orizu 0.5.19 → 0.5.21

package/dist/loopback-serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-serve.d.ts","sourceRoot":"","sources":["../src/loopback-serve.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;CAChC;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,WAAW,CAAA;IACrB,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;CAC1D;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;KAAE,CAAA;CAC7F;AAgBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,oBAAoB,EAC7B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,EACzD,UAAU,EAAE,MAAM,GACjB,cAAc,CAahB"}

package/dist/manifests-cli.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Promotion manifests CLI (ALI-907): list | show | approve | reject | apply.
+ * Pure command logic with an injected fetcher and project resolver; the entry
+ * point owns argument parsing and human/JSON output. apply is idempotent on the
+ * server — re-applying returns the stored outcome.
+ *
+ * Every id-taking subcommand accepts a short-id PREFIX (ALI-1038/ALI-1092): a
+ * leading hex slice of the manifest UUID is resolved CLI-side against the
+ * project's manifest list — unique match wins, none/ambiguous is a clear error,
+ * never a server 500.
+ */
+export type CliFetcher = (path: string, init?: RequestInit) => Promise<Response>;
+export interface ManifestsCommandIo {
+    json: boolean;
+    print: (line: string) => void;
+    fetcher?: CliFetcher;
+    resolveProjectSlug?: (arg: string | null) => Promise<string>;
+    /** Injectable sleeper for the apply auto-retry loop (tests). */
+    sleep?: (ms: number) => Promise<void>;
+}
+export declare function manifestsCommand(args: string[], io: ManifestsCommandIo): Promise<number>;
+//# sourceMappingURL=manifests-cli.d.ts.map

package/dist/manifests-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifests-cli.d.ts","sourceRoot":"","sources":["../src/manifests-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5D,gEAAgE;IAChE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AA0PD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkG9F"}

package/dist/markdown-report-input.d.ts

@@ -0,0 +1,7 @@
+export declare const MARKDOWN_REPORT_MAX_BYTES: number;
+export interface MarkdownReportInput {
+    markdown: string;
+    sourceName: string | null;
+}
+export declare function readMarkdownReportInput(args: readonly string[], reportLabel: 'Optimization' | 'Prompt' | 'Task'): MarkdownReportInput | null;
+//# sourceMappingURL=markdown-report-input.d.ts.map

package/dist/markdown-report-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown-report-input.d.ts","sourceRoot":"","sources":["../src/markdown-report-input.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,yBAAyB,QAAkB,CAAA;AAsCxD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,cAAc,GAAG,QAAQ,GAAG,MAAM,GAC9C,mBAAmB,GAAG,IAAI,CA8C5B"}

package/dist/markdown-report-input.js

@@ -1,5 +1,6 @@
 import { readFileSync } from 'fs';
 import { basename } from 'path';
+import { hasCanonicalReportMarkdownContent } from './report-markdown-blankness.js';
 export const MARKDOWN_REPORT_MAX_BYTES = 2 * 1024 * 1024;
 function getArg(args, name) {
     const index = args.indexOf(name);
@@ -17,6 +18,11 @@ function rejectDashPrefixedOptionValue(name, value) {
         throw new Error(`Invalid value for ${name}: option values cannot start with a dash`);
     }
 }
+function rejectMissingOptionValue(args, name) {
+    if (args.some((arg, index) => arg === name && index + 1 >= args.length)) {
+        throw new Error(`${name} requires a value`);
+    }
+}
 function readSourceFile(pathArg) {
     const expandedPath = expandHomePath(pathArg);
     try {
@@ -31,6 +37,14 @@ function readSourceFile(pathArg) {
     }
 }
 export function readMarkdownReportInput(args, reportLabel) {
+    if (args.some(arg => arg.startsWith('--report='))) {
+        throw new Error('use --report <markdown|@file> with a space, not =');
+    }
+    if (args.some(arg => arg.startsWith('--report-file='))) {
+        throw new Error('use --report-file <path> with a space, not =');
+    }
+    rejectMissingOptionValue(args, '--report');
+    rejectMissingOptionValue(args, '--report-file');
     const report = getArg(args, '--report');
     const reportFile = getArg(args, '--report-file');
     rejectDashPrefixedOptionValue('--report', report);
@@ -57,7 +71,7 @@ export function readMarkdownReportInput(args, reportLabel) {
         markdown = report || '';
         sourceName = 'inline';
     }
-    if (!markdown.trim()) {
+    if (!hasCanonicalReportMarkdownContent(markdown)) {
         throw new Error(`${reportLabel} report markdown must not be blank`);
     }
     if (Buffer.byteLength(markdown, 'utf8') > MARKDOWN_REPORT_MAX_BYTES) {

