opensip-cli 0.1.12 → 0.1.13

package/dist/bootstrap/tool-trust.js

@@ -32,8 +32,12 @@ export const PROJECT_TOOL_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_PROJECT_TOOLS';
  * {@link isInstalledToolTrusted}).
  */
 export const INSTALLED_TOOL_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_INSTALLED_TOOLS';
-/** One-time process warning when a trust allowlist resolves to the `*` wildcard. */
-let wildcardAllowlistWarned = false;
+/**
+ * Environment variable carrying the capability-pack allowlist. Unlike the older
+ * tool allowlists, this launch surface is exact-name only: wildcard `*` is not
+ * honored.
+ */
+export const CAPABILITY_PACK_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_CAPABILITY_PACKS';
 /**
  * Parse the allowlist env var into a set of permitted tool ids. Empty/
  * unset ⇒ empty set (deny-by-default). The wildcard `'*'` admits all
@@ -48,13 +52,23 @@ function parseAllowlist(raw) {
         .filter((s) => s.length > 0));
 }
 function warnWildcardAllowlist(envVar, allow) {
-    if (wildcardAllowlistWarned || !allow.has('*'))
+    if (!allow.has('*'))
         return;
-    wildcardAllowlistWarned = true;
     logger.warn({
         evt: 'cli.trust.wildcard_allowlist',
         envVar,
-        detail: 'trust allowlist contains wildcard * — all matching tools are admitted',
+        deprecated: true,
+        detail: 'DEPRECATED: trust allowlist contains wildcard * — every matching tool runs at full user privilege; ' +
+            'this is fault-isolation only, not a sandbox',
+    });
+}
+function warnIgnoredCapabilityWildcard(allow) {
+    if (!allow.has('*'))
+        return;
+    logger.warn({
+        evt: 'cli.trust.capability_wildcard_ignored',
+        envVar: CAPABILITY_PACK_ALLOWLIST_ENV,
+        detail: 'OPENSIP_CLI_ALLOW_CAPABILITY_PACKS requires exact package names; wildcard * is ignored',
     });
 }
 /**
@@ -100,4 +114,14 @@ export function isInstalledToolTrusted(id, env = process.env) {
     warnWildcardAllowlist(INSTALLED_TOOL_ALLOWLIST_ENV, allow);
     return allow.has('*') || allow.has(id);
 }
+/**
+ * Decide whether a third-party capability pack may be imported into the host
+ * process. First-party bundled packs are handled by the caller; this predicate
+ * is exact-name allowlist only and intentionally does not honor `*`.
+ */
+export function isCapabilityPackTrusted(packageName, env = process.env) {
+    const allow = parseAllowlist(env[CAPABILITY_PACK_ALLOWLIST_ENV]);
+    warnIgnoredCapabilityWildcard(allow);
+    return allow.has(packageName);
+}
 //# sourceMappingURL=tool-trust.js.map

package/dist/bootstrap/tool-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-trust.js","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC;AAEhF,oFAAoF;AACpF,IAAI,uBAAuB,GAAG,KAAK,CAAC;AAEpC;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAA0B;IACvE,IAAI,uBAAuB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IACvD,uBAAuB,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,8BAA8B;QACnC,MAAM;QACN,MAAM,EAAE,uEAAuE;KAChF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAU,EACV,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,qBAAqB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,qBAAqB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"tool-trust.js","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oCAAoC,CAAC;AAElF;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAA0B;IACvE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,8BAA8B;QACnC,MAAM;QACN,UAAU,EAAE,IAAI;QAChB,MAAM,EACJ,qGAAqG;YACrG,6CAA6C;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,KAA0B;IAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,uCAAuC;QAC5C,MAAM,EAAE,6BAA6B;QACrC,MAAM,EACJ,wFAAwF;KAC3F,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAU,EACV,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,qBAAqB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,qBAAqB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC"}

package/dist/cli-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-context.d.ts","sourceRoot":"","sources":["../src/cli-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAIL,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAW/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAmB5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC/B,aAAa,EAAE,OAAO,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;KACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,oBAAoB,CAgF1F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CA8BpE"}
+{"version":3,"file":"cli-context.d.ts","sourceRoot":"","sources":["../src/cli-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAY/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAmB5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC/B,aAAa,EAAE,OAAO,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;KACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,oBAAoB,CA6F1F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,cAAc,CAmCpE"}

package/dist/cli-context.js

@@ -16,11 +16,13 @@
  * lands on `RunScope.datastore`; paths that never touch it never materialise
  * `.runtime/datastore.sqlite`.
  */
-import { createRunTimer, logger as defaultLogger, } from '@opensip-cli/core';
+import { createRunTimer, currentScope, logger as defaultLogger, } from '@opensip-cli/core';
+import { createWriteArtifactSeam } from './bootstrap/artifact-seams.js';
 import { buildBaselineSeams } from './bootstrap/baseline-seams.js';
 import { buildHostPlanes } from './bootstrap/host-planes.js';
 import { createIoPlane } from './bootstrap/io-plane.js';
 import { createOutputPlane } from './bootstrap/output-plane.js';
+import { createReportFailure } from './bootstrap/report-failure.js';
 import { createRunActionHooks, createRunPlaneFactory, createRunSessionSeam, } from './bootstrap/run-plane.js';
 import { createDatastoreResolver, readScope } from './bootstrap/scope-access.js';
 import { buildStateSeams } from './bootstrap/state-seams.js';
@@ -55,6 +57,7 @@ export function buildToolCliContext(opts) {
     //  - effectful egress (cloud sync + `--report-to` + SARIF file sink).
