opensip-cli 0.1.2 → 0.1.3

package/dist/bootstrap/bind-tool-context.d.ts

@@ -0,0 +1,16 @@
+/**
+ * bind-tool-context — mount-time guard for tool-scoped host planes.
+ *
+ * The host-owned baseline, toolState, governance, audit, and entitlement planes
+ * are all keyed by a `tool` string for backward compatibility with the public
+ * ToolCliContext. The mounted command already has an owning Tool, so bind that
+ * ownership into a thin context wrapper and reject accidental or malicious
+ * cross-tool keys before they reach persistence.
+ */
+import { type Tool, type ToolCliContext } from '@opensip-cli/core';
+import type { RunActionHooks } from './run-plane.js';
+type BoundToolCliContext = ToolCliContext & RunActionHooks;
+export declare function toolOwnedKeys(tool: Tool): ReadonlySet<string>;
+export declare function bindToolCliContext(tool: Tool, ctx: ToolCliContext): BoundToolCliContext;
+export {};
+//# sourceMappingURL=bind-tool-context.d.ts.map

package/dist/bootstrap/bind-tool-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind-tool-context.d.ts","sourceRoot":"","sources":["../../src/bootstrap/bind-tool-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAA2B,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,KAAK,mBAAmB,GAAG,cAAc,GAAG,cAAc,CAAC;AAM3D,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAS7D;AAqGD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,GAAG,mBAAmB,CA2DvF"}

package/dist/bootstrap/bind-tool-context.js

@@ -0,0 +1,160 @@
+/**
+ * bind-tool-context — mount-time guard for tool-scoped host planes.
+ *
+ * The host-owned baseline, toolState, governance, audit, and entitlement planes
+ * are all keyed by a `tool` string for backward compatibility with the public
+ * ToolCliContext. The mounted command already has an owning Tool, so bind that
+ * ownership into a thin context wrapper and reject accidental or malicious
+ * cross-tool keys before they reach persistence.
+ */
+import { PluginIncompatibleError } from '@opensip-cli/core';
+function primaryCommandName(tool) {
+    return tool.commandSpecs?.[0]?.name ?? tool.commands[0]?.name;
+}
+export function toolOwnedKeys(tool) {
+    return new Set([
+        tool.metadata.id,
+        tool.metadata.name,
+        primaryCommandName(tool),
+        tool.sessionReplay?.tool,
+    ].filter((value) => typeof value === 'string' && value.length > 0));
+}
+function describeTool(tool) {
+    return tool.metadata.name || tool.metadata.id;
+}
+/**
+ * @throws {PluginIncompatibleError} When a mounted tool attempts to use a
+ * host-owned seam with another tool's namespace.
+ */
+function assertOwnToolKey(tool, allowed, requested, seam) {
+    if (allowed.has(requested))
+        return;
+    throw new PluginIncompatibleError(`tool '${describeTool(tool)}' attempted to use ${seam} for tool namespace '${requested}'. ` +
+        `Allowed namespaces: ${[...allowed].sort().join(', ')}.`, {
+        code: 'PLUGIN.IDENTITY_NAMESPACE_MISMATCH',
+        diagnostic: `cross-tool ${seam} namespace '${requested}'`,
+    });
+}
+function wrapHostPlanes(tool, allowed, hostPlanes) {
+    if (hostPlanes === undefined)
+        return undefined;
+    const wrapped = {};
+    const governance = hostPlanes.governance;
+    if (governance !== undefined) {
+        wrapped.governance = {
+            getGovernanceState: (toolId) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.governance.getGovernanceState');
+                return governance.getGovernanceState(toolId);
+            },
+            listForProject: governance.listForProject.bind(governance),
+            queryAudit: (toolId, filter) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.governance.queryAudit');
+                return governance.queryAudit(toolId, filter);
+            },
+            recordInstallation: (toolId, record) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.governance.recordInstallation');
+                return governance.recordInstallation(toolId, record);
+            },
+            recordApprovalDecision: (toolId, decision) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.governance.recordApprovalDecision');
+                return governance.recordApprovalDecision(toolId, decision);
+            },
+            setBlock: (toolId, blocked, reason) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.governance.setBlock');
+                return governance.setBlock(toolId, blocked, reason);
+            },
+            checkAllowed: (toolId, action) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.governance.checkAllowed');
+                return governance.checkAllowed(toolId, action);
+            },
+        };
+    }
+    const audit = hostPlanes.audit;
+    if (audit !== undefined) {
+        wrapped.audit = {
+            append: (toolId, entry) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.audit.append');
+                return audit.append(toolId, entry);
+            },
+            query: (toolId, filter) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.audit.query');
+                return audit.query(toolId, filter);
+            },
+            ...(audit.exportForCloud ? { exportForCloud: audit.exportForCloud.bind(audit) } : {}),
+        };
+    }
+    const entitlements = hostPlanes.entitlements;
+    if (entitlements !== undefined) {
+        wrapped.entitlements = {
+            check: (toolId, action) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.entitlements.check');
+                return entitlements.check(toolId, action);
+            },
+            recordUsage: (toolId, usage) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.entitlements.recordUsage');
+                return entitlements.recordUsage(toolId, usage);
+            },
+            getLicenseState: (toolId) => {
+                assertOwnToolKey(tool, allowed, toolId, 'hostPlanes.entitlements.getLicenseState');
+                return entitlements.getLicenseState(toolId);
+            },
+        };
+    }
+    return wrapped;
+}
+export function bindToolCliContext(tool, ctx) {
+    const allowed = toolOwnedKeys(tool);
+    const source = ctx;
+    const bound = Object.defineProperties({}, Object.getOwnPropertyDescriptors(source));
+    Object.defineProperties(bound, {
+        saveBaseline: {
+            value: (toolId, envelope) => {
+                assertOwnToolKey(tool, allowed, toolId, 'saveBaseline');
+                return ctx.saveBaseline(toolId, envelope);
+            },
+        },
+        compareBaseline: {
+            value: (toolId, envelope) => {
+                assertOwnToolKey(tool, allowed, toolId, 'compareBaseline');
+                return ctx.compareBaseline(toolId, envelope);
+            },
+        },
+        exportBaselineSarif: {
+            value: (toolId, path) => {
+                assertOwnToolKey(tool, allowed, toolId, 'exportBaselineSarif');
+                return ctx.exportBaselineSarif(toolId, path);
+            },
+        },
+        exportBaselineFingerprints: {
+            value: (toolId, path) => {
+                assertOwnToolKey(tool, allowed, toolId, 'exportBaselineFingerprints');
+                return ctx.exportBaselineFingerprints(toolId, path);
+            },
+        },
+        toolState: {
+            value: {
+                get: (toolId, key) => {
+                    assertOwnToolKey(tool, allowed, toolId, 'toolState.get');
+                    return ctx.toolState.get(toolId, key);
+                },
+                put: (toolId, key, payload) => {
+                    assertOwnToolKey(tool, allowed, toolId, 'toolState.put');
+                    return ctx.toolState.put(toolId, key, payload);
+                },
+                delete: (toolId, key) => {
+                    assertOwnToolKey(tool, allowed, toolId, 'toolState.delete');
+                    return ctx.toolState.delete(toolId, key);
+                },
+                list: (toolId) => {
+                    assertOwnToolKey(tool, allowed, toolId, 'toolState.list');
+                    return ctx.toolState.list(toolId);
+                },
+            },
+        },
+        hostPlanes: {
+            value: wrapHostPlanes(tool, allowed, ctx.hostPlanes),
+        },
+    });
+    return bound;
+}
+//# sourceMappingURL=bind-tool-context.js.map

