lockstep-cli 0.0.1

package/dist/capture/index.js

@@ -0,0 +1,85 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { registerSession } from "../mcp/session.js";
+import { call } from "../mcp/api.js";
+import { changedFiles } from "./diff.js";
+import { isContractSurface, riskTierFor } from "./classify.js";
+function formatReplay(inbox, decisions) {
+    const lines = [];
+    const changes = inbox?.changes ?? [];
+    if (changes.length) {
+        lines.push(`📥 ${changes.length} change(s) since you were last here:`);
+        for (const c of changes.slice(0, 8))
+            lines.push(`  • ${c.summary}${c.surface ? ` (${c.surface})` : ""}`);
+    }
+    const binding = (decisions?.decisions ?? []).filter((d) => d.status === "binding");
+    if (binding.length) {
+        lines.push(`📌 ${binding.length} binding decision(s) in effect:`);
+        for (const d of binding.slice(0, 8))
+            lines.push(`  • [${d.scopeRef}] ${d.ruleText}`);
+    }
+    return lines.length ? `Lockstep:\n${lines.join("\n")}` : "Lockstep: nothing new.";
+}
+/**
+ * Hook entrypoint. Resilient by design — never break the agent: on any error it exits 0.
+ *  SessionStart → replay inbox + binding decisions as additionalContext.
+ *  PostToolUse/Stop → diff → classify surface → risk-tiered publish via notify.
+ */
+export async function runCapture(event) {
+    const vendor = process.env.LOCKSTEP_VENDOR ?? "unknown";
+    const cwd = process.cwd();
+    let session;
+    try {
+        session = await registerSession(vendor);
+    }
+    catch {
+        process.exit(0); // not a connected repo / not logged in → silent no-op
+    }
+    try {
+        if (event === "SessionStart") {
+            const inbox = await call("GET", "/inbox", session.sessionId).catch(() => null);
+            const decisions = await call("GET", "/decisions", session.sessionId).catch(() => null);
+            process.stdout.write(JSON.stringify({
+                hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: formatReplay(inbox, decisions) },
+            }));
+            return;
+        }
+        // PostToolUse / Stop — capture the change
+        const files = changedFiles(cwd);
+        if (files.length === 0)
+            return;
+        const surfaces = [];
+        let anyContractSurface = false;
+        for (const f of files) {
+            let content = "";
+            try {
+                content = readFileSync(join(cwd, f), "utf8");
+            }
+            catch {
+                /* deleted/binary — skip content */
+            }
+            if (isContractSurface(f, content)) {
+                anyContractSurface = true;
+                surfaces.push(f);
+            }
+        }
+        // v1: contract surface ⇒ shared (the safety-critical bias). Ownership-based refinement later.
+        const riskTier = riskTierFor({ anyContractSurface, allOwnedByMe: true });
+        const summary = `${event}: changed ${files.length} file(s): ${files.slice(0, 5).join(", ")}${files.length > 5 ? "…" : ""}`;
+        const diffHash = createHash("sha256").update(files.sort().join("|")).digest("hex").slice(0, 16);
+        await call("POST", "/changes", session.sessionId, {
+            summary,
+            surface: surfaces[0],
+            riskTier,
+            verified: true, // mechanical delta is derived from real local code
+            verifiedAgainst: "git-diff",
+            diffHash,
+        }).catch(() => { });
+        process.stderr.write(`[lockstep] published change (${riskTier})\n`);
+    }
+    catch {
+        process.exit(0);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/capture/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capture/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAU/D,SAAS,YAAY,CAAC,KAAuB,EAAE,SAA+B;IAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,sCAAsC,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,iCAAiC,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,sDAAsD;IACzE,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAY,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAgB,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACtG,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,kBAAkB,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE;aACzG,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YACD,IAAI,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;gBAClC,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,GAAG,KAAK,aAAa,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3H,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhG,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE;YAChD,OAAO;YACP,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpB,QAAQ;YACR,QAAQ,EAAE,IAAI,EAAE,mDAAmD;YACnE,eAAe,EAAE,UAAU;YAC3B,QAAQ;SACT,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cloud.d.ts