     const projectDatastore = createDatastoreResolver('project-seam', log);
     const baselineSeams = buildBaselineSeams({ getDatastore: projectDatastore, logger: log });
+    const writeArtifact = createWriteArtifactSeam(log);
     const stateSeams = buildStateSeams({ getDatastore: projectDatastore });
     const hostPlanes = buildHostPlanes({ getDatastore: projectDatastore, logger: log });
     // Host run-lifecycle plane (host-owned-run-timing Phase 1). The FACTORY holds
@@ -81,6 +84,13 @@ export function buildToolCliContext(opts) {
         runPlane,
         runSession,
     });
+    const reportFailure = createReportFailure({
+        getLogger: () => currentScope()?.logger ?? log,
+        setExitCode: outputPlane.setExitCode,
+        render: (result) => opts.render(result),
+        emitError: outputPlane.emits.emitError,
+        getDiagnostics: () => currentScope()?.diagnostics,
+    });
     const ctx = {
         get scope() {
             // The pre-action-hook (or explicit runWithScope in tests) enters the
@@ -93,11 +103,15 @@ export function buildToolCliContext(opts) {
         registerLiveView: ioPlane.register,
         renderLive: ioPlane.renderLive,
         maybeOpenReport: opts.maybeOpenReport,
-        logger: log,
+        get logger() {
+            return currentScope()?.logger ?? log;
+        },
+        reportFailure,
         setExitCode: outputPlane.setExitCode,
         ...outputPlane.emits, // emitJson / emitEnvelope / emitError / emitRaw
         deliverSignals: ioPlane.deliverSignals,
         writeSarif: ioPlane.writeSarif,
+        writeArtifact,
         // Host baseline/ratchet plane seams (ADR-0036) — persistence + diff + exports.
         saveBaseline: baselineSeams.saveBaseline,
         compareBaseline: baselineSeams.compareBaseline,
@@ -136,6 +150,7 @@ export function buildHostDispatchCtx(logger) {
     const log = logger ?? defaultLogger;
     const projectDatastore = createDatastoreResolver('project-seam', log);
     const baselineSeams = buildBaselineSeams({ getDatastore: projectDatastore, logger: log });
+    const writeArtifact = createWriteArtifactSeam(log);
     const stateSeams = buildStateSeams({ getDatastore: projectDatastore });
     const hostPlanes = buildHostPlanes({ getDatastore: projectDatastore, logger: log });
     const outputPlane = createOutputPlane({ render: deniedHookSeam('render'), logger: log });
@@ -147,13 +162,17 @@ export function buildHostDispatchCtx(logger) {
         registerLiveView: deniedHookSeam('registerLiveView'),
         renderLive: deniedHookSeam('renderLive'),
         maybeOpenReport: deniedHookSeam('maybeOpenReport'),
-        logger: log,
+        get logger() {
+            return currentScope()?.logger ?? log;
+        },
+        reportFailure: deniedHookSeam('reportFailure'),
         setExitCode: outputPlane.setExitCode,
         ...outputPlane.emits,
         // Display-only timing seam (host-owned-run-timing); a hook never records a run.
         runSession: { timing: createRunTimer() },
         deliverSignals: deniedHookSeam('deliverSignals'),
         writeSarif: deniedHookSeam('writeSarif'),
+        writeArtifact,
         saveBaseline: baselineSeams.saveBaseline,
         compareBaseline: baselineSeams.compareBaseline,
         exportBaselineSarif: baselineSeams.exportBaselineSarif,

package/dist/cli-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-context.js","sourceRoot":"","sources":["../src/cli-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,cAAc,EAEd,MAAM,IAAI,aAAa,GAGxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAyB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,8EAA8E;AAC9E,0CAA0C;AAC1C,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AACrE,wDAAwD;AACxD,8EAA8E;AAE9E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAyB,MAAM,yBAAyB,CAAC;AAiBxF,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IAEzC,wEAAwE;IACxE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5E,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,gDAAgD;IAChD,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEpF,8EAA8E;IAC9E,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,YAAY,EAAE,uBAAuB,CAAC,aAAa,EAAE,GAAG,CAAC;QACzD,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IAEH,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAEtD,8EAA8E;IAC9E,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ;QACR,UAAU;KACX,CAAC,CAAC;IAEH,MAAM,GAAG,GAAoC;QAC3C,IAAI,KAAK;YACP,qEAAqE;YACrE,4EAA4E;YAC5E,wEAAwE;YACxE,6DAA6D;YAC7D,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAuB,CAAC;QACxD,gBAAgB,EAAE,OAAO,CAAC,QAAQ;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,GAAG,WAAW,CAAC,KAAK,EAAE,gDAAgD;QACtE,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,+EAA+E;QAC/E,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;QACpE,SAAS,EAAE,UAAU,EAAE,8CAA8C;QACrE,UAAU,EAAE,yCAAyC;QACrD,UAAU,EAAE,6DAA6D;QACzE,6EAA6E;QAC7E,2EAA2E;QAC3E,yEAAyE;QACzE,GAAG,cAAc;KAClB,CAAC;IAEF,OAAO;QACL,GAAG;QACH,WAAW,EAAE,WAAW,CAAC,WAAW;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,MAAM,GAAG,GAAG,MAAM,IAAI,aAAa,CAAC;IACpC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpF,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,MAAM,GAAG,GAAmB;QAC1B,IAAI,KAAK;YACP,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC;QAChC,gBAAgB,EAAE,cAAc,CAAC,kBAAkB,CAAC;QACpD,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;QACxC,eAAe,EAAE,cAAc,CAAC,iBAAiB,CAAC;QAClD,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,GAAG,WAAW,CAAC,KAAK;QACpB,gFAAgF;QAChF,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;QACxC,cAAc,EAAE,cAAc,CAAC,gBAAgB,CAAC;QAChD,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;QACxC,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;QACpE,SAAS,EAAE,UAAU;QACrB,UAAU;KACX,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,GAAG,EAAE;QACV,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,oDAAoD,CACrF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cli-context.js","sourceRoot":"","sources":["../src/cli-