package/dist/bootstrap/bind-tool-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind-tool-context.js","sourceRoot":"","sources":["../../src/bootstrap/bind-tool-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,uBAAuB,EAAkC,MAAM,mBAAmB,CAAC;AAM5F,SAAS,kBAAkB,CAAC,IAAU;IACpC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAU;IACtC,OAAO,IAAI,GAAG,CACZ;QACE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI;QAClB,kBAAkB,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,aAAa,EAAE,IAAI;KACzB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAU;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,IAAU,EACV,OAA4B,EAC5B,SAAiB,EACjB,IAAY;IAEZ,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO;IACnC,MAAM,IAAI,uBAAuB,CAC/B,SAAS,YAAY,CAAC,IAAI,CAAC,sBAAsB,IAAI,wBAAwB,SAAS,KAAK;QACzF,uBAAuB,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC1D;QACE,IAAI,EAAE,oCAAoC;QAC1C,UAAU,EAAE,cAAc,IAAI,eAAe,SAAS,GAAG;KAC1D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,IAAU,EACV,OAA4B,EAC5B,UAAwC;IAExC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,OAAO,GAA8C,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IACzC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,UAAU,GAAG;YACnB,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC7B,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,CAAC,CAAC;gBACpF,OAAO,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;YACD,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;YAC1D,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC7B,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;gBAC5E,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YACD,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACrC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,CAAC,CAAC;gBACpF,OAAO,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;YACD,sBAAsB,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAC3C,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,8CAA8C,CAAC,CAAC;gBACxF,OAAO,UAAU,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC7D,CAAC;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,CAAC,CAAC;gBAC1E,OAAO,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACtD,CAAC;YACD,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC/B,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oCAAoC,CAAC,CAAC;gBAC9E,OAAO,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,GAAG;YACd,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBACxB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,CAAC,CAAC;gBACnE,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;gBAClE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC7C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,YAAY,GAAG;YACrB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,+BAA+B,CAAC,CAAC;gBACzE,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5C,CAAC;YACD,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBAC7B,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;gBAC/E,OAAO,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjD,CAAC;YACD,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC1B,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,yCAAyC,CAAC,CAAC;gBACnF,OAAO,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAU,EAAE,GAAmB;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAW,GAAG,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CACnC,EAAE,EACF,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAClB,CAAC;IAEzB,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE;QAC7B,YAAY,EAAE;YACZ,KAAK,EAAE,CAAC,MAAc,EAAE,QAAiB,EAAE,EAAE;gBAC3C,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;gBACxD,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;SACF;QACD,eAAe,EAAE;YACf,KAAK,EAAE,CAAC,MAAc,EAAE,QAAiB,EAAE,EAAE;gBAC3C,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBAC3D,OAAO,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC/C,CAAC;SACF;QACD,mBAAmB,EAAE;YACnB,KAAK,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;gBACtC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;SACF;QACD,0BAA0B,EAAE;YAC1B,KAAK,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;gBACtC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;gBACtE,OAAO,GAAG,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;SACF;QACD,SAAS,EAAE;YACT,KAAK,EAAE;gBACL,GAAG,EAAE,CAAC,MAAc,EAAE,GAAW,EAAE,EAAE;oBACnC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;oBACzD,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,GAAG,EAAE,CAAC,MAAc,EAAE,GAAW,EAAE,OAAgB,EAAE,EAAE;oBACrD,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;oBACzD,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBACjD,CAAC;gBACD,MAAM,EAAE,CAAC,MAAc,EAAE,GAAW,EAAE,EAAE;oBACtC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;oBAC5D,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBACD,IAAI,EAAE,CAAC,MAAc,EAAE,EAAE;oBACvB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;oBAC1D,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;aACoC;SACxC;QACD,UAAU,EAAE;YACV,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC;SACrD;KACF,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/bootstrap/build-per-run-scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-per-run-scope.d.ts","sourceRoot":"","sources":["../../src/bootstrap/build-per-run-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,MAAM,EACX,KAAK,cAAc,EAEnB,QAAQ,EACR,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE;QACX,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;KACrC,CAAC;CACH;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,QAAQ,CAqIvE"}
+{"version":3,"file":"build-per-run-scope.d.ts","sourceRoot":"","sources":["../../src/bootstrap/build-per-run-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,MAAM,EAEX,KAAK,cAAc,EAEnB,QAAQ,EAGR,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAoDzD,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE;QACX,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;KACrC,CAAC;CACH;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,QAAQ,CAqIvE"}

