opensip-cli 0.1.16 → 0.1.17

package/dist/bootstrap/tool-trust.d.ts

@@ -8,13 +8,13 @@
  * rather than load-by-presence.
  *
  * Policy for launch (signed off): **deny-by-default for non-interactive
- * runs; admit-with-allowlist when configured.** No interactive prompt UX
- * in this release. The allowlist is a comma/whitespace-separated list of
- * tool ids in the `OPENSIP_CLI_ALLOW_PROJECT_TOOLS` environment variable
- * — a minimal, documented opt-in:
+ * runs; admit when an explicit project/user action recorded trust.** Project
+ * authored tools use committed `tools.trusted`; managed npm installs use a
+ * per-host trust record; env allowlists remain override/incident-response
+ * mechanisms:
  *
- *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="my-audit, my-lint"   # admit by id
- *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="*"                    # admit all
+ *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="my-audit, my-lint"    # override by id
+ *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="*"                    # override all
  *
  * The decision is made BEFORE the tool's module is imported: a disallowed
  * project-local tool is fail-closed (exit 5) without its code ever running.
@@ -37,6 +37,46 @@ export declare const INSTALLED_TOOL_ALLOWLIST_ENV = "OPENSIP_CLI_ALLOW_INSTALLED
  * honored.
  */
 export declare const CAPABILITY_PACK_ALLOWLIST_ENV = "OPENSIP_CLI_ALLOW_CAPABILITY_PACKS";
+export type ToolTrustReason = 'bundled' | 'managed-install' | 'project-config' | 'env' | 'user-global' | 'denied';
+export interface InstalledToolTrustRecord {
+    readonly toolId: string;
+    readonly packageName: string;
+    readonly version?: string;
+    readonly manifestHash: string;
+    readonly installSourcePath: string;
+    readonly installedAt: string;
+}
+export interface InstalledToolTrustDecision {
+    readonly trusted: boolean;
+    readonly reason: ToolTrustReason;
+}
+export declare function trustedToolIdsFromConfigDocument(document: unknown): ReadonlySet<string>;
+export declare function readProjectTrustedToolIds(configPath: string | undefined): ReadonlySet<string>;
+export declare function recordInstalledToolTrust(args: {
+    readonly scope: 'global' | 'project';
+    readonly cwd: string;
+    readonly toolId: string;
+    readonly packageName: string;
+    readonly version?: string;
+    readonly manifestHash: string;
+    readonly installSourcePath: string;
+    readonly installedAt?: Date;
+}): void;
+export declare function removeInstalledToolTrust(args: {
+    readonly scope: 'global' | 'project';
+    readonly cwd: string;
+    readonly toolId: string;
+    readonly packageName: string;
+}): void;
+export declare function resolveInstalledToolTrust(args: {
+    readonly toolId: string;
+    readonly packageName: string;
+    readonly packageDir: string;
+    readonly manifestHash?: string;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly projectRoot?: string;
+    readonly projectTrustedTools?: ReadonlySet<string>;
+}): InstalledToolTrustDecision;
 /**
  * Decide whether a project-local executable tool with the given `id` is
  * trusted to load, under the deny-by-default + allowlist-opt-in policy.

package/dist/bootstrap/tool-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-trust.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,sCAAsC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,uCAAuC,CAAC;AAuClF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,MAAM,EACV,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAIhG;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT"}
+{"version":3,"file":"tool-trust.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,sCAAsC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,uCAAuC,CAAC;AAKlF,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,iBAAiB,GACjB,gBAAgB,GAChB,KAAK,GACL,aAAa,GACb,QAAQ,CAAC;AAEb,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAOD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AA8CD,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAKvF;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAG7F;AA4CD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;CAC7B,GAAG,IAAI,CAiBP;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GAAG,IAAI,CAWP;AA0CD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACpD,GAAG,0BAA0B,CA4C7B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,MAAM,EACV,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAIhG;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT"}

