cool-workflow 0.1.98 → 0.2.0

package/dist/cli/handlers/blackboard.js

@@ -1,81 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleBlackboard = handleBlackboard;
-exports.handleCoordinator = handleCoordinator;
-const state_explosion_1 = require("../../state-explosion");
-const io_1 = require("../io");
-/** `cw blackboard <verb> <run-id> …` — shared-blackboard read/write family. */
-function handleBlackboard(args, runner) {
-    const [subcommand, action, runId] = args.positionals;
-    switch (subcommand) {
-        case "summary":
-            (0, io_1.printJson)(runner.blackboardSummary((0, io_1.required)(action, "run id"), args.options));
-            return;
-        case "summarize": {
-            const digest = runner.blackboardSummarize((0, io_1.required)(action, "run id"), args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(digest);
-            else
-                process.stdout.write(`${(0, state_explosion_1.formatBlackboardDigest)(digest)}\n`);
-            return;
-        }
-        case "graph":
-            (0, io_1.printJson)(runner.blackboardGraph((0, io_1.required)(action, "run id")));
-            return;
-        case "resolve":
-            (0, io_1.printJson)(runner.resolveRunBlackboard((0, io_1.required)(action, "run id"), args.options));
-            return;
-        case "topic":
-            if (action === "create") {
-                (0, io_1.printJson)(runner.createBlackboardTopic((0, io_1.required)(runId, "run id"), args.options));
-                return;
-            }
-            break;
-        case "message":
-            if (action === "post") {
-                (0, io_1.printJson)(runner.postBlackboardMessage((0, io_1.required)(runId, "run id"), args.options));
-                return;
-            }
-            if (action === "list") {
-                (0, io_1.printJson)(runner.listBlackboardMessages((0, io_1.required)(runId, "run id"), args.options));
-                return;
-            }
-            break;
-        case "context":
-            if (action === "put") {
-                (0, io_1.printJson)(runner.putBlackboardContext((0, io_1.required)(runId, "run id"), args.options));
-                return;
-            }
-            break;
-        case "artifact":
-            if (action === "add") {
-                (0, io_1.printJson)(runner.addBlackboardArtifact((0, io_1.required)(runId, "run id"), args.options));
-                return;
-            }
-            if (action === "list") {
-                (0, io_1.printJson)(runner.listBlackboardArtifacts((0, io_1.required)(runId, "run id"), args.options));
-                return;
-            }
-            break;
-        case "snapshot":
-            (0, io_1.printJson)(runner.snapshotBlackboard((0, io_1.required)(action, "run id"), args.options));
-            return;
-        default:
-            break;
-    }
-    throw new Error("Usage: cw.js blackboard summary|summarize|graph|resolve <run-id> | topic create <run-id> | message post|list <run-id> | context put <run-id> | artifact add|list <run-id> | snapshot <run-id>");
-}
-/** `cw coordinator summary|decision <run-id> …` — coordinator decision ledger. */
-function handleCoordinator(args, runner) {
-    const [subcommand, runId] = args.positionals;
-    switch (subcommand) {
-        case "summary":
-            (0, io_1.printJson)(runner.coordinatorSummary((0, io_1.required)(runId, "run id"), args.options));
-            return;
-        case "decision":
-            (0, io_1.printJson)(runner.recordCoordinatorDecision((0, io_1.required)(runId, "run id"), args.options));
-            return;
-        default:
-            throw new Error("Usage: cw.js coordinator summary <run-id> | coordinator decision <run-id> --kind <kind> --outcome <outcome> --reason TEXT");
-    }
-}