package/dist/bootstrap/build-per-run-scope.js

@@ -19,11 +19,44 @@
  */
 import { join } from 'node:path';
 import { resolveEffectiveCloudConfig } from '@opensip-cli/config';
-import { createCapabilityRegistry, resolveUserPaths, RunScope, } from '@opensip-cli/core';
+import { createCapabilityRegistry, PluginIncompatibleError, resolveUserPaths, RunScope, } from '@opensip-cli/core';
 import { resolveSignalSink } from '@opensip-cli/output';
 import { buildDatastoreThunk } from '../cli-context.js';
 import { buildTargets } from './build-targets.js';
 import { composeAndValidateToolConfig, wireCapabilityRegistry } from './config-and-capabilities.js';
+const FORBIDDEN_SCOPE_CONTRIBUTION_KEYS = new Set(['__proto__', 'prototype', 'constructor']);
+/**
+ * @throws {PluginIncompatibleError} When a tool returns an invalid scope
+ * contribution or attempts to overwrite an existing scope key.
+ */
+function installScopeContribution(scope, tool, contribution) {
+    if (typeof contribution !== 'object' || contribution === null || Array.isArray(contribution)) {
+        throw new PluginIncompatibleError(`tool '${tool.metadata.name || tool.metadata.id}' returned a non-object scope contribution`, {
+            code: 'PLUGIN.SCOPE_CONTRIBUTION_INVALID',
+            diagnostic: 'contributeScope must return a plain object',
+        });
+    }
+    for (const key of Object.keys(contribution)) {
+        if (FORBIDDEN_SCOPE_CONTRIBUTION_KEYS.has(key)) {
+            throw new PluginIncompatibleError(`tool '${tool.metadata.name || tool.metadata.id}' returned forbidden scope key '${key}'`, {
+                code: 'PLUGIN.SCOPE_CONTRIBUTION_FORBIDDEN_KEY',
+                diagnostic: `forbidden scope key '${key}'`,
+            });
+        }
+        // `key in scope` (not `hasOwnProperty`) so prototype members are protected
+        // too: `RunScope.dispose()` lives on the prototype, and an own-property
+        // shadow would silently hijack `disposeCurrentScope()`. This also rejects
+        // `Object.prototype` names; no namespaced tool subscope key collides with
+        // those, so the stricter check has no legitimate false positive.
+        if (key in scope) {
+            throw new PluginIncompatibleError(`tool '${tool.metadata.name || tool.metadata.id}' attempted to overwrite scope key '${key}'`, {
+                code: 'PLUGIN.SCOPE_CONTRIBUTION_COLLISION',
+                diagnostic: `scope key '${key}' already exists`,
+            });
+        }
+    }
+    Object.assign(scope, contribution);
+}
 /**
  * Build the per-run RunScope + perform the post-construction wiring
  * (contributeScope, capabilities, toolConfig, targets).
@@ -100,7 +133,7 @@ export function buildPerRunScope(input) {
     for (const tool of tools.list()) {
         const contribution = tool.contributeScope?.();
         if (contribution)
-            Object.assign(scope, contribution);
+            installScopeContribution(scope, tool, contribution);
     }
     // §5.3 Phase 4: per-run capability registry (manifest domains → real registrars).
     const capabilities = wireCapabilityRegistry({