@@ -0,0 +1,8 @@
+/** Thin authed HTTP client to the core API. Reads the server from config/env each call. */
+export declare const cloud: {
+    readonly apiUrl: string;
+    get: <T = unknown>(p: string) => Promise<T>;
+    post: <T = unknown>(p: string, b?: unknown) => Promise<T>;
+    patch: <T = unknown>(p: string, b?: unknown) => Promise<T>;
+    del: <T = unknown>(p: string) => Promise<T>;
+};

package/dist/cloud.js

@@ -0,0 +1,38 @@
+import { getToken } from "./auth/token-store.js";
+import { resolveApiUrl } from "./config.js";
+async function req(method, path, body) {
+    const API = resolveApiUrl();
+    const token = await getToken();
+    let res;
+    try {
+        res = await fetch(`${API}${path}`, {
+            method,
+            headers: {
+                ...(body === undefined ? {} : { "content-type": "application/json" }),
+                ...(token ? { authorization: `Bearer ${token}` } : {}),
+            },
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+    }
+    catch {
+        throw new Error(`Cannot reach the Lockstep API at ${API}\n` +
+            `Set your server once with:  lockstep login --api <url>`);
+    }
+    const text = await res.text();
+    const json = text ? JSON.parse(text) : null;
+    if (!res.ok) {
+        throw new Error(`${method} ${path} → ${res.status}: ${text || res.statusText}`);
+    }
+    return json;
+}
+/** Thin authed HTTP client to the core API. Reads the server from config/env each call. */
+export const cloud = {
+    get apiUrl() {
+        return resolveApiUrl();
+    },
+    get: (p) => req("GET", p),
+    post: (p, b) => req("POST", p, b),
+    patch: (p, b) => req("PATCH", p, b),
+    del: (p) => req("DELETE", p),
+};
+//# sourceMappingURL=cloud.js.map

package/dist/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,KAAK,UAAU,GAAG,CAAc,MAAc,EAAE,IAAY,EAAE,IAAc;IAC1E,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC/B,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE;YACjC,MAAM;YACN,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,IAAI;YACzC,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,MAAM;QACR,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IACD,GAAG,EAAE,CAAc,CAAS,EAAE,EAAE,CAAC,GAAG,CAAI,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,EAAE,CAAc,CAAS,EAAE,CAAW,EAAE,EAAE,CAAC,GAAG,CAAI,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,KAAK,EAAE,CAAc,CAAS,EAAE,CAAW,EAAE,EAAE,CAAC,GAAG,CAAI,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,GAAG,EAAE,CAAc,CAAS,EAAE,EAAE,CAAC,GAAG,CAAI,QAAQ,EAAE,CAAC,CAAC;CACrD,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,8 @@
+interface Config {
+    apiUrl?: string;
+}
+export declare function getConfig(): Config;
+export declare function setApiUrl(apiUrl: string): void;
+/** Resolution order: env var → saved config → default. Trailing slash stripped. */
+export declare function resolveApiUrl(): string;
+export {};

package/dist/config.js

@@ -0,0 +1,26 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+/** Persisted CLI config (~/.lockstep/config.json) so users set the API once, not every shell. */
+const dir = join(homedir(), ".lockstep");
+const path = join(dir, "config.json");
+export function getConfig() {
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+export function setApiUrl(apiUrl) {
+    mkdirSync(dir, { recursive: true });
+    const c = getConfig();
+    c.apiUrl = apiUrl.replace(/\/+$/, "");
+    writeFileSync(path, JSON.stringify(c, null, 2), { mode: 0o600 });
+}
+/** Resolution order: env var → saved config → default. Trailing slash stripped. */
+export function resolveApiUrl() {
+    const raw = process.env.LOCKSTEP_API_URL || getConfig().apiUrl || "http://localhost:8080";
+    return raw.replace(/\/+$/, "");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEjE,iGAAiG;AACjG,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AAMtC,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAW,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC,MAAM,IAAI,uBAAuB,CAAC;IAC1F,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/connect.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Connect the current repo to a Lockstep project so agent sessions can register.
+ * Creates an org/project on first use. Idempotent — re-running is a no-op.
+ */
+export declare function runConnect(opts: {
+    org?: string;
+    project?: string;
+}): Promise<void>;
+/** Invite a teammate by GitHub handle to this repo's project. */
+export declare function runInvite(handle: string): Promise<void>;