package/dist/cli/handlers/candidate.js

@@ -1,40 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleCandidate = handleCandidate;
-const operator_ux_1 = require("../../operator-ux");
-const io_1 = require("../io");
-/** `cw candidate list|show|register|score|rank|select|reject|summary <run-id> [candidate-id]`. */
-function handleCandidate(args, runner) {
-    const [subcommand, runId, candidateId, reason] = args.positionals;
-    switch (subcommand) {
-        case "list":
-            (0, io_1.printJson)(runner.listCandidates((0, io_1.required)(runId, "run id"), args.options));
-            return;
-        case "show":
-            (0, io_1.printJson)(runner.showCandidate((0, io_1.required)(runId, "run id"), (0, io_1.required)(candidateId, "candidate id")));
-            return;
-        case "register":
-            (0, io_1.printJson)(runner.registerCandidate((0, io_1.required)(runId, "run id"), args.options));
-            return;
-        case "score":
-            (0, io_1.printJson)(runner.scoreCandidate((0, io_1.required)(runId, "run id"), (0, io_1.required)(candidateId, "candidate id"), args.options));
-            return;
-        case "rank":
-            (0, io_1.printJson)(runner.rankCandidates((0, io_1.required)(runId, "run id"), args.options));
-            return;
-        case "select":
-            (0, io_1.printJson)(runner.selectCandidate((0, io_1.required)(runId, "run id"), (0, io_1.required)(candidateId, "candidate id"), args.options));
-            return;
-        case "reject":
-            (0, io_1.printJson)(runner.rejectCandidate((0, io_1.required)(runId, "run id"), (0, io_1.required)(candidateId, "candidate id"), String(args.options.reason || args.options.message || reason || "rejected")));
-            return;
-        case "summary":
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(runner.summarizeCandidateOperatorRecords((0, io_1.required)(runId, "run id")));
-            else
-                process.stdout.write(`${(0, operator_ux_1.formatCandidateSummary)(runner.summarizeCandidateOperatorRecords((0, io_1.required)(runId, "run id")))}\n`);
-            return;
-        default:
-            throw new Error("Usage: cw.js candidate list|show|register|score|rank|select|reject|summary <run-id> [candidate-id]");
-    }
-}

package/dist/cli/handlers/clones.js

@@ -1,34 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleClones = handleClones;
-// `cw clones` handler — carved out of the command-surface god-dispatch. The
-// remote-source clone cache (v0.1.91): `list` inspects the cached checkouts that
-// `--link`/URL reviews populate; `gc` reclaims them (TTL sweep, or --all). Pure
-// filesystem work — no network, no run registry, no runner needed.
-const capability_core_1 = require("../../capability-core");
-const format_1 = require("../format");
-const io_1 = require("../io");
-/** `cw clones list [--json] | clones gc [--older-than-days N] [--all] [--json]`. */
-function handleClones(args) {
-    const [subcommand] = args.positionals;
-    switch (subcommand) {
-        case "list": {
-            const result = (0, capability_core_1.listClones)(args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, format_1.formatClonesList)(result)}\n`);
-            return;
-        }
-        case "gc": {
-            const result = (0, capability_core_1.gcClones)(args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, format_1.formatClonesGc)(result)}\n`);
-            return;
-        }
-        default:
-            throw new Error("Usage: cw.js clones list [--json] | clones gc [--older-than-days N] [--all] [--json]");
-    }
-}