package/dist/bootstrap/build-per-run-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"build-per-run-scope.js","sourceRoot":"","sources":["../../src/bootstrap/build-per-run-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACL,wBAAwB,EAIxB,gBAAgB,EAChB,QAAQ,GAIT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAoCpG;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EACJ,OAAO,EACP,KAAK,EACL,WAAW,EACX,UAAU,EACV,SAAS,EACT,UAAU,EACV,MAAM,EACN,OAAO,EACP,MAAM,EACN,EAAE,GACH,GAAG,KAAK,CAAC;IAEV,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAExC,uDAAuD;IACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,MAAM;QACN,KAAK,EAAE,2BAA2B,CAAC,WAAW,CAAC,KAAK,CAAC;QACrD,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,sCAAsC;KAChG,CAAC,CAAC;IAEH,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,4BAA4B,CAAC;QACpF,KAAK;QACL,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACxE,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,wEAAwE;IACxE,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC;QACzB,MAAM;QACN,cAAc,EAAE,OAAO;QACvB,SAAS;QACT,KAAK;QACL,UAAU;QACV,KAAK;QACL,+DAA+D;QAC/D,iEAAiE;QACjE,uDAAuD;QACvD,iDAAiD;QACjD,SAAS,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC;QAC/C,sEAAsE;QACtE,iEAAiE;QACjE,0DAA0D;QAC1D,yEAAyE;QACzE,yEAAyE;QACzE,EAAE,EAAE;YACF,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM;YAC5C,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,aAAa,EAAE,SAAS;QACxB,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,qEAAqE;IACrE,gFAAgF;IAChF,wCAAwC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACrE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,+BAA+B,EAAE;QAC9F,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KACjE,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAE/E,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC9C,IAAI,YAAY;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED,kFAAkF;IAClF,MAAM,YAAY,GAAG,sBAAsB,CAAC;QAC1C,KAAK;QACL,SAAS;QACT,QAAQ,EAAE,wBAAwB,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,KAAK,CAAC,MAAM,uBAAuB,EAAE;QACrF,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE9D,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,YAAY,GAAwC,UAAU;QAClE,CAAC,CAAG,UAAsC,CAAC,OAA+C;QAC1F,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,oBAAoB,GAAG;QAC3B,YAAY,EAAE,OAAO,YAAY,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5F,cAAc,EACZ,OAAO,YAAY,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;KACrF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;QACnB,YAAY;QACZ,UAAU;QACV,OAAO;QACP,oBAAoB;QACpB,GAAG,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC;KAC/C,CAAC,CAAC;IAEH,4EAA4E;IAC5E,MAAM,oBAAoB,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC3E,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,UAAU,EACV,OAAO,EACP,uBAAuB,oBAAoB,oBAAoB,CAChE,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CACzB,OAA4E,EAC5E,cAAuB;IAEvB,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QACpE,CAAC,CAAC,EAAE,cAAc,EAAE,cAAyC,EAAE;QAC/D,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,sFAAsF;AACtF,mFAAmF;AACnF,iFAAiF;AACjF,gFAAgF;AAChF,2BAA2B"}
+{"version":3,"file":"build-per-run-scope.js","sourceRoot":"","sources":["../../src/bootstrap/build-per-run-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACL,wBAAwB,EAGxB,uBAAuB,EAEvB,gBAAgB,EAChB,QAAQ,GAMT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAIpG,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAE7F;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,KAAe,EACf,IAAU,EACV,YAA+B;IAE/B,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,uBAAuB,CAC/B,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,4CAA4C,EAC3F;YACE,IAAI,EAAE,mCAAmC;YACzC,UAAU,EAAE,4CAA4C;SACzD,CACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,IAAI,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,uBAAuB,CAC/B,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,mCAAmC,GAAG,GAAG,EACxF;gBACE,IAAI,EAAE,yCAAyC;gBAC/C,UAAU,EAAE,wBAAwB,GAAG,GAAG;aAC3C,CACF,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,uBAAuB,CAC/B,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,uCAAuC,GAAG,GAAG,EAC5F;gBACE,IAAI,EAAE,qCAAqC;gBAC3C,UAAU,EAAE,cAAc,GAAG,kBAAkB;aAChD,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAkCD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EACJ,OAAO,EACP,KAAK,EACL,WAAW,EACX,UAAU,EACV,SAAS,EACT,UAAU,EACV,MAAM,EACN,OAAO,EACP,MAAM,EACN,EAAE,GACH,GAAG,KAAK,CAAC;IAEV,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAExC,uDAAuD;IACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,MAAM;QACN,KAAK,EAAE,2BAA2B,CAAC,WAAW,CAAC,KAAK,CAAC;QACrD,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,sCAAsC;KAChG,CAAC,CAAC;IAEH,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,4BAA4B,CAAC;QACpF,KAAK;QACL,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACxE,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,wEAAwE;IACxE,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC;QACzB,MAAM;QACN,cAAc,EAAE,OAAO;QACvB,SAAS;QACT,KAAK;QACL,UAAU;QACV,KAAK;QACL,+DAA+D;QAC/D,iEAAiE;QACjE,uDAAuD;QACvD,iDAAiD;QACjD,SAAS,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC;QAC/C,sEAAsE;QACtE,iEAAiE;QACjE,0DAA0D;QAC1D,yEAAyE;QACzE,yEAAyE;QACzE,EAAE,EAAE;YACF,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM;YAC5C,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,aAAa,EAAE,SAAS;QACxB,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,qEAAqE;IACrE,gFAAgF;IAChF,wCAAwC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACrE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,+BAA+B,EAAE;QAC9F,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KACjE,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAE/E,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC9C,IAAI,YAAY;YAAE,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,CAAC;IAED,kFAAkF;IAClF,MAAM,YAAY,GAAG,sBAAsB,CAAC;QAC1C,KAAK;QACL,SAAS;QACT,QAAQ,EAAE,wBAAwB,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,KAAK,CAAC,MAAM,uBAAuB,EAAE;QACrF,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE9D,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,YAAY,GAAwC,UAAU;QAClE,CAAC,CAAG,UAAsC,CAAC,OAA+C;QAC1F,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,oBAAoB,GAAG;QAC3B,YAAY,EAAE,OAAO,YAAY,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5F,cAAc,EACZ,OAAO,YAAY,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;KACrF,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;QACnB,YAAY;QACZ,UAAU;QACV,OAAO;QACP,oBAAoB;QACpB,GAAG,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC;KAC/C,CAAC,CAAC;IAEH,4EAA4E;IAC5E,MAAM,oBAAoB,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC3E,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,UAAU,EACV,OAAO,EACP,uBAAuB,oBAAoB,oBAAoB,CAChE,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CACzB,OAA4E,EAC5E,cAAuB;IAEvB,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QACpE,CAAC,CAAC,EAAE,cAAc,EAAE,cAAyC,EAAE;QAC/D,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,sFAAsF;AACtF,mFAAmF;AACnF,iFAAiF;AACjF,gFAAgF;AAChF,2BAA2B"}