package/dist/connect.js

@@ -0,0 +1,60 @@
+import { cloud } from "./cloud.js";
+import { gitRemote } from "./mcp/git.js";
+/**
+ * Connect the current repo to a Lockstep project so agent sessions can register.
+ * Creates an org/project on first use. Idempotent — re-running is a no-op.
+ */
+export async function runConnect(opts) {
+    const remote = gitRemote(process.cwd());
+    if (!remote) {
+        console.error("No git 'origin' remote here — Lockstep identifies a repo by its remote.");
+        process.exit(1);
+    }
+    const me = await cloud.get("/me");
+    let orgId = me.memberships[0]?.orgId;
+    if (!orgId) {
+        const created = await cloud.post("/orgs", {
+            name: opts.org ?? `${me.principal.githubLogin}'s workspace`,
+        });
+        orgId = created.orgId;
+    }
+    const projectName = opts.project ?? remote.split("/").pop() ?? "default";
+    const overview = await cloud.get(`/orgs/${orgId}/overview`);
+    let projectId = overview?.projects.find((p) => p.name === projectName)?.id;
+    if (!projectId) {
+        projectId = (await cloud.post(`/orgs/${orgId}/projects`, { name: projectName })).projectId;
+    }
+    const po = await cloud.get(`/orgs/${orgId}/projects/${projectId}/overview`);
+    const already = po?.repos.some((r) => r.gitRemote === remote);
+    if (!already) {
+        await cloud.post(`/orgs/${orgId}/projects/${projectId}/repos`, { gitRemote: remote });
+    }
+    console.log(`✓ connected ${remote}`);
+    console.log(`  → project "${projectName}"  (org ${orgId.slice(0, 8)})`);
+    console.log(`\nOpen this repo in Claude Code — Lockstep registers the session automatically.`);
+    console.log(`Invite a teammate:  lockstep invite <github-handle>  (or via the dashboard)`);
+}
+/** Invite a teammate by GitHub handle to this repo's project. */
+export async function runInvite(handle) {
+    const remote = gitRemote(process.cwd());
+    if (!remote) {
+        console.error("Run this inside a connected repo.");
+        process.exit(1);
+    }
+    const me = await cloud.get("/me");
+    const orgId = me.memberships[0]?.orgId;
+    if (!orgId) {
+        console.error("No workspace yet — run `lockstep connect` first.");
+        process.exit(1);
+    }
+    const projectName = remote.split("/").pop() ?? "default";
+    const overview = await cloud.get(`/orgs/${orgId}/overview`);
+    const projectId = overview?.projects.find((p) => p.name === projectName)?.id;
+    if (!projectId) {
+        console.error("This repo isn't connected yet — run `lockstep connect` first.");
+        process.exit(1);
+    }
+    await cloud.post(`/orgs/${orgId}/projects/${projectId}/invite`, { githubLogin: handle.replace(/^@/, "") });
+    console.log(`✓ invited @${handle.replace(/^@/, "")} to "${projectName}" — they'll be activated on their next login.`);
+}
+//# sourceMappingURL=connect.js.map

