":"opencode","type":"api-key","provider":"anthropic","data":{"apiKey":"sk-ant-..."}}' \
-  axexec -a opencode --provider anthropic -m claude-sonnet-4 "Hello"
+  axexec --agent opencode --provider anthropic --model claude-sonnet-4 "Hello"
 
 # OpenAI (provider must be specified in credentials)
 AX_OPENCODE_CREDENTIALS='{"agent":"opencode","type":"api-key","provider":"openai","data":{"apiKey":"sk-..."}}' \
-  axexec -a opencode --provider openai -m gpt-4.1 "Hello"
+  axexec --agent opencode --provider openai --model gpt-4.1 "Hello"
 
 # OpenCode hosted models (provider must be "opencode")
 AX_OPENCODE_CREDENTIALS='{"agent":"opencode","type":"api-key","provider":"opencode","data":{"apiKey":"..."}}' \
-  axexec -a opencode --provider opencode -m glm-4.7-free "Hello"
+  axexec --agent opencode --provider opencode --model glm-4.7-free "Hello"
 ```
 
 ## Isolation

package/dist/build-execution-metadata.js

@@ -19,7 +19,7 @@ function buildExecutionMetadata(agentId, options, credentialResult, credentials,
     if (credentials) {
         execution.credentials = {
             type: credentials.type,
-            provider: credentials.agent === "opencode" ? credentials.provider : undefined,
+            provider: options.provider,
         };
     }
     return execution;

package/dist/cli.js

@@ -40,7 +40,7 @@ const program = new Command()
     .option("--provider <provider>", "Provider for OpenCode (required for OpenCode)")
     .option("--allow <perms>", "Allow permissions (best-effort, comma-separated)")
     .option("--deny <perms>", "Deny permissions (best-effort, comma-separated)")
-    .option("-f, --format <fmt>", "Output format: jsonl, tsv (default: tsv, truncated on TTY)")
+    .option("-f, --format <fmt>", "Output format: jsonl, tsv (default when omitted: truncated tsv on TTY, full tsv otherwise)")
     .option("--raw-log <file>", "Write raw agent output to file")
     .option("--debug", "Enable debug mode")
     .option("--verbose", "Show agent stderr output")
@@ -130,7 +130,7 @@ Examples:
         format = formatResult.format;
     }
     // Resolve credentials from --credentials-file if specified.
-    const credentialsResult = await resolveCredentials(options.credentialsFile, readStdin, options.agent);
+    const credentialsResult = await resolveCredentials(options.credentialsFile, readStdin);
     if (!credentialsResult.ok) {
         process.stderr.write(`Error: ${credentialsResult.error}\n`);
         process.exitCode = 2;
@@ -138,7 +138,7 @@ Examples:
     }
     const { credentials } = credentialsResult;
     // Validate provider options
-    const providerResult = validateProviderOptions(options.agent, options.model, options.provider, credentials);
+    const providerResult = validateProviderOptions(options.agent, options.model, options.provider);
     if (!providerResult.ok) {
         process.stderr.write(`Error: ${providerResult.error}\n`);
         process.exitCode = 2;

package/dist/credentials/get-credential-environment.d.ts

@@ -4,12 +4,12 @@
  * Each agent has its own env var requirements. This module extracts
  * the appropriate values from Credentials and returns them as env vars.
  */
-import type { Credentials } from "axshared";
+import type { AgentCli, Credentials } from "axshared";
 /**
  * Gets additional environment variables for credential-based auth.
  *
  * Some agents use environment variables for API keys or OAuth tokens
  * in addition to or instead of file-based credentials.
  */
-declare function getCredentialEnvironment(credentials: Credentials): Record<string, string>;
+declare function getCredentialEnvironment(agentId: AgentCli, credentials: Credentials, provider?: string): Record<string, string>;
 export { getCredentialEnvironment };

package/dist/credentials/get-credential-environment.js

@@ -11,7 +11,7 @@ import { resolveStringField } from "./resolve-string-field.js";
  * Some agents use environment variables for API keys or OAuth tokens
  * in addition to or instead of file-based credentials.