package/dist/merge-job.d.ts

@@ -0,0 +1,155 @@
+/**
+ * `orizu internal merge-job` — the one-shot merge sandbox ENTRYPOINT
+ * (ALI-1084, merge-sandbox-job Phase 2). The MergeJobCoordinator DO launches
+ * this inside a minimal, AGENT-FREE sandbox booted from the hosted snapshot;
+ * from here the sandbox pulls its own credentials under the established
+ * boot-secret PULL model and runs the SHARED merge core
+ * (deploy-key-merge-core.ts — the exact code the server path runs; no forked
+ * merge logic).
+ *
+ * FLOW (plan §2.2 step 4):
+ *   a. exchange ORIZU_BOOT_SECRET at the DO for a single-use JOB TOKEN
+ *      (`GET {coordinator}/merge-jobs/:jobKey/job-token`) — the token transits
+ *      Cloudflare; the DEPLOY KEY never does;
+ *   b. pull `{spec, privateKeyPem}` DIRECTLY from the control plane
+ *      (`GET {orizu}/api/coordinator/merge-jobs/:jobId/payload`, job-token
+ *      auth) — single-use, audited server-side before the key is returned;
+ *   c. run the shared merge core (tmp worktree, 0600 key file, pinned GitHub
+ *      host keys, expected-head verification, argv-asserted --no-ff merge)
+ *      with the D8 PRE-PUSH GATE wired in: immediately before `git push` the
+ *      core calls `GET .../gate`; `proceed: false` aborts WITHOUT pushing
+ *      (terminal `superseded`). An UNREACHABLE gate also refuses the push
+ *      (fail closed) but reports `failed` (retryable) — "unknown" is not
+ *      "rejected";
+ *   d. POST the terminal result to the DO (boot-secret auth). Reporting the
+ *      terminal state — not the merge outcome — is this command's success:
+ *      exit 0 on ANY reported terminal (conflict/superseded included), exit 1
+ *      only when the env is invalid or the report itself failed.
+ *
+ * FROZEN ENV CONTRACT (the DO's merge-job sandbox env plan):
+ *   ORIZU_BOOT_SECRET       per-sandbox durable bootstrap secret;
+ *   ORIZU_MERGE_JOB_ID      the job's DO addressing key
+ *                           (`merge:<manifestId>:<expectedHeadSha>` — the
+ *                           control-plane job uuid rides the token response);
+ *   ORIZU_COORDINATOR_URL   the coordinator Worker origin;
+ *   ORIZU_BASE_URL          the Orizu control-plane origin.
+ *
+ * REDACTION: every reported detail passes through `redactSecrets` with the
+ * boot secret, the job token, and the private key PEM on the exact-match list
+ * (plus the shape-pattern net). Nothing here ever logs a secret.
+ */
+import { type DeployKeyMergeResult, type GitCommandRunner } from './deploy-key-merge-core.js';
+export type MergeJobFetch = (url: string, init?: RequestInit) => Promise<Response>;
+export declare const REQUIRED_MERGE_JOB_ENV_VARS: readonly ["ORIZU_BOOT_SECRET", "ORIZU_MERGE_JOB_ID", "ORIZU_COORDINATOR_URL", "ORIZU_BASE_URL"];
+export interface MergeJobEnv {
+    bootSecret: string;
+    /** The DO addressing key (`merge:<manifestId>:<expectedHeadSha>`). */
+    jobKey: string;
+    coordinatorUrl: string;
+    baseUrl: string;
+}
+export declare function resolveMergeJobEnv(env: Record<string, string | undefined>): {
+    ok: true;
+    value: MergeJobEnv;
+} | {
+    ok: false;
+    missing: string[];
+    invalid: string[];
+};
+export type MergeJobTerminalStatus = 'succeeded' | 'conflict' | 'superseded' | 'failed';