package/dist/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAazC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAwC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAK,KAAK,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAoB,OAAO,EAAE;YAC3D,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,cAAc;SAC5D,CAAC,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAW,SAAS,KAAK,WAAW,CAAC,CAAC;IACtE,IAAI,SAAS,GAAG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,EAAE,CAAC;IAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAwB,SAAS,KAAK,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACpH,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAkB,SAAS,KAAK,aAAa,SAAS,WAAW,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,aAAa,SAAS,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,gBAAgB,WAAW,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;AAC7F,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAK,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAW,SAAS,KAAK,WAAW,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,EAAE,CAAC;IAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,aAAa,SAAS,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3G,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,WAAW,+CAA+C,CAAC,CAAC;AACxH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+import { runInit, runStatus, runDoctor } from "./init.js";
+import { runLogin } from "./login.js";
+import { runConnect, runInvite } from "./connect.js";
+const argv = process.argv.slice(2);
+const cmd = argv[0];
+const has = (n) => argv.includes(`--${n}`);
+const val = (n) => {
+    const i = argv.indexOf(`--${n}`);
+    return i >= 0 ? argv[i + 1] : undefined;
+};
+function help() {
+    console.log(`lockstep — keep your team's coding agents in sync
+
+usage: lockstep <command>
+
+  login [--api <url>] [--dev --dev-id <n> --dev-login <handle>]
+                                                    authenticate; --api saves your server (once), --dev for testing
+  init  [--vendor claude|all] [--scope project|user] [--dry-run]
+                                                    wire up hooks + MCP + skill for the detected agent(s)
+  connect [--project <name>]                        link this repo to a Lockstep project (creates one if needed)
+  invite <github-handle>                            invite a teammate to this repo's project
+  status                                            show auth + config health
+  doctor                                            diagnose vendor config
+  mcp                                               run the per-session MCP server (used by agents)
+  capture --event <E>                               hook entrypoint (used by hooks)              [P6]
+`);
+}
+function notYet(name, phase) {
+    console.error(`\`lockstep ${name}\` is not implemented yet (arrives in ${phase}).`);
+    process.exit(2);
+}
+async function main() {
+    switch (cmd) {
+        case "login": {
+            // Remember the server so the user never has to export anything again.
+            const api = val("api") ?? process.env.LOCKSTEP_API_URL;
+            if (api) {
+                const { setApiUrl } = await import("./config.js");
+                setApiUrl(api);
+            }
+            if (has("dev")) {
+                const id = Number(val("dev-id") ?? "0");
+                const login = val("dev-login") ?? "";
+                if (!id || !login) {
+                    console.error("usage: lockstep login --dev --dev-id <n> --dev-login <handle>");
+                    process.exit(1);
+                }
+                return runLogin({ dev: { id, login } });
+            }
+            return runLogin({});
+        }
+        case "init":
+            return runInit({
+                vendor: val("vendor"),
+                scope: val("scope") ?? "project",
+                dryRun: has("dry-run"),
+            });
+        case "connect":
+            return runConnect({ org: val("org"), project: val("project") });
+        case "invite": {
+            const handle = argv[1];
+            if (!handle) {
+                console.error("usage: lockstep invite <github-handle>");
+                process.exit(1);
+            }
+            return runInvite(handle);
+        }
+        case "status":
+            return runStatus();
+        case "doctor":
+            return runDoctor();
+        case "mcp": {
+            const { runMcpServer } = await import("./mcp/server.js");
+            await runMcpServer();
+            return;
+        }
+        case "capture": {
+            const { runCapture } = await import("./capture/index.js");
+            await runCapture(val("event") ?? "PostToolUse");
+            return;
+        }
+        case "help":
+        case "--help":
+        case "-h":
+        case undefined:
+            return help();
+        default:
+            console.error(`unknown command: ${cmd}\n`);
+            help();
+            process.exit(1);
+    }
+}
+void main().catch((e) => {
+    console.error(e instanceof Error ? e.message : e);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC5D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC,CAAC;AAEF,SAAS,IAAI;IACX,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,KAAa;IACzC,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,yCAAyC,KAAK,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,sEAAsE;YACtE,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACvD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAClD,SAAS,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;oBAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,OAAO,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QACD,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;gBACrB,KAAK,EAAG,GAAG,CAAC,OAAO,CAAW,IAAI,SAAS;gBAC3C,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;aACvB,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,SAAS,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,SAAS,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACzD,MAAM,YAAY,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC1D,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,OAAO,IAAI,EAAE,CAAC;QAChB;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;YAC3C,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IAC/B,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/init.d.ts