  */
-function getCredentialEnvironment(credentials) {
+function getCredentialEnvironment(agentId, credentials, provider) {
     const environment = {};
     // Extract API key from credentials data
     const apiKey = resolveStringField(credentials.data, "apiKey", "key");
@@ -19,7 +19,7 @@ function getCredentialEnvironment(credentials) {
     // axauth uses "accessToken", but also check legacy "oauthToken" and "token" keys
     const oauthToken = resolveStringField(credentials.data, "accessToken", "oauthToken") ??
         resolveStringField(credentials.data, "token", "token");
-    switch (credentials.agent) {
+    switch (agentId) {
         case "claude": {
             if (credentials.type === "api-key" && apiKey) {
                 environment["ANTHROPIC_API_KEY"] = apiKey;
@@ -51,7 +51,6 @@ function getCredentialEnvironment(credentials) {
         }
         case "opencode": {
             // OpenCode supports multiple providers, env var depends on provider
-            const provider = credentials.provider;
             if (credentials.type === "api-key" && apiKey) {
                 switch (provider) {
                     case "anthropic": {
@@ -71,6 +70,9 @@ function getCredentialEnvironment(credentials) {
                         environment["OPENCODE_API_KEY"] = apiKey;
                         break;
                     }
+                    case undefined: {
+                        break;
+                    }
                 }
             }
             break;

package/dist/credentials/install-credentials.d.ts

@@ -19,7 +19,7 @@ type WarningWriter = (message: string) => void;
  *
  * The caller is responsible for cleaning up the temp directory after use.
  */
-declare function installCredentials(agentId: AgentCli, credentials?: Credentials, warn?: WarningWriter): Promise<InstallResult>;
+declare function installCredentials(agentId: AgentCli, credentials?: Credentials, provider?: string, warn?: WarningWriter): Promise<InstallResult>;
 /**
  * Cleanup for use in finally blocks.
  */

package/dist/credentials/install-credentials.js

@@ -42,7 +42,7 @@ async function createTemporaryDirectories(agentId) {
 /**
  * Installs agent-specific credentials to the appropriate directory.
  */
-function installAgentCredentials(agentId, configDirectory, dataDirectory, credentials, warn) {
+function installAgentCredentials(agentId, configDirectory, dataDirectory, credentials, provider, warn) {
     switch (agentId) {
         case "claude": {
             installClaudeCredentials(configDirectory, credentials);
@@ -57,8 +57,8 @@ function installAgentCredentials(agentId, configDirectory, dataDirectory, creden
             break;
         }
         case "opencode": {
-            if (credentials.agent === "opencode") {
-                installOpenCodeCredentials(dataDirectory, credentials, warn);
+            if (provider) {
+                installOpenCodeCredentials(dataDirectory, credentials, provider, warn);
             }
             break;
         }
@@ -78,15 +78,15 @@ function installAgentCredentials(agentId, configDirectory, dataDirectory, creden
  *
  * The caller is responsible for cleaning up the temp directory after use.
