opensip-cli 0.1.6 → 0.1.8

package/dist/bootstrap/scope-access.d.ts

@@ -32,6 +32,20 @@ export declare function readScope(): RunScope;
  *   the pre-action-hook resolved the context.
  */
 export declare function getCurrentProjectRoot(): string;
+/**
+ * A lazy datastore accessor (callable) that also exposes a `dispose()` to close
+ * the cached connection on scope teardown. Still assignable to the kernel's
+ * `DataStoreThunk` (`() => unknown`) — `dispose` is additive.
+ */
+export interface DatastoreThunk {
+    (): DataStore;
+    /**
+     * Close the cached connection (no-op if it was never opened). An arrow-type
+     * property, not a method, so it can be passed straight to `scope.onDispose`
+     * (no unbound-method footgun) while still being assignable on construction.
+     */
+    dispose: () => void;
+}
 /**
  * Build a closure-based datastore thunk for the given project.
  * Caches the open DataStore on first access. The pre-action-hook
@@ -43,7 +57,7 @@ export declare function getCurrentProjectRoot(): string;
  *   `project.scope === 'project'` first or handle the throw as a "no project
  *   found" error.
  */
-export declare function buildDatastoreThunk(project: ProjectContext, log?: Logger): () => DataStore;
+export declare function buildDatastoreThunk(project: ProjectContext, log?: Logger): DatastoreThunk;
 /**
  * Open (or return cached) project-local SQLite DataStore via the
  * scope's datastore thunk. Shared between tool action bodies and
@@ -65,4 +79,15 @@ export declare function getOrOpenDatastore(_log?: Logger): DataStore;
  *   datastore); other datastore-open failures propagate unchanged.
  */
 export declare function getProjectDatastore(): DataStore;
+/** How a datastore resolver should behave when scope or project context is absent. */
+export type DatastoreResolverMode = 'strict' | 'project-seam' | 'best-effort';
+/**
+ * Unified lazy datastore accessor for host planes and the run plane.
+ *
+ * - `strict` — throws when outside a project scope (via `getOrOpenDatastore`).
+ * - `project-seam` — maps outside-project to `ConfigurationError` for documented seams.
+ * - `best-effort` — returns `undefined` when scope or datastore is unavailable.
+ */
+export declare function createDatastoreResolver(mode: 'strict' | 'project-seam', logger?: Logger): () => DataStore;
+export declare function createDatastoreResolver(mode: 'best-effort', logger?: Logger): () => DataStore | undefined;
 //# sourceMappingURL=scope-access.d.ts.map

package/dist/bootstrap/scope-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope-access.d.ts","sourceRoot":"","sources":["../../src/bootstrap/scope-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,cAAc,EACnB,KAAK,QAAQ,EAKd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAE1E;;;;;;;GAOG;AACH,wBAAgB,SAAS,IAAI,QAAQ,CAWpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAS9C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,cAAc,EACvB,GAAG,GAAE,MAAsB,GAC1B,MAAM,SAAS,CAoBjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAAsB,GAAG,SAAS,CAG1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,SAAS,CAgB/C"}
+{"version":3,"file":"scope-access.d.ts","sourceRoot":"","sources":["../../src/bootstrap/scope-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,cAAc,EACnB,KAAK,QAAQ,EAKd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAE1E;;;;;;;GAOG;AACH,wBAAgB,SAAS,IAAI,QAAQ,CAWpC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAS9C;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,SAAS,CAAC;IACd;;;;OAIG;IACH,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,cAAc,EACvB,GAAG,GAAE,MAAsB,GAC1B,cAAc,CA8BhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAAsB,GAAG,SAAS,CAG1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,SAAS,CAgB/C;AAED,sFAAsF;AACtF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,cAAc,GAAG,aAAa,CAAC;AAE9E;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,GAAG,cAAc,EAC/B,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,SAAS,CAAC;AACnB,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,EACnB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,SAAS,GAAG,SAAS,CAAC"}