@@ -0,0 +1,8 @@
+import type { Scope } from "./adapters/types.js";
+export declare function runInit(opts: {
+    vendor?: string;
+    scope: Scope;
+    dryRun: boolean;
+}): Promise<void>;
+export declare function runStatus(): Promise<void>;
+export declare function runDoctor(): Promise<void>;

package/dist/init.js

@@ -0,0 +1,46 @@
+import { getAdapters } from "./adapters/registry.js";
+import { cloud } from "./cloud.js";
+import { getToken } from "./auth/token-store.js";
+export async function runInit(opts) {
+    const cwd = process.cwd();
+    const adapters = await getAdapters(opts.vendor);
+    if (adapters.length === 0) {
+        console.error(`no adapter for vendor: ${opts.vendor}`);
+        process.exit(1);
+    }
+    console.log(`lockstep init — scope=${opts.scope}${opts.dryRun ? " (dry-run)" : ""}`);
+    for (const a of adapters) {
+        console.log(`\n[${a.id}]`);
+        for (const line of await a.install(cwd, opts.scope, opts.dryRun)) {
+            console.log("  " + line);
+        }
+    }
+    if (!opts.dryRun && opts.scope === "project") {
+        console.log("\nCommit the written files so teammates get Lockstep automatically on clone.");
+    }
+}
+export async function runStatus() {
+    console.log(`api:   ${cloud.apiUrl}`);
+    console.log(`auth:  ${(await getToken()) ? "logged in" : "not logged in (run: lockstep login)"}`);
+    const cwd = process.cwd();
+    for (const a of await getAdapters()) {
+        const v = await a.verify(cwd, "project");
+        console.log(`\n[${a.id}] ${v.ok ? "configured" : "not configured"}`);
+        for (const d of v.details)
+            console.log("  " + d);
+    }
+}
+export async function runDoctor() {
+    const cwd = process.cwd();
+    let ok = true;
+    for (const a of await getAdapters()) {
+        const v = await a.verify(cwd, "project");
+        if (!v.ok)
+            ok = false;
+        console.log(`[${a.id}] ${v.ok ? "OK" : "PROBLEM"}`);
+        for (const d of v.details)
+            console.log("  " + d);
+    }
+    process.exit(ok ? 0 : 1);
+}
+//# sourceMappingURL=init.js.map

package/dist/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAwD;IACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qCAAqC,EAAE,CAAC,CAAC;IAClG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,WAAW,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,WAAW,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,EAAE,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/login.d.ts

@@ -0,0 +1,6 @@
+export declare function runLogin(opts: {
+    dev?: {
+        id: number;
+        login: string;
+    };
+}): Promise<void>;

package/dist/login.js

@@ -0,0 +1,32 @@
+import { cloud } from "./cloud.js";
+import { setToken } from "./auth/token-store.js";
+export async function runLogin(opts) {
+    if (opts.dev) {
+        const r = await cloud.post("/auth/dev-login", {
+            githubUserId: opts.dev.id,
+            githubLogin: opts.dev.login,
+        });
+        if (!r.token)
+            throw new Error("dev-login failed (is LOCKSTEP_DEV_LOGIN enabled on the server?)");
+        await setToken(r.token);
+        console.log(`logged in as ${r.githubLogin} (dev)`);
+        return;
+    }
+    const start = await cloud.post("/auth/device/start");
+    console.log(`\nOpen ${start.verification_uri} and enter code:  ${start.user_code}\n`);
+    const interval = (start.interval ?? 5) * 1000;
+    for (;;) {
+        await new Promise((r) => setTimeout(r, interval));
+        const poll = await cloud.post("/auth/device/poll", { device_code: start.device_code });
+        if (poll.status === "ok" && poll.token) {
+            await setToken(poll.token);
+            console.log(`logged in as ${poll.githubLogin}`);
+            return;
+        }
+        if (poll.error && poll.error !== "authorization_pending" && poll.error !== "slow_down") {
+            console.error(`login failed: ${poll.error}`);
+            process.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AASjD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAA6C;IAC1E,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAY,iBAAiB,EAAE;YACvD,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;YACzB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjG,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAC5B,oBAAoB,CACrB,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,gBAAgB,qBAAqB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9C,SAAS,CAAC;QACR,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAY,mBAAmB,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAClG,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACvF,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/mcp/api.d.ts