package/dist/bootstrap/execute-post-bailout-bootstrap.d.ts

@@ -0,0 +1,45 @@
+/**
+ * execute-post-bailout-bootstrap — post-bailout phases 5–9 (ADR-0052).
+ *
+ * Side effects after the bailout window: per-run logger, scope build/enter,
+ * host start effects, and tool preflight. Injectable deps support table-driven
+ * phase-order tests without Commander.
+ */
+import { createRunLogger, enterScope, type Logger, type RunScope } from '@opensip-cli/core';
+import { startProfiling } from '../telemetry/profiling.js';
+import { checkForUpdate } from '../update-notifier.js';
+import { buildPerRunScope } from './build-per-run-scope.js';
+import { loadOwningToolCapabilities } from './load-tool-capabilities.js';
+import { maybeInitializeOwningTool, resolveOwningTool } from './owning-tool-init.js';
+import type { PreActionBootstrapPlan } from './plan-pre-action-bootstrap.js';
+import type { PreActionRuntime } from './pre-action-runtime.js';
+/** Recorded phase transitions for ordering tests. */
+export type PhaseRecorder = (phase: string) => void;
+export interface PostBailoutBootstrapInput {
+    readonly plan: PreActionBootstrapPlan;
+    readonly runtime: PreActionRuntime;
+    readonly version: string;
+    readonly noCloud: boolean;
+    readonly apiKey?: string;
+}
+export interface PostBailoutBootstrapDeps {
+    readonly recordPhase?: PhaseRecorder;
+    readonly createRunLogger?: typeof createRunLogger;
+    readonly buildPerRunScope?: typeof buildPerRunScope;
+    readonly enterScope?: typeof enterScope;
+    readonly checkForUpdate?: typeof checkForUpdate;
+    readonly startProfiling?: typeof startProfiling;
+    readonly maybeInitializeOwningTool?: typeof maybeInitializeOwningTool;
+    readonly loadOwningToolCapabilities?: typeof loadOwningToolCapabilities;
+    readonly resolveOwningTool?: typeof resolveOwningTool;
+}
+export interface PostBailoutBootstrapResult {
+    readonly scope: RunScope;
+    readonly runLogger: Logger;
+}
+/**
+ * Run post-bailout bootstrap phases. Returns the entered scope and its
+ * per-run logger (ADR-0053).
+ */
+export declare function executePostBailoutBootstrap(input: PostBailoutBootstrapInput, deps?: PostBailoutBootstrapDeps): Promise<PostBailoutBootstrapResult>;
+//# sourceMappingURL=execute-post-bailout-bootstrap.d.ts.map

package/dist/bootstrap/execute-post-bailout-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-post-bailout-bootstrap.d.ts","sourceRoot":"","sources":["../../src/bootstrap/execute-post-bailout-bootstrap.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EAEf,UAAU,EAGV,KAAK,MAAM,EACX,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAmB,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAShE,qDAAqD;AACrD,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAEpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,eAAe,CAAC;IAClD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IAChD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACtE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;CACvD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAyBD;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,yBAAyB,EAChC,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAiGrC"}