  */
-async function installCredentials(agentId, credentials, warn) {
+async function installCredentials(agentId, credentials, provider, warn) {
     const { baseDirectory, configDirectory, dataDirectory } = await createTemporaryDirectories(agentId);
     try {
         if (credentials) {
-            installAgentCredentials(agentId, configDirectory, dataDirectory, credentials, warn);
+            installAgentCredentials(agentId, configDirectory, dataDirectory, credentials, provider, warn);
         }
         const runtimeEnvironment = buildAgentRuntimeEnvironment(agentId, configDirectory, dataDirectory);
         const credentialEnvironment = credentials
-            ? getCredentialEnvironment(credentials)
+            ? getCredentialEnvironment(agentId, credentials, provider)
             : {};
         return {
             env: { ...runtimeEnvironment, ...credentialEnvironment },

package/dist/credentials/write-agent-credentials.d.ts

@@ -54,7 +54,5 @@ declare function installGeminiCredentials(configDirectory: string, credentials:
  * - oauth-credentials: Written as { [provider]: { type: "oauth", ...data } }
  * - api-key: Written as { [provider]: { type: "api", key: "..." } }
  */
-declare function installOpenCodeCredentials(dataDirectory: string, credentials: Extract<Credentials, {
-    agent: "opencode";
-}>, warn?: WarningWriter): void;
+declare function installOpenCodeCredentials(dataDirectory: string, credentials: Credentials, provider: string, warn?: WarningWriter): void;
 export { installClaudeCredentials, installCodexCredentials, installGeminiCredentials, installOpenCodeCredentials, };

package/dist/credentials/write-agent-credentials.js

@@ -100,9 +100,8 @@ function installGeminiCredentials(configDirectory, credentials) {
  * - oauth-credentials: Written as { [provider]: { type: "oauth", ...data } }
  * - api-key: Written as { [provider]: { type: "api", key: "..." } }
  */
-function installOpenCodeCredentials(dataDirectory, credentials, warn = defaultWarningWriter) {
+function installOpenCodeCredentials(dataDirectory, credentials, provider, warn = defaultWarningWriter) {
     const authPath = path.join(dataDirectory, "auth.json");
-    const provider = credentials.provider;
     switch (credentials.type) {
         case "oauth-credentials": {
             saveJsonFile(authPath, {

package/dist/parse-credentials.js

@@ -25,14 +25,6 @@ function parseCredentialsFromEnvironment(agentId) {
             const parsed = JSON.parse(credEnvironmentValue);
             const parseResult = parseCredentialsResult(parsed);
             if (parseResult.ok) {
-                if (parseResult.value.agent !== agentId) {
-                    return {
-                        ok: false,
-                        exitCode: 2,
-                        message: `Error: ${credEnvironmentVariable} agent mismatch. ` +
-                            `Expected ${agentId}, got ${parseResult.value.agent}.`,
-                    };
-                }
                 return { ok: true, credentials: parseResult.value };
             }
             return {
@@ -67,7 +59,6 @@ function parseApiKeyFromEnvironment(agentId) {
                 return {
                     ok: true,
                     credentials: {
-                        agent: agentId,
                         type: "oauth-token",
                         data: { oauthToken },
                     },
@@ -102,7 +93,6 @@ function parseApiKeyFromEnvironment(agentId) {
     return {
         ok: true,
         credentials: {
-            agent: agentId,
             type: "api-key",
             data: { apiKey },
         },

package/dist/read-credentials-file.d.ts

@@ -9,5 +9,5 @@ type ReadCredentialsResult = {
     ok: false;
     error: string;
 };
-declare function readCredentialsFile(path: string, readStdin: () => Promise<string>, expectedAgent: string): Promise<ReadCredentialsResult>;
+declare function readCredentialsFile(path: string, readStdin: () => Promise<string>): Promise<ReadCredentialsResult>;
 export { readCredentialsFile };

package/dist/read-credentials-file.js

@@ -4,7 +4,7 @@
 import { readFile } from "node:fs/promises";
 import { parseCredentialsResult } from "axshared";
 import { formatZodError } from "./format-zod-error.js";
-async function readCredentialsFile(path, readStdin, expectedAgent) {
+async function readCredentialsFile(path, readStdin) {