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,cAAc,EACd,YAAY,EAEZ,MAAM,IAAI,aAAa,GAGxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAyB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,8EAA8E;AAC9E,0CAA0C;AAC1C,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AACrE,wDAAwD;AACxD,8EAA8E;AAE9E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAyB,MAAM,yBAAyB,CAAC;AAiBxF,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IAEzC,wEAAwE;IACxE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5E,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,gDAAgD;IAChD,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEpF,8EAA8E;IAC9E,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,YAAY,EAAE,uBAAuB,CAAC,aAAa,EAAE,GAAG,CAAC;QACzD,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IAEH,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAEtD,8EAA8E;IAC9E,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ;QACR,UAAU;KACX,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,mBAAmB,CAAC;QACxC,SAAS,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,EAAE,MAAM,IAAI,GAAG;QAC9C,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS;QACtC,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,EAAE,WAAW;KAClD,CAAC,CAAC;IAEH,MAAM,GAAG,GAAoC;QAC3C,IAAI,KAAK;YACP,qEAAqE;YACrE,4EAA4E;YAC5E,wEAAwE;YACxE,6DAA6D;YAC7D,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAuB,CAAC;QACxD,gBAAgB,EAAE,OAAO,CAAC,QAAQ;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,IAAI,MAAM;YACR,OAAO,YAAY,EAAE,EAAE,MAAM,IAAI,GAAG,CAAC;QACvC,CAAC;QACD,aAAa;QACb,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,GAAG,WAAW,CAAC,KAAK,EAAE,gDAAgD;QACtE,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa;QACb,+EAA+E;QAC/E,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;QACpE,SAAS,EAAE,UAAU,EAAE,8CAA8C;QACrE,UAAU,EAAE,yCAAyC;QACrD,UAAU,EAAE,6DAA6D;QACzE,6EAA6E;QAC7E,2EAA2E;QAC3E,yEAAyE;QACzE,GAAG,cAAc;KAClB,CAAC;IAEF,OAAO;QACL,GAAG;QACH,WAAW,EAAE,WAAW,CAAC,WAAW;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,MAAM,GAAG,GAAG,MAAM,IAAI,aAAa,CAAC;IACpC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpF,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,MAAM,GAAG,GAAmB;QAC1B,IAAI,KAAK;YACP,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC;QAChC,gBAAgB,EAAE,cAAc,CAAC,kBAAkB,CAAC;QACpD,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;QACxC,eAAe,EAAE,cAAc,CAAC,iBAAiB,CAAC;QAClD,IAAI,MAAM;YACR,OAAO,YAAY,EAAE,EAAE,MAAM,IAAI,GAAG,CAAC;QACvC,CAAC;QACD,aAAa,EAAE,cAAc,CAAC,eAAe,CAAC;QAC9C,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,GAAG,WAAW,CAAC,KAAK;QACpB,gFAAgF;QAChF,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;QACxC,cAAc,EAAE,cAAc,CAAC,gBAAgB,CAAC;QAChD,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;QACxC,aAAa;QACb,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;QACpE,SAAS,EAAE,UAAU;QACrB,UAAU;KACX,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,GAAG,EAAE;QACV,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,oDAAoD,CACrF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/commands/agent-catalog.d.ts

@@ -5,9 +5,6 @@
  * This is intentionally a small, self-contained surface so agents can
  * bootstrap their usage without parsing --help text or source.
  *
- * Future: can be made more dynamic by introspecting live CommandSpecs
- * (see completion.ts for precedent).
- *
  * Command taxonomy (tool-command-surface-taxonomy):
  * - Entry points are keyed by the PUBLIC command path. A `parent`-nested tool
  *   verb (the `<tool> <verb>` grammar enabled by `CommandSpec.parent` — e.g.
@@ -17,9 +14,8 @@
  *   `*-equivalence-check`) are NEVER catalogued here — the agent-catalog
  *   primary surface excludes internal workers (the host-owned tiering pass
  *   formalized in Phase 1 filters them when this surface becomes spec-derived).
- * In Phase 0 no tool declares `parent`/`visibility`, so the static catalog below
- * already satisfies both rules (no nested verb, no internal worker is listed).
  */
+import type { ToolRegistry } from '@opensip-cli/core';
 /**
  * The command-taxonomy tier an entry point belongs to
  * (tool-command-surface-taxonomy). `'platform'` = host-owned Tier-1 commands
@@ -57,9 +53,14 @@ export interface AgentCatalog {
     };
     readonly notes: readonly string[];
 }
-export declare function buildAgentCatalog(): AgentCatalog;
+export declare function buildAgentCatalog(input?: {
+    readonly tools?: ToolRegistry;
+    readonly internalCommands?: ReadonlySet<string>;
+}): AgentCatalog;
 export declare function executeAgentCatalog(opts?: {
-    json?: boolean;
+    readonly json?: boolean;
+    readonly tools?: ToolRegistry;
+    readonly internalCommands?: ReadonlySet<string>;
 }): {
     type: string;
     catalog: AgentCatalog;

package/dist/commands/agent-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-catalog.d.ts","sourceRoot":"","sources":["../../src/commands/agent-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC;;;;;;WAMG;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;KAC7B,EAAE,CAAC;IACJ,QAAQ,CAAC,cAAc,EAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAkCD,wBAAgB,iBAAiB,IAAI,YAAY,CAyHhD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO;;;;;;;;;;EA8BhE"}
+{"version":3,"file":"agent-catalog.d.ts","sourceRoot":"","sources":["../../src/commands/agent-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAqB,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACzE;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC;;;;;;WAMG;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;KAC7B,EAAE,CAAC;IACJ,QAAQ,CAAC,cAAc,EAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;IACJ,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAqID,wBAAgB,iBAAiB,CAC/B,KAAK,GAAE;IACL,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5C,GACL,YAAY,CAmEd;AAED,wBAAgB,mBAAmB,CACjC,IAAI,GAAE;IACJ,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5C;;;;;;;;;;EAkCP"}

package/dist/commands/agent-catalog.js

@@ -1,3 +1,20 @@
+/**
+ * Structured catalog for AI agents.