package/dist/bootstrap/tool-trust.js

@@ -1,4 +1,6 @@
-import { logger } from '@opensip-cli/core';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { isPathInside, isPlainRecord, logger, readYamlFile, resolveProjectPaths, resolveUserPaths, } from '@opensip-cli/core';
 /**
  * tool-trust — executable-tool trust policies for project-local and installed
  * npm tools (release launch, Phase 3 Task 3.2; audit remediation).
@@ -9,13 +11,13 @@ import { logger } from '@opensip-cli/core';
  * rather than load-by-presence.
  *
  * Policy for launch (signed off): **deny-by-default for non-interactive
- * runs; admit-with-allowlist when configured.** No interactive prompt UX
- * in this release. The allowlist is a comma/whitespace-separated list of
- * tool ids in the `OPENSIP_CLI_ALLOW_PROJECT_TOOLS` environment variable
- * — a minimal, documented opt-in:
+ * runs; admit when an explicit project/user action recorded trust.** Project
+ * authored tools use committed `tools.trusted`; managed npm installs use a
+ * per-host trust record; env allowlists remain override/incident-response
+ * mechanisms:
  *
- *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="my-audit, my-lint"   # admit by id
- *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="*"                    # admit all
+ *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="my-audit, my-lint"    # override by id
+ *   OPENSIP_CLI_ALLOW_PROJECT_TOOLS="*"                    # override all
  *
  * The decision is made BEFORE the tool's module is imported: a disallowed
  * project-local tool is fail-closed (exit 5) without its code ever running.
@@ -38,6 +40,8 @@ export const INSTALLED_TOOL_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_INSTALLED_TOOLS';
  * honored.
  */
 export const CAPABILITY_PACK_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_CAPABILITY_PACKS';
+const TOOL_TRUST_FILE = 'tool-trust.json';
+const TOOL_TRUST_SCHEMA_VERSION = 1;
 /**
  * Parse the allowlist env var into a set of permitted tool ids. Empty/
  * unset ⇒ empty set (deny-by-default). The wildcard `'*'` admits all
@@ -71,6 +75,144 @@ function warnIgnoredCapabilityWildcard(allow) {
         detail: 'OPENSIP_CLI_ALLOW_CAPABILITY_PACKS requires exact package names; wildcard * is ignored',
     });
 }
+function stringArrayAt(record, key) {
+    const value = record[key];
+    return Array.isArray(value)
+        ? value.filter((item) => typeof item === 'string')
+        : [];
+}
+export function trustedToolIdsFromConfigDocument(document) {
+    if (!isPlainRecord(document))
+        return new Set();
+    const tools = document.tools;
+    if (!isPlainRecord(tools))
+        return new Set();
+    return new Set(stringArrayAt(tools, 'trusted'));
+}
+export function readProjectTrustedToolIds(configPath) {
+    if (configPath === undefined)
+        return new Set();
+    return trustedToolIdsFromConfigDocument(readYamlFile(configPath));
+}
+function installedTrustFileForScope(scope, cwd) {
+    const hostDir = scope === 'project'
+        ? resolveProjectPaths(cwd).pluginsDir('tool')
+        : resolveUserPaths().pluginsDir('tool');
+    return join(hostDir, TOOL_TRUST_FILE);
+}
+function readInstalledTrustFile(path) {
+    if (!existsSync(path))
+        return { schemaVersion: TOOL_TRUST_SCHEMA_VERSION, installedTools: [] };
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        if (!isPlainRecord(parsed)) {
+            return { schemaVersion: TOOL_TRUST_SCHEMA_VERSION, installedTools: [] };
+        }
+        const records = Array.isArray(parsed.installedTools) ? parsed.installedTools : [];
+        return {
+            schemaVersion: TOOL_TRUST_SCHEMA_VERSION,
+            installedTools: records.filter(isInstalledToolTrustRecord),
+        };
+    }
+    catch {
+        return { schemaVersion: TOOL_TRUST_SCHEMA_VERSION, installedTools: [] };
+    }
+}
+function isInstalledToolTrustRecord(value) {
+    if (!isPlainRecord(value))
+        return false;
+    return (typeof value.toolId === 'string' &&
+        typeof value.packageName === 'string' &&
+        (value.version === undefined || typeof value.version === 'string') &&
+        typeof value.manifestHash === 'string' &&
+        typeof value.installSourcePath === 'string' &&
+        typeof value.installedAt === 'string');
+}
+function writeInstalledTrustFile(path, file) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(file, null, 2)}\n`, 'utf8');
+}
+export function recordInstalledToolTrust(args) {
+    const path = installedTrustFileForScope(args.scope, args.cwd);
+    const existing = readInstalledTrustFile(path).installedTools.filter((record) => !(record.toolId === args.toolId && record.packageName === args.packageName));
+    const record = {
+        toolId: args.toolId,
+        packageName: args.packageName,
+        ...(args.version === undefined ? {} : { version: args.version }),
+        manifestHash: args.manifestHash,
+        installSourcePath: args.installSourcePath,
+        installedAt: (args.installedAt ?? new Date()).toISOString(),
+    };
+    writeInstalledTrustFile(path, {
+        schemaVersion: TOOL_TRUST_SCHEMA_VERSION,
+        installedTools: [...existing, record],
+    });
+}
+export function removeInstalledToolTrust(args) {
+    const path = installedTrustFileForScope(args.scope, args.cwd);
+    const existing = readInstalledTrustFile(path).installedTools;
+    const retained = existing.filter((record) => !(record.toolId === args.toolId && record.packageName === args.packageName));
+    if (retained.length === existing.length)
+        return;
+    writeInstalledTrustFile(path, {
+        schemaVersion: TOOL_TRUST_SCHEMA_VERSION,
+        installedTools: retained,
+    });
+}
+function recordMatchesInstalledTool(record, args) {
+    return (record.toolId === args.toolId &&
+        record.packageName === args.packageName &&
+        (args.manifestHash === undefined || record.manifestHash === args.manifestHash));
+}
+function hasMatchingManagedInstallTrust(args) {
+    const path = installedTrustFileForScope(args.scope, args.cwd);
+    return readInstalledTrustFile(path).installedTools.some((record) => recordMatchesInstalledTool(record, args));
+}
+function isPackageUnderManagedHost(args) {
+    const hostDir = args.scope === 'project'
+        ? resolveProjectPaths(args.cwd).pluginsDir('tool')
+        : resolveUserPaths().pluginsDir('tool');
+    return isPathInside(args.packageDir, hostDir);
+}
+export function resolveInstalledToolTrust(args) {
+    if (isInstalledToolTrusted(args.toolId, args.env)) {
+        return { trusted: true, reason: 'env' };
+    }
+    if (args.projectRoot !== undefined &&
+        isPackageUnderManagedHost({
+            packageDir: args.packageDir,
+            scope: 'project',
+            cwd: args.projectRoot,
+        })) {
+        if (hasMatchingManagedInstallTrust({
+            scope: 'project',
+            cwd: args.projectRoot,
+            toolId: args.toolId,
+            packageName: args.packageName,
+            manifestHash: args.manifestHash,
+        })) {
+            return { trusted: true, reason: 'managed-install' };
+        }
+        if (args.projectTrustedTools?.has(args.toolId) === true) {
+            return { trusted: true, reason: 'project-config' };
+        }
+    }
+    if (isPackageUnderManagedHost({
+        packageDir: args.packageDir,
+        scope: 'global',
+        cwd: process.cwd(),
+    }) &&
+        hasMatchingManagedInstallTrust({
+            scope: 'global',
+            cwd: process.cwd(),
+            toolId: args.toolId,
+            packageName: args.packageName,
+            manifestHash: args.manifestHash,
+        })) {
+        return { trusted: true, reason: 'managed-install' };
+    }
+    return { trusted: false, reason: 'denied' };
+}
 /**
  * Decide whether a project-local executable tool with the given `id` is
  * trusted to load, under the deny-by-default + allowlist-opt-in policy.