package/dist/bootstrap/scope-access.js

@@ -59,7 +59,7 @@ export function getCurrentProjectRoot() {
  */
 export function buildDatastoreThunk(project, log = defaultLogger) {
     let cached;
-    return () => {
+    const thunk = (() => {
         if (cached)
             return cached;
         if (project.scope !== 'project') {
@@ -74,7 +74,18 @@ export function buildDatastoreThunk(project, log = defaultLogger) {
             path,
         });
         return cached;
+    });
+    // Close the cached connection on scope teardown (registered via
+    // `scope.onDispose`). Closing checkpoints + truncates the WAL; without this the
+    // connection (and its growing -wal sidecar) leaked for the process lifetime.
+    thunk.dispose = () => {
+        if (!cached)
+            return;
+        cached.close();
+        cached = undefined;
+        log.info({ evt: 'cli.datastore.closed', module: 'cli:context' });
     };
+    return thunk;
 }
 /**
  * Open (or return cached) project-local SQLite DataStore via the
@@ -112,4 +123,30 @@ export function getProjectDatastore() {
         throw error;
     }
 }
+export function createDatastoreResolver(mode, logger = defaultLogger) {
+    switch (mode) {
+        case 'strict': {
+            return () => getOrOpenDatastore(logger);
+        }
+        case 'project-seam': {
+            return () => getProjectDatastore();
+        }
+        case 'best-effort': {
+            return () => {
+                try {
+                    const thunk = readScope().datastore;
+                    return thunk ? thunk() : undefined;
+                }
+                catch (error) {
+                    logger.debug({
+                        evt: 'cli.context.datastore_unavailable',
+                        module: 'cli:context',
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    return;
+                }
+            };
+        }
+    }
+}
 //# sourceMappingURL=scope-access.js.map

package/dist/bootstrap/scope-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-access.js","sourceRoot":"","sources":["../../src/bootstrap/scope-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,kBAAkB,EAIlB,WAAW,EACX,YAAY,EACZ,MAAM,IAAI,aAAa,EACvB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAkB,MAAM,wBAAwB,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,WAAW,CACnB,2FAA2F;YACzF,yFAAyF;YACzF,2FAA2F,EAC7F,EAAE,IAAI,EAAE,0BAA0B,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,cAAc,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,6EAA6E,EAC7E,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAuB,EACvB,MAAc,aAAa;IAE3B,IAAI,MAA6B,CAAC;IAClC,OAAO,GAAG,EAAE;QACV,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,WAAW,CACnB,2EAA2E;gBACzE,2EAA2E,EAC7E,EAAE,IAAI,EAAE,4CAA4C,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,UAAU,mBAAmB,CAAC;QACvF,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,sBAAsB;YAC3B,MAAM,EAAE,aAAa;YACrB,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,aAAa;IAC7D,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,SAAS,CAAC;IACpC,OAAO,KAAK,EAAe,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,WAAW;YAC5B,KAAK,CAAC,IAAI,KAAK,4CAA4C,EAC3D,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,+GAA+G;gBAC7G,+EAA+E,EACjF,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"scope-access.js","sourceRoot":"","sources":["../../src/bootstrap/scope-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,kBAAkB,EAIlB,WAAW,EACX,YAAY,EACZ,MAAM,IAAI,aAAa,EACvB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAkB,MAAM,wBAAwB,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,WAAW,CACnB,2FAA2F;YACzF,yFAAyF;YACzF,2FAA2F,EAC7F,EAAE,IAAI,EAAE,0BAA0B,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,cAAc,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,6EAA6E,EAC7E,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,CAAC;AAC7B,CAAC;AAiBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAuB,EACvB,MAAc,aAAa;IAE3B,IAAI,MAA6B,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,WAAW,CACnB,2EAA2E;gBACzE,2EAA2E,EAC7E,EAAE,IAAI,EAAE,4CAA4C,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,UAAU,mBAAmB,CAAC;QACvF,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,sBAAsB;YAC3B,MAAM,EAAE,aAAa;YACrB,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAmB,CAAC;IACrB,gEAAgE;IAChE,gFAAgF;IAChF,6EAA6E;IAC7E,KAAK,CAAC,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,SAAS,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,aAAa;IAC7D,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,SAAS,CAAC;IACpC,OAAO,KAAK,EAAe,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,WAAW;YAC5B,KAAK,CAAC,IAAI,KAAK,4CAA4C,EAC3D,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,+GAA+G;gBAC7G,+EAA+E,EACjF,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAoBD,MAAM,UAAU,uBAAuB,CACrC,IAA2B,EAC3B,SAAiB,aAAa;IAE9B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC;QACrC,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,OAAO,GAAG,EAAE;gBACV,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,SAAS,CAAC;oBACpC,OAAO,KAAK,CAAC,CAAC,CAAE,KAAK,EAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC;wBACX,GAAG,EAAE,mCAAmC;wBACxC,MAAM,EAAE,aAAa;wBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/bootstrap/skip-installed-plugins.d.ts