+export interface MergeJobReport {
+    status: MergeJobTerminalStatus;
+    result: {
+        merged: boolean;
+        sha: string | null;
+        alreadyMerged: boolean;
+        conflict: boolean;
+    } | null;
+    errorDetail: string | null;
+}
+/** Map the shared core's outcome to the job's terminal status. */
+export declare function terminalFromMergeResult(result: DeployKeyMergeResult): MergeJobReport;
+export interface ExchangedJobToken {
+    token: string;
+    /** The control-plane job id (merge_jobs uuid) — payload/gate URLs use it. */
+    jobId: string;
+}
+export declare function exchangeJobToken(opts: {
+    coordinatorUrl: string;
+    jobKey: string;
+    bootSecret: string;
+    fetchImpl: MergeJobFetch;
+    attempts?: number;
+    backoffMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    log?: (line: string) => void;
+}): Promise<ExchangedJobToken>;
+export interface MergeJobSpec {
+    op: 'merge';
+    jobId: string;
+    manifestId: string;
+    workspaceId: string;
+    repoFullName: string;
+    base: string;
+    sourceBranch: string;
+    expectedHeadSha: string;
+    commitMessage: string;
+}
+export interface MergeJobPayload {
+    spec: MergeJobSpec;
+    privateKeyPem: string;
+}
+export declare function fetchMergeJobPayload(opts: {
+    baseUrl: string;
+    jobId: string;
+    token: string;
+    fetchImpl: MergeJobFetch;
+}): Promise<MergeJobPayload>;
+export type GateOutcome = 'proceed' | 'superseded' | 'unavailable';
+export declare function checkPrePushGate(opts: {
+    baseUrl: string;
+    jobId: string;
+    token: string;
+    fetchImpl: MergeJobFetch;
+}): Promise<GateOutcome>;
+export declare function postMergeJobResult(opts: {
+    coordinatorUrl: string;
+    jobKey: string;
+    bootSecret: string;
+    report: MergeJobReport;
+    fetchImpl: MergeJobFetch;
+    attempts?: number;
+    sleep?: (ms: number) => Promise<void>;
+    log?: (line: string) => void;
+}): Promise<boolean>;
+export interface RunMergeJobOptions {
+    env: MergeJobEnv;
+    fetchImpl?: MergeJobFetch;
+    /** Injectable git runner (tests). Default: the core's real spawn. */
+    runGit?: GitCommandRunner;
+    sleep?: (ms: number) => Promise<void>;
+    log?: (line: string) => void;
+    tokenAttempts?: number;
+    tokenBackoffMs?: number;
+}
+export interface MergeJobRunResult {
+    /** Whether the terminal state reached the DO — the command's success bar. */
+    reported: boolean;
+    status: MergeJobTerminalStatus;
+    detail: string | null;
+}
+export declare function runMergeJob(opts: RunMergeJobOptions): Promise<MergeJobRunResult>;
+export interface MergeJobCommandIo {
+    print: (line: string) => void;
+    printErr?: (line: string) => void;
+    json?: boolean;
+}
+/**
+ * Read the frozen env contract and run the job. Exit 0 on ANY reported
+ * terminal outcome (the REPORT, not the merge, is the command's success —
+ * a conflict is a correctly-completed job); exit 1 when the env is invalid
+ * or the terminal report never reached the DO (the DO's job wall is the
+ * backstop then).
+ */
+export declare function mergeJobCommand(io: MergeJobCommandIo): Promise<number>;
+//# sourceMappingURL=merge-job.d.ts.map

