kylon-cli 0.7.5-next.1113 → 0.7.5-next.1115

package/README.md

@@ -1088,14 +1088,28 @@ on the next provider call, but breakpoints just don't fire.
 
 ### Bundles
 
-The release artifact is a single-file ESM bundle produced by
-`scripts/bundle.mjs`. Three variants:
+`scripts/bundle.mjs` builds two single-file ESM bundles from this package,
+each with its esbuild metafile beside it (`<bundle>.meta.json`, not
+published):
+
+- `dist/kylon-bundle.mjs`, the human CLI (`src/bin/kylon.ts`) and the
+  package's one bin, `kylon`;
+- `dist/kylon-core-bundle.mjs`, the core bundle (`src/bin/kylon-core.ts`):
+  an agent's commands (`workspace`, `mcp serve`, `gateway attach`, the App
+  checkout's git credential helper) and the Kylon app's `desktop` onboarding
+  protocol. It contains none of the login, link, connect, service, update or
+  pinning modules, nor the readers of the saved login and the legacy gateway
+  session, and answers every other command as not available in this build.
+  `scripts/bundle-guard.mjs` reads both metafiles at the end of every build
+  and fails it when one of those modules appears in the core bundle.
+
+Three variants, each building both bundles:
 
 | Script | Output | Passes to `bundle.mjs` | Use when |
 |---|---|---|---|
-| `pnpm --filter kylon-cli bundle` | `dist/kylon-bundle.mjs` | _(none)_ | debugging the bundled shape while keeping readable names — not shipped |
-| `pnpm --filter kylon-cli bundle:minify` | `dist/kylon-bundle.mjs` | `--minify` | reproducing the pre-obfuscation size and behavior for a bisect |
-| `pnpm --filter kylon-cli bundle:release` | `dist/kylon-bundle.mjs` | `--minify --obfuscate` | what ships on npm |
+| `pnpm --filter kylon-cli bundle` | `dist/kylon-bundle.mjs`, `dist/kylon-core-bundle.mjs` | _(none)_ | debugging the bundled shape while keeping readable names — not shipped |
+| `pnpm --filter kylon-cli bundle:minify` | `dist/kylon-bundle.mjs`, `dist/kylon-core-bundle.mjs` | `--minify` | reproducing the pre-obfuscation size and behavior for a bisect |
+| `pnpm --filter kylon-cli bundle:release` | `dist/kylon-bundle.mjs`, `dist/kylon-core-bundle.mjs` | `--minify --obfuscate` | what ships on npm |
 
 The `bundle:release` path runs esbuild with `--minify`, then passes the
 output through `javascript-obfuscator`. It's also what the `prepack` hook

package/dist/kylon-bundle.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.5-next.1113",
-  "fingerprint": "a3b074989af11825dc7c1afe484cb4e5bec070d8b0c1be6c082edcdca79ccb22",
-  "source_commit": "99e212702e94382b8c1423179f5598cf2f6c1fd2"
+  "version": "0.7.5-next.1115",
+  "fingerprint": "27a2a2e0ad872b506c72978bb07457d31575eb519839f74d56fe5591208c5e6c",
+  "source_commit": "fa7844ab8194f58128f9e094eeab664d52be8b4d"
 }