package/dist/bootstrap/tool-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-trust.js","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oCAAoC,CAAC;AAElF;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAA0B;IACvE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,8BAA8B;QACnC,MAAM;QACN,UAAU,EAAE,IAAI;QAChB,MAAM,EACJ,qGAAqG;YACrG,6CAA6C;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,KAA0B;IAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,uCAAuC;QAC5C,MAAM,EAAE,6BAA6B;QACrC,MAAM,EACJ,wFAAwF;KAC3F,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAU,EACV,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,qBAAqB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,qBAAqB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"tool-trust.js","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,YAAY,EACZ,aAAa,EACb,MAAM,EACN,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oCAAoC,CAAC;AAElF,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,yBAAyB,GAAG,CAAC,CAAC;AA6BpC;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAA0B;IACvE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,8BAA8B;QACnC,MAAM;QACN,UAAU,EAAE,IAAI;QAChB,MAAM,EACJ,qGAAqG;YACrG,6CAA6C;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,KAA0B;IAC/D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,uCAAuC;QAC5C,MAAM,EAAE,6BAA6B;QACrC,MAAM,EACJ,wFAAwF;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAA+B,EAAE,GAAW;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAClE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAAiB;IAChE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC5C,OAAO,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAA8B;IACtE,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/C,OAAO,gCAAgC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,0BAA0B,CAAC,KAA2B,EAAE,GAAW;IAC1E,MAAM,OAAO,GACX,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7C,CAAC,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,aAAa,EAAE,yBAAyB;YACxC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC;SAC3D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CACL,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAClE,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;QAC3C,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,IAA4B;IACzE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IASxC;IACC,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,CACjE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC,CACxF,CAAC;IACF,MAAM,MAAM,GAA6B;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KAC5D,CAAC;IACF,uBAAuB,CAAC,IAAI,EAAE;QAC5B,aAAa,EAAE,yBAAyB;QACxC,cAAc,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAKxC;IACC,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC,CACxF,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO;IAChD,uBAAuB,CAAC,IAAI,EAAE;QAC5B,aAAa,EAAE,yBAAyB;QACxC,cAAc,EAAE,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAgC,EAChC,IAIC;IAED,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC7B,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;QACvC,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,IAMvC;IACC,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACjE,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,IAIlC;IACC,MAAM,OAAO,GACX,IAAI,CAAC,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAClD,CAAC,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAQzC;IACC,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,IACE,IAAI,CAAC,WAAW,KAAK,SAAS;QAC9B,yBAAyB,CAAC;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,IAAI,CAAC,WAAW;SACtB,CAAC,EACF,CAAC;QACD,IACE,8BAA8B,CAAC;YAC7B,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,EACF,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IACE,yBAAyB,CAAC;QACxB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;KACnB,CAAC;QACF,8BAA8B,CAAC;YAC7B,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,EACF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAU,EACV,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,qBAAqB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,qBAAqB,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC"}