+ * Provides stable entry points, recommended patterns (including the new
+ * agent ergonomics like --filter, --raw, --summary-only), and example shapes.
+ * This is intentionally a small, self-contained surface so agents can
+ * bootstrap their usage without parsing --help text or source.
+ *
+ * Command taxonomy (tool-command-surface-taxonomy):
+ * - Entry points are keyed by the PUBLIC command path. A `parent`-nested tool
+ *   verb (the `<tool> <verb>` grammar enabled by `CommandSpec.parent` — e.g.
+ *   `graph export`, `fit list`) is catalogued UNDER its tool's entry point
+ *   (the `<tool> <verb>` form), NOT as a separate root entry point.
+ * - Tier-3 `visibility: 'internal'` commands (`*-run-worker`, `*-shard-worker`,
+ *   `*-equivalence-check`) are NEVER catalogued here — the agent-catalog
+ *   primary surface excludes internal workers (the host-owned tiering pass
+ *   formalized in Phase 1 filters them when this surface becomes spec-derived).
+ */
 /**
  * Internal (Tier-3) command-name shapes the agent-catalog must NEVER surface:
  * the IPC/CI workers and the equivalence gate. The guard checks both the name
@@ -5,6 +22,13 @@
  * either route. This is the by-construction complement to the Phase 4 test.
  */
 const INTERNAL_COMMAND_NAME_RE = /(?:-run-worker|-shard-worker|-equivalence-check)\b/;
+function compareCodePoint(left, right) {
+    if (left < right)
+        return -1;
+    if (left > right)
+        return 1;
+    return 0;
+}
 /**
  * Throw if any entry point is a Tier-3 internal command (by name shape or by an
  * explicit `tier: 'internal'`). Called at catalog-build time so a regression that
@@ -22,62 +46,82 @@ function assertNoInternalEntryPoints(entryPoints) {
             'agent-catalog primary surface (tool-command-surface-taxonomy). Remove it from entryPoints.');
     }
 }
-export function buildAgentCatalog() {
-    // tool-command-surface-taxonomy Task 1.4: every entry point is annotated with
-    // its taxonomy `tier` so an agent sees the predictable Tier-1/Tier-2 shape, and
-    // NO Tier-3 internal worker is catalogued. The static list below is the
-    // primary surface; `assertNoInternalEntryPoints` guards (by construction)
-    // against a future edit pasting an internal command in (the Phase 4 test
-    // also asserts this).
+const TOOL_ENTRY_OVERLAYS = {
+    fitness: {
+        description: 'Run fitness checks. Use --json for machine output (SignalEnvelope). Alias: fit.',
+        examples: ['opensip fitness --recipe default --json', 'opensip fit --check some-check --json'],
+    },
+    graph: {
+        description: 'Build static call graph + rules. --json yields SignalEnvelope.',
+        examples: ['opensip graph --json', 'opensip graph --sarif out.sarif'],
+    },
+    sim: {
+        description: 'Run simulation scenarios. Use --json for machine output (SignalEnvelope).',
+        examples: ['opensip sim --json', 'opensip sim --scenario default --json'],
+    },
+    yagni: {
+        description: 'Run YAGNI reduction audit detectors. Advisory findings; --json yields SignalEnvelope.',
+        examples: ['opensip yagni --json', 'opensip yagni --json packages/yagni/engine'],
+    },
+};
+const PLATFORM_ENTRY_POINTS = [
+    {
+        command: 'sessions list',
+        description: 'List stored sessions. --summary-only is agent-friendly (omits heavy payloads).',
+        examples: [
+            'opensip sessions list --json --summary-only',
+            'opensip sessions list --json --tool fitness --limit 5',
+        ],
+        tier: 'platform',
+    },
+    {
+        command: 'sessions show',
+        description: 'Retrieve a prior run as SessionReplayResult (includes projected SignalEnvelope). ' +
+            'Supports latest + --tool and rich filtering.',
+        examples: [
+            'opensip sessions show latest --tool fitness --json',
+            'opensip sessions show latest --tool fit --json --filter errors-only --filter top:20',
+            'opensip sessions show GRAPH_01... --json --raw',
+            'opensip sessions show previous --tool graph --json',
+        ],
+        tier: 'platform',
+    },
+    {
+        command: 'agent-catalog',
+        description: 'This command. Self-describing catalog for agents (JSON preferred).',
+        examples: ['opensip agent-catalog --json'],
+        tier: 'platform',
+    },
+];
+function publicPrimaryCommand(tool, internalCommands) {
+    return (tool.commandSpecs ?? []).find((spec) => spec.parent === undefined &&
+        spec.visibility !== 'internal' &&
+        !internalCommands.has(spec.name) &&
+        !INTERNAL_COMMAND_NAME_RE.test(spec.name));
+}
+function entryPointForTool(tool, internalCommands) {
+    const primary = publicPrimaryCommand(tool, internalCommands);
+    if (primary === undefined)
+        return undefined;
+    const overlay = TOOL_ENTRY_OVERLAYS[primary.name] ?? TOOL_ENTRY_OVERLAYS[tool.metadata.name];
+    return {
+        command: primary.name,
+        description: overlay?.description ??