package/dist/cli/handlers/collaboration.js

@@ -1,61 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleApprove = handleApprove;
-exports.handleReject = handleReject;
-exports.handleComment = handleComment;
-exports.handleHandoff = handleHandoff;
-exports.handleReview = handleReview;
-const io_1 = require("../io");
-/** `cw approve <kind> <run-id> <target-id>` — record an approval on a target. */
-function handleApprove(args, runner) {
-    const [targetKind, runId, targetId] = args.positionals;
-    (0, io_1.printJson)(runner.collaborationApprove((0, io_1.required)(runId, "run id"), (0, io_1.required)(targetKind, "target kind (candidate|commit|selection|run|task|node)"), (0, io_1.required)(targetId, "target id"), args.options));
-}
-/** `cw reject <kind> <run-id> <target-id>` — record a rejection on a target. */
-function handleReject(args, runner) {
-    const [targetKind, runId, targetId] = args.positionals;
-    (0, io_1.printJson)(runner.collaborationReject((0, io_1.required)(runId, "run id"), (0, io_1.required)(targetKind, "target kind (candidate|commit|selection|run|task|node)"), (0, io_1.required)(targetId, "target id"), args.options));
-}
-/** `cw comment add <kind> <run-id> <target-id> | comment list <run-id>` — leave or list comments. */
-function handleComment(args, runner) {
-    const [subcommand, ...rest] = args.positionals;
-    if (subcommand === "add") {
-        const [targetKind, runId, targetId] = rest;
-        (0, io_1.printJson)(runner.collaborationComment((0, io_1.required)(runId, "run id"), (0, io_1.required)(targetKind, "target kind"), (0, io_1.required)(targetId, "target id"), args.options));
-        return;
-    }
-    if (subcommand === "list") {
-        const result = runner.collaborationCommentList((0, io_1.required)(rest[0], "run id"), args.options);
-        if ((0, io_1.wantsJson)(args.options))
-            (0, io_1.printJson)(result);
-        else
-            process.stdout.write(`${runner.formatCommentList(result.comments)}\n`);
-        return;
-    }
-    throw new Error("Usage: cw.js comment add <kind> <run-id> <target-id> --body <text> | comment list <run-id> [--json]");
-}
-/** `cw handoff <kind> <run-id> [target-id]` — hand a target off to the next owner. */
-function handleHandoff(args, runner) {
-    const [targetKind, runId, targetIdRaw] = args.positionals;
-    const kind = (0, io_1.required)(targetKind, "target kind (run|task|candidate|commit|node)");
-    const rid = (0, io_1.required)(runId, "run id");
-    const targetId = targetIdRaw || (kind === "run" ? rid : undefined);
-    (0, io_1.printJson)(runner.collaborationHandoff(rid, kind, (0, io_1.required)(targetId, "target id"), args.options));
-}
-/** `cw review status <run-id> | review policy <run-id> …` — read or set review state/policy. */
-function handleReview(args, runner) {
-    const [subcommand, runId] = args.positionals;
-    if (subcommand === "status") {
-        const report = runner.reviewStatus((0, io_1.required)(runId, "run id"), args.options);
-        if ((0, io_1.wantsJson)(args.options))
-            (0, io_1.printJson)(report);
-        else
-            process.stdout.write(`${runner.formatReviewStatus(report)}\n`);
-        return;
-    }
-    if (subcommand === "policy") {
-        (0, io_1.printJson)(runner.reviewPolicy((0, io_1.required)(runId, "run id"), args.options));
-        return;
-    }
-    throw new Error("Usage: cw.js review status <run-id> [--json] | review policy <run-id> --required-approvals N --authorized-roles a,b --applies-to commit,selection");
-}

package/dist/cli/handlers/eval.js

@@ -1,40 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleEval = handleEval;
-const multi_agent_eval_1 = require("../../multi-agent-eval");
-const io_1 = require("../io");
-/** `cw eval snapshot|replay|compare|score|gate|report …` — multi-agent eval. */
-function handleEval(args, runner) {
-    const [subcommand, first, second] = args.positionals;
-    let result;
-    switch (subcommand) {
-        case "snapshot":
-            result = runner.evalSnapshot((0, io_1.required)(first, "run id"), args.options);
-            break;
-        case "replay":
-            result = runner.evalReplay((0, io_1.required)(first, "snapshot id or path"), args.options);
-            break;
-        case "compare":
-            result = runner.evalCompare((0, io_1.required)(first, "baseline id or path"), (0, io_1.required)(second, "replay id or path"));
-            break;
-        case "score":
-            result = runner.evalScore((0, io_1.required)(first, "replay id or path"));
-            break;
-        case "gate":
-            result = runner.evalGate((0, io_1.required)(first, "suite id or path"));
-            if (!(0, io_1.wantsJson)(args.options) && result.status === "fail")
-                process.exitCode = 1;
-            break;
-        case "report":
-            result = runner.evalReport((0, io_1.required)(first, "replay id or path"));
-            break;
-        default:
-            throw new Error("Usage: cw.js eval snapshot <run-id> --id <snapshot-id> | replay <snapshot-id-or-path> | compare <baseline-id-or-path> <replay-id-or-path> | score <replay-id-or-path> | gate <suite-id-or-path> | report <replay-id-or-path>");
-    }
-    if ((0, io_1.wantsJson)(args.options))
-        (0, io_1.printJson)(result);
-    else
-        process.stdout.write(`${(0, multi_agent_eval_1.formatMultiAgentEval)(result)}\n`);
-    if (subcommand === "gate" && result.status === "fail")
-        process.exitCode = 1;
-}