package/dist/bootstrap/validate-tool.d.ts

@@ -15,8 +15,8 @@
  * tool's module is imported. The compatibility gate (`admitTool`) and the
  * project-local TRUST gate (`admitProjectLocalTool`, deny-by-default) run
  * on the STATIC manifest *before* import — so a project-local executable
- * tool that is not allowlisted is fail-closed without its code ever running,
- * and never reaches `isValidTool`.
+ * tool that is not trusted is fail-closed without its code ever running, and
+ * never reaches `isValidTool`.
  */
 import { type Tool } from '@opensip-cli/core';
 /**

package/dist/bootstrap/validate-tool.js

@@ -15,8 +15,8 @@
  * tool's module is imported. The compatibility gate (`admitTool`) and the
  * project-local TRUST gate (`admitProjectLocalTool`, deny-by-default) run
  * on the STATIC manifest *before* import — so a project-local executable
- * tool that is not allowlisted is fail-closed without its code ever running,
- * and never reaches `isValidTool`.
+ * tool that is not trusted is fail-closed without its code ever running, and
+ * never reaches `isValidTool`.
  */
 import { validateCommandSpec, validateToolIdentity } from '@opensip-cli/core';
 /** Top-level hook keys removed in the tool-author-simplify contract. */

package/dist/commands/tools/create-templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-templates.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/create-templates.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,UAAU,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,qBAAqB,KAAK,oBAAoB,CAAC;AA2NpF,eAAO,MAAM,sBAAsB,EAAE,SAAS,mBAAmB,EAA+B,CAAC;AAEjG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB,CAEjF;AAED,eAAO,MAAM,+BAA+B,EAAE,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAyBzF,CAAC"}
+{"version":3,"file":"create-templates.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/create-templates.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,UAAU,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,qBAAqB,KAAK,oBAAoB,CAAC;AA0NpF,eAAO,MAAM,sBAAsB,EAAE,SAAS,mBAAmB,EAA+B,CAAC;AAEjG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB,CAEjF;AAED,eAAO,MAAM,+BAA+B,EAAE,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAyBzF,CAAC"}

package/dist/commands/tools/create-templates.js

@@ -38,7 +38,7 @@ function minimalJsRuntime(ctx) {
           return {
             type: 'text-lines',
             title: '${ctx.toolId}',
-            lines: ['Your project-local tool is ready — allowlist it, then run opensip ${ctx.commandName}.'],
+            lines: ['Your project-local tool is ready — validate it, then run opensip ${ctx.commandName}.'],
           };
         } catch (error) {
           // The host normalizes any caught value; return after reporting so this
@@ -55,7 +55,6 @@ function minimalJsRuntime(ctx) {
 function minimalJsNextSteps(ctx) {
     const toolDir = `opensip-cli/tools/${ctx.toolId}`;
     return [
-        `export OPENSIP_CLI_ALLOW_PROJECT_TOOLS='${ctx.toolId}'`,
         `opensip tools validate ${toolDir}`,
         `opensip ${ctx.commandName}`,
         'Run logs land under opensip-cli/.runtime/logs/ when the host configures logging.',
@@ -89,7 +88,7 @@ export const tool = createTool({
         return {
           type: 'text-lines',
           title: '${ctx.toolId}',
-          lines: ['Your typed project-local tool is ready — build, validate, allowlist, then run.'],
+          lines: ['Your typed project-local tool is ready — build, validate, then run.'],
         };
       } catch (error) {
         // The host normalizes any caught value; return after reporting so this
@@ -169,16 +168,17 @@ pnpm test
 opensip tools validate ${toolDir} --install-deps
 \`\`\`
 