package/dist/bootstrap/execute-post-bailout-bootstrap.js

@@ -0,0 +1,108 @@
+// @fitness-ignore-file detached-promises -- phase recorder, diagnostics, OTel meter, logger, and enterScope calls are synchronous; the async tool lifecycle calls are awaited below.
+/**
+ * execute-post-bailout-bootstrap — post-bailout phases 5–9 (ADR-0052).
+ *
+ * Side effects after the bailout window: per-run logger, scope build/enter,
+ * host start effects, and tool preflight. Injectable deps support table-driven
+ * phase-order tests without Commander.
+ */
+import { createRunLogger, currentScope, enterScope, getMeter, SystemError, } from '@opensip-cli/core';
+import { startProfiling } from '../telemetry/profiling.js';
+import { checkForUpdate, formatUpdateNag } from '../update-notifier.js';
+import { buildPerRunScope } from './build-per-run-scope.js';
+import { loadOwningToolCapabilities } from './load-tool-capabilities.js';
+import { maybeInitializeOwningTool, resolveOwningTool } from './owning-tool-init.js';
+import { PRE_ACTION_PHASES } from './pre-action-bootstrap-phases.js';
+const MODULE_TAG = 'cli:bootstrap';
+const CLI_PACKAGE_NAME = 'opensip-cli';
+function noopPhaseRecord() {
+    // Default when callers omit recordPhase (production hook path).
+}
+const defaultDeps = {
+    createRunLogger,
+    buildPerRunScope,
+    enterScope,
+    checkForUpdate,
+    startProfiling,
+    maybeInitializeOwningTool,
+    loadOwningToolCapabilities,
+    resolveOwningTool,
+};
+/**
+ * Run post-bailout bootstrap phases. Returns the entered scope and its
+ * per-run logger (ADR-0053).
+ */
+export async function executePostBailoutBootstrap(input, deps = {}) {
+    const d = { ...defaultDeps, ...deps };
+    const record = deps.recordPhase ?? noopPhaseRecord;
+    const { plan, runtime, version, noCloud, apiKey } = input;
+    const { languages, tools, manifests, provenance } = runtime;
+    record(PRE_ACTION_PHASES.projectSideEffects);
+    const runLogger = d.createRunLogger(plan.runLoggerOptions);
+    const bannerSize = plan.cliDefaults.ui?.banner ?? 'mini';
+    const update = d.checkForUpdate({ name: CLI_PACKAGE_NAME, version });
+    if (update && (bannerSize !== 'mini' || plan.jsonOutput)) {
+        process.stderr.write(formatUpdateNag(version, update));
+    }
+    record(PRE_ACTION_PHASES.buildScope);
+    const scope = d.buildPerRunScope({
+        project: plan.project,
+        runId: plan.runId,
+        cwd: plan.cwd,
+        cliDefaults: plan.cliDefaults,
+        registries: { languages, tools },
+        manifests,
+        provenance,
+        apiKey,
+        noCloud,
+        logger: runLogger,
+        ui: { version, update },
+    });
+    record(PRE_ACTION_PHASES.enterScope);
+    d.enterScope(scope); // resilience-ok: Commander postAction in pre-action-hook.ts disposes the entered RunScope after the action completes.
+    if (!currentScope()) {
+        throw new SystemError('Scope was not entered before command dispatch', {
+            code: 'SYSTEM.SCOPE.NOT_ENTERED',
+        });
+    }
+    record(PRE_ACTION_PHASES.hostStartEffects);
+    scope.diagnostics.event('load', 'debug', `${tools.list().length} tool(s) loaded`);
+    scope.diagnostics.counter('tools.loaded', tools.list().length);
+    getMeter('opensip-cli').createCounter('opensip_cli.commands.started').add(1, {
+        command: plan.commandName,
+    });
+    scope.diagnostics.event('validate', 'debug', `project config resolved (scope: ${plan.project.scope})`);
+    runLogger.info({
+        evt: 'cli.run.start',
+        module: MODULE_TAG,
+        runId: plan.runId,
+        command: plan.commandName,
+        cwd: plan.cwd,
+        projectRoot: plan.project.projectRoot,
+        scope: plan.project.scope,
+    });
+    if (plan.project.walkedUp > 0) {
+        runLogger.info({
+            evt: 'cli.project.discovered',
+            module: MODULE_TAG,
+            runId: plan.runId,
+            cwd: plan.cwd,
+            projectRoot: plan.project.projectRoot,
+            walkedUp: plan.project.walkedUp,
+        });
+    }
+    d.startProfiling(scope, plan.commandName);
+    record(PRE_ACTION_PHASES.toolPreflight);
+    await d.maybeInitializeOwningTool(tools, plan.commandName, plan.runId);
+    const driven = await d.loadOwningToolCapabilities({
+        owningTool: d.resolveOwningTool(tools, plan.commandName),
+        projectDir: plan.project.projectRoot,
+        configPath: plan.project.scope === 'project' ? plan.project.configPath : undefined,
+    });
+    if (driven > 0) {
+        scope.diagnostics.event('load', 'debug', `drove ${String(driven)} owning-tool capability domain(s) (see per-domain 'capability ... loaded' events for contribution counts + errors)`);
+        scope.diagnostics.counter('capabilities.driven', driven);
+    }
+    return { scope, runLogger };
+}
+//# sourceMappingURL=execute-post-bailout-bootstrap.js.map

package/dist/bootstrap/execute-post-bailout-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-post-bailout-bootstrap.js","sourceRoot":"","sources":["../../src/bootstrap/execute-post-bailout-bootstrap.ts"],"names":[],"mappings":"AAAA,qLAAqL;AACrL;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,WAAW,GAGZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,SAAS,eAAe;IACtB,gEAAgE;AAClE,CAAC;AA8BD,MAAM,WAAW,GAYb;IACF,eAAe;IACf,gBAAgB;IAChB,UAAU;IACV,cAAc;IACd,cAAc;IACd,yBAAyB;IACzB,0BAA0B;IAC1B,iBAAiB;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAgC,EAChC,OAAiC,EAAE;IAEnC,MAAM,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC;IACnD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAE5D,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE3D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,IAAI,MAAM,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAChC,SAAS;QACT,UAAU;QACV,MAAM;QACN,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;KACxB,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,sHAAsH;IAE3I,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CAAC,+CAA+C,EAAE;YACrE,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAE3C,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;IAClF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;IAE/D,QAAQ,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;QAC3E,OAAO,EAAE,IAAI,CAAC,WAAW;KAC1B,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,UAAU,EACV,OAAO,EACP,mCAAmC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CACzD,CAAC;IAEF,SAAS,CAAC,IAAI,CAAC;QACb,GAAG,EAAE,eAAe;QACpB,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACrC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;KAC1B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,wBAAwB;YAC7B,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;SAChC,CAAC,CAAC;IACL,CAAC;IAED,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAE1C,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAExC,MAAM,CAAC,CAAC,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,0BAA0B,CAAC;QAChD,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;QACxD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACpC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KACnF,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,MAAM,EACN,OAAO,EACP,SAAS,MAAM,CAAC,MAAM,CAAC,oHAAoH,CAC5I,CAAC;QACF,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}

package/dist/bootstrap/plan-pre-action-bootstrap.d.ts

@@ -0,0 +1,45 @@
+/**
+ * plan-pre-action-bootstrap — pure planner for the pre-action bootstrap
+ * phases through the bailout window (ADR-0052).
+ *
+ * Does NOT mutate the process-wide logger, enter a scope, or open a
+ * datastore. Returns a {@link PreActionBootstrapPlan} the hook (or tests)
+ * pass to the post-bailout executor.
+ */
+import { type LoggerOptions, type ProjectContext, type ToolRegistry } from '@opensip-cli/core';
+import { PRE_ACTION_PHASES } from './pre-action-bootstrap-phases.js';
+import type { loadCliDefaults as loadCliDefaultsFn } from './cli-defaults.js';
+export interface PlanPreActionBootstrapInput {
+    readonly opts: Record<string, unknown>;
+    readonly cwd: string;
+    readonly cwdExplicit: boolean;
+    readonly runId: string;
+    readonly commandName: string;
+    readonly explicitConfigPath?: string;
+    readonly tools: ToolRegistry;
+}
+export interface PreActionBootstrapPlan {
+    readonly runId: string;
+    readonly cwd: string;
+    readonly cwdExplicit: boolean;
+    readonly opts: Record<string, unknown>;
+    readonly cliDefaults: ReturnType<typeof loadCliDefaultsFn>;
+    readonly project: ProjectContext;
+    readonly commandName: string;
+    readonly extraAgnostic: ReadonlySet<string>;
+    readonly jsonOutput: boolean;
+    /** Per-run logger options computed after bailouts (ADR-0053). */
+    readonly runLoggerOptions: LoggerOptions;
+    readonly completedThrough: typeof PRE_ACTION_PHASES.bailoutWindow;
+}
+/** Collect tool CommandSpecs that declare `scope: 'none'` for no-project guard. */
+export declare function collectExtraAgnosticCommands(tools: ToolRegistry): ReadonlySet<string>;
+/**
+ * Plan phases 1–4 (read options through bailout window). Throws
+ * {@link BootstrapError} on config-resolve or bailout failures.
+ *
+ * @throws {BootstrapError} When config resolution fails or an early bootstrap
+ *   guard bails out before project side effects are allowed.
+ */
+export declare function planPreActionBootstrap(input: PlanPreActionBootstrapInput): PreActionBootstrapPlan;
+//# sourceMappingURL=plan-pre-action-bootstrap.d.ts.map

package/dist/bootstrap/plan-pre-action-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-pre-action-bootstrap.d.ts","sourceRoot":"","sources":["../../src/bootstrap/plan-pre-action-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAOrE,OAAO,KAAK,EAAE,eAAe,IAAI,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,iBAAiB,CAAC,aAAa,CAAC;CACnE;AAED,mFAAmF;AACnF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAarF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,sBAAsB,CAsDjG"}