@@ -0,0 +1,23 @@
+/**
+ * skip-installed-plugins — incident-response kill switch for ambient npm tool
+ * discovery (architecture audit P0).
+ *
+ * Installed tools are discovered from ancestor `node_modules` during bootstrap,
+ * before Commander parses. Both the env var and `--no-plugins` are therefore
+ * read from `process.env` / raw argv — not from parsed Commander opts.
+ */
+/** Env var: any non-empty value skips installed npm tool discovery. */
+export declare const SKIP_INSTALLED_PLUGINS_ENV = "OPENSIP_CLI_SKIP_INSTALLED";
+/**
+ * True when argv contains `--no-plugins` anywhere (bootstrap runs before parse,
+ * so the flag may appear before or after the subcommand verb).
+ */
+export declare function isNoPluginsArgvFlag(argv: readonly string[]): boolean;
+/**
+ * Should bootstrap skip `discoverAndRegisterToolPackages`?
+ *
+ * @param argv `process.argv.slice(2)` — user args after the binary.
+ * @param env Injectable for tests (defaults to `process.env`).
+ */
+export declare function shouldSkipInstalledToolDiscovery(argv: readonly string[], env?: NodeJS.ProcessEnv): boolean;
+//# sourceMappingURL=skip-installed-plugins.d.ts.map

package/dist/bootstrap/skip-installed-plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-installed-plugins.d.ts","sourceRoot":"","sources":["../../src/bootstrap/skip-installed-plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,uEAAuE;AACvE,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAIT"}

package/dist/bootstrap/skip-installed-plugins.js

@@ -0,0 +1,30 @@
+/**
+ * skip-installed-plugins — incident-response kill switch for ambient npm tool
+ * discovery (architecture audit P0).
+ *
+ * Installed tools are discovered from ancestor `node_modules` during bootstrap,
+ * before Commander parses. Both the env var and `--no-plugins` are therefore
+ * read from `process.env` / raw argv — not from parsed Commander opts.
+ */
+/** Env var: any non-empty value skips installed npm tool discovery. */
+export const SKIP_INSTALLED_PLUGINS_ENV = 'OPENSIP_CLI_SKIP_INSTALLED';
+/**
+ * True when argv contains `--no-plugins` anywhere (bootstrap runs before parse,
+ * so the flag may appear before or after the subcommand verb).
+ */
+export function isNoPluginsArgvFlag(argv) {
+    return argv.includes('--no-plugins');
+}
+/**
+ * Should bootstrap skip `discoverAndRegisterToolPackages`?
+ *
+ * @param argv `process.argv.slice(2)` — user args after the binary.
+ * @param env Injectable for tests (defaults to `process.env`).
+ */
+export function shouldSkipInstalledToolDiscovery(argv, env = process.env) {
+    if (isNoPluginsArgvFlag(argv))
+        return true;
+    const raw = env[SKIP_INSTALLED_PLUGINS_ENV];
+    return raw !== undefined && raw.length > 0;
+}
+//# sourceMappingURL=skip-installed-plugins.js.map

package/dist/bootstrap/skip-installed-plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip-installed-plugins.js","sourceRoot":"","sources":["../../src/bootstrap/skip-installed-plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAC9C,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,mBAAmB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC5C,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7C,CAAC"}

package/dist/bootstrap/tool-lifecycle.d.ts

@@ -48,8 +48,6 @@
  * one ordered entry point. The driver is intentionally THIN: it sequences the
  * pre-existing helpers, it does not reimplement them.
  */
-import type { CliProgram } from '@opensip-cli/contracts';
-import type { ToolCliContext, ToolRegistry } from '@opensip-cli/core';
 /**
  * Canonical, ordered tool-lifecycle steps (launch, §5.4). The numeric
  * values are the step ordinals used in the JSDoc above and in
@@ -79,24 +77,4 @@ export declare const TOOL_LIFECYCLE_STEPS: {
     /** 10 — Commander dispatches the action body through the mount pipeline. */
     readonly dispatch: 10;
 };
-/**
- * Drive the STARTUP-phase command-mount step (step 8) for every registered
- * tool. By the time this runs, steps 1-4 have already populated `registry`
- * inside {@link bootstrapCli} (provenance no longer matters — bundled and
- * installed tools mount identically). This is the single ordered entry point
- * the composition root calls for step 8, replacing the bare
- * `mountAllToolCommands(...)` call so the lifecycle has one named seam.
- *
- * Kept THIN deliberately: it delegates straight to
- * {@link mountAllToolCommands}, which mounts each tool's declared `commandSpecs`
- * (the one command surface, launch) with per-tool failure isolation. The naming +
- * ordering is the value here, not new logic.
- *
- * @param registry The per-invocation tool registry, already populated by
- *   steps 1-4.
- * @param program The root Commander program (host-owned; passed in since the tool
- *   context no longer carries it, §8).
- * @param ctx The per-invocation handler context handed to each mounted command.
- */
-export declare function mountToolCommands(registry: ToolRegistry, program: CliProgram, ctx: ToolCliContext): void;
 //# sourceMappingURL=tool-lifecycle.d.ts.map

package/dist/bootstrap/tool-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-lifecycle.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tool-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAC/B,oDAAoD;;IAEpD,mEAAmE;;IAEnE,0EAA0E;;IAE1E,uEAAuE;;IAEvE,+DAA+D;;IAE/D,sDAAsD;;IAEtD,gFAAgF;;IAEhF,mDAAmD;;IAEnD,0EAA0E;;IAE1E,4EAA4E;;CAEpE,CAAC;AAEX;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,UAAU,EACnB,GAAG,EAAE,cAAc,GAClB,IAAI,CAEN"}
+{"version":3,"file":"tool-lifecycle.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tool-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAC/B,oDAAoD;;IAEpD,mEAAmE;;IAEnE,0EAA0E;;IAE1E,uEAAuE;;IAEvE,+DAA+D;;IAE/D,sDAAsD;;IAEtD,gFAAgF;;IAEhF,mDAAmD;;IAEnD,0EAA0E;;IAE1E,4EAA4E;;CAEpE,CAAC"}

package/dist/bootstrap/tool-lifecycle.js

@@ -48,7 +48,6 @@
  * one ordered entry point. The driver is intentionally THIN: it sequences the
  * pre-existing helpers, it does not reimplement them.
  */
-import { mountAllToolCommands } from './register-tools.js';
 /**
  * Canonical, ordered tool-lifecycle steps (launch, §5.4). The numeric
  * values are the step ordinals used in the JSDoc above and in
@@ -78,26 +77,4 @@ export const TOOL_LIFECYCLE_STEPS = {
     /** 10 — Commander dispatches the action body through the mount pipeline. */
     dispatch: 10,
 };
-/**
- * Drive the STARTUP-phase command-mount step (step 8) for every registered
- * tool. By the time this runs, steps 1-4 have already populated `registry`
- * inside {@link bootstrapCli} (provenance no longer matters — bundled and
- * installed tools mount identically). This is the single ordered entry point
- * the composition root calls for step 8, replacing the bare
- * `mountAllToolCommands(...)` call so the lifecycle has one named seam.
- *
- * Kept THIN deliberately: it delegates straight to
- * {@link mountAllToolCommands}, which mounts each tool's declared `commandSpecs`
- * (the one command surface, launch) with per-tool failure isolation. The naming +
- * ordering is the value here, not new logic.
- *
- * @param registry The per-invocation tool registry, already populated by
- *   steps 1-4.
- * @param program The root Commander program (host-owned; passed in since the tool
- *   context no longer carries it, §8).
- * @param ctx The per-invocation handler context handed to each mounted command.
- */
-export function mountToolCommands(registry, program, ctx) {
-    mountAllToolCommands(registry, program, ctx);
-}
 //# sourceMappingURL=tool-lifecycle.js.map

package/dist/bootstrap/tool-lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-lifecycle.js","sourceRoot":"","sources":["../../src/bootstrap/tool-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAK3D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,oDAAoD;IACpD,QAAQ,EAAE,CAAC;IACX,mEAAmE;IACnE,MAAM,EAAE,CAAC;IACT,0EAA0E;IAC1E,KAAK,EAAE,CAAC;IACR,uEAAuE;IACvE,MAAM,EAAE,CAAC;IACT,+DAA+D;IAC/D,MAAM,EAAE,CAAC;IACT,sDAAsD;IACtD,KAAK,EAAE,CAAC;IACR,gFAAgF;IAChF,YAAY,EAAE,CAAC;IACf,mDAAmD;IACnD,KAAK,EAAE,CAAC;IACR,0EAA0E;IAC1E,UAAU,EAAE,CAAC;IACb,4EAA4E;IAC5E,QAAQ,EAAE,EAAE;CACJ,CAAC;AAEX;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAsB,EACtB,OAAmB,EACnB,GAAmB;IAEnB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"tool-lifecycle.js","sourceRoot":"","sources":["../../src/bootstrap/tool-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,oDAAoD;IACpD,QAAQ,EAAE,CAAC;IACX,mEAAmE;IACnE,MAAM,EAAE,CAAC;IACT,0EAA0E;IAC1E,KAAK,EAAE,CAAC;IACR,uEAAuE;IACvE,MAAM,EAAE,CAAC;IACT,+DAA+D;IAC/D,MAAM,EAAE,CAAC;IACT,sDAAsD;IACtD,KAAK,EAAE,CAAC;IACR,gFAAgF;IAChF,YAAY,EAAE,CAAC;IACf,mDAAmD;IACnD,KAAK,EAAE,CAAC;IACR,0EAA0E;IAC1E,UAAU,EAAE,CAAC;IACb,4EAA4E;IAC5E,QAAQ,EAAE,EAAE;CACJ,CAAC"}

package/dist/bootstrap/tool-trust.d.ts

@@ -1,6 +1,6 @@
 /**
- * tool-trust — the project-local executable-tool trust policy (release
- * launch, Phase 3 Task 3.2).
+ * tool-trust — executable-tool trust policies for project-local and installed
+ * npm tools (release launch, Phase 3 Task 3.2; audit remediation).
  *
  * A `project-local` tool is authored code under `<project>/opensip-cli/…`
  * that changes with the repo (§5.2.1). Running it imports arbitrary code
@@ -25,6 +25,12 @@
  * around a single call.
  */
 export declare const PROJECT_TOOL_ALLOWLIST_ENV = "OPENSIP_CLI_ALLOW_PROJECT_TOOLS";
+/**
+ * Environment variable carrying the installed-npm tool allowlist. Empty/unset
+ * ⇒ deny-by-default for ambient `node_modules` discovery (paired with
+ * {@link isInstalledToolTrusted}).
+ */
+export declare const INSTALLED_TOOL_ALLOWLIST_ENV = "OPENSIP_CLI_ALLOW_INSTALLED_TOOLS";
 /**
  * Decide whether a project-local executable tool with the given `id` is
  * trusted to load, under the deny-by-default + allowlist-opt-in policy.
@@ -46,4 +52,18 @@ export declare const PROJECT_TOOL_ALLOWLIST_ENV = "OPENSIP_CLI_ALLOW_PROJECT_TOO
  * @returns `true` iff the allowlist contains `id` or the wildcard `'*'`.
  */
 export declare function isProjectLocalToolTrusted(id: string, env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Decide whether an installed npm tool with the given manifest `id` is trusted
+ * to `import()` into the host process, under deny-by-default + allowlist-opt-in.
+ *
+ * Read timing and env governance mirror {@link isProjectLocalToolTrusted}: the
+ * check runs at bootstrap before any `RunScope` exists, via the injected `env`
+ * param for testability.
+ *
+ * @param id The tool's stable id (from `package.json#opensipTools.id`).
+ * @param env The environment to read the allowlist from (defaults to
+ *   `process.env`; injectable for tests).
+ * @returns `true` iff the allowlist contains `id` or the wildcard `'*'`.
+ */
+export declare function isInstalledToolTrusted(id: string, env?: NodeJS.ProcessEnv): boolean;
 //# sourceMappingURL=tool-trust.d.ts.map

package/dist/bootstrap/tool-trust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-trust.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAiB5E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,MAAM,EACV,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT"}
+{"version":3,"file":"tool-trust.d.ts","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,sCAAsC,CAAC;AAiBhF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,MAAM,EACV,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAGT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAGhG"}

package/dist/bootstrap/tool-trust.js

@@ -1,6 +1,6 @@
 /**
- * tool-trust — the project-local executable-tool trust policy (release
- * launch, Phase 3 Task 3.2).
+ * tool-trust — executable-tool trust policies for project-local and installed
+ * npm tools (release launch, Phase 3 Task 3.2; audit remediation).
  *
  * A `project-local` tool is authored code under `<project>/opensip-cli/…`
  * that changes with the repo (§5.2.1). Running it imports arbitrary code
@@ -25,6 +25,12 @@
  * around a single call.
  */
 export const PROJECT_TOOL_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_PROJECT_TOOLS';
+/**
+ * Environment variable carrying the installed-npm tool allowlist. Empty/unset
+ * ⇒ deny-by-default for ambient `node_modules` discovery (paired with
+ * {@link isInstalledToolTrusted}).
+ */
+export const INSTALLED_TOOL_ALLOWLIST_ENV = 'OPENSIP_CLI_ALLOW_INSTALLED_TOOLS';
 /**
  * Parse the allowlist env var into a set of permitted tool ids. Empty/
  * unset ⇒ empty set (deny-by-default). The wildcard `'*'` admits all
@@ -62,4 +68,21 @@ export function isProjectLocalToolTrusted(id, env = process.env) {
     const allow = parseAllowlist(env[PROJECT_TOOL_ALLOWLIST_ENV]);
     return allow.has('*') || allow.has(id);
 }
+/**
+ * Decide whether an installed npm tool with the given manifest `id` is trusted
+ * to `import()` into the host process, under deny-by-default + allowlist-opt-in.
+ *
+ * Read timing and env governance mirror {@link isProjectLocalToolTrusted}: the
+ * check runs at bootstrap before any `RunScope` exists, via the injected `env`
+ * param for testability.
+ *
+ * @param id The tool's stable id (from `package.json#opensipTools.id`).
+ * @param env The environment to read the allowlist from (defaults to
+ *   `process.env`; injectable for tests).
+ * @returns `true` iff the allowlist contains `id` or the wildcard `'*'`.
+ */
+export function isInstalledToolTrusted(id, env = process.env) {
+    const allow = parseAllowlist(env[INSTALLED_TOOL_ALLOWLIST_ENV]);
+    return allow.has('*') || allow.has(id);
+}
 //# sourceMappingURL=tool-trust.js.map

package/dist/bootstrap/tool-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-trust.js","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAE5E;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAU,EACV,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"tool-trust.js","sourceRoot":"","sources":["../../src/bootstrap/tool-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mCAAmC,CAAC;AAEhF;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAU,EACV,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/bootstrap/validate-tool.d.ts

@@ -4,11 +4,12 @@
  * an arbitrary npm package and inspects whatever it exports.
  *
  * Verifies the minimal contract the registry depends on: a
- * `metadata.id` string (used for dedupe + listing), a `commands` array,
- * and a command surface — a non-empty `commandSpecs` array (the one command
+ * `metadata.id` string (used for dedupe + listing), and a command surface —
+ * a non-empty `commandSpecs` array (the one command
  * surface as of launch; `register()` was removed). A tool with no `commandSpecs`
- * cannot mount any command, so it fails the shape check. `initialize` and
- * `contributeScope` stay optional per the Tool interface.
+ * cannot mount any command, so it fails the shape check. Lifecycle hooks belong
+ * under `extensionPoints` only — top-level hooks are rejected with an actionable
+ * diagnostic.
  *
  * Ordering vs. the admission gate: this shape check runs AFTER a
  * tool's module is imported. The compatibility gate (`admitTool`) and the
@@ -18,5 +19,10 @@
  * and never reaches `isValidTool`.
  */
 import { type Tool } from '@opensip-cli/core';
+/**
+ * Human-readable rejection reason for an exported `tool` value.
+ * `undefined` means the export satisfies {@link isValidTool}.
+ */
+export declare function toolValidationFailure(value: unknown): string | undefined;
 export declare function isValidTool(value: unknown): value is Tool;
 //# sourceMappingURL=validate-tool.d.ts.map

package/dist/bootstrap/validate-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-tool.d.ts","sourceRoot":"","sources":["../../src/bootstrap/validate-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAuB,KAAK,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEnE,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,IAAI,CAkBzD"}
+{"version":3,"file":"validate-tool.d.ts","sourceRoot":"","sources":["../../src/bootstrap/validate-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAuB,KAAK,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAuDnE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAqBxE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,IAAI,CAEzD"}

package/dist/bootstrap/validate-tool.js

@@ -4,11 +4,12 @@
  * an arbitrary npm package and inspects whatever it exports.
  *
  * Verifies the minimal contract the registry depends on: a
- * `metadata.id` string (used for dedupe + listing), a `commands` array,
- * and a command surface — a non-empty `commandSpecs` array (the one command
+ * `metadata.id` string (used for dedupe + listing), and a command surface —
+ * a non-empty `commandSpecs` array (the one command
  * surface as of launch; `register()` was removed). A tool with no `commandSpecs`
- * cannot mount any command, so it fails the shape check. `initialize` and
- * `contributeScope` stay optional per the Tool interface.
+ * cannot mount any command, so it fails the shape check. Lifecycle hooks belong
+ * under `extensionPoints` only — top-level hooks are rejected with an actionable
+ * diagnostic.
  *
  * Ordering vs. the admission gate: this shape check runs AFTER a
  * tool's module is imported. The compatibility gate (`admitTool`) and the
@@ -18,25 +19,78 @@
  * and never reaches `isValidTool`.
  */
 import { validateCommandSpec } from '@opensip-cli/core';
-export function isValidTool(value) {
-    if (typeof value !== 'object' || value === null)
-        return false;
+/** Top-level hook keys removed in the tool-author-simplify contract. */
+const LEGACY_TOP_LEVEL_HOOK_KEYS = [
+    'initialize',
+    'contributeScope',
+    'collectReportData',
+    'sessionReplay',
+    'config',
+    'capabilityRegistrars',
+    'fingerprintStrategy',
+    'scaffoldExamples',
+    'stableExampleIds',
+    'scaffoldConfigBlock',
+];
+function legacyTopLevelHookKeys(candidate) {
+    return LEGACY_TOP_LEVEL_HOOK_KEYS.filter((key) => candidate[key] !== undefined);
+}
+function metadataValidationFailure(metadata) {
+    if (typeof metadata !== 'object' || metadata === null) {
+        return 'tool.metadata is missing or not an object';
+    }
+    if (typeof metadata.id !== 'string') {
+        return 'tool.metadata.id must be a string';
+    }
+    return undefined;
+}
+function commandSpecsValidationFailure(commandSpecs) {
+    if (!Array.isArray(commandSpecs) || commandSpecs.length === 0) {
+        return 'tool.commandSpecs must be a non-empty array (the declarative command surface)';
+    }
+    for (const spec of commandSpecs) {
+        if (!validateCommandSpec(spec)) {
+            return 'tool.commandSpecs contains an invalid CommandSpec';
+        }
+    }
+    return undefined;
+}
+function optionalCommandsValidationFailure(commands) {
+    if (!Array.isArray(commands))
+        return undefined;
+    for (const cmd of commands) {
+        if (typeof cmd !== 'object' || cmd === null) {
+            return 'tool.commands contains a non-object entry';
+        }
+        if (typeof cmd.name !== 'string') {
+            return 'tool.commands entries must include a string name';
+        }
+    }
+    return undefined;
+}
+/**
+ * Human-readable rejection reason for an exported `tool` value.
+ * `undefined` means the export satisfies {@link isValidTool}.
+ */
+export function toolValidationFailure(value) {
+    if (typeof value !== 'object' || value === null) {
+        return 'tool export is not an object';
+    }
     const candidate = value;
-    if (typeof candidate.metadata !== 'object' || candidate.metadata === null)
-        return false;
-    if (typeof candidate.metadata.id !== 'string')
-        return false;
-    if (!Array.isArray(candidate.commands))
-        return false;
-    // A tool must expose a command surface: a non-empty declarative `commandSpecs`
-    // array (the one command surface, launch — `register()` was removed). A tool
-    // with no commandSpecs cannot contribute any command and is rejected.
-    if (!Array.isArray(candidate.commandSpecs) || candidate.commandSpecs.length === 0)
-        return false;
-    for (const spec of candidate.commandSpecs) {
-        if (!validateCommandSpec(spec))
-            return false;
+    const metadataFailure = metadataValidationFailure(candidate.metadata);
+    if (metadataFailure !== undefined)
+        return metadataFailure;
+    const legacy = legacyTopLevelHookKeys(candidate);
+    if (legacy.length > 0) {
+        return (`tool declares deprecated top-level hooks [${legacy.join(', ')}]; ` +
+            'move them under extensionPoints (see opensip tool authoring docs)');
     }
-    return true;
+    const specsFailure = commandSpecsValidationFailure(candidate.commandSpecs);
+    if (specsFailure !== undefined)
+        return specsFailure;
+    return optionalCommandsValidationFailure(candidate.commands);
+}
+export function isValidTool(value) {
+    return toolValidationFailure(value) === undefined;
 }
 //# sourceMappingURL=validate-tool.js.map

package/dist/bootstrap/validate-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-tool.js","sourceRoot":"","sources":["../../src/bootstrap/validate-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,mBAAmB,EAAa,MAAM,mBAAmB,CAAC;AAEnE,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,KAIjB,CAAC;IACF,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,OAAQ,SAAS,CAAC,QAA6B,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,+EAA+E;IAC/E,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"validate-tool.js","sourceRoot":"","sources":["../../src/bootstrap/validate-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,mBAAmB,EAAa,MAAM,mBAAmB,CAAC;AAEnE,wEAAwE;AACxE,MAAM,0BAA0B,GAAG;IACjC,YAAY;IACZ,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,QAAQ;IACR,sBAAsB;IACtB,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;CACb,CAAC;AAEX,SAAS,sBAAsB,CAAC,SAAkC;IAChE,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAiB;IAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,2CAA2C,CAAC;IACrD,CAAC;IACD,IAAI,OAAQ,QAA6B,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,6BAA6B,CAAC,YAAqB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,+EAA+E,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,mDAAmD,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iCAAiC,CAAC,QAAiB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,2CAA2C,CAAC;QACrD,CAAC;QACD,IAAI,OAAQ,GAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,kDAAkD,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,KAAgC,CAAC;IAEnD,MAAM,eAAe,GAAG,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAE1D,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CACL,6CAA6C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACnE,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,6BAA6B,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3E,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAEpD,OAAO,iCAAiC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AACpD,CAAC"}

package/dist/cli-context.d.ts

@@ -17,10 +17,10 @@
  * `.runtime/datastore.sqlite`.
  */
 import { type Logger, type ToolCliContext } from '@opensip-cli/core';
-import { type LiveViewRegistry } from './bootstrap/live-plane.js';
+import { type LiveViewRegistry } from './bootstrap/io-plane.js';
 import type { CommandResult } from '@opensip-cli/contracts';
 export { buildDatastoreThunk, getCurrentProjectRoot, getOrOpenDatastore, } from './bootstrap/scope-access.js';
-export { createLiveViewRegistry, type LiveViewRegistry } from './bootstrap/live-plane.js';
+export { createLiveViewRegistry, type LiveViewRegistry } from './bootstrap/io-plane.js';
 export interface BuildToolCliContextOptions {
     readonly render: (result: CommandResult) => Promise<void>;
     readonly liveViews: LiveViewRegistry;

package/dist/cli-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-context.d.ts","sourceRoot":"","sources":["../src/cli-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAWnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAsB5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE1F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC/B,aAAa,EAAE,OAAO,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;KACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,oBAAoB,CA2F1F"}
+{"version":3,"file":"cli-context.d.ts","sourceRoot":"","sources":["../src/cli-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAW/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAmB5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE;QAC/B,aAAa,EAAE,OAAO,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;KACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,oBAAoB,CAgF1F"}