-## Allowlist and run
+## Trust and run
 
-Project-local tools are executable code and deny-by-default until allowlisted:
+Project-local tools are executable code and deny-by-default until trusted. The
+scaffold command adds this tool id to \`tools.trusted\` in
+\`opensip-cli.config.yml\`.
 
 \`\`\`bash
-export OPENSIP_CLI_ALLOW_PROJECT_TOOLS='${ctx.toolId}'
 opensip ${ctx.commandName}
 \`\`\`
 
-Do not use wildcard allowlists unless you trust every project-local tool in the repo.
+Use \`OPENSIP_CLI_ALLOW_PROJECT_TOOLS\` only as an incident-response override.
 Run logs land under \`opensip-cli/.runtime/logs/\` when the host configures logging.
 Validation executes candidate code in a child process; it is not a security sandbox.
 `;
@@ -190,7 +190,6 @@ function tsLocalNextSteps(ctx) {
         'pnpm run build',
         'pnpm test',
         `opensip tools validate ${toolDir} --install-deps`,
-        `export OPENSIP_CLI_ALLOW_PROJECT_TOOLS='${ctx.toolId}'`,
         `opensip ${ctx.commandName}`,
         'Validation executes candidate code in a child process; it is not a security sandbox.',
     ];

package/dist/commands/tools/create-templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-templates.js","sourceRoot":"","sources":["../../../src/commands/tools/create-templates.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAsB3B,MAAM,oBAAoB,GAAG,kBAAkB,CAC7C,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAC/D,CAAC;AAEF,SAAS,aAAa,CAAC,GAA0B,EAAE,IAAY;IAC7D,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,GAAG,CAAC,MAAM;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE;QAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,MAAM;QAChB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,kBAAkB;QAC9B,IAAI;QACJ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAA0B,EAAE,IAAY;IAC5D,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,OAAO;uBACc,GAAG,CAAC,MAAM;;WAEtB,GAAG,CAAC,QAAQ;aACV,GAAG,CAAC,MAAM;;;;;;eAMR,GAAG,CAAC,WAAW;0BACJ,GAAG,CAAC,MAAM;;;;;kCAKF,GAAG,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAAM;;;;sBAIzD,GAAG,CAAC,MAAM;yFACyD,GAAG,CAAC,WAAW;;;;;;;;;;;;CAYvG,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA0B;IACpD,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO;QACL,2CAA2C,GAAG,CAAC,MAAM,GAAG;QACxD,0BAA0B,OAAO,EAAE;QACnC,WAAW,GAAG,CAAC,WAAW,EAAE;QAC5B,kFAAkF;QAClF,sFAAsF;KACvF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAA0B;IAChD,OAAO;;gCAEuB,GAAG,CAAC,MAAM;;;;;;;uBAOnB,GAAG,CAAC,MAAM;;WAEtB,GAAG,CAAC,QAAQ;;;;;wBAKC,GAAG,CAAC,MAAM;;;;;yBAKT,GAAG,CAAC,MAAM;;;;oBAIf,GAAG,CAAC,MAAM;;;;;;;;;;;;CAY7B,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,OAAO;;;;YAIG,GAAG,CAAC,MAAM;;uCAEiB,GAAG,CAAC,MAAM;qCACZ,GAAG,CAAC,QAAQ;oEACmB,GAAG,CAAC,WAAW;;;;CAIlF,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA0B;IACpD,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,IAAI,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE;QACvC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,yCAAyC;SACpD;QACD,YAAY,EAAE;YACZ,mBAAmB,EAAE,IAAI,oBAAoB,EAAE;SAChD;QACD,eAAe,EAAE;YACf,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,QAAQ;SACjB;KACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,UAAU;YAClB,gBAAgB,EAAE,UAAU;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QACD,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED,SAAS,aAAa,CAAC,GAA0B;IAC/C,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO,KAAK,GAAG,CAAC,MAAM;;;;;;;KAOnB,OAAO;;;;yBAIa,OAAO;;;;;;;;0CAQU,GAAG,CAAC,MAAM;UAC1C,GAAG,CAAC,WAAW;;;;;;CAMxB,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO;QACL,MAAM,OAAO,kBAAkB;QAC/B,gBAAgB;QAChB,WAAW;QACX,0BAA0B,OAAO,iBAAiB;QAClD,2CAA2C,GAAG,CAAC,MAAM,GAAG;QACxD,WAAW,GAAG,CAAC,WAAW,EAAE;QAC5B,sFAAsF;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAEjG,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAkD;IAC5F,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,KAAK,EAAE;YACL;gBACE,YAAY,EAAE,2BAA2B;gBACzC,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC;aAC1C;YACD,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;SAC9D;QACD,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC;KACnC,CAAC;IACF,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpB,KAAK,EAAE;YACL;gBACE,YAAY,EAAE,2BAA2B;gBACzC,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,iBAAiB,CAAC;aAC9C;YACD,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE;YAClE,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE;YAC7D,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;YAC9D,EAAE,YAAY,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;YACrE,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE;SAC3D;QACD,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;KACjC,CAAC;CACH,CAAC"}
