scoutline 0.22.0 → 0.23.0

package/dist/index.d.ts

@@ -7,13 +7,68 @@ import { readLog } from "./lib/artifacts.js";
 import { type JournalableCapability } from "./lib/journal.js";
 import { type CommandInvocationAdapter } from "./command-invocation.js";
 import { type ResponseCache } from "./lib/cache.js";
-import { type ScoutlineConfig } from "./lib/config-store.js";
+import { type FusionMode, type ScoutlineConfig } from "./lib/config-store.js";
 import { type VerificationPromotionStore, type HintShownStore } from "./lib/config-store.js";
 import { type QuotaStore, type QuotaState } from "./lib/quota-store.js";
 import type { ProviderVerificationSummary } from "./capabilities/diagnostics.js";
 import { type ConsumptionSink } from "./lib/consumption.js";
 import type { ProviderDescriptor, ProviderId } from "./providers/types.js";
 import { type InitDependencies, type InitPrompts } from "./commands/init.js";
+/**
+ * Guard for flag-forbidden features (#242): parseArgs maps `--no-X` to
+ * BOTH `flags.X = false` AND `flags["no-X"] = true`, so a feature that
+ * must reject a flag has to reject both spellings — checking one
+ * silently accepts the other (the footgun the fusion lane hit when its
+ * `--fusion` rejection had to know to test both). Throws the CALLER's
+ * error (built lazily, so the no-reject path allocates nothing) when
+ * either spelling of `--<name>` / `--no-<name>` is present.
+ */
+export declare function rejectFlagPair(flags: Record<string, string | boolean>, name: string, makeError: () => Error): void;
+/**
+ * Per-command accepted flag spellings for SCOUTLINE_STRICT_FLAGS mode
+ * (#241). Keys are post-dash spellings (`no-journal`, not
+ * `--no-journal`); sets are the UNION across a command's subcommands.
+ * Exported for the strict-mode tests and the DISPATCHED_COMMANDS
+ * coverage pin.
+ */
+export declare const STRICT_FLAG_ALLOWLIST: Readonly<Record<string, ReadonlySet<string>>>;
+/**
+ * The strict-flag gate (#241): scan a command's argv (the tokens AFTER
+ * the command name — global options were already extracted) and return
+ * the first flag token the command's allowlist does not name, or
+ * `undefined` when every token is accepted. Pure; throws never; the
+ * caller owns the error envelope. Commands without an allowlist row
+ * (unknown commands — the dispatcher's own `Unknown command` path) scan
+ * nothing.
+ */
+export declare function findUnknownStrictFlag(command: string, args: readonly string[]): string | undefined;
+/**
+ * One early resolution pass over the known env doors (#244), so a bad
+ * value fails identically on EVERY command — previously
+ * SCOUTLINE_FUSION=bogus failed `quota` (the credentialed path
+ * resolves the door unconditionally) but silently succeeded on
+ * early-return commands (`config get` never read it).
+ *
+ *   - SCOUTLINE_FUSION — strict enum via {@link resolveFusionMode}
+ *     (config passed as undefined: this pass validates the ENV door
+ *     only; the file value arrives at the later resolution already
+ *     leniently parsed). Empty string is unset.
+ *   - SCOUTLINE_PROVIDER — a single shared Provider id via
+ *     {@link parseProviderId}, the exact validation the shared-capability
+ *     paths already run — except on `science`, whose env-door grammar
+ *     is the science supplier ids + "all" and is validated inside
+ *     handleScience against the D5 arm order. The `--provider` FLAG is
+ *     out of scope: it is extracted globally and still surfaces its
+ *     per-command errors where it is consumed.
+ *   - SCOUTLINE_NO_FALLBACK — boolean kill-switch: any non-empty value
+ *     disables fallback, so there is nothing to validate (listed here
+ *     because the door set is the contract, not just the checks).
+ *
+ * Pure; throws ValidationError on a bad door. `main` runs this
+ * pre-dispatch for every command (help/version bare short-circuits have
+ * already returned) and owns the error envelope.
+ */
+export declare function validateEnvDoors(env: NodeJS.ProcessEnv, command: string, explicitProvider?: string): void;
 /** Artifact serialization formats (spec ruling: json | markdown, default json). */
 declare const SAVE_FORMATS: readonly ["json", "markdown"];
 type SaveFormat = (typeof SAVE_FORMATS)[number];
@@ -134,6 +189,15 @@ export interface HandlerDependencies {
      * pre-fan-out behavior).
      */
     readonly configFanout?: boolean;
+    /**
+     * Effective merged-search ranking algorithm (fusion seed-24).
+     * Production derives this once per invocation via `resolveFusionMode`
+     * (SCOUTLINE_FUSION env > config `fusion` > default "rrf"); tests
+     * inject it directly so precedence/consumption assertions stay
+     * hermetic. Absent → the "rrf" default applies (byte-identical
+     * pre-fusion ranking).
+     */
+    readonly fusionMode?: FusionMode;
     /**
      * save-artifacts T4: present only when this run will actually save
      * (save-capable command + --save + not a help invocation). Handlers
@@ -477,6 +541,13 @@ export interface MainDependencies {
      * the switch from the loaded config.
      */
     readonly configFanout?: boolean;
+    /**
+     * Injectable fusion-mode override (fusion seed-24). When provided,
+     * this wins over the resolveFusionMode derivation (SCOUTLINE_FUSION
+     * env > config `fusion` > default "rrf") so precedence/consumption
+     * tests stay hermetic. Production leaves it undefined.
+     */
+    readonly fusionMode?: FusionMode;
     /**
      * Injectable routing preference override (#72). When provided, this
      * wins over the config file's routing table — the injectable-wins

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkGH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAaxE,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,EAIL,OAAO,EAQR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAQL,KAAK,qBAAqB,EAE3B,MAAM,kBAAkB,CAAC;AAiB1B,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EASL,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAIL,KAAK,0BAA0B,EAC/B,KAAK,cAAc,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAgB9B,OAAO,KAAK,EAGV,kBAAkB,EAClB,UAAU,EACX,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AA2L5B,mFAAmF;AACnF,QAAA,MAAM,YAAY,YAAI,MAAM,EAAE,UAAU,CAAU,CAAC;AACnD,KAAK,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAMhD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAiBD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAwBlD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAkBxD,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAOzD,CAAC;AAmBH,eAAO,MAAM,YAAY,yBAIxB,CAAC;AACF,eAAO,MAAM,OAAO,yBAInB,CAAC;AAoSF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC5D,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC,CAAC;IACnE;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,MAAM,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,KAClB,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAC3D;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxF;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,OAAO,CAAC;CAC5C;AA6ND;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAuBtE;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAgB9F;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAatE;AA8nED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,MAAM,CAAC,CAuHjB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,MAAM,CAAC,CAmFjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,mBAAmB,EACzB,WAAW,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAA;CAAE,GACnE,OAAO,CAAC,MAAM,CAAC,CA+JjB;AA0dD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAgJ/B,gFAAgF;AAEhF,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,yEAAyE;AACzE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED;;;;;;GAMG;AACH,UAAU,gBAAgB;IACxB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAoMD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,SAAS,kBAAkB,EAAE,EAC1C,OAAO,EAAE,cAAc,GACtB,SAAS,kBAAkB,EAAE,CAE/B;AA2BD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AA4SlC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxE;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC7D;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IACtC;;;;;;;;;OASG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,KAClB,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC3D;;;;;;OAMG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAC3D;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxF;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,OAAO,CAAC;CAC5C;AAqCD,wBAAsB,IAAI,CACxB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,YAAY,EAAE,gBAAgB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA8oCjB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkGH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAaxE,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,EAIL,OAAO,EAQR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAQL,KAAK,qBAAqB,EAE3B,MAAM,kBAAkB,CAAC;AAiB1B,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAUL,KAAK,UAAU,EACf,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAIL,KAAK,0BAA0B,EAC/B,KAAK,cAAc,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAqB9B,OAAO,KAAK,EAGV,kBAAkB,EAClB,UAAU,EACX,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AA+K5B;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACvC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,KAAK,GACrB,IAAI,CAIN;AAyDD;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAqK/E,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,MAAM,GAAG,SAAS,CAUpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,OAAO,EAAE,MAAM,EACf,gBAAgB,CAAC,EAAE,MAAM,GACxB,IAAI,CAaN;AAYD,mFAAmF;AACnF,QAAA,MAAM,YAAY,YAAI,MAAM,EAAE,UAAU,CAAU,CAAC;AACnD,KAAK,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAMhD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAiBD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAwBlD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAkBxD,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAOzD,CAAC;AAmBH,eAAO,MAAM,YAAY,yBAIxB,CAAC;AACF,eAAO,MAAM,OAAO,yBAInB,CAAC;AAoSF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC5D,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC,CAAC;IACnE;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,MAAM,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,KAClB,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAC3D;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxF;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,OAAO,CAAC;CAC5C;AA6ND;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAuBtE;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAgB9F;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAatE;AAspED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,MAAM,CAAC,CAuHjB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,MAAM,CAAC,CAmFjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,mBAAmB,EACzB,WAAW,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAA;CAAE,GACnE,OAAO,CAAC,MAAM,CAAC,CA+JjB;AA0dD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAgJ/B,gFAAgF;AAEhF,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvF;AAED,yEAAyE;AACzE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED;;;;;;GAMG;AACH,UAAU,gBAAgB;IACxB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAoMD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,SAAS,kBAAkB,EAAE,EAC1C,OAAO,EAAE,cAAc,GACtB,SAAS,kBAAkB,EAAE,CAE/B;AA0BD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,CAAC;AA2SlC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxE;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC7D;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IACtC;;;;;;;;;OASG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,KAClB,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC3D;;;;;;OAMG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAC3D;;;;;;;;OAQG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxF;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjF;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,OAAO,CAAC;CAC5C;AAqCD,wBAAsB,IAAI,CACxB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,YAAY,EAAE,gBAAgB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAisCjB"}

package/dist/index.js

@@ -42,15 +42,16 @@ import { invokeCommand, } from "./command-invocation.js";
 import { createFileResponseCache, defaultResponseCache, isIsolatedEnv, responseCacheDir, } from "./lib/cache.js";
 import { MAX_SUBQUERIES, parseContextText, readContextSource } from "./lib/context-file.js";
 import { configuredSecrets, redactSecrets } from "./lib/redact.js";
-import { configFilePath, readConfig, resolveConfigRoot, resolveConfigRootPure, resolveEnvFromConfig, setConfigValue, unsetConfigValue, } from "./lib/config-store.js";
+import { configFilePath, readConfig, resolveConfigRoot, resolveConfigRootPure, resolveEnvFromConfig, setConfigValue, unsetConfigValue, resolveFusionMode, } from "./lib/config-store.js";
 import { inspectConfig, createDefaultVerificationPromoter, createDefaultHintShownStore, } from "./lib/config-store.js";
 import { createDefaultQuotaStore, refreshQuotaSnapshots, } from "./lib/quota-store.js";
 import { createCompositeConsumptionSink, createQuotaStoreConsumptionSink, } from "./lib/consumption.js";
 import { createUsageLedgerSink, readUsageLedger, resolveUsageLedgerPath, } from "./lib/usage-ledger.js";
 import { classifyCredentialState, formatEnvOnlyHint, isCommandHelpInvocation, isDryRunBatchInvocation, OBSERVATIONAL_COMMANDS, } from "./lib/trigger-detection.js";
-import { resolveProviderId, resolveEffectiveProvider } from "./providers/selection.js";
+import { resolveProviderId, resolveEffectiveProvider, parseProviderId, } from "./providers/selection.js";
 import { BUILT_IN_PROVIDER_DESCRIPTORS } from "./providers/registry.js";
 import { PROVIDER_IDS } from "./providers/types.js";
+import { SHARED_PROVIDER_FLAG_IDS, SHARED_PROVIDER_IDS } from "./providers/catalog.js";
 import { executeWithFallback } from "./lib/provider-fallback.js";
 import { visionOperationToCapability } from "./capabilities/vision.js";
 import { handleInitWithHelp, createInquirerPrompts, createDefaultConfigStore, } from "./commands/init.js";
@@ -64,7 +65,7 @@ Usage: scoutline <command> [args] [options]
 
 Commands:
   vision   Image and video analysis (Z.AI; MiniMax for interpret-image)
-  search   Real-time web search (shared: all 12 Providers; --topic
+  search   Real-time web search (shared: all ${SHARED_PROVIDER_IDS.length} Providers; --topic
            honored by every Provider)
   read     Fetch and parse web pages (Provider Capability; Z.AI, Tavily,
            Exa, Firecrawl, Parallel, Jina, You.com, Linkup, and Spider.cloud supply it)  crawl    Crawl a website from a starting URL (Provider Capability;
@@ -105,7 +106,7 @@ Commands:
            credential-free)
 
 Provider selection (precedence: --provider, then SCOUTLINE_PROVIDER, then zai):
-  --provider <zai|minimax|tavily|exa|brave|firecrawl|parallel|perplexity|jina|you|linkup|spider>   Select the active Provider for shared capabilities (science suppliers pin only within "scoutline science ...")  SCOUTLINE_PROVIDER=<id>    Fallback when --provider is not passed
+  --provider <${SHARED_PROVIDER_FLAG_IDS}>   Select the active Provider for shared capabilities (science suppliers pin only within "scoutline science ...")  SCOUTLINE_PROVIDER=<id>    Fallback when --provider is not passed
 
 Shared capabilities accept --provider. The 'repo', 'read', 'crawl', 'map',
 and 'research' commands participate in Provider selection: Z.AI
@@ -115,8 +116,10 @@ advertises and supplies search, reader, and research; Parallel AI
 advertises search, research, and reader; Perplexity advertises search
 and research; Jina AI advertises search, reader, and research (keyless
 supported); You.com advertises search, reader, and research; Linkup advertises search, reader, and research; Spider.cloud
-advertises search, reader, crawl, and map; MiniMax advertises and supplies none of those
-Provider-only Capabilities.
+advertises search, reader, crawl, and map; Bocha AI advertises and
+supplies search; SearchApi advertises and supplies search; Kagi
+advertises and supplies search; MiniMax advertises and supplies none of
+those Provider-only Capabilities.
 Provider fallback is always-on by default (0.11.0+): selecting a
 non-supplier emits a stderr notice and silently reroutes to the next
 eligible configured Provider in registry order. Use --no-fallback (or
@@ -125,6 +128,16 @@ UNSUPPORTED_CAPABILITY behavior. Z.AI-only commands (tools, tool,
 call, code) carry the flag but ignore it. Quota and doctor report
 per-Provider; --provider picks the effective Provider for metadata.
 
+Merged-search ranking: fan-out and --merge results rank by reciprocal
+rank fusion (SCOUTLINE_FUSION=<rrf|occurrence>; default rrf; also the
+config \`fusion\` key, env wins). \`occurrence\` restores the legacy
+ordering byte-for-byte. See \`scoutline search --help\`.
+
+Flag strictness: unknown command flags are silently ignored by default
+(a typo like --fusio runs as if the flag were absent). Set
+SCOUTLINE_STRICT_FLAGS=1 to reject unknown flags on every command with
+a VALIDATION_ERROR naming the offender.
+
 Global Options:
   --output-format <data|json|pretty|compact|markdown|refs|tty>  Output mode (default: data)
   -O <mode>                                                     Alias for --output-format
@@ -165,6 +178,16 @@ function parseArgs(args) {
             break;
         if (arg.startsWith("--")) {
             const key = arg.slice(2);
+            // TWO-SPELLING CONTRACT (#242): this branch maps `--no-X` to BOTH
+            // `flags.X = false` AND `flags["no-X"] = true`. A feature that
+            // must reject a flag therefore has to reject BOTH spellings — a
+            // handler checking only `flags.X` silently accepts `--no-X`, and
+            // one checking only `flags["no-X"]` misses the plain form. Use
+            // `rejectFlagPair(flags, name, makeError)` (below) for every
+            // flag-forbidden surface; the fusion rejection is the reference
+            // retrofit. (A structural fix — making `--no-X` set a single
+            // `flags.noX` key — would break every existing `--no-*`
+            // consumer.)
             if (key.startsWith("no-")) {
                 flags[key.slice(3)] = false;
                 flags[key] = true;
@@ -200,6 +223,20 @@ function parseArgs(args) {
     }
     return { flags, positional };
 }
+/**
+ * Guard for flag-forbidden features (#242): parseArgs maps `--no-X` to
+ * BOTH `flags.X = false` AND `flags["no-X"] = true`, so a feature that
+ * must reject a flag has to reject both spellings — checking one
+ * silently accepts the other (the footgun the fusion lane hit when its
+ * `--fusion` rejection had to know to test both). Throws the CALLER's
+ * error (built lazily, so the no-reject path allocates nothing) when
+ * either spelling of `--<name>` / `--no-<name>` is present.
+ */
+export function rejectFlagPair(flags, name, makeError) {
+    if (flags[name] !== undefined || flags[`no-${name}`] !== undefined) {
+        throw makeError();
+    }
+}
 /**
  * Collect every occurrence of a long `--<name>` flag in argv order,
  * mirroring parseArgs' value-consumption rule (the next argument is the
@@ -226,6 +263,271 @@ function collectLongFlagValues(args, name) {
     return values;
 }
 // ---------------------------------------------------------------------------
+// Strict flag mode (#241). Outside `batch` (and `vision batch` /
+// `history clear`, which carry their own gates) unknown CLI flags are
+// silently ignored — `search "q" --fusio rrf` runs as if the flag were
+// absent and parseArgs swallows the value into flag state. Global
+// strictness would break users passing redundant flags, so rejection is
+// OPT-IN: SCOUTLINE_STRICT_FLAGS set to any non-empty value (the
+// SCOUTLINE_NO_FALLBACK idiom) makes the dispatcher reject every flag
+// token the command's allowlist does not name, with the batch-style
+// error naming the offender.
+//
+// Semantics of the scan (deliberate rulings):
+//   - Exact spellings: `--no-journal` is accepted only as the literal
+//     `no-journal` row; it does NOT license a bare `--journal`. The
+//     parseArgs `--no-X` double-map never participates — the scan reads
+//     raw argv tokens, not parsed flag state.
+//   - Short flags are checked too (`-h` everywhere; fetch's `-A/-X/-H`).
+//     A multi-dash-letter token like `-ab` (which parseArgs would treat
+//     as positional) rejects under strict mode — strict means strict.
+//   - Global flags (`--provider`, `--output-format`, `--save*`, ...) are
+//     stripped by extractGlobalOptions BEFORE this gate, so they are not
+//     listed; a few commands (cache/usage) keep `provider` rows anyway
+//     for direct in-process callers whose argv was never extracted.
+//   - Flags a command's handler REJECTS with a specific error (e.g.
+//     search's `--fusion`, map's `--max-chars`) are absent from the set
+//     on purpose: under strict mode the generic rejection fires first;
+//     under the lenient default the handler's specific error still does.
+//   - When you add a flag to a command, add its spelling here — a miss
+//     only bites strict-mode users, but it bites them loudly.
+// ---------------------------------------------------------------------------
+/**
+ * Per-command accepted flag spellings for SCOUTLINE_STRICT_FLAGS mode
+ * (#241). Keys are post-dash spellings (`no-journal`, not
+ * `--no-journal`); sets are the UNION across a command's subcommands.
+ * Exported for the strict-mode tests and the DISPATCHED_COMMANDS
+ * coverage pin.
+ */
+export const STRICT_FLAG_ALLOWLIST = {
+    vision: new Set([
+        "help",
+        "h",
+        "context",
+        "focus",
+        "language",
+        "output",
+        "type",
+        // `vision batch` wrapper (the VISION_BATCH_FLAGS surface)
+        "out",
+        "prompt",
+        "concurrency",
+        "dry-run",
+    ]),
+    search: new Set([
+        "help",
+        "h",
+        "count",
+        "domain",
+        "fields",
+        "recency",
+        "topic",
+        "type",
+        "location",
+        "content-size",
+        "merge",
+        "max-summary",
+        "no-cache",
+        "max-chars",
+        "context",
+        "context-stdin",
+        "no-journal",
+    ]),
+    read: new Set([
+        "help",
+        "h",
+        "extract",
+        "format",
+        "full-envelope",
+        "keep-img-data-url",
+        "no-cache",
+        "no-gfm",
+        "no-images",
+        "timeout",
+        "with-images-summary",
+        "with-links",
+        "max-chars",
+        "no-journal",
+    ]),
+    crawl: new Set([
+        "help",
+        "h",
+        "breadth",
+        "content-size",
+        "depth",
+        "exclude-paths",
+        "format",
+        "instructions",
+        "limit",
+        "no-cache",
+        "select-paths",
+        "timeout",
+        "max-chars",
+    ]),
+    map: new Set([
+        "help",
+        "h",
+        "breadth",
+        "depth",
+        "exclude-paths",
+        "instructions",
+        "limit",
+        "no-cache",
+        "select-paths",
+    ]),
+    research: new Set([
+        "help",
+        "h",
+        "citation-format",
+        "context",
+        "context-mode",
+        "context-stdin",
+        "domain",
+        "model",
+        "no-cache",
+        "output-length",
+        "timeout",
+        "max-chars",
+        "no-journal",
+    ]),
+    repo: new Set([
+        "help",
+        "h",
+        "depth",
+        "focus",
+        "lang",
+        "language",
+        "max-chars",
+        "no-cache",
+        "no-focus",
+        "path",
+    ]),
+    batch: new Set(["help", "h", "concurrency", "fail-fast", "dry-run"]),
+    tools: new Set(["help", "h", "filter", "full", "ts", "typescript", "vision", "no-vision"]),
+    tool: new Set(["help", "h", "vision", "no-vision"]),
+    call: new Set(["help", "h", "dry-run", "file", "json", "stdin", "vision", "no-vision"]),
+    doctor: new Set(["help", "h", "available", "health", "no-tools"]),
+    quota: new Set(["help", "h", "all-providers"]),
+    code: new Set(["help", "h", "logs", "timeout"]),
+    cache: new Set(["help", "h", "capability", "older-than", "provider"]),
+    usage: new Set(["help", "h", "days", "provider"]),
+    history: new Set([
+        "help",
+        "h",
+        "all",
+        "as-of",
+        "capability",
+        "command",
+        "kind",
+        "limit",
+        "repeats",
+        "since",
+        "tags",
+        // `history note` consumes --url/--title pairs through its own
+        // raw-argv scan (repeatable rows, not parseArgs flag state) — the
+        // final-review false-reject probe.
+        "url",
+        "title",
+    ]),
+    init: new Set(["help", "h", "unregister"]),
+    config: new Set(["help", "h"]),
+    fetch: new Set([
+        "help",
+        "h",
+        "md5",
+        "sha256",
+        "raw",
+        "out",
+        "ua",
+        "user-agent",
+        "A",
+        "method",
+        "X",
+        "data",
+        "header",
+        "H",
+        "pdf",
+        "pdf-repair",
+        "timeout",
+    ]),
+    archive: new Set(["help", "h", "at", "from", "limit", "raw", "since", "status", "timeout", "to"]),
+    watch: new Set(["help", "h", "all", "format", "keep", "name", "purge", "timeout"]),
+    science: new Set([
+        "help",
+        "h",
+        "author",
+        "year",
+        "venue",
+        "type",
+        "provider",
+        "no-cache",
+        "max-chars",
+        "no-journal",
+    ]),
+};
+/**
+ * The strict-flag gate (#241): scan a command's argv (the tokens AFTER
+ * the command name — global options were already extracted) and return
+ * the first flag token the command's allowlist does not name, or
+ * `undefined` when every token is accepted. Pure; throws never; the
+ * caller owns the error envelope. Commands without an allowlist row
+ * (unknown commands — the dispatcher's own `Unknown command` path) scan
+ * nothing.
+ */
+export function findUnknownStrictFlag(command, args) {
+    const allowed = STRICT_FLAG_ALLOWLIST[command];
+    if (allowed === undefined)
+        return undefined;
+    for (const arg of args) {
+        if (typeof arg !== "string" || !arg.startsWith("-") || arg.length < 2)
+            continue;
+        const key = arg.startsWith("--") ? arg.slice(2) : arg.slice(1);
+        if (key.length === 0)
+            continue; // a bare `--` token: never a flag name
+        if (!allowed.has(key))
+            return arg;
+    }
+    return undefined;
+}
+/**
+ * One early resolution pass over the known env doors (#244), so a bad
+ * value fails identically on EVERY command — previously
+ * SCOUTLINE_FUSION=bogus failed `quota` (the credentialed path
+ * resolves the door unconditionally) but silently succeeded on
+ * early-return commands (`config get` never read it).
+ *
+ *   - SCOUTLINE_FUSION — strict enum via {@link resolveFusionMode}
+ *     (config passed as undefined: this pass validates the ENV door
+ *     only; the file value arrives at the later resolution already
+ *     leniently parsed). Empty string is unset.
+ *   - SCOUTLINE_PROVIDER — a single shared Provider id via
+ *     {@link parseProviderId}, the exact validation the shared-capability
+ *     paths already run — except on `science`, whose env-door grammar
+ *     is the science supplier ids + "all" and is validated inside
+ *     handleScience against the D5 arm order. The `--provider` FLAG is
+ *     out of scope: it is extracted globally and still surfaces its
+ *     per-command errors where it is consumed.
+ *   - SCