opensip-cli 0.1.6 → 0.1.7

package/dist/commands/command-scope-index.d.ts

@@ -7,7 +7,7 @@
  * commandSpecs. This keeps `CommandSpec.scope` as the source of truth instead
  * of a parallel allowlist.
  */
-import type { HostSubcommandGroup } from './host-subcommand-groups.js';
+import type { HostSubcommandGroup, ToolPluginGroup } from './host-subcommand-groups.js';
 import type { CommandScopeRequirement } from '@opensip-cli/core';
 import type { Command } from 'commander';
 export type CommandScopeIndex = ReadonlyMap<string, CommandScopeRequirement>;
@@ -15,11 +15,25 @@ export interface CommandScopeSpec {
     readonly name: string;
     readonly aliases?: readonly string[];
     readonly scope: CommandScopeRequirement;
+    /**
+     * When set, this tool command is nested under the named primary verb (the
+     * `<tool> <verb>` grammar — see `CommandSpec.parent`). The index then keys it
+     * under `${parent} ${name}` so `commandPath` resolves `graph export` /
+     * `fit list` rather than a bare `export` / `list`. Omitted ⇒ flat root key.
+     */
+    readonly parent?: string;
 }
 export interface CommandScopeIndexInput {
     readonly hostSpecs: readonly CommandScopeSpec[];
     readonly hostGroups: readonly HostSubcommandGroup[];
     readonly toolSpecs: readonly CommandScopeSpec[];
+    /**
+     * The DOMAIN-BOUND per-tool `plugin` groups (mounted under each pack-supporting
+     * tool primary, e.g. `opensip fit plugin list`). Each leaf keys under
+     * `${toolVerb} plugin ${leaf}` so `commandPath` resolves the doubly-nested path.
+     * Optional so callers without tools (isolated tests) can omit it.
+     */
+    readonly toolPluginGroups?: readonly ToolPluginGroup[];
 }
 export declare function buildCommandScopeIndex(input: CommandScopeIndexInput): CommandScopeIndex;
 /**

package/dist/commands/command-scope-index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-scope-index.d.ts","sourceRoot":"","sources":["../../src/commands/command-scope-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACjD;AAaD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CAUvF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,CAU1D"}
+{"version":3,"file":"command-scope-index.d.ts","sourceRoot":"","sources":["../../src/commands/command-scope-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE7E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACxD;AAaD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CAmBvF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,CAU1D"}

package/dist/commands/command-scope-index.js

@@ -15,11 +15,20 @@ function addSpec(index, pathPrefix, spec) {
 }
 export function buildCommandScopeIndex(input) {
     const index = new Map();
-    input.toolSpecs.forEach((spec) => addSpec(index, undefined, spec));
+    // Tool specs key flat by `name`, EXCEPT `parent`-nested specs (the
+    // `<tool> <verb>` grammar, taxonomy Task 0.4), which key under
+    // `${parent} ${name}` so `commandPath` resolves `graph export` / `fit list`.
+    input.toolSpecs.forEach((spec) => addSpec(index, spec.parent, spec));
     input.hostSpecs.forEach((spec) => addSpec(index, undefined, spec));
     input.hostGroups.forEach((group) => {
         group.leaves.forEach((leaf) => addSpec(index, group.name, leaf));
     });
+    // Per-tool `plugin` group leaves key under the doubly-nested
+    // `${toolVerb} plugin ${leaf}` path (e.g. `fit plugin list`), matching what
+    // `commandPath` resolves for the mounted `opensip fit plugin list`.
+    (input.toolPluginGroups ?? []).forEach((group) => {
+        group.leaves.forEach((leaf) => addSpec(index, `${group.toolVerb} plugin`, leaf));
+    });
     return index;
 }
 /**

package/dist/commands/command-scope-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-scope-index.js","sourceRoot":"","sources":["../../src/commands/command-scope-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH,SAAS,OAAO,CACd,KAA2C,EAC3C,UAA8B,EAC9B,IAAsB;IAEtB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA6B;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEzD,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,aAAsB;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAmB,aAAa,CAAC;IAC3C,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,CAAC;IAClB,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"command-scope-index.js","sourceRoot":"","sources":["../../src/commands/command-scope-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkCH,SAAS,OAAO,CACd,KAA2C,EAC3C,UAA8B,EAC9B,IAAsB;IAEtB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA6B;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEzD,mEAAmE;IACnE,+DAA+D;IAC/D,6EAA6E;IAC7E,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,6DAA6D;IAC7D,4EAA4E;IAC5E,oEAAoE;IACpE,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/C,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,aAAsB;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAmB,aAAa,CAAC;IAC3C,OAAO,MAAM,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,CAAC;IAClB,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/commands/completion.d.ts

@@ -26,8 +26,30 @@ export type Shell = 'bash' | 'zsh' | 'fish';
 /**
  * Internal/machine-facing command names never offered in shell completion.
  * These are spawned by the host (sharded build, off-process engine workers,
- * machine exports), never typed by a user. Single source for both the
- * inventory builder and the drift test.
+ * machine exports), never typed by a user.
+ *
+ * This is the STATIC FALLBACK / default for {@link assembleCompletionInventory}'s
+ * `internalCommands` argument. The live path passes a descriptor-driven set
+ * (`visibility: 'internal'` + this fallback), keeping the runtime filter in
+ * lockstep with the `--help` hide pass. The set still backs the completion-drift
+ * test, and matters whenever a caller does not supply the descriptor-derived set.
+ *
+ * Note: the four `*-run-worker` / `*-shard-worker` names AND
+ * `graph-equivalence-check` are the Tier-3 `visibility: 'internal'` commands —
+ * they also flow through the descriptor-driven set. They are listed here so the
+ * static fallback is correct on its own (the historical gap was the missing
+ * `graph-equivalence-check`).
+ */
+/**
+ * Internal/machine-facing command names never offered in shell completion — the
+ * `visibility: 'internal'` Tier-3 commands: `*-run-worker` / `*-shard-worker` and
+ * `graph-equivalence-check` are machine-only IPC/CI bootstrap entry points
+ * (ADR-0028), revealed by `OPENSIP_CLI_SHOW_INTERNAL=1`.
+ *
+ * The legacy flat-root export aliases (`catalog-export` / `sarif-export` /
+ * `graph-baseline-export` / `fit-baseline-export`) were removed entirely, so they
+ * no longer appear in the tool registry and need no completion suppression — the
+ * canonical nested `<tool> export` forms are the only export surface.
  */
 export declare const INTERNAL_COMMANDS: ReadonlySet<string>;
 /**
@@ -41,7 +63,11 @@ export interface CompletionInventory {
     readonly subcommands: readonly string[];
     /** Per-command long-flag list, keyed by command name (and alias). */
     readonly commandFlags: Readonly<Record<string, readonly string[]>>;
-    /** Sub-subcommand names for the action-less groups (`plugin`, `sessions`). */
+    /**
+     * Sub-subcommand names for the action-less groups (`sessions`, `tools`), the
+     * `<tool> <verb>` grammar (`fit export`…), and the per-tool `plugin` groups
+     * (`fit plugin`, keyed under `${toolVerb} plugin`).
+     */
     readonly groupSubcommands: Readonly<Record<string, readonly string[]>>;
 }
 /** Minimal structural view of a `CommandSpec` this module needs to read. */
@@ -52,14 +78,34 @@ export interface SpecLike {
     readonly options?: readonly {
         readonly flag: string;
     }[];
+    /**
+     * When set, this tool command is a `<parent> <name>` sub-subcommand (the
+     * `<tool> <verb>` grammar — see `CommandSpec.parent`, taxonomy Task 0.4). The
+     * inventory then offers it as a leaf under `parent` (like a `plugin`/`sessions`
+     * group leaf) and keys its flags under `${parent} ${name}`. Omitted ⇒ a flat
+     * top-level command.
+     */
+    readonly parent?: string;
 }
-/** One action-less group (`plugin` / `sessions`) and its leaf command names. */
+/** One action-less group (`sessions` / `tools`) and its leaf command names. */
 export interface GroupLike {
     readonly name: string;
     readonly leaves: readonly {
         readonly name: string;
     }[];
 }
+/**
+ * One pack-supporting tool's `plugin` group, keyed by the tool verb it mounts
+ * under (`fit`/`sim`). The `plugin` parent is offered as a leaf under that verb
+ * (`opensip fit <TAB>` ⇒ `… plugin`), and the `add|list|remove|sync` leaves are
+ * registered under the `${toolVerb} plugin` path for deeper completion.
+ */
+export interface ToolPluginGroupLike {
+    readonly toolVerb: string;
+    readonly leaves: readonly {
+        readonly name: string;
+    }[];
+}
 /**
  * Extract the canonical long `--flag` from a Commander flag string —
  * `'-y, --yes'` → `'--yes'`, `'--no-cache'` → `'--no-cache'`,
@@ -77,13 +123,28 @@ export declare function specLongFlags(spec: SpecLike): readonly string[];
  * Assemble the completion inventory from the live specs. Pure: callers pass
  * the tool command specs (from the populated `ToolRegistry`), the top-level
  * host specs, and the action-less groups; this turns them into the flag /
- * subcommand maps the script builders consume. Internal worker commands are
- * filtered out ({@link INTERNAL_COMMANDS}).
+ * subcommand maps the script builders consume.
+ *
+ * Internal commands are filtered out by `input.internalCommands` — the
+ * descriptor-driven `visibility: 'internal'` set the host computes from the live
+ * tool registry (`internalCommandNames`), so completion and the `--help` hide
+ * pass key on the SAME source. Defaults to the static {@link INTERNAL_COMMANDS}
+ * fallback when omitted (tests / callers without a registry). The
+ * `OPENSIP_CLI_SHOW_INTERNAL=1` reveal is applied at the call site: the host
+ * passes an EMPTY set to skip filtering when the override is on.
  */
 export declare function assembleCompletionInventory(input: {
     readonly toolSpecs: readonly SpecLike[];
     readonly hostSpecs: readonly SpecLike[];
     readonly groups: readonly GroupLike[];
+    /**
+     * The DOMAIN-BOUND per-tool `plugin` groups (mounted under each pack-supporting
+     * tool primary). Folded into the group map so completion offers `plugin` under
+     * the tool verb and `add|list|remove|sync` under `${toolVerb} plugin`. Optional
+     * so callers without tools omit it.
+     */
+    readonly toolPluginGroups?: readonly ToolPluginGroupLike[];
+    readonly internalCommands?: ReadonlySet<string>;
 }): CompletionInventory;
 export declare function buildCompletionScript(shell: Shell, inventory: CompletionInventory): string;
 export declare function printCompletionScript(shell: Shell, inventory: CompletionInventory, write?: (s: string) => void): void;

package/dist/commands/completion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzE,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAOhD,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACnE,8EAA8E;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CACxE;AAED,4EAA4E;AAC5E,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzD;AAED,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AA0BD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,MAAM,EAAE,CAQ/D;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;CACvC,GAAG,mBAAmB,CA2BtB;AA6GD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,GAAG,MAAM,CAY1F;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,mBAAmB,EAC9B,KAAK,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAqC,GAC1D,IAAI,CAEN"}
+{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzE,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAMhD,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACnE;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CACxE;AAED,4EAA4E;AAC5E,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxD;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+EAA+E;AAC/E,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AA0BD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,MAAM,EAAE,CAQ/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACjD,GAAG,mBAAmB,CAyDtB;AA4HD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,GAAG,MAAM,CAY1F;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,mBAAmB,EAC9B,KAAK,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAqC,GAC1D,IAAI,CAEN"}

package/dist/commands/completion.js

@@ -21,18 +21,38 @@
  * matching existing check slugs) is ever needed, that's an additive change
  * that can query `opensip fit --list` at completion time.
  */
-// @fitness-ignore-file only-documented-toolcli-seams -- the `completion <shell>` command's whole purpose is to write a sourceable shell-completion script to stdout for the user to pipe/redirect; that script IS its output, not run findings through a ToolCliContext seam (mirrors the ESLint exemption for this file). See architecture review finding 5 (interactive host commands legitimately need a narrow TTY/script seam outside the run data path).
 import { commonFlags } from '@opensip-cli/contracts';
 /**
  * Internal/machine-facing command names never offered in shell completion.
  * These are spawned by the host (sharded build, off-process engine workers,
- * machine exports), never typed by a user. Single source for both the
- * inventory builder and the drift test.
+ * machine exports), never typed by a user.
+ *
+ * This is the STATIC FALLBACK / default for {@link assembleCompletionInventory}'s
+ * `internalCommands` argument. The live path passes a descriptor-driven set
+ * (`visibility: 'internal'` + this fallback), keeping the runtime filter in
+ * lockstep with the `--help` hide pass. The set still backs the completion-drift
+ * test, and matters whenever a caller does not supply the descriptor-derived set.
+ *
+ * Note: the four `*-run-worker` / `*-shard-worker` names AND
+ * `graph-equivalence-check` are the Tier-3 `visibility: 'internal'` commands —
+ * they also flow through the descriptor-driven set. They are listed here so the
+ * static fallback is correct on its own (the historical gap was the missing
+ * `graph-equivalence-check`).
+ */
+/**
+ * Internal/machine-facing command names never offered in shell completion — the
+ * `visibility: 'internal'` Tier-3 commands: `*-run-worker` / `*-shard-worker` and
+ * `graph-equivalence-check` are machine-only IPC/CI bootstrap entry points
+ * (ADR-0028), revealed by `OPENSIP_CLI_SHOW_INTERNAL=1`.
+ *
+ * The legacy flat-root export aliases (`catalog-export` / `sarif-export` /
+ * `graph-baseline-export` / `fit-baseline-export`) were removed entirely, so they
+ * no longer appear in the tool registry and need no completion suppression — the
+ * canonical nested `<tool> export` forms are the only export surface.
  */
 export const INTERNAL_COMMANDS = new Set([
     'graph-shard-worker',
-    'catalog-export',
-    'sarif-export',
+    'graph-equivalence-check',
     'fit-run-worker',
     'sim-run-worker',
     'graph-run-worker',
@@ -85,16 +105,39 @@ export function specLongFlags(spec) {
  * Assemble the completion inventory from the live specs. Pure: callers pass
  * the tool command specs (from the populated `ToolRegistry`), the top-level
  * host specs, and the action-less groups; this turns them into the flag /
- * subcommand maps the script builders consume. Internal worker commands are
- * filtered out ({@link INTERNAL_COMMANDS}).
+ * subcommand maps the script builders consume.
+ *
+ * Internal commands are filtered out by `input.internalCommands` — the
+ * descriptor-driven `visibility: 'internal'` set the host computes from the live
+ * tool registry (`internalCommandNames`), so completion and the `--help` hide
+ * pass key on the SAME source. Defaults to the static {@link INTERNAL_COMMANDS}
+ * fallback when omitted (tests / callers without a registry). The
+ * `OPENSIP_CLI_SHOW_INTERNAL=1` reveal is applied at the call site: the host
+ * passes an EMPTY set to skip filtering when the override is on.
  */
 export function assembleCompletionInventory(input) {
+    const internalCommands = input.internalCommands ?? INTERNAL_COMMANDS;
     const commandFlags = {};
     const subcommands = [];
+    // `parent` → leaf names, accumulated from `parent`-nested tool specs (the
+    // `<tool> <verb>` grammar). Merged into `groupSubcommands` below so the
+    // emitted script offers `<parent> <leaf>` exactly like a host group.
+    const toolGroupLeaves = {};
     for (const spec of [...input.toolSpecs, ...input.hostSpecs]) {
-        if (INTERNAL_COMMANDS.has(spec.name))
+        if (internalCommands.has(spec.name))
             continue;
         const flags = specLongFlags(spec);
+        // A `parent`-nested tool spec is a sub-subcommand, NOT a top-level command:
+        // offer it as a leaf under its parent and key its flags under the qualified
+        // `${parent} ${name}` path (mirroring the host group leaves).
+        if (spec.parent !== undefined) {
+            const leaves = (toolGroupLeaves[spec.parent] ??= []);
+            for (const name of [spec.name, ...(spec.aliases ?? [])]) {
+                leaves.push(name);
+                commandFlags[`${spec.parent} ${name}`] = flags;
+            }
+            continue;
+        }
         for (const name of [spec.name, ...(spec.aliases ?? [])]) {
             subcommands.push(name);
             commandFlags[name] = flags;
@@ -105,6 +148,20 @@ export function assembleCompletionInventory(input) {
         subcommands.push(group.name);
         groupSubcommands[group.name] = group.leaves.map((l) => l.name);
     }
+    // Fold tool-command sub-subcommands into the group map. A primary verb
+    // (e.g. `graph`) is already a top-level subcommand with its own flags; adding
+    // its nested leaves here lets the script also complete `graph export` etc.
+    for (const [parent, leaves] of Object.entries(toolGroupLeaves)) {
+        groupSubcommands[parent] = [...(groupSubcommands[parent] ?? []), ...leaves];
+    }
+    // Fold the per-tool `plugin` groups in: `plugin` becomes a completable leaf
+    // under the tool verb (`opensip fit <TAB>` ⇒ `… plugin`), and the bound
+    // leaf names register under the doubly-nested `${toolVerb} plugin` key for
+    // deeper completion. There is NO top-level `plugin` group anymore.
+    for (const group of input.toolPluginGroups ?? []) {
+        groupSubcommands[group.toolVerb] = [...(groupSubcommands[group.toolVerb] ?? []), 'plugin'];
+        groupSubcommands[`${group.toolVerb} plugin`] = group.leaves.map((l) => l.name);
+    }
     // `help` is a Commander built-in the script also surfaces.
     subcommands.push('help');
     return {
@@ -121,7 +178,14 @@ function bashScript(inv) {
     const commonFlagList = COMMON_FLAGS.join(' ');
     const arms = [];
     for (const [name, subsList] of Object.entries(inv.groupSubcommands)) {
-        arms.push(`    ${name}) COMPREPLY=($(compgen -W "${subsList.join(' ')}" -- "\${cur}")) ;;`);
+        // A primary tool verb (e.g. `fit`/`graph`) is BOTH a flag-bearing command
+        // AND a group with nested `<tool> <verb>` children (taxonomy Task 0.4): at
+        // the second-word position the user can type either a nested subcommand or
+        // one of the parent's own flags, so offer the union. An action-less host
+        // group (`plugin`/`sessions`) has no own flags, so its union is just leaves.
+        const ownFlags = inv.commandFlags[name] ?? [];
+        const offered = [...new Set([...subsList, ...ownFlags])];
+        arms.push(`    ${name}) COMPREPLY=($(compgen -W "${offered.join(' ')}" -- "\${cur}")) ;;`);
     }
     for (const [name, flags] of Object.entries(inv.commandFlags)) {
         if (name in inv.groupSubcommands)
@@ -162,7 +226,10 @@ function zshScript(inv) {
     const commonFlagList = COMMON_FLAGS.join(' ');
     const arms = [];
     for (const [name, subsList] of Object.entries(inv.groupSubcommands)) {
-        arms.push(`    ${name}) _values '${name} subcommand' ${subsList.join(' ')} ;;`);
+        // Union of nested subcommands + the parent verb's own flags (see bashScript).
+        const ownFlags = inv.commandFlags[name] ?? [];
+        const offered = [...new Set([...subsList, ...ownFlags])];
+        arms.push(`    ${name}) _values '${name} subcommand' ${offered.join(' ')} ;;`);
     }
     for (const [name, flags] of Object.entries(inv.commandFlags)) {
         if (name in inv.groupSubcommands)
@@ -203,8 +270,13 @@ function fishScript(inv) {
         `complete -c opensip -f -n "__fish_use_subcommand" -a "${subs}" -d "opensip subcommand"`,
     ];
     for (const [name, flags] of Object.entries(inv.commandFlags)) {
-        if (name in inv.groupSubcommands)
-            continue;
+        // A primary tool verb that also hosts nested `<tool> <verb>` children stays
+        // in `groupSubcommands`, but it still owns its own flags — emit them so fish
+        // completes `fit --<flag>` (the qualified `${parent} ${name}` keys for the
+        // nested leaves are skipped here; they are not top-level commands). An
+        // action-less host group has no `commandFlags` entry, so it is unaffected.
+        if (name.includes(' '))
+            continue; // a nested `${parent} ${name}` key, not a verb
         for (const flag of flags) {
             lines.push(`complete -c opensip -n "__fish_seen_subcommand_from ${name}" -l "${flag.replace(/^--/, '')}"`);
         }

package/dist/commands/completion.js.map

@@ -1 +1 @@
-{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,+bAA+b;AAE/b,OAAO,EAAE,WAAW,EAAsB,MAAM,wBAAwB,CAAC;AAIzE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,oBAAoB;IACpB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CAAC;AA+BH;;;wEAGwE;AACxE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;IAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC,CAAC,CAC8B,CAAC;AAEnC;;oEAEoE;AACpE,MAAM,YAAY,GAAsB;IACtC,UAAU,CAAC,GAAG;IACd,UAAU,CAAC,IAAI;IACf,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,KAAK;IAChB,UAAU,CAAC,KAAK;IAChB,QAAQ;IACR,WAAW;CACZ,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,MAAM,YAAY,GAAsC,EAAE,CAAC;IAC3D,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACxD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAsC,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,2DAA2D;IAC3D,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzB,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7C,YAAY;QACZ,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAS,UAAU,CAAC,GAAwB;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,8BAA8B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC9F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,IAAI,GAAG,CAAC,gBAAgB;YAAE,SAAS;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,8BAA8B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,mCAAmC,cAAc,qBAAqB,CAAC,CAAC;IAClF,OAAO;;;;;;;;;;;+BAWsB,IAAI;;;;;;EAMjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;CAMhB,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM;AACN,8EAA8E;AAE9E,SAAS,SAAS,CAAC,GAAwB;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,IAAI,gBAAgB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,IAAI,GAAG,CAAC,gBAAgB;YAAE,SAAS;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,oBAAoB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,yBAAyB,cAAc,KAAK,CAAC,CAAC;IACxD,OAAO;;;;;;iBAMQ,IAAI;;;;;;;;EAQnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;CAKhB,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAS,UAAU,CAAC,GAAwB;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa;QACtB,+BAA+B;QAC/B,wDAAwD;QACxD,EAAE;QACF,yDAAyD,IAAI,2BAA2B;KACzF,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,IAAI,GAAG,CAAC,gBAAgB;YAAE,SAAS;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CACR,uDAAuD,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CAAC,KAAY,EAAE,SAA8B;IAChF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAY,EACZ,SAA8B,EAC9B,QAA6B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3D,KAAK,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,WAAW,EAAsB,MAAM,wBAAwB,CAAC;AAIzE;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,oBAAoB;IACpB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CAAC;AAsDH;;;wEAGwE;AACxE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;IAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC,CAAC,CAC8B,CAAC;AAEnC;;oEAEoE;AACpE,MAAM,YAAY,GAAsB;IACtC,UAAU,CAAC,GAAG;IACd,UAAU,CAAC,IAAI;IACf,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,KAAK;IAChB,UAAU,CAAC,KAAK;IAChB,QAAQ;IACR,WAAW;CACZ,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAY3C;IACC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,iBAAiB,CAAC;IACrE,MAAM,YAAY,GAAsC,EAAE,CAAC;IAC3D,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,0EAA0E;IAC1E,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,eAAe,GAA6B,EAAE,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,4EAA4E;QAC5E,4EAA4E;QAC5E,8DAA8D;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClB,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;YACjD,CAAC;YACD,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACxD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAsC,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,uEAAuE;IACvE,8EAA8E;IAC9E,2EAA2E;IAC3E,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/D,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9E,CAAC;IACD,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACjD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3F,gBAAgB,CAAC,GAAG,KAAK,CAAC,QAAQ,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,2DAA2D;IAC3D,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzB,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7C,YAAY;QACZ,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAS,UAAU,CAAC,GAAwB;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpE,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,8BAA8B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,IAAI,GAAG,CAAC,gBAAgB;YAAE,SAAS;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,8BAA8B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,mCAAmC,cAAc,qBAAqB,CAAC,CAAC;IAClF,OAAO;;;;;;;;;;;+BAWsB,IAAI;;;;;;EAMjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;CAMhB,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM;AACN,8EAA8E;AAE9E,SAAS,SAAS,CAAC,GAAwB;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpE,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,IAAI,gBAAgB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,IAAI,GAAG,CAAC,gBAAgB;YAAE,SAAS;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,oBAAoB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,yBAAyB,cAAc,KAAK,CAAC,CAAC;IACxD,OAAO;;;;;;iBAMQ,IAAI;;;;;;;;EAQnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;CAKhB,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,SAAS,UAAU,CAAC,GAAwB;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa;QACtB,+BAA+B;QAC/B,wDAAwD;QACxD,EAAE;QACF,yDAAyD,IAAI,2BAA2B;KACzF,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,4EAA4E;QAC5E,6EAA6E;QAC7E,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,+CAA+C;QACjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CACR,uDAAuD,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CAAC,KAAY,EAAE,SAA8B;IAChF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAY,EACZ,SAA8B,EAC9B,QAA6B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3D,KAAK,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/commands/configure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../src/commands/configure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAIlE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAqBpD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAMD;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CA2BrE"}
+{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../src/commands/configure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAIlE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAqBpD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevE;AAMD;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CA2BrE"}

package/dist/commands/configure.js

@@ -12,7 +12,6 @@
  * layer. This file is the prompt+UX wrapper around those primitives.
  * Audit 2026-05-23 M3.
  */
-// @fitness-ignore-file only-documented-toolcli-seams -- interactive TTY prompts: readline prompt text + masked-key verification UX, not machine run output through a ToolCliContext seam (mirrors the ESLint exemption for this file). Result lines route through the Ink `configure-done` CommandResult. (Architecture review finding 5: host UX commands have a narrow sanctioned exemption.)
 import { join } from 'node:path';
 import { createInterface } from 'node:readline';
 import { GLOBAL_CONFIG_PATH, readGlobalConfig, writeGlobalConfig } from '@opensip-cli/config';

package/dist/commands/configure.js.map

@@ -1 +1 @@
-{"version":3,"file":"configure.js","sourceRoot":"","sources":["../../src/commands/configure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,gYAAgY;AAEhY,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAI/E,2EAA2E;AAC3E,wEAAwE;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,MAAM,CAAC,QAAgB;IAC9B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC;QAC1C,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE,sBAAsB;QAChC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACf,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;KACxD,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,QAAQ;QACN,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,6EAA6E;YAC3E,2DAA2D,CAClE,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IAEpC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,mEAAmE;QACnE,6DAA6D;QAC7D,uDAAuD;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACzF,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;IACtB,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE5B,2EAA2E;IAC3E,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAE/B,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,kBAAkB;QAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC;KACxB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"configure.js","sourceRoot":"","sources":["../../src/commands/configure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAI/E,2EAA2E;AAC3E,wEAAwE;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,MAAM,CAAC,QAAgB;IAC9B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC;QAC1C,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE,sBAAsB;QAChC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACf,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;KACxD,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,QAAQ;QACN,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,6EAA6E;YAC3E,2DAA2D,CAClE,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IAEpC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,mEAAmE;QACnE,6DAA6D;QAC7D,uDAAuD;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACzF,CAAC;IAED,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;IACtB,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE5B,2EAA2E;IAC3E,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAE/B,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,kBAAkB;QAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC;KACxB,CAAC;AACJ,CAAC"}

package/dist/commands/host-command-specs.d.ts

@@ -3,12 +3,15 @@
  * {@link CommandSpec}s, mounted through the SAME `mountCommandSpec` plane the
  * tools use (launch Phase 6).
  *
- * Host commands (`init` / `configure` / `sessions` / `plugin` / `report` /
- * `completion` / `uninstall`) are NOT tool plugins — they don't ride on a
+ * Host commands (`init` / `configure` / `sessions` / `report` / `completion` /
+ * `uninstall` / `tools`) are NOT tool plugins — they don't ride on a
  * `Tool.commandSpecs` and aren't discovered. But making them mount via the same
  * `mountCommandSpec` means the Phase 7 `command-surface-parity` guardrail sees
- * ONE uniform command surface: there is no second, more-privileged
- * raw-Commander path for "blessed" CLI-owned commands.
+ * ONE uniform command surface: no second, more-privileged raw-Commander path for
+ * "blessed" CLI-owned commands. The pack-management `plugin {add,list,remove,
+ * sync}` ops are host-owned too, but mount UNDER each pack-supporting tool
+ * primary (`opensip fit plugin …`) via {@link mountToolPluginGroups} — there is
+ * no top-level `opensip plugin`.
  *
  * Each spec's handler closes over the per-invocation {@link CliCommandsContext}
  * (render / setExitCode / datastore thunk / pluginLayouts) — the same data the
@@ -18,10 +21,11 @@
  * `signal-envelope` / `live-view` arms are never exercised by a host command, so
  * `CliCommandsContext` is a valid (leaner) `CommandMountContext`.
  *
- * The two action-less subcommand GROUPS (`sessions`, `plugin`) and their leaf
- * specs live in `host-subcommand-groups.ts` (a leaf module that lets
- * `completion.ts` source its sub-subcommand names without a module cycle). This
- * module assembles the TOP-LEVEL specs and mounts the whole surface.
+ * The action-less subcommand GROUPS (`sessions`, `tools`) + the domain-bound
+ * per-tool `plugin` group leaves (and their {@link mountToolPluginGroups}) live
+ * in `host-subcommand-groups.ts` (a leaf module that lets `completion.ts` source
+ * its sub-subcommand names without a module cycle). This module assembles the
+ * TOP-LEVEL specs and mounts the whole surface.
  *
  * Specs are built per-invocation (inside the builders below, not at module
  * load) so the `--cwd` defaults that resolve to `process.cwd()` are evaluated
@@ -43,7 +47,10 @@ export declare function buildTopLevelHostSpecs(ctx: CliCommandsContext): readonl
  * Mount every host command onto `program` through the shared `mountCommandSpec`
  * plane. Top-level specs mount directly; each subcommand group becomes a raw
  * action-less parent (the documented exception) onto which its leaf specs mount
- * via the same `mountCommandSpec`.
+ * via the same `mountCommandSpec`. Finally, the per-tool `plugin` groups mount
+ * UNDER each pack-supporting tool primary via {@link mountToolPluginGroups} —
+ * which runs AFTER the tools were mounted (the composition root mounts tools
+ * before `registerCliCommands`), so the tool primaries already exist.
  */
 export declare function mountHostCommands(program: CliProgram, ctx: CliCommandsContext): void;
 //# sourceMappingURL=host-command-specs.d.ts.map

package/dist/commands/host-command-specs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-command-specs.d.ts","sourceRoot":"","sources":["../../src/commands/host-command-specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAgBH,OAAO,EAA6B,KAAK,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAKvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,wBAAwB,CAAC;AAiTtE;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,SAAS,QAAQ,EAAE,CASnF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,IAAI,CAUpF"}
+{"version":3,"file":"host-command-specs.d.ts","sourceRoot":"","sources":["../../src/commands/host-command-specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAkBH,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,6BAA6B,CAAC;AAMrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,wBAAwB,CAAC;AAmUtE;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,SAAS,QAAQ,EAAE,CASnF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,GAAG,IAAI,CAWpF"}

package/dist/commands/host-command-specs.js

@@ -3,12 +3,15 @@
  * {@link CommandSpec}s, mounted through the SAME `mountCommandSpec` plane the
  * tools use (launch Phase 6).
  *
- * Host commands (`init` / `configure` / `sessions` / `plugin` / `report` /
- * `completion` / `uninstall`) are NOT tool plugins — they don't ride on a
+ * Host commands (`init` / `configure` / `sessions` / `report` / `completion` /
+ * `uninstall` / `tools`) are NOT tool plugins — they don't ride on a
  * `Tool.commandSpecs` and aren't discovered. But making them mount via the same
  * `mountCommandSpec` means the Phase 7 `command-surface-parity` guardrail sees
- * ONE uniform command surface: there is no second, more-privileged
- * raw-Commander path for "blessed" CLI-owned commands.
+ * ONE uniform command surface: no second, more-privileged raw-Commander path for
+ * "blessed" CLI-owned commands. The pack-management `plugin {add,list,remove,
+ * sync}` ops are host-owned too, but mount UNDER each pack-supporting tool
+ * primary (`opensip fit plugin …`) via {@link mountToolPluginGroups} — there is
+ * no top-level `opensip plugin`.
  *
  * Each spec's handler closes over the per-invocation {@link CliCommandsContext}
  * (render / setExitCode / datastore thunk / pluginLayouts) — the same data the
@@ -18,10 +21,11 @@
  * `signal-envelope` / `live-view` arms are never exercised by a host command, so
  * `CliCommandsContext` is a valid (leaner) `CommandMountContext`.
  *
- * The two action-less subcommand GROUPS (`sessions`, `plugin`) and their leaf
- * specs live in `host-subcommand-groups.ts` (a leaf module that lets
- * `completion.ts` source its sub-subcommand names without a module cycle). This
- * module assembles the TOP-LEVEL specs and mounts the whole surface.
+ * The action-less subcommand GROUPS (`sessions`, `tools`) + the domain-bound
+ * per-tool `plugin` group leaves (and their {@link mountToolPluginGroups}) live
+ * in `host-subcommand-groups.ts` (a leaf module that lets `completion.ts` source
+ * its sub-subcommand names without a module cycle). This module assembles the
+ * TOP-LEVEL specs and mounts the whole surface.
  *
  * Specs are built per-invocation (inside the builders below, not at module
  * load) so the `--cwd` defaults that resolve to `process.cwd()` are evaluated
@@ -32,10 +36,11 @@ import { EXIT_CODES } from '@opensip-cli/contracts';
 import { ConfigurationError, defineCommand } from '@opensip-cli/core';
 import { composeAndWriteReport } from '../report-compose.js';
 import { executeAgentCatalog } from './agent-catalog.js';
-import { assembleCompletionInventory, printCompletionScript, } from './completion.js';
+import { assembleCompletionInventory, printCompletionScript, INTERNAL_COMMANDS, } from './completion.js';
 import { executeConfigure } from './configure.js';
-import { buildHostSubcommandGroups } from './host-subcommand-groups.js';
+import { buildHostSubcommandGroups, buildToolPluginGroups, mountToolPluginGroups, } from './host-subcommand-groups.js';
 import { executeInit } from './init.js';
+import { showInternalCommands } from './internal-command-visibility.js';
 import { mountCommandSpec } from './mount-command-spec.js';
 import { executeUninstall } from './uninstall.js';
 /** Shared `output` mode for the host commands that return a renderable result. */
@@ -168,10 +173,25 @@ function buildCompletionSpec(ctx) {
             // completion spec (it contributes a static, options-free descriptor for
             // itself), keeping the dependency one-directional.
             const host = buildHostCompletionSurface(ctx);
+            // tool-command-surface-taxonomy Task 1.3/1.5: filter Tier-3 internal
+            // commands from completion using the descriptor-driven set (the SAME source
+            // the `--help` hide pass keys on), so help and completion stay in lockstep.
+            //
+            // The legacy flat-root export aliases were removed entirely, so there is no
+            // separate deprecated-export suppression set to union here — the canonical
+            // nested `<tool> export` forms flow into completion via the sub-subcommand
+            // emission. The descriptor-driven internal set is the ONLY part the
+            // OPENSIP_CLI_SHOW_INTERNAL override un-hides — revealing it = passing an
+            // empty internal set so no command is filtered.
+            const internalCommands = showInternalCommands()
+                ? new Set()
+                : (ctx.toolInternalCommands ?? INTERNAL_COMMANDS);
             const inventory = assembleCompletionInventory({
                 toolSpecs: ctx.toolCommandSpecs ?? [],
                 hostSpecs: host.specs,
                 groups: host.groups,
+                toolPluginGroups: host.toolPluginGroups,
+                internalCommands,
             });
             printCompletionScript(normalized, inventory);
         },
@@ -279,19 +299,21 @@ function buildNonCompletionHostSpecs(ctx) {
 }
 /**
  * The host portion of the completion inventory: the `SpecLike` views of every
- * top-level host command and the action-less groups. The completion command's
- * own surface is the static {@link COMPLETION_SELF_SPEC} stand-in; every OTHER
- * host command is read from its live spec (so its flags can't drift). Consumed
- * by the `completion` handler INSTEAD of {@link buildTopLevelHostSpecs}, so the
- * handler never depends back on {@link buildCompletionSpec}.
- *
- * Order is irrelevant here — the inventory subcommand list is sorted — so the
- * static completion descriptor is simply appended.
+ * top-level host command, the action-less groups, and the per-tool `plugin`
+ * groups. The completion command's own surface is the static
+ * {@link COMPLETION_SELF_SPEC} stand-in; every OTHER host command is read from
+ * its live spec (so its flags can't drift). Consumed by the `completion` handler
+ * INSTEAD of {@link buildTopLevelHostSpecs}, so the handler never depends back on
+ * {@link buildCompletionSpec}.
  */
 function buildHostCompletionSurface(ctx) {
     return {
         specs: [...buildNonCompletionHostSpecs(ctx), COMPLETION_SELF_SPEC],
         groups: buildHostSubcommandGroups(ctx),
+        toolPluginGroups: buildToolPluginGroups(ctx).map((g) => ({
+            toolVerb: g.toolVerb,
+            leaves: g.leaves.map((l) => ({ name: l.name })),
+        })),
     };
 }
 /**
@@ -315,7 +337,10 @@ export function buildTopLevelHostSpecs(ctx) {
  * Mount every host command onto `program` through the shared `mountCommandSpec`
  * plane. Top-level specs mount directly; each subcommand group becomes a raw
  * action-less parent (the documented exception) onto which its leaf specs mount
- * via the same `mountCommandSpec`.
+ * via the same `mountCommandSpec`. Finally, the per-tool `plugin` groups mount
+ * UNDER each pack-supporting tool primary via {@link mountToolPluginGroups} —
+ * which runs AFTER the tools were mounted (the composition root mounts tools
+ * before `registerCliCommands`), so the tool primaries already exist.
  */
 export function mountHostCommands(program, ctx) {
     for (const spec of buildTopLevelHostSpecs(ctx)) {
@@ -327,5 +352,6 @@ export function mountHostCommands(program, ctx) {
             mountCommandSpec(parent, leaf, ctx);
         }
     }
+    mountToolPluginGroups(program, ctx);
 }
 //# sourceMappingURL=host-command-specs.js.map