package/dist/bootstrap/plan-pre-action-bootstrap.js

@@ -0,0 +1,86 @@
+/**
+ * plan-pre-action-bootstrap — pure planner for the pre-action bootstrap
+ * phases through the bailout window (ADR-0052).
+ *
+ * Does NOT mutate the process-wide logger, enter a scope, or open a
+ * datastore. Returns a {@link PreActionBootstrapPlan} the hook (or tests)
+ * pass to the post-bailout executor.
+ */
+import { existsSync } from 'node:fs';
+import { resolveProjectContext, resolveProjectPaths, } from '@opensip-cli/core';
+import { BootstrapError } from './bootstrap-error.js';
+import { loadCliDefaults, mergeConfigDefaults } from './cli-defaults.js';
+import { PRE_ACTION_PHASES } from './pre-action-bootstrap-phases.js';
+import { checkNoProjectAndBailout, checkSchemaVersionAndBailout, warnAboutPhantomRuntimes, } from './pre-action-guards.js';
+/** Collect tool CommandSpecs that declare `scope: 'none'` for no-project guard. */
+export function collectExtraAgnosticCommands(tools) {
+    const extra = new Set();
+    for (const tool of tools.list()) {
+        for (const c of tool.commands || []) {
+            if (c.scope === 'none') {
+                extra.add(c.name);
+                for (const alias of c.aliases ?? []) {
+                    extra.add(alias);
+                }
+            }
+        }
+    }
+    return extra;
+}
+/**
+ * Plan phases 1–4 (read options through bailout window). Throws
+ * {@link BootstrapError} on config-resolve or bailout failures.
+ *
+ * @throws {BootstrapError} When config resolution fails or an early bootstrap
+ *   guard bails out before project side effects are allowed.
+ */
+export function planPreActionBootstrap(input) {
+    const { opts, cwd, cwdExplicit, runId, commandName, tools, explicitConfigPath } = input;
+    const cliDefaults = loadCliDefaults(cwd, explicitConfigPath);
+    mergeConfigDefaults(opts, cliDefaults);
+    let project;
+    try {
+        project = resolveProjectContext({
+            cwd,
+            cwdExplicit,
+            explicitConfigPath,
+        });
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        throw new BootstrapError({
+            message: msg,
+            humanMessage: `✗ ${msg}`,
+            suggestion: 'Check opensip-cli.config.yml (or your --config path).',
+            exitCode: 2,
+        });
+    }
+    opts.projectContext = project;
+    opts.cwdExplicit = cwdExplicit;
+    const extraAgnostic = collectExtraAgnosticCommands(tools);
+    checkSchemaVersionAndBailout(project, runId);
+    checkNoProjectAndBailout(project, cwd, commandName, runId, extraAgnostic);
+    warnAboutPhantomRuntimes(project, opts.json === true);
+    const runLoggerOptions = {
+        silent: true,
+        debugMode: Boolean(opts.debug),
+        runId,
+        ...(project.scope === 'project' && existsSync(project.projectRoot)
+            ? { logDir: resolveProjectPaths(project.projectRoot).logsDir }
+            : {}),
+    };
+    return {
+        runId,
+        cwd,
+        cwdExplicit,
+        opts,
+        cliDefaults,
+        project,
+        commandName,
+        extraAgnostic,
+        jsonOutput: opts.json === true,
+        runLoggerOptions,
+        completedThrough: PRE_ACTION_PHASES.bailoutWindow,
+    };
+}
+//# sourceMappingURL=plan-pre-action-bootstrap.js.map

package/dist/bootstrap/plan-pre-action-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-pre-action-bootstrap.js","sourceRoot":"","sources":["../../src/bootstrap/plan-pre-action-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AA6BhC,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAAC,KAAmB;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClB,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;oBACpC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAkC;IACvE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;IAExF,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC7D,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEvC,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,qBAAqB,CAAC;YAC9B,GAAG;YACH,WAAW;YACX,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,IAAI,cAAc,CAAC;YACvB,OAAO,EAAE,GAAG;YACZ,YAAY,EAAE,KAAK,GAAG,EAAE;YACxB,UAAU,EAAE,uDAAuD;YACnE,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAE/B,MAAM,aAAa,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAE1D,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,wBAAwB,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1E,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAEtD,MAAM,gBAAgB,GAAkB;QACtC,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC;YAChE,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,OAAO;QACL,KAAK;QACL,GAAG;QACH,WAAW;QACX,IAAI;QACJ,WAAW;QACX,OAAO;QACP,WAAW;QACX,aAAa;QACb,UAAU,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;QAC9B,gBAAgB;QAChB,gBAAgB,EAAE,iBAAiB,CAAC,aAAa;KAClD,CAAC;AACJ,CAAC"}

package/dist/bootstrap/pre-action-bootstrap-phases.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Canonical bootstrap phase names (ADR-0052). The hook is the Commander
+ * adapter; business rules live behind the planner and post-bailout executor.
+ */
+export declare const PRE_ACTION_PHASES: {
+    readonly readCommandOptions: "read-command-options";
+    readonly mergeCliDefaults: "merge-cli-defaults";
+    readonly resolveProject: "resolve-project";
+    readonly bailoutWindow: "bailout-window";
+    readonly projectSideEffects: "project-side-effects";
+    readonly buildScope: "build-scope";
+    readonly enterScope: "enter-scope";
+    readonly hostStartEffects: "host-start-effects";
+    readonly toolPreflight: "tool-preflight";
+    readonly dispose: "dispose";
+};
+export type PreActionPhase = (typeof PRE_ACTION_PHASES)[keyof typeof PRE_ACTION_PHASES];
+/** Post-bailout phases in load-bearing order (phases 5–9 of ADR-0052). */
+export declare const POST_BAILOUT_PHASE_ORDER: readonly PreActionPhase[];
+//# sourceMappingURL=pre-action-bootstrap-phases.d.ts.map

package/dist/bootstrap/pre-action-bootstrap-phases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-action-bootstrap-phases.d.ts","sourceRoot":"","sources":["../../src/bootstrap/pre-action-bootstrap-phases.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;CAWpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAExF,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,EAAE,SAAS,cAAc,EAMpD,CAAC"}