package/dist/cli/handlers/ledger.js

@@ -1,169 +0,0 @@
-"use strict";
-// `cw ledger propose|review|verify` — the cross-agent handoff ledger CLI surface.
-// A proposing agent prints a proposal or a review verdict as a verifiable JSON
-// entry; the receiving side verifies it fail-closed before acting. See
-// docs/cross-agent-ledger.7.md and docs/designs/handoff-ledger.md.
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleLedger = handleLedger;
-const fs = __importStar(require("fs"));
-const ledger_1 = require("../../ledger");
-const io_1 = require("../io");
-/** Coerce a repeatable/comma-joined list option to a clean string[]. */
-function listOption(value) {
-    const parts = Array.isArray(value) ? value : typeof value === "string" ? value.split(",") : [];
-    return parts.map((p) => String(p).trim()).filter(Boolean);
-}
-function stringOption(value) {
-    return typeof value === "string" && value.trim() ? value.trim() : undefined;
-}
-function nowIso() {
-    return new Date().toISOString();
-}
-function handleLedger(args, _runner) {
-    const [subcommand] = args.positionals;
-    const opts = args.options;
-    switch (subcommand) {
-        case "propose": {
-            const entry = (0, ledger_1.buildLedgerProposal)({
-                from: (0, io_1.required)(stringOption(opts.from), "--from <agent/repo>"),
-                to: (0, io_1.required)(stringOption(opts.to), "--to <agent/repo>"),
-                title: (0, io_1.required)(stringOption(opts.title), "--title <text>"),
-                rationale: (0, io_1.required)(stringOption(opts.rationale), "--rationale <text>"),
-                targetFiles: listOption(opts.files),
-                // Do NOT trim the diff: it is a unified patch (payload, not a label), and
-                // trimming strips the trailing newline `git apply` requires — a trimmed
-                // diff is a corrupt patch. Presence is detected with a trimmed test, but
-                // the bytes are passed through verbatim (matching the MCP propose path).
-                suggestedDiff: typeof opts.diff === "string" && opts.diff.trim() ? opts.diff : undefined,
-                createdAt: nowIso()
-            });
-            (0, io_1.printJson)(entry);
-            return;
-        }
-        case "review": {
-            const verdictRaw = (0, io_1.required)(stringOption(opts.verdict), "--verdict <approved|rejected>").toUpperCase();
-            if (verdictRaw !== "APPROVED" && verdictRaw !== "REJECTED") {
-                throw new Error('--verdict must be "approved" or "rejected".');
-            }
-            const entry = (0, ledger_1.buildLedgerReview)({
-                from: (0, io_1.required)(stringOption(opts.from), "--from <agent/repo>"),
-                to: (0, io_1.required)(stringOption(opts.to), "--to <agent/repo>"),
-                target: (0, io_1.required)(stringOption(opts.target), "--target <proposal-id|pr-ref>"),
-                verdict: verdictRaw,
-                findings: listOption(opts.findings),
-                createdAt: nowIso()
-            });
-            (0, io_1.printJson)(entry);
-            return;
-        }
-        case "verify": {
-            const file = stringOption(opts.file);
-            let text;
-            try {
-                // --file <path>, else read the entry from stdin (fd 0).