package/dist/merge-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-job.d.ts","sourceRoot":"","sources":["../src/merge-job.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAA;AAInC,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAIlF,eAAO,MAAM,2BAA2B,iGAK9B,CAAA;AAEV,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAuCxF;AAID,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAA;AAEvF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,EAAE;QACN,MAAM,EAAE,OAAO,CAAA;QACf,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;QAClB,aAAa,EAAE,OAAO,CAAA;QACtB,QAAQ,EAAE,OAAO,CAAA;KAClB,GAAG,IAAI,CAAA;IACR,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAyBpF;AAID,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,aAAa,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiC7B;AAID,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,aAAa,CAAA;CACzB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyB3B;AAID,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,aAAa,CAAA;AAElE,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,aAAa,CAAA;CACzB,GAAG,OAAO,CAAC,WAAW,CAAC,CAiBvB;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,cAAc,CAAA;IACtB,SAAS,EAAE,aAAa,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CAgCnB;AAMD,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,WAAW,CAAA;IAChB,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,qEAAqE;IACrE,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,sBAAsB,CAAA;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8FtF;AAID,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiB5E"}

package/dist/model-configs-cli.d.ts

@@ -0,0 +1,19 @@
+export type CliFetcher = (path: string, init?: RequestInit) => Promise<Response>;
+export interface ModelConfigSettingsVersion {
+    versionNumber: number;
+    settings: Record<string, unknown>;
+}
+export interface ModelConfig {
+    identity: string;
+    displayName: string;
+    currentSettingsVersion: ModelConfigSettingsVersion;
+    createdAt: string;
+}
+export interface ModelConfigsCommandIo {
+    json: boolean;
+    print: (line: string) => void;
+    fetcher?: CliFetcher;
+    resolveProjectSlug?: (arg: string | null) => Promise<string>;
+}
+export declare function modelConfigsCommand(args: string[], io: ModelConfigsCommandIo): Promise<number>;
+//# sourceMappingURL=model-configs-cli.d.ts.map

package/dist/model-configs-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-configs-cli.d.ts","sourceRoot":"","sources":["../src/model-configs-cli.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,sBAAsB,EAAE,0BAA0B,CAAA;IAClD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC7D;AAiDD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8CpG"}

package/dist/model-configs-cli.js

@@ -0,0 +1,104 @@
+import { readFileSync } from 'node:fs';
+import { authedFetch } from './http.js';
+function argValue(args, flag) {
+    const index = args.lastIndexOf(flag);
+    return index === -1 || !args[index + 1] || args[index + 1].startsWith('--') ? null : args[index + 1];
+}
+function positionalArgs(args) {
+    const values = [];
+    for (let index = 0; index < args.length; index += 1) {
+        if (args[index].startsWith('--')) {
+            if (args[index + 1] && !args[index + 1].startsWith('--'))
+                index += 1;
+        }
+        else
+            values.push(args[index]);
+    }
+    return values;
+}
+function readSettings(value, defaultToEmpty = false) {
+    if (!value) {
+        if (defaultToEmpty)
+            return {};
+        throw new Error('--settings is required');
+    }
+    const source = value.startsWith('@') ? readFileSync(value.slice(1), 'utf8') : value;
+    const parsed = JSON.parse(source);
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new Error('--settings must contain a JSON object');
+    }
+    return parsed;
+}
+async function responseMessage(response) {
+    try {
+        const body = await response.clone().json();
+        return typeof body.error === 'string' ? body.error : response.statusText;
+    }
+    catch {
+        return response.statusText;
+    }
+}
+async function requestJson(fetcher, path, init) {
+    const response = await fetcher(path, init);
+    if (!response.ok)
+        throw new Error(`Model config request failed (${response.status}): ${await responseMessage(response)}`);
+    return response.json();
+}
+function renderModelConfig(config) {
+    return `${config.identity}  ${config.displayName}  v${config.currentSettingsVersion.versionNumber}`;
+}
+export async function modelConfigsCommand(args, io) {
+    const positional = positionalArgs(args);
+    const [command, action, identity] = positional;
+    const resolveProjectSlug = io.resolveProjectSlug;
+    if (!resolveProjectSlug)
+        throw new Error('Project resolver unavailable');
+    const projectArg = argValue(args, '--project');
+    const project = projectArg || await resolveProjectSlug(null);
+    const fetcher = io.fetcher ?? authedFetch;
+    const root = `/api/cli/model-configs?project=${encodeURIComponent(project)}`;
+    let result;
+    if (command === 'list' && !action) {
+        result = await requestJson(fetcher, root, { method: 'GET' });
+        if (io.json)
+            io.print(JSON.stringify(result));
+        else
+            for (const config of (result.modelConfigs || []))
+                io.print(renderModelConfig(config));
+        return 0;
+    }
+    if (command === 'show' && action && !identity) {
+        result = await requestJson(fetcher, `/api/cli/model-configs/${encodeURIComponent(action)}?project=${encodeURIComponent(project)}`, { method: 'GET' });
+    }
+    else if (command === 'create' && action && !identity) {
+        result = await requestJson(fetcher, root, {
+            method: 'POST', headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ identity: action, displayName: argValue(args, '--name') || action, settings: readSettings(argValue(args, '--settings'), true) }),
+        });
+    }
+    else if (command === 'settings' && action === 'set' && identity) {
+        result = await requestJson(fetcher, `/api/cli/model-configs/${encodeURIComponent(identity)}/settings?project=${encodeURIComponent(project)}`, {
+            method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ settings: readSettings(argValue(args, '--settings')) }),
+        });
+    }
+    else if (command === 'copy' && action && !identity) {
+        const to = argValue(args, '--to');
+        if (!to)
+            throw new Error('--to is required');
+        result = await requestJson(fetcher, `/api/cli/model-configs/${encodeURIComponent(action)}/copy?project=${encodeURIComponent(project)}`, {
+            method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ to }),
+        });
+    }
+    else {
+        io.print('Usage: orizu model-configs <create|list|show|settings set|copy> [--project <team/project>] [--json]');
+        return 1;
+    }
+    if (io.json) {
+        io.print(JSON.stringify(result));
+    }
+    else {
+        const config = result.modelConfig;
+        io.print(renderModelConfig(config));
+    }
+    return 0;
+}

package/dist/optimization-export-cli.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Human-output helpers for `orizu optimizations export`.
+ *
+ * Lives outside index.ts per the CLI line ratchet (ALI-976).
+ */
+export interface OptimizationExportCliContext {
+    getArg: (name: string) => string | null;
+    getPositionalArg: (index: number) => string | null;
+    authedFetch: (path: string, init?: RequestInit) => Promise<Response>;
+    hasJsonFlag: () => boolean;
+    printJson: (value: Record<string, unknown>) => void;
+    printLine: (message?: string) => void;
+    expandHomePath: (path: string) => string;
+    writeTextFileEnsuringDir: (path: string, content: string) => void;
+    sanitizeTerminalText: (value: unknown) => string;
+}
+export declare function printDiffCommentsSuppressionMarker(ctx: OptimizationExportCliContext, data: Record<string, unknown>): void;
+export declare function exportOptimizationRunCommand(ctx: OptimizationExportCliContext): Promise<void>;
+//# sourceMappingURL=optimization-export-cli.d.ts.map

package/dist/optimization-export-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimization-export-cli.d.ts","sourceRoot":"","sources":["../src/optimization-export-cli.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AAEH,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAClD,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpE,WAAW,EAAE,MAAM,OAAO,CAAA;IAC1B,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACnD,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACxC,wBAAwB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACjE,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAA;CACjD;AAED,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,4BAA4B,EACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,IAAI,CASN;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/optimizations-list-cli.d.ts

@@ -0,0 +1,20 @@
+/**
+ * ALI-1073: `orizu optimizations list` — enumerate the project's optimization
+ * runs (id, status, refs, promoted-version link) so an agent/human can
+ * discover a prior run.
+ *
+ * ALI-1175: best scores in this list derive from agent-reported score runs —
+ * the human output labels them so the list never implies server-attested
+ * evidence.
+ *
+ * Lives outside index.ts per the CLI index line ratchet (ALI-976): owns its
+ * own argument parsing and printing via injected io.
+ */
+export interface OptimizationsListIo {
+    json: boolean;
+    print: (line: string) => void;
+    resolveProjectSlug: (projectArg: string | null) => Promise<string>;
+    fetcher?: (path: string, init?: RequestInit) => Promise<Response>;
+}
+export declare function listOptimizationRunsCommand(args: string[], io: OptimizationsListIo): Promise<void>;
+//# sourceMappingURL=optimizations-list-cli.d.ts.map

package/dist/optimizations-list-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizations-list-cli.d.ts","sourceRoot":"","sources":["../src/optimizations-list-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAClE;AAqDD,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0DxG"}

package/dist/optimizations-promote-cli.d.ts

@@ -0,0 +1,8 @@
+export interface OptimizationsPromoteIo {
+    json: boolean;
+    print: (line: string) => void;
+    resolveProjectSlug: (projectArg: string | null) => Promise<string>;
+    fetcher: (path: string, init?: RequestInit) => Promise<Response>;
+}
+export declare function promoteOptimizationCommand(args: string[], io: OptimizationsPromoteIo): Promise<void>;
+//# sourceMappingURL=optimizations-promote-cli.d.ts.map

package/dist/optimizations-promote-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizations-promote-cli.d.ts","sourceRoot":"","sources":["../src/optimizations-promote-cli.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CACjE;AAOD,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB1G"}

package/dist/optimizations-promote-cli.js

@@ -0,0 +1,34 @@
+import { extractErrorMessage } from './error-response.js';
+import { sanitizeTerminalText } from './json-response.js';
+function option(args, name) {
+    const index = args.indexOf(name);
+    return index === -1 || !args[index + 1] || args[index + 1].startsWith('--') ? null : args[index + 1];
+}
+export async function promoteOptimizationCommand(args, io) {
+    const runId = args.find(arg => !arg.startsWith('--') && arg !== option(args, '--candidate') && arg !== option(args, '--label') && arg !== option(args, '--project'));
+    const candidateId = option(args, '--candidate');
+    const label = option(args, '--label');
+    if (!runId || !candidateId || (label !== null && label !== 'production')) {
+        throw new Error('Usage: orizu optimizations promote <run-id> --candidate <id> [--label production] [--project <team/project>] [--json]');
+    }
+    const project = await io.resolveProjectSlug(option(args, '--project'));
+    const response = await io.fetcher(`/api/cli/optimization-runs/${encodeURIComponent(runId)}/promote?project=${encodeURIComponent(project)}`, {
+        method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ candidateId, label }),
+    });
+    if (!response.ok)
+        throw new Error(`Failed to promote optimization candidate: ${await extractErrorMessage(response)}`);
+    const data = await response.json();
+    if (io.json) {
+        io.print(JSON.stringify(data.profileVersionId
+            ? { profileVersionId: data.profileVersionId, components: data.components ?? [] }
+            : { promptVersionId: data.promptVersionId }));
+        return;
+    }
+    if (data.profileVersionId) {
+        io.print(`Promoted profile version ${sanitizeTerminalText(data.profileVersionId)}`);
+        for (const component of data.components ?? [])
+            io.print(`${sanitizeTerminalText(component.key)}: ${sanitizeTerminalText(component.status)}`);
+        return;
+    }
+    io.print(`Promoted prompt version ${sanitizeTerminalText(data.promptVersionId ?? '')}`);
+}

package/dist/option-validation.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Return the first dash-prefixed option that is not in a command's explicit
+ * allowlist. An unambiguously value-like single-dash token immediately
+ * following a value-taking option is data: this keeps inputs such as
+ * `--duration -5` and `--task "- fix the test"` available without allowing a
+ * stray token or mistyped short option.
+ *
+ * `valueOptions` permits the unambiguous `--option=value` form. A separate
+ * token beginning with `--`, or an option-like single-dash word, is parsed as
+ * an option so a missing value cannot swallow a typo. Callers whose value is
+ * itself option-like can use the inline form; Markdown list markers and finite
+ * negative numbers remain safe as separate values.
+ */
+export declare function findUnknownOption(args: readonly string[], allowedOptions: ReadonlySet<string>, valueOptions?: ReadonlySet<string>): string | null;
+//# sourceMappingURL=option-validation.d.ts.map

package/dist/option-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"option-validation.d.ts","sourceRoot":"","sources":["../src/option-validation.ts"],"names":[],"mappings":"AA0BA;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,EACnC,YAAY,GAAE,WAAW,CAAC,MAAM,CAAa,GAC5C,MAAM,GAAG,IAAI,CAmBf"}

package/dist/preview-runtime.d.ts

@@ -0,0 +1,63 @@
+export declare const PREVIEW_RUNTIME_REGISTRY_VERSION = 1;
+export declare const PREVIEW_ALLOWED_IMPORTS: Record<string, string[]>;
+export interface AppPreviewOptions {
+    filePath: string;
+    inputSchema: Record<string, unknown>;
+    outputSchema: Record<string, unknown>;
+    sampleRow: Record<string, unknown>;
+    screenshotPath?: string;
+    headed?: boolean;
+    keepOpen?: boolean;
+    componentName?: string;
+    cwd?: string;
+    forceSnapshot?: boolean;
+    playwright?: PreviewPlaywright;
+    chromiumExecutablePath?: string | null;
+}
+export interface AppPreviewResult {
+    url: string;
+    screenshotPath?: string;
+    warnings: string[];
+}
+interface Issue {
+    level: 'error' | 'warn';
+    message: string;
+}
+interface PreviewPlaywright {
+    chromium: {
+        launch: (options: Record<string, unknown>) => Promise<PreviewBrowser>;
+    };
+}
+interface PreviewBrowser {
+    newPage: (options: Record<string, unknown>) => Promise<PreviewPage>;
+    close: () => Promise<void>;
+    once?: (event: string, listener: () => void) => unknown;
+    on?: (event: string, listener: () => void) => unknown;
+    off?: (event: string, listener: () => void) => unknown;
+}
+interface PreviewPage {
+    goto: (url: string, options: Record<string, unknown>) => Promise<unknown>;
+    waitForSelector: (selector: string, options: Record<string, unknown>) => Promise<unknown>;
+    screenshot: (options: {
+        path: string;
+        fullPage: boolean;
+    }) => Promise<unknown>;
+    waitForTimeout: (timeout: number) => Promise<unknown>;
+    once?: (event: string, listener: () => void) => unknown;
+    on?: (event: string, listener: () => void) => unknown;
+    off?: (event: string, listener: () => void) => unknown;
+}
+export declare function validatePreviewInputs(options: AppPreviewOptions): Issue[];
+export declare function runLocalAppPreview(options: AppPreviewOptions): Promise<AppPreviewResult>;
+/**
+ * ALI-1071: react/react-dom are no longer dependencies of the PUBLISHED CLI
+ * (app-grade packages were moved to devDependencies), so a bare global install
+ * may not carry them. Detect that BEFORE esbuild surfaces a raw
+ * `Could not resolve "react"` build error, so the preview command can fail with
+ * an actionable message instead. Exported for tests.
+ */
+export declare function findMissingPreviewRuntimeDeps(nodeModuleDirs: string[]): string[];
+export declare function buildPreviewCss(repoRoot: string | null, appPath: string): Promise<string>;
+export declare function getPreviewSnapshotModulePaths(): string[];
+export {};
+//# sourceMappingURL=preview-runtime.d.ts.map

package/dist/preview-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-runtime.d.ts","sourceRoot":"","sources":["../src/preview-runtime.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,gCAAgC,IAAI,CAAA;AAGjD,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CA+C5D,CAAA;AAGD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,UAAU,KAAK;IACb,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,iBAAiB;IACzB,QAAQ,EAAE;QACR,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;KACtE,CAAA;CACF;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IACnE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACvD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;CACvD;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzE,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF,UAAU,EAAE,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9E,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACvD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;CACvD;AAQD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,KAAK,EAAE,CASzE;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0G9F;AAiSD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAIhF;AAuED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,mBA6B7E;AAyWD,wBAAgB,6BAA6B,IAAI,MAAM,EAAE,CAExD"}