     let raw;
     try {
         raw = path === "-" ? await readStdin() : await readFile(path, "utf8");
@@ -28,12 +28,6 @@ async function readCredentialsFile(path, readStdin, expectedAgent) {
             error: `Invalid credentials format: ${formatZodError(parseResult.error)}`,
         };
     }
-    if (parseResult.value.agent !== expectedAgent) {
-        return {
-            ok: false,
-            error: `Credentials agent mismatch. Expected ${expectedAgent}, got ${parseResult.value.agent}.`,
-        };
-    }
     return { ok: true, credentials: parseResult.value };
 }
 export { readCredentialsFile };

package/dist/resolve-credentials.d.ts

@@ -14,8 +14,7 @@ type ResolveCredentialsResult = {
  *
  * @param credentialsFile - Path to credentials file or "-" for stdin
  * @param readStdin - Function to read stdin
- * @param agentId - Expected agent ID for validation
  * @returns Credentials or undefined if no file specified
  */
-declare function resolveCredentials(credentialsFile: string | undefined, readStdin: () => Promise<string>, agentId: string): Promise<ResolveCredentialsResult>;
+declare function resolveCredentials(credentialsFile: string | undefined, readStdin: () => Promise<string>): Promise<ResolveCredentialsResult>;
 export { resolveCredentials };

package/dist/resolve-credentials.js

@@ -7,14 +7,13 @@ import { readCredentialsFile } from "./read-credentials-file.js";
  *
  * @param credentialsFile - Path to credentials file or "-" for stdin
  * @param readStdin - Function to read stdin
- * @param agentId - Expected agent ID for validation
  * @returns Credentials or undefined if no file specified
  */
-async function resolveCredentials(credentialsFile, readStdin, agentId) {
+async function resolveCredentials(credentialsFile, readStdin) {
     if (!credentialsFile) {
         return { ok: true, credentials: undefined };
     }
-    const result = await readCredentialsFile(credentialsFile, readStdin, agentId);
+    const result = await readCredentialsFile(credentialsFile, readStdin);
     if (!result.ok) {
         return { ok: false, error: result.error };
     }

package/dist/run-agent.js

@@ -83,32 +83,6 @@ async function runAgent(agentId, options) {
     }
     // Credentials are optional; isolation still applies even when none are found.
     const credentials = credentialsResult.credentials;
-    if (credentials && credentials.agent !== validation.agentId) {
-        diagnostics.error("Error: Credentials agent mismatch. " +
-            `Expected ${validation.agentId}, got ${credentials.agent}.`);
-        setExitCode(2);
-        return {
-            events: [],
-            success: false,
-            execution: { agent: validation.agentId, model: options.model },
-        };
-    }
-    // Validate OpenCode credentials provider matches the requested provider.
-    // This duplicates validation in validateOpenCodeOptions() (CLI layer) but is
-    // necessary for programmatic API consumers who call runAgent() directly.
-    if (validation.agentId === "opencode" &&
-        credentials?.agent === "opencode" &&
-        options.provider &&
-        credentials.provider.toLowerCase() !== options.provider.toLowerCase()) {
-        diagnostics.error("Error: Credentials provider mismatch. " +
-            `Expected ${options.provider}, got ${credentials.provider}.`);
-        setExitCode(2);
-        return {
-            events: [],
-            success: false,
-            execution: { agent: validation.agentId, model: options.model },
-        };
-    }
     // Normalize provider to lowercase for OpenCode (all OpenCode provider IDs are lowercase).
     // This ensures consistent behavior for both CLI and programmatic API users.
     const normalizedOptions = validation.agentId === "opencode" && options.provider
@@ -117,7 +91,7 @@ async function runAgent(agentId, options) {
     // Always create isolated runtime directories; install credentials if provided.
     let credentialResult;
     try {
-        credentialResult = await installCredentials(validation.agentId, credentials, diagnostics.warn);
+        credentialResult = await installCredentials(validation.agentId, credentials, normalizedOptions.provider, diagnostics.warn);
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);

package/dist/validate-opencode-options.d.ts

@@ -1,7 +1,6 @@
 /**
  * Validate OpenCode-specific CLI options.