-                text = fs.readFileSync(file || 0, "utf8");
-            }
-            catch (error) {
-                throw new Error(`Cannot read ledger entry${file ? ` from ${file}` : " from stdin"}: ${error.message}`);
-            }
-            let parsed;
-            try {
-                parsed = JSON.parse(text);
-            }
-            catch {
-                // A non-JSON input is itself a fail-closed refusal, not a crash.
-                (0, io_1.printJson)({ ok: false, id: null, kind: null, checks: [{ name: "parse", pass: false, code: "ledger-bad-json" }], failedChecks: [{ name: "parse", code: "ledger-bad-json" }] });
-                process.exitCode = 1;
-                return;
-            }
-            const result = (0, ledger_1.verifyLedgerEntry)(parsed);
-            (0, io_1.printJson)(result);
-            // Fail-closed: a tampered/malformed entry exits non-zero so
-            // `cw ledger verify <file> && open-pr` cannot proceed on a lie.
-            if (!result.ok)
-                process.exitCode = 1;
-            return;
-        }
-        case "apply": {
-            const file = stringOption(opts.file);
-            let text;
-            try {
-                // --file <path>, else read the entry from stdin (fd 0), same as verify.
-                text = fs.readFileSync(file || 0, "utf8");
-            }
-            catch (error) {
-                throw new Error(`Cannot read ledger entry${file ? ` from ${file}` : " from stdin"}: ${error.message}`);
-            }
-            let parsed;
-            try {
-                parsed = JSON.parse(text);
-            }
-            catch {
-                (0, io_1.printJson)({ ok: false, id: null, kind: null, diff: null, failedChecks: [{ name: "parse", code: "ledger-bad-json" }] });
-                process.exitCode = 1;
-                return;
-            }
-            const result = (0, ledger_1.applyLedgerProposal)(parsed);
-            (0, io_1.printJson)(result);
-            // Fail-closed: the diff only comes out (ok:true) when the proposal verifies,
-            // so `cw ledger apply <file> | git apply` never feeds git an unverified patch.
-            if (!result.ok)
-                process.exitCode = 1;
-            return;
-        }
-        case "list": {
-            // `--dir` is repeatable: 2+ dirs union-verify multiple mirrors into one
-            // inbox; a single --dir keeps the original single-directory output (POLA).
-            const dirs = Array.isArray(opts.dir) ? opts.dir.map(String).filter(Boolean) : [];
-            if (dirs.length > 1) {
-                const union = (0, ledger_1.unionLedgerEntries)(dirs);
-                (0, io_1.printJson)(union);
-                if (!union.allOk)
-                    process.exitCode = 1;
-                return;
-            }
-            const dir = (0, io_1.required)(dirs[0] || stringOption(opts.dir), "--dir <ledger-directory>");
-            const result = (0, ledger_1.listLedgerEntries)(dir);
-            (0, io_1.printJson)(result);
-            // Fail-closed inbox: refuse the whole batch if any entry does not verify.
-            if (!result.allOk)
-                process.exitCode = 1;
-            return;
-        }
-        default:
-            throw new Error("Usage: cw ledger propose|review|verify|apply|list [options]");
-    }
-}