+            `${primary.description} Use --json when available for machine output.`,
+        examples: overlay?.examples ?? [`opensip ${primary.name} --json`],
+        tier: 'tool',
+    };
+}
+function deriveToolEntryPoints(tools, internalCommands) {
+    return (tools?.list() ?? [])
+        .map((tool) => entryPointForTool(tool, internalCommands))
+        .filter((entry) => entry !== undefined)
+        .sort((a, b) => compareCodePoint(a.command, b.command));
+}
+export function buildAgentCatalog(input = {}) {
     const entryPoints = [
-        {
-            command: 'fitness',
-            description: 'Run fitness checks. Use --json for machine output (SignalEnvelope). Alias: fit.',
-            examples: [
-                'opensip fitness --recipe default --json',
-                'opensip fit --check some-check --json',
-            ],
-            tier: 'tool',
-        },
-        {
-            command: 'graph',
-            description: 'Build static call graph + rules. --json yields SignalEnvelope.',
-            examples: ['opensip graph --json', 'opensip graph --sarif out.sarif'],
-            tier: 'tool',
-        },
-        {
-            command: 'yagni',
-            description: 'Run YAGNI reduction audit detectors. Advisory findings; --json yields SignalEnvelope.',
-            examples: ['opensip yagni --json', 'opensip yagni --json packages/yagni/engine'],
-            tier: 'tool',
-        },
-        {
-            command: 'sessions list',
-            description: 'List stored sessions. --summary-only is agent-friendly (omits heavy payloads).',
-            examples: [
-                'opensip sessions list --json --summary-only',
-                'opensip sessions list --json --tool fitness --limit 5',
-            ],
-            tier: 'platform',
-        },
-        {
-            command: 'sessions show',
-            description: 'Retrieve a prior run as SessionReplayResult (includes projected SignalEnvelope). ' +
-                'Supports latest + --tool and rich filtering.',
-            examples: [
-                'opensip sessions show latest --tool fitness --json',
-                'opensip sessions show latest --tool fit --json --filter errors-only --filter top:20',
-                'opensip sessions show GRAPH_01... --json --raw',
-                'opensip sessions show previous --tool graph --json',
-            ],
-            tier: 'platform',
-        },
-        {
-            command: 'agent-catalog',
-            description: 'This command. Self-describing catalog for agents (JSON preferred).',
-            examples: ['opensip agent-catalog --json'],
-            tier: 'platform',
-        },
+        ...deriveToolEntryPoints(input.tools, input.internalCommands ?? new Set()),
+        ...PLATFORM_ENTRY_POINTS,
     ];
     assertNoInternalEntryPoints(entryPoints);
     return {
@@ -120,22 +164,26 @@ export function buildAgentCatalog() {
             'The fidelity field on replays is always "projection" (rebuilt from persisted data).',
             'Human-readable output (no --json) uses the same tables/banners as before — unchanged.',
             // Uniform tool-primary surface (host-guaranteed; decorateToolPrimary).
-            'Every tool primary (fit/graph/sim and any third-party tool) accepts `<tool> --version` ' +
+            'Every tool primary (fit/graph/sim/yagni and any third-party tool) accepts `<tool> --version` ' +
                 '(prints the TOOL version, e.g. `fit 0.1.6`; distinct from `opensip --version`, the CLI), ' +
                 'plus the guaranteed baseline flags --cwd, --json, --config, --quiet, --verbose.',
             'Dogfood gate requires 0 errors + 0 warnings on fit:ci and graph:ci after any change.',
             // Hygiene invariant (host-planes-scope-seams-hygiene Phases 2-4): everything runs inside an
             // entered RunScope; the only sanctioned seams for output, delivery, baselines, toolState,
             // and hostPlanes (governance/audit/entitlements) are the documented methods on ToolCliContext
-            // (render, emitJson, emitEnvelope, deliverSignals, writeSarif, + the baseline/toolState/hostPlanes
-            // accessors). Direct stdout, the old pre-scope holder, or raw datastore from handlers is
-            // forbidden and caught by ESLint + fitness check + runtime guards. Bootstrap root is exempted.
+            // (render, emitJson, emitEnvelope, deliverSignals, writeArtifact, writeSarif, + the
+            // baseline/toolState/hostPlanes accessors). Direct stdout, the old pre-scope holder, or
+            // raw datastore from handlers is forbidden and caught by ESLint + fitness check + runtime
+            // guards. Bootstrap root is exempted.
             'Only the methods on the ToolCliContext you receive are allowed for emission/state/planes.',
         ],
     };
 }
 export function executeAgentCatalog(opts = {}) {
-    const catalog = buildAgentCatalog();
+    const catalog = buildAgentCatalog({
+        tools: opts.tools,
+        internalCommands: opts.internalCommands,
+    });
     if (opts.json) {
         // Return a result shape that the host can emit cleanly.