+{"version":3,"file":"create-templates.js","sourceRoot":"","sources":["../../../src/commands/tools/create-templates.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAsB3B,MAAM,oBAAoB,GAAG,kBAAkB,CAC7C,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAC/D,CAAC;AAEF,SAAS,aAAa,CAAC,GAA0B,EAAE,IAAY;IAC7D,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,GAAG,CAAC,MAAM;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE;QAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,MAAM;QAChB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,kBAAkB;QAC9B,IAAI;QACJ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAA0B,EAAE,IAAY;IAC5D,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,OAAO;uBACc,GAAG,CAAC,MAAM;;WAEtB,GAAG,CAAC,QAAQ;aACV,GAAG,CAAC,MAAM;;;;;;eAMR,GAAG,CAAC,WAAW;0BACJ,GAAG,CAAC,MAAM;;;;;kCAKF,GAAG,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAAM;;;;sBAIzD,GAAG,CAAC,MAAM;wFACwD,GAAG,CAAC,WAAW;;;;;;;;;;;;CAYtG,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA0B;IACpD,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO;QACL,0BAA0B,OAAO,EAAE;QACnC,WAAW,GAAG,CAAC,WAAW,EAAE;QAC5B,kFAAkF;QAClF,sFAAsF;KACvF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAA0B;IAChD,OAAO;;gCAEuB,GAAG,CAAC,MAAM;;;;;;;uBAOnB,GAAG,CAAC,MAAM;;WAEtB,GAAG,CAAC,QAAQ;;;;;wBAKC,GAAG,CAAC,MAAM;;;;;yBAKT,GAAG,CAAC,MAAM;;;;oBAIf,GAAG,CAAC,MAAM;;;;;;;;;;;;CAY7B,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,OAAO;;;;YAIG,GAAG,CAAC,MAAM;;uCAEiB,GAAG,CAAC,MAAM;qCACZ,GAAG,CAAC,QAAQ;oEACmB,GAAG,CAAC,WAAW;;;;CAIlF,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA0B;IACpD,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,IAAI,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE;QACvC,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,yCAAyC;SACpD;QACD,YAAY,EAAE;YACZ,mBAAmB,EAAE,IAAI,oBAAoB,EAAE;SAChD;QACD,eAAe,EAAE;YACf,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,QAAQ;SACjB;KACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,UAAU;YAClB,gBAAgB,EAAE,UAAU;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB;QACD,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED,SAAS,aAAa,CAAC,GAA0B;IAC/C,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO,KAAK,GAAG,CAAC,MAAM;;;;;;;KAOnB,OAAO;;;;yBAIa,OAAO;;;;;;;;;;UAUtB,GAAG,CAAC,WAAW;;;;;;CAMxB,CAAC;AACF,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA0B;IAClD,MAAM,OAAO,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO;QACL,MAAM,OAAO,kBAAkB;QAC/B,gBAAgB;QAChB,WAAW;QACX,0BAA0B,OAAO,iBAAiB;QAClD,WAAW,GAAG,CAAC,WAAW,EAAE;QAC5B,sFAAsF;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAEjG,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAkD;IAC5F,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,KAAK,EAAE;YACL;gBACE,YAAY,EAAE,2BAA2B;gBACzC,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC;aAC1C;YACD,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;SAC9D;QACD,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC;KACnC,CAAC;IACF,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpB,KAAK,EAAE;YACL;gBACE,YAAY,EAAE,2BAA2B;gBACzC,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,iBAAiB,CAAC;aAC9C;YACD,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE;YAClE,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE;YAC7D,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;YAC9D,EAAE,YAAY,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;YACrE,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE;SAC3D;QACD,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;KACjC,CAAC;CACH,CAAC"}

package/dist/commands/tools/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/create.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAgEtE"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/create.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,eAAO,MAAM,eAAe,QAAsB,CAAC;AAGnD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CA8EtE"}

package/dist/commands/tools/create.js

@@ -3,7 +3,9 @@ import { join } from 'node:path';
 import { resolveProjectPaths } from '@opensip-cli/core';
 import { writeTemplateFiles } from './create-template-writer.js';
 import { isToolsCreateTemplate, TOOLS_CREATE_TEMPLATE_RENDERERS, } from './create-templates.js';
+import { addTrustedToolToConfig } from './trust-config.js';
 export const TOOL_ID_PATTERN = /^[a-z][a-z0-9-]*$/;
+const TOOLS_CREATE = 'tools-create';
 /**
  * Scaffold a project-local Tool under `<project>/opensip-cli/tools/<id>/`.
  */
@@ -12,7 +14,7 @@ export function toolsCreate(input) {
     const template = input.template ?? 'minimal-js';
     if (!TOOL_ID_PATTERN.test(toolId)) {
         return {
-            type: 'tools-create',
+            type: TOOLS_CREATE,
             toolId,
             dir: '',
             files: [],
@@ -22,7 +24,7 @@ export function toolsCreate(input) {
     }
     if (!isToolsCreateTemplate(template)) {
         return {
-            type: 'tools-create',
+            type: TOOLS_CREATE,
             toolId,
             template,
             dir: '',
@@ -32,7 +34,8 @@ export function toolsCreate(input) {
         };
     }
     const commandName = toolId;
-    const toolDir = join(resolveProjectPaths(input.projectRoot).authoredToolsDir, toolId);
+    const projectPaths = resolveProjectPaths(input.projectRoot);
+    const toolDir = join(projectPaths.authoredToolsDir, toolId);
     const stableId = randomUUID();
     const rendered = TOOLS_CREATE_TEMPLATE_RENDERERS[template]({
         toolId,
@@ -46,7 +49,7 @@ export function toolsCreate(input) {
     });
     if (!writeResult.success) {
         return {
-            type: 'tools-create',
+            type: TOOLS_CREATE,
             toolId,
             template,
             dir: toolDir,
@@ -55,14 +58,27 @@ export function toolsCreate(input) {
             error: writeResult.error,
         };
     }
+    try {
+        addTrustedToolToConfig(projectPaths.configFile, toolId);
+    }
+    catch (error) {
+        return {
+            type: TOOLS_CREATE,
+            toolId,
+            template,
+            dir: toolDir,
+            files: writeResult.files,
+            success: false,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
     return {
-        type: 'tools-create',
+        type: TOOLS_CREATE,
         toolId,
         template,
         dir: toolDir,
         files: writeResult.files,
         success: true,
-        hint: `export OPENSIP_CLI_ALLOW_PROJECT_TOOLS='${toolId}'`,
         nextSteps: rendered.nextSteps,
     };
 }

package/dist/commands/tools/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/tools/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,qBAAqB,EACrB,+BAA+B,GAEhC,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AASnD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC;IAEhD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iDAAiD;SACzD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,mCAAmC;SAChF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM;QACN,QAAQ;QACR,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,kBAAkB,CAAC;QACrC,OAAO;QACP,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,WAAW,CAAC,KAAK;SACzB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,QAAQ;QACR,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,2CAA2C,MAAM,GAAG;QAC1D,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../src/commands/tools/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,qBAAqB,EACrB,+BAA+B,GAEhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAI3D,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AACnD,MAAM,YAAY,GAAG,cAAuB,CAAC;AAS7C;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC;IAEhD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;YACN,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iDAAiD;SACzD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,mCAAmC;SAChF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC;IAC3B,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM;QACN,QAAQ;QACR,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,kBAAkB,CAAC;QACrC,OAAO;QACP,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,WAAW,CAAC,KAAK;SACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM;QACN,QAAQ;QACR,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC"}

package/dist/commands/tools/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAsBD,mFAAmF;AACnF,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoEzF"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGjE,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAmBD,mFAAmF;AACnF,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgFzF"}