package/dist/cli/handlers/maintenance.js

@@ -1,107 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.handleGc = handleGc;
-exports.handleTelemetry = handleTelemetry;
-exports.handleDemo = handleDemo;
-const capability_core_1 = require("../../capability-core");
-const run_registry_1 = require("../../run-registry");
-const telemetry_demo_1 = require("../../telemetry-demo");
-const io_1 = require("../io");
-/** `cw gc plan|run|verify [run-id] …` — run retention & provable reclamation. */
-function handleGc(args, runner) {
-    // Run Retention & Provable Reclamation (v0.1.39). `plan` is a pure dry-run
-    // (frees nothing); `run` executes the write-ahead reclamation transaction;
-    // `verify` re-proves a reclaimed run. CW never reclaims by default.
-    const registry = (0, capability_core_1.runRegistryFor)(args.options, runner);
-    const [subcommand, id] = args.positionals;
-    switch (subcommand) {
-        case "plan": {
-            const result = (0, capability_core_1.gcPlan)(registry, id, args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, run_registry_1.formatGcPlan)(result)}\n`);
-            return;
-        }
-        case "run": {
-            const result = (0, capability_core_1.gcRun)(registry, id, args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, run_registry_1.formatGcRun)(result)}\n`);
-            return;
-        }
-        case "verify": {
-            const result = (0, capability_core_1.gcVerify)(registry, (0, io_1.required)(id, "run id"), args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, run_registry_1.formatGcVerify)(result)}\n`);
-            // Fail closed ONLY on a real integrity failure: a run that WAS reclaimed
-            // but no longer re-proves. A not-reclaimed run has nothing to verify
-            // (reclaimed:false/verified:false) and must not be treated as a failure.
-            // LIMIT (honest): a DELETED reclaimed.json reads as reclaimed:false, so
-            // proof-deletion is indistinguishable from never-reclaimed here without
-            // an independent witness (e.g. a trust-audit reclamation event) — a
-            // follow-up. This guard is still strictly better than the prior exit-0.
-            if (result.reclaimed && !result.verified)
-                process.exitCode = 1;
-            return;
-        }
-        default:
-            throw new Error("Usage: cw.js gc plan|run|verify [run-id] [--reclaimAfterArchiveDays N] [--keep-scratch] [--keep-snapshots] [--limit N] [--json]");
-    }
-}
-/** `cw telemetry verify <run-id> …` — verify the signed telemetry ledger. */
-function handleTelemetry(args, runner) {
-    const [subcommand, id] = args.positionals;
-    switch (subcommand) {
-        case "verify": {
-            const result = (0, capability_core_1.telemetryVerify)(runner, { ...args.options, runId: id || args.options.runId || args.options.run });
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, telemetry_demo_1.formatTelemetryVerify)(result)}\n`);
-            // Fail closed: a forged/edited/corrupt ledger verifies false — report it
-            // through the exit code so `cw telemetry verify <run> && deploy` cannot
-            // pass on a lie. (Absent ledger = present:false/verified:true -> exit 0.)
-            if (!result.verified)
-                process.exitCode = 1;
-            return;
-        }
-        default:
-            throw new Error("Usage: cw.js telemetry verify <run-id> [--pubkey <pem-or-path>] [--json]");
-    }
-}
-/** `cw demo tamper|bundle [--json]` — the tamper/bundle integrity demos. */
-function handleDemo(args, runner) {
-    const [subcommand] = args.positionals;
-    switch (subcommand) {
-        case "tamper": {
-            const result = (0, capability_core_1.demoTamper)(runner, args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, telemetry_demo_1.formatTamperDemo)(result)}\n`);
-            // Fail closed: if the proof did not hold (a tamper went undetected),
-            // exit nonzero so the demo can never green a broken guarantee.
-            if (!result.proven)
-                process.exitCode = 1;
-            return;
-        }
-        case "bundle": {
-            const result = (0, capability_core_1.demoBundle)(runner, args.options);
-            if ((0, io_1.wantsJson)(args.options))
-                (0, io_1.printJson)(result);
-            else
-                process.stdout.write(`${(0, telemetry_demo_1.formatBundleDemo)(result)}\n`);
-            // Fail closed: a forged bundle that verified would be a regression in the
-            // bundle guarantee — exit nonzero so the demo can never green it.
-            if (!result.proven)
-                process.exitCode = 1;
-            return;
-        }
-        default:
-            throw new Error("Usage: cw.js demo tamper|bundle [--json]");
-    }
-}