@@ -0,0 +1,2 @@
+/** Session-aware authed request: attaches the bearer token and the x-lockstep-session header. */
+export declare function call<T = unknown>(method: string, path: string, sessionId: string | undefined, body?: unknown): Promise<T>;

package/dist/mcp/api.js

@@ -0,0 +1,22 @@
+import { getToken } from "../auth/token-store.js";
+import { resolveApiUrl } from "../config.js";
+/** Session-aware authed request: attaches the bearer token and the x-lockstep-session header. */
+export async function call(method, path, sessionId, body) {
+    const API = resolveApiUrl();
+    const token = await getToken();
+    const res = await fetch(`${API}${path}`, {
+        method,
+        headers: {
+            ...(body === undefined ? {} : { "content-type": "application/json" }),
+            ...(token ? { authorization: `Bearer ${token}` } : {}),
+            ...(sessionId ? { "x-lockstep-session": sessionId } : {}),
+        },
+        body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    const text = await res.text();
+    const json = text ? JSON.parse(text) : null;
+    if (!res.ok)
+        throw new Error(`${method} ${path} → ${res.status}: ${text || res.statusText}`);
+    return json;
+}
+//# sourceMappingURL=api.js.map

package/dist/mcp/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/mcp/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,MAAc,EACd,IAAY,EACZ,SAA6B,EAC7B,IAAc;IAEd,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE;QACvC,MAAM;QACN,OAAO,EAAE;YACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D;QACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7F,OAAO,IAAS,CAAC;AACnB,CAAC"}

package/dist/mcp/git.d.ts

@@ -0,0 +1,3 @@
+/** Canonicalize a git remote URL to `host/org/repo` — the session match key (PRD §8). */
+export declare function normalizeRemote(url: string): string;
+export declare function gitRemote(cwd: string): string | null;

package/dist/mcp/git.js

@@ -0,0 +1,20 @@
+import { execFileSync } from "node:child_process";
+/** Canonicalize a git remote URL to `host/org/repo` — the session match key (PRD §8). */
+export function normalizeRemote(url) {
+    let u = url.trim();
+    u = u.replace(/^git@([^:]+):/, "$1/"); // git@github.com:org/repo(.git) → github.com/org/repo
+    u = u.replace(/^[a-z]+:\/\//, ""); // strip scheme
+    u = u.replace(/^[^@/]+@/, ""); // strip user@ (https with creds)
+    u = u.replace(/\.git$/, "");
+    return u;
+}
+export function gitRemote(cwd) {
+    try {
+        const out = execFileSync("git", ["-C", cwd, "remote", "get-url", "origin"], { encoding: "utf8" });
+        return normalizeRemote(out);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/mcp/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/mcp/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,sDAAsD;IAC7F,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAClD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,iCAAiC;IAChE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The per-session MCP server (one process per agent session). Registers the session,
+ * then exposes the 12 tools as thin proxies to the core API. The core stays LLM-free —
+ * query() returns rows; the agent synthesizes. Identical across vendors (the seam).
+ */
+export declare function runMcpServer(): Promise<void>;