  */
-import type { Credentials } from "axshared";
 type ProviderValidationResult = {
     ok: true;
     normalizedProvider: string | undefined;
@@ -13,7 +12,7 @@ type ProviderValidationResult = {
  * Validate provider usage and OpenCode-specific options.
  *
  * - For non-OpenCode agents: provider must not be specified
- * - For OpenCode: validates model format, requires provider, checks credentials
+ * - For OpenCode: validates model format, requires provider
  */
-declare function validateProviderOptions(agentId: string, model: string | undefined, provider: string | undefined, credentials: Credentials | undefined): ProviderValidationResult;
+declare function validateProviderOptions(agentId: string, model: string | undefined, provider: string | undefined): ProviderValidationResult;
 export { validateProviderOptions };

package/dist/validate-opencode-options.js

@@ -5,9 +5,9 @@
  * Validate provider usage and OpenCode-specific options.
  *
  * - For non-OpenCode agents: provider must not be specified
- * - For OpenCode: validates model format, requires provider, checks credentials
+ * - For OpenCode: validates model format, requires provider
  */
-function validateProviderOptions(agentId, model, provider, credentials) {
+function validateProviderOptions(agentId, model, provider) {
     // --provider is only valid for OpenCode
     if (provider && agentId !== "opencode") {
         return {
@@ -20,9 +20,9 @@ function validateProviderOptions(agentId, model, provider, credentials) {
         return { ok: true, normalizedProvider: undefined };
     }
     // OpenCode-specific validation
-    return validateOpenCodeOptions(model, provider, credentials);
+    return validateOpenCodeOptions(model, provider);
 }
-function validateOpenCodeOptions(model, provider, credentials) {
+function validateOpenCodeOptions(model, provider) {
     // Require --provider for OpenCode
     if (!provider) {
         // If model contains "/" and no provider given, suggest they might be using
@@ -45,14 +45,6 @@ function validateOpenCodeOptions(model, provider, credentials) {
     // Normalize to lowercase to match OpenCode's provider ID format.
     // OpenCode stores all provider IDs in lowercase (anthropic, openai, etc).
     const normalizedProvider = provider.toLowerCase();
-    // Validate credentials provider matches
-    if (credentials?.agent === "opencode" &&
-        credentials.provider.toLowerCase() !== normalizedProvider) {
-        return {
-            ok: false,
-            error: `Credentials provider mismatch. Expected ${normalizedProvider}, got ${credentials.provider}.`,
-        };
-    }
     return { ok: true, normalizedProvider };
 }
 export { validateProviderOptions };

package/package.json

@@ -2,7 +2,7 @@
   "name": "axexec",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "1.7.0",
+  "version": "2.0.1",
   "description": "Unified CLI runner for AI coding agents with normalized event streaming",
   "repository": {
     "type": "git",
@@ -59,27 +59,27 @@
     "automation",
     "coding-assistant"
   ],
-  "packageManager": "pnpm@10.28.0",
+  "packageManager": "pnpm@10.28.1",
   "engines": {
     "node": ">=22.14.0"
   },
   "dependencies": {
     "@commander-js/extra-typings": "^14.0.0",
     "axconfig": "^3.6.3",
-    "axshared": "^4.0.0",
+    "axshared": "^5.0.0",
     "commander": "^14.0.2",
     "zod": "^4.3.5"
   },
   "devDependencies": {
     "@total-typescript/ts-reset": "^0.6.1",
-    "@types/node": "^25.0.9",
+    "@types/node": "^25.0.10",
     "@vitest/coverage-v8": "^4.0.17",
     "eslint": "^9.39.2",
     "eslint-config-axkit": "^1.1.0",
     "fta-check": "^1.5.1",
     "fta-cli": "^3.0.0",
-    "knip": "^5.82.0",
-    "prettier": "3.8.0",
+    "knip": "^5.82.1",
+    "prettier": "3.8.1",
     "semantic-release": "^25.0.2",
     "typescript": "^5.9.3",
     "vitest": "^4.0.17"