         // Using a plain object here; a proper AgentCatalogResult union member

package/dist/commands/agent-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-catalog.js","sourceRoot":"","sources":["../../src/commands/agent-catalog.ts"],"names":[],"mappings":"AA6DA;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,oDAAoD,CAAC;AAEtF;;;;;;;;;GASG;AACH,SAAS,2BAA2B,CAClC,WAAiF;IAEjF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CACzE,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,OAAO,2BAA2B;YAClF,4FAA4F,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,8EAA8E;IAC9E,gFAAgF;IAChF,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,sBAAsB;IACtB,MAAM,WAAW,GAAG;QAClB;YACE,OAAO,EAAE,SAAS;YAClB,WAAW,EACT,iFAAiF;YACnF,QAAQ,EAAE;gBACR,yCAAyC;gBACzC,uCAAuC;aACxC;YACD,IAAI,EAAE,MAAe;SACtB;QACD;YACE,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,gEAAgE;YAC7E,QAAQ,EAAE,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;YACrE,IAAI,EAAE,MAAe;SACtB;QACD;YACE,OAAO,EAAE,OAAO;YAChB,WAAW,EACT,uFAAuF;YACzF,QAAQ,EAAE,CAAC,sBAAsB,EAAE,4CAA4C,CAAC;YAChF,IAAI,EAAE,MAAe;SACtB;QACD;YACE,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,gFAAgF;YAC7F,QAAQ,EAAE;gBACR,6CAA6C;gBAC7C,uDAAuD;aACxD;YACD,IAAI,EAAE,UAAmB;SAC1B;QACD;YACE,OAAO,EAAE,eAAe;YACxB,WAAW,EACT,mFAAmF;gBACnF,8CAA8C;YAChD,QAAQ,EAAE;gBACR,oDAAoD;gBACpD,qFAAqF;gBACrF,gDAAgD;gBAChD,oDAAoD;aACrD;YACD,IAAI,EAAE,UAAmB;SAC1B;QACD;YACE,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,oEAAoE;YACjF,QAAQ,EAAE,CAAC,8BAA8B,CAAC;YAC1C,IAAI,EAAE,UAAmB;SAC1B;KACF,CAAC;IACF,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,oEAAoE;YACpE,kFAAkF;YAClF,oDAAoD;QACtD,WAAW;QACX,cAAc,EAAE;YACd;gBACE,IAAI,EAAE,yCAAyC;gBAC/C,WAAW,EACT,+EAA+E;gBACjF,OAAO,EACL,qFAAqF;aACxF;YACD;gBACE,IAAI,EAAE,8BAA8B;gBACpC,WAAW,EACT,oFAAoF;gBACtF,OAAO,EAAE,wDAAwD;aAClE;YACD;gBACE,IAAI,EAAE,iDAAiD;gBACvD,WAAW,EAAE,6EAA6E;gBAC1F,OAAO,EAAE,wDAAwD;aAClE;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,6EAA6E;gBAC1F,OAAO,EAAE,yEAAyE;aACnF;SACF;QACD,YAAY,EAAE;YACZ,cAAc,EACZ,2FAA2F;gBAC3F,yFAAyF;YAC3F,aAAa,EACX,gKAAgK;YAClK,OAAO,EACL,mHAAmH;SACtH;QACD,KAAK,EAAE;YACL,0FAA0F;YAC1F,wFAAwF;YACxF,qFAAqF;YACrF,uFAAuF;YACvF,uEAAuE;YACvE,yFAAyF;gBACvF,2FAA2F;gBAC3F,iFAAiF;YACnF,sFAAsF;YACtF,4FAA4F;YAC5F,0FAA0F;YAC1F,8FAA8F;YAC9F,mGAAmG;YACnG,yFAAyF;YACzF,+FAA+F;YAC/F,2FAA2F;SAC5F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA2B,EAAE;IAC/D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAEpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,wDAAwD;QACxD,sEAAsE;QACtE,gEAAgE;QAChE,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,OAAO;SACR,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,MAAM,KAAK,GAAa;QACtB,kEAAkE;QAClE,EAAE;QACF,8BAA8B;QAC9B,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,EAAE;QACF,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3E,EAAE;QACF,sEAAsE;KACvE,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,eAAe;QACtB,KAAK;KACN,CAAC;AACJ,CAAC"}
+{"version":3,"file":"agent-catalog.js","sourceRoot":"","sources":["../../src/commands/agent-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA4CH;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,oDAAoD,CAAC;AAEtF,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,2BAA2B,CAClC,WAAiF;IAEjF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CACzE,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,2CAA2C,MAAM,CAAC,OAAO,2BAA2B;YAClF,4FAA4F,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,GAAkD;IACzE,OAAO,EAAE;QACP,WAAW,EAAE,iFAAiF;QAC9F,QAAQ,EAAE,CAAC,yCAAyC,EAAE,uCAAuC,CAAC;KAC/F;IACD,KAAK,EAAE;QACL,WAAW,EAAE,gEAAgE;QAC7E,QAAQ,EAAE,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;KACtE;IACD,GAAG,EAAE;QACH,WAAW,EAAE,2EAA2E;QACxF,QAAQ,EAAE,CAAC,oBAAoB,EAAE,uCAAuC,CAAC;KAC1E;IACD,KAAK,EAAE;QACL,WAAW,EACT,uFAAuF;QACzF,QAAQ,EAAE,CAAC,sBAAsB,EAAE,4CAA4C,CAAC;KACjF;CACF,CAAC;AAEF,MAAM,qBAAqB,GAA0B;IACnD;QACE,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,gFAAgF;QAC7F,QAAQ,EAAE;YACR,6CAA6C;YAC7C,uDAAuD;SACxD;QACD,IAAI,EAAE,UAAmB;KAC1B;IACD;QACE,OAAO,EAAE,eAAe;QACxB,WAAW,EACT,mFAAmF;YACnF,8CAA8C;QAChD,QAAQ,EAAE;YACR,oDAAoD;YACpD,qFAAqF;YACrF,gDAAgD;YAChD,oDAAoD;SACrD;QACD,IAAI,EAAE,UAAmB;KAC1B;IACD;QACE,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,oEAAoE;QACjF,QAAQ,EAAE,CAAC,8BAA8B,CAAC;QAC1C,IAAI,EAAE,UAAmB;KAC1B;CACF,CAAC;AAEF,SAAS,oBAAoB,CAC3B,IAAU,EACV,gBAAqC;IAErC,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,UAAU,KAAK,UAAU;QAC9B,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CACC,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAU,EACV,gBAAqC;IAErC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7F,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,WAAW,EACT,OAAO,EAAE,WAAW;YACpB,GAAG,OAAO,CAAC,WAAW,gDAAgD;QACxE,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC,WAAW,OAAO,CAAC,IAAI,SAAS,CAAC;QACjE,IAAI,EAAE,MAAM;KACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA+B,EAC/B,gBAAqC;IAErC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,KAAK,EAAuB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC3D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAGI,EAAE;IAEN,MAAM,WAAW,GAAG;QAClB,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI,GAAG,EAAE,CAAC;QAC1E,GAAG,qBAAqB;KACzB,CAAC;IACF,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,oEAAoE;YACpE,kFAAkF;YAClF,oDAAoD;QACtD,WAAW;QACX,cAAc,EAAE;YACd;gBACE,IAAI,EAAE,yCAAyC;gBAC/C,WAAW,EACT,+EAA+E;gBACjF,OAAO,EACL,qFAAqF;aACxF;YACD;gBACE,IAAI,EAAE,8BAA8B;gBACpC,WAAW,EACT,oFAAoF;gBACtF,OAAO,EAAE,wDAAwD;aAClE;YACD;gBACE,IAAI,EAAE,iDAAiD;gBACvD,WAAW,EAAE,6EAA6E;gBAC1F,OAAO,EAAE,wDAAwD;aAClE;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,6EAA6E;gBAC1F,OAAO,EAAE,yEAAyE;aACnF;SACF;QACD,YAAY,EAAE;YACZ,cAAc,EACZ,2FAA2F;gBAC3F,yFAAyF;YAC3F,aAAa,EACX,gKAAgK;YAClK,OAAO,EACL,mHAAmH;SACtH;QACD,KAAK,EAAE;YACL,0FAA0F;YAC1F,wFAAwF;YACxF,qFAAqF;YACrF,uFAAuF;YACvF,uEAAuE;YACvE,+FAA+F;gBAC7F,2FAA2F;gBAC3F,iFAAiF;YACnF,sFAAsF;YACtF,4FAA4F;YAC5F,0FAA0F;YAC1F,8FAA8F;YAC9F,oFAAoF;YACpF,wFAAwF;YACxF,0FAA0F;YAC1F,sCAAsC;YACtC,2FAA2F;SAC5F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAII,EAAE;IAEN,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,wDAAwD;QACxD,sEAAsE;QACtE,gEAAgE;QAChE,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,OAAO;SACR,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,MAAM,KAAK,GAAa;QACtB,kEAAkE;QAClE,EAAE;QACF,8BAA8B;QAC9B,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,EAAE;QACF,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3E,EAAE;QACF,sEAAsE;KACvE,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,eAAe;QACtB,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/commands/config.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `opensip config validate|schema` execution helpers.
+ */
+import { type ToolPluginManifest, type ToolProvenance, type ToolRegistry } from '@opensip-cli/core';
+import type { ConfigSchemaResult, ConfigValidateResult } from '@opensip-cli/contracts';
+export interface ConfigValidateInput {
+    readonly tools: ToolRegistry;
+    readonly manifests?: readonly ToolPluginManifest[];
+    readonly provenance?: readonly ToolProvenance[];
+    readonly configPath: string | undefined;
+    readonly cwd: string;
+}
+export interface ConfigSchemaInput extends ConfigValidateInput {
+    readonly outPath?: string;
+}
+export declare function executeConfigValidate(input: ConfigValidateInput): ConfigValidateResult;
+/**
+ * @throws {ConfigurationError} When `--out` points to a directory.
+ * @throws {Error} When schema composition or file write fails.
+ */
+export declare function executeConfigSchema(input: ConfigSchemaInput): ConfigSchemaResult;
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAIvF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AA+CD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,CAsCtF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB,CAgDhF"}

package/dist/commands/config.js

@@ -0,0 +1,135 @@
+/**
+ * `opensip config validate|schema` execution helpers.
+ */
+import { mkdirSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { analyzeNamespaceClaims, composeConfigSchema, partitionUnclaimedNamespaces, toJsonSchema, validateConfigDocument, } from '@opensip-cli/config';
+import { ConfigurationError, currentScope, readYamlFileOrThrow, } from '@opensip-cli/core';
+import { buildConfigDeclarations } from '../bootstrap/config-declarations.js';
+const CONFIG_LOG_MODULE = 'cli:config';
+function configLogger() {
+    const logger = currentScope()?.logger;
+    return {
+        info: (entry) => {
+            logger?.info(entry);
+        },
+        error: (entry) => {
+            logger?.error(entry);
+        },
+    };
+}
+function readConfigDocument(configPath) {
+    if (configPath === undefined)
+        return {};
+    return readYamlFileOrThrow(configPath, { loader: 'project-config' });
+}
+function namespaceNames(declarations) {
+    return [...new Set(declarations.map((d) => d.namespace))].sort();
+}
+function collectWarnings(declarations, document, loadedToolNames) {
+    const report = analyzeNamespaceClaims(declarations, document);
+    const { toolBugs, benign } = partitionUnclaimedNamespaces(report, loadedToolNames);
+    if (toolBugs.length > 0) {
+        const names = toolBugs.map((u) => `'${u.namespace}'`).join(', ');
+        throw new ConfigurationError(`Config declares ${names} but the loaded tool(s) of the same id contribute no Tool.config — ` +
+            `the block can never apply. Remove the block or fix the tool's config contribution. (ADR-0043)`, { code: 'CONFIGURATION_ERROR' });
+    }
+    return benign.map((u) => {
+        const didYouMean = u.suggestion === undefined ? '' : ` — did you mean '${u.suggestion}:'?`;
+        return `Config namespace '${u.namespace}:' is not claimed by any loaded tool${didYouMean}`;
+    });
+}
+export function executeConfigValidate(input) {
+    const log = configLogger();
+    log.info({ evt: 'cli.config.validate.start', module: CONFIG_LOG_MODULE });
+    try {
+        const { declarations } = buildConfigDeclarations({
+            tools: input.tools,
+            manifests: input.manifests,
+            provenance: input.provenance,
+        });
+        const schema = composeConfigSchema(declarations);
+        const document = readConfigDocument(input.configPath);
+        validateConfigDocument(schema, document);
+        const loadedToolNames = new Set(input.tools.list().map((t) => t.metadata.name ?? t.metadata.id));
+        const warnings = collectWarnings(declarations, document, loadedToolNames);
+        const configPath = input.configPath ?? resolve(input.cwd, 'opensip-cli.config.yml');
+        const result = {
+            type: 'config-validate',
+            valid: true,
+            configPath,
+            namespaces: namespaceNames(declarations),
+            ...(warnings.length > 0 ? { warnings } : {}),
+        };
+        log.info({
+            evt: 'cli.config.validate.complete',
+            module: CONFIG_LOG_MODULE,
+            namespaces: result.namespaces.length,
+        });
+        return result;
+    }
+    catch (error) {
+        log.error({
+            evt: 'cli.config.validate.error',
+            module: CONFIG_LOG_MODULE,
+            err: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+}
+/**
+ * @throws {ConfigurationError} When `--out` points to a directory.
+ * @throws {Error} When schema composition or file write fails.
+ */
+export function executeConfigSchema(input) {
+    const log = configLogger();
+    log.info({ evt: 'cli.config.schema.start', module: CONFIG_LOG_MODULE });
+    try {
+        const { declarations } = buildConfigDeclarations({
+            tools: input.tools,
+            manifests: input.manifests,
+            provenance: input.provenance,
+        });
+        const schema = toJsonSchema(composeConfigSchema(declarations));
+        const namespaces = namespaceNames(declarations);
+        let outPath;
+        if (input.outPath !== undefined) {
+            const resolved = resolve(input.cwd, input.outPath);
+            let stat;
+            try {
+                stat = statSync(resolved);
+            }
+            catch {
+                stat = undefined;
+            }
+            if (stat?.isDirectory()) {
+                throw new ConfigurationError(`--out must be a file path, not a directory: '${resolved}'`);
+            }
+            mkdirSync(dirname(resolved), { recursive: true });
+            writeFileSync(resolved, `${JSON.stringify(schema, null, 2)}\n`, 'utf8');
+            outPath = resolved;
+        }
+        const result = {
+            type: 'config-schema',
+            schema,
+            namespaces,
+            ...(outPath === undefined ? {} : { outPath }),
+        };
+        log.info({
+            evt: 'cli.config.schema.complete',
+            module: CONFIG_LOG_MODULE,
+            namespaces: namespaces.length,
+            wroteFile: outPath !== undefined,
+        });
+        return result;
+    }
+    catch (error) {
+        log.error({
+            evt: 'cli.config.schema.error',
+            module: CONFIG_LOG_MODULE,
+            err: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,EAC5B,YAAY,EACZ,sBAAsB,GAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,GAIpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAI9E,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAcvC,SAAS,YAAY;IAInB,MAAM,MAAM,GAAG,YAAY,EAAE,EAAE,MAAM,CAAC;IACtC,OAAO;QACL,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA8B;IACxD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,mBAAmB,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,YAA8C;IACpE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CACtB,YAA8C,EAC9C,QAAiB,EACjB,eAAoC;IAEpC,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,4BAA4B,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,KAAK,qEAAqE;YAC3F,+FAA+F,EACjG,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,UAAU,KAAK,CAAC;QAC3F,OAAO,qBAAqB,CAAC,CAAC,SAAS,uCAAuC,UAAU,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAA0B;IAC9D,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,2BAA2B,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAAC;YAC/C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtD,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACpF,MAAM,MAAM,GAAyB;YACnC,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,IAAI;YACX,UAAU;YACV,UAAU,EAAE,cAAc,CAAC,YAAY,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;QACF,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,8BAA8B;YACnC,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;SACrC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC;YACR,GAAG,EAAE,2BAA2B;YAChC,MAAM,EAAE,iBAAiB;YACzB,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC1D,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,yBAAyB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,uBAAuB,CAAC;YAC/C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,OAA2B,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,kBAAkB,CAAC,gDAAgD,QAAQ,GAAG,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,OAAO,GAAG,QAAQ,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAuB;YACjC,IAAI,EAAE,eAAe;YACrB,MAAM;YACN,UAAU;YACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC;QACF,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,4BAA4B;YACjC,MAAM,EAAE,iBAAiB;YACzB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,SAAS,EAAE,OAAO,KAAK,SAAS;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC;YACR,GAAG,EAAE,yBAAyB;YAC9B,MAAM,EAAE,iBAAiB;YACzB,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/commands/host-command-specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-command-specs.d.ts","sourceRoot":"","sources":["../../src/commands/host-command-specs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,6BAA6B,CAAC;AAMrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,wBAAwB,CAAC;AAiUtE;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,SAAS,QAAQ,EAAE,CAanF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,IAAI,CAWpF"}
+{"version":3,"file":"host-command-specs.d.ts","sourceRoot":"","sources":["../../src/commands/host-command-specs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,6BAA6B,CAAC;AAMrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,wBAAwB,CAAC;AAqUtE;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,SAAS,QAAQ,EAAE,CAanF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,IAAI,CAWpF"}