package/dist/mcp/server.js

@@ -0,0 +1,39 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { registerSession } from "./session.js";
+import { call } from "./api.js";
+/**
+ * The per-session MCP server (one process per agent session). Registers the session,
+ * then exposes the 12 tools as thin proxies to the core API. The core stays LLM-free —
+ * query() returns rows; the agent synthesizes. Identical across vendors (the seam).
+ */
+export async function runMcpServer() {
+    const vendor = process.env.LOCKSTEP_VENDOR ?? "unknown";
+    const session = await registerSession(vendor); // stderr-safe: throws to caller on failure
+    const sid = session.sessionId;
+    const ok = (data) => ({ content: [{ type: "text", text: JSON.stringify(data) }] });
+    const server = new McpServer({ name: "lockstep", version: "0.0.1" });
+    server.tool("notify", {
+        summary: z.string(),
+        surface: z.string().optional(),
+        contractDelta: z.any().optional(),
+        riskTier: z.enum(["owned", "shared", "contract"]).optional(),
+        verified: z.boolean().optional(),
+        verifiedAgainst: z.string().optional(),
+        diffHash: z.string().optional(),
+    }, async (a) => ok(await call("POST", "/changes", sid, a)));
+    server.tool("inbox", {}, async () => ok(await call("GET", "/inbox", sid)));
+    server.tool("query", { question: z.string(), scope: z.string().optional() }, async (a) => ok(await call("POST", "/query", sid, a)));
+    server.tool("ask", { question: z.string(), scope: z.string().optional(), urgent: z.boolean().optional() }, async (a) => ok(await call("POST", "/questions", sid, a)));
+    server.tool("answer", { questionId: z.string(), response: z.string() }, async (a) => ok(await call("POST", `/questions/${a.questionId}/answer`, sid, { response: a.response })));
+    server.tool("delegate", { to: z.string(), task: z.string(), refs: z.any().optional() }, async (a) => ok(await call("POST", "/tasks", sid, a)));
+    server.tool("complete", { taskId: z.string(), note: z.string().optional() }, async (a) => ok(await call("POST", `/tasks/${a.taskId}/complete`, sid, { note: a.note })));
+    server.tool("propose_decision", { scopeKind: z.string(), scopeRef: z.string(), ruleText: z.string(), baseVersion: z.number() }, async (a) => ok(await call("POST", "/decisions", sid, a)));
+    server.tool("ack_decision", { decisionId: z.string(), version: z.number(), verdict: z.string().optional() }, async (a) => ok(await call("POST", `/decisions/${a.decisionId}/ack`, sid, { version: a.version, verdict: a.verdict })));
+    server.tool("register_dependency", { producedSurface: z.string(), producedRepoId: z.string().optional() }, async (a) => ok(await call("POST", "/dependencies", sid, a)));
+    server.tool("decisions", { scope: z.string().optional() }, async (a) => ok(await call("GET", `/decisions${a.scope ? `?scope=${encodeURIComponent(a.scope)}` : ""}`, sid)));
+    server.tool("whoowns", { path: z.string() }, async (a) => ok(await call("GET", `/owners?path=${encodeURIComponent(a.path)}`, sid)));
+    await server.connect(new StdioServerTransport());
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,2CAA2C;IAC1F,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;IAC9B,MAAM,EAAE,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAErG,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAErE,MAAM,CAAC,IAAI,CACT,QAAQ,EACR;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC5D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,EACD,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CACxD,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACvF,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,MAAM,CAAC,IAAI,CACT,KAAK,EACL,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,EACtF,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAC1D,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAClF,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,UAAU,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAC3F,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAClG,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACvF,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,MAAM,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAC9F,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAC1D,CAAC;IACF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAC/E,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,UAAU,MAAM,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACvH,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACrH,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAChD,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACrE,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAClG,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACvD,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CACzE,CAAC;IAEF,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/mcp/session.d.ts

@@ -0,0 +1,9 @@
+export interface Session {
+    sessionId: string;
+    orgId: string;
+    projectId: string;
+    repoId: string;
+    memberId: string;
+}
+/** Register this agent session: cwd + git remote → (user, repo, project). */
+export declare function registerSession(vendor: string): Promise<Session>;