package/dist/prompt-draft-push.d.ts

@@ -0,0 +1,60 @@
+/**
+ * ADR-007 P4 (ALI-1074): the session-scoped, commit-first prompt push.
+ *
+ * `orizu prompts|judges push --session <id>` creates the version through
+ * POST /api/cli/prompts/drafts: the server commits the artifact files to the
+ * session's `orizu/session-*` branch (one Git Data API commit) and then
+ * writes a DRAFT row pinning repo_path/content_sha/commit_sha. The draft
+ * seals — and gets its version number — when the session branch merges via
+ * `orizu session finish` + promotion-manifest apply.
+ *
+ * The primary text is ALWAYS committed as `prompt.md`: the server read side
+ * (lib/artifact-git-read.ts PROMPT_BODY_FILENAMES) prefers that name, so the
+ * git filename stays canonical regardless of what the local bundle calls its
+ * body file.
+ *
+ * Lives outside index.ts per the CLI line ratchet (ALI-976).
+ */
+export declare const PROMPT_PRIMARY_GIT_FILENAME = "prompt.md";
+export interface PromptDraftSidecar {
+    path: string;
+    content?: unknown;
+    [key: string]: unknown;
+}
+export interface PromptDraftFile {
+    path: string;
+    content: string;
+}
+/**
+ * Build the git file set for a prompt-version draft: the primary text at the
+ * canonical prompt.md plus every sidecar at its own relative path. A sidecar
+ * that collides with prompt.md is a hard error (it would silently overwrite
+ * the body in the committed tree).
+ */
+export declare function buildPromptDraftFiles(primaryBody: string, sidecars: PromptDraftSidecar[]): PromptDraftFile[];
+export interface PushPromptDraftInput {
+    kind: 'prompt' | 'judge';
+    project: string;
+    sessionId: string;
+    /** The parsed orizu.prompt.json manifest of the local bundle. */
+    manifest: Record<string, unknown>;
+    /** What to call the artifact in the success message (name or directory). */
+    displayName: string;
+    bodyKind: string;
+    primaryBody: string;
+    sidecars: PromptDraftSidecar[];
+    runnerVersionId: string;
+    parentVersionId?: string;
+    report?: {
+        markdown: string;
+        sourceName: string | null;
+    } | null;
+    /** Test seam; defaults to the authenticated CLI fetcher. */
+    fetcher?: (path: string, init?: RequestInit) => Promise<Response>;
+}
+export interface PushPromptDraftResult {
+    data: Record<string, unknown>;
+    message: string;
+}
+export declare function pushPromptDraft(input: PushPromptDraftInput): Promise<PushPromptDraftResult>;
+//# sourceMappingURL=prompt-draft-push.d.ts.map

package/dist/prompt-draft-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-draft-push.d.ts","sourceRoot":"","sources":["../src/prompt-draft-push.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,2BAA2B,cAAc,CAAA;AAEtD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,kBAAkB,EAAE,GAC7B,eAAe,EAAE,CAYnB;AAMD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,kBAAkB,EAAE,CAAA;IAC9B,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;IAC/D,4DAA4D;IAC5D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAClE;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA8DjG"}

package/dist/prompt-label-cli.d.ts

@@ -0,0 +1,11 @@
+interface PromptLabelCliContext {
+    getArg: (name: string) => string | null;
+    getPositionalArg: (index: number) => string | null;
+    json: boolean;
+    printJson: (value: Record<string, unknown>) => void;
+    printLine: (value: string) => void;
+    resolveProjectSlug: (project: string | null) => Promise<string>;
+}
+export declare function setPromptLabel(context: PromptLabelCliContext): Promise<void>;
+export {};
+//# sourceMappingURL=prompt-label-cli.d.ts.map