package/dist/commands/tools/install.js

@@ -13,6 +13,7 @@
  */
 import { execFileSync } from 'node:child_process';
 import { admitToolPackage } from '../../bootstrap/admit-tool-package.js';
+import { recordInstalledToolTrust } from '../../bootstrap/tool-trust.js';
 import { addToolPlugin } from '../plugin-host-ops.js';
 import { runToolValidation } from './validate.js';
 /** Pack the staged package dir into a tarball beside it; returns the tarball path. */
@@ -29,10 +30,7 @@ function installNextSteps(manifest) {
     if (manifest === undefined)
         return undefined;
     const commandName = manifest.commands[0]?.name;
-    return [
-        `export OPENSIP_CLI_ALLOW_INSTALLED_TOOLS='${manifest.id}'`,
-        ...(commandName === undefined ? [] : [`opensip ${commandName}`]),
-    ];
+    return commandName === undefined ? [] : [`opensip ${commandName}`];
 }
 /** Stage, validate, and (on a `passed` verdict only) activate one tool package. */
 export async function toolsInstall(opts) {
@@ -80,6 +78,17 @@ export async function toolsInstall(opts) {
             explicitlyRequested: true,
             staticOnly: true,
         });
+        if (report.manifest !== undefined && report.provenance !== undefined) {
+            recordInstalledToolTrust({
+                scope,
+                cwd: opts.cwd,
+                toolId: report.manifest.id,
+                packageName: activation.packageName,
+                version: report.manifest.version,
+                manifestHash: report.provenance.manifestHash,
+                installSourcePath: stagedPkgDir,
+            });
+        }
         return {
             type: 'tools-install',
             spec: opts.spec,
@@ -91,6 +100,7 @@ export async function toolsInstall(opts) {
                 : {
                     toolId: report.manifest.id,
                     version: report.manifest.version,
+                    trustReason: 'managed-install',
                     nextSteps: installNextSteps(report.manifest),
                 }),
         };

package/dist/commands/tools/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/commands/tools/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAalD,sFAAsF;AACtF,SAAS,aAAa,CAAC,YAAoB;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE;QACjF,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;KAC1C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzD,OAAO,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwC;IAChE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAC/C,OAAO;QACL,6CAA6C,QAAQ,CAAC,EAAE,GAAG;QAC3D,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3D,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAC/D,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,EACrD,EAAE,UAAU,EAAE,IAAI,EAAE,CACrB,CAAC;IACF,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,UAAU,EAAE,MAAM;aACnB,CAAC;QACJ,CAAC;QACD,yGAAyG;QACzG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,0DAA0D;aAClE,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,KAAK,GACT,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAC1F,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,UAAU,EAAE,MAAM;gBAClB,KAAK;aACN,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,WAAW;YACnB,mBAAmB,EAAE,IAAI;YACzB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI;YACb,KAAK;YACL,UAAU,EAAE,MAAM;YAClB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;oBAC1B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;oBAChC,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAC7C,CAAC;SACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/commands/tools/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAalD,sFAAsF;AACtF,SAAS,aAAa,CAAC,YAAoB;IACzC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE;QACjF,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;KAC1C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzD,OAAO,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwC;IAChE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAC/C,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3D,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAC/D,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,EACrD,EAAE,UAAU,EAAE,IAAI,EAAE,CACrB,CAAC;IACF,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,UAAU,EAAE,MAAM;aACnB,CAAC;QACJ,CAAC;QACD,yGAAyG;QACzG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,0DAA0D;aAClE,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,KAAK,GACT,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAC1F,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,UAAU,EAAE,MAAM;gBAClB,KAAK;aACN,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,WAAW;YACnB,mBAAmB,EAAE,IAAI;YACzB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrE,wBAAwB,CAAC;gBACvB,KAAK;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;gBAC1B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAChC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;gBAC5C,iBAAiB,EAAE,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI;YACb,KAAK;YACL,UAAU,EAAE,MAAM;YAClB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;oBAC1B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;oBAChC,WAAW,EAAE,iBAAiB;oBAC9B,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAC7C,CAAC;SACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/commands/tools/list.d.ts

@@ -35,6 +35,7 @@ export interface ToolsListOptions {
      */
     readonly provenance?: readonly ToolProvenance[];
     readonly manifests?: readonly ToolPluginManifest[];
+    readonly env?: NodeJS.ProcessEnv;
 }
 /** Build the effective tool inventory. Read-only; never imports a runtime. */
 export declare function toolsList(opts: ToolsListOptions): ToolsListResult;

package/dist/commands/tools/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,wBAAwB,CAAC;AAK5E,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACpD;AAwBD,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe,CA0BjE"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/tools/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,wBAAwB,CAAC;AAK5E,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AA6BD,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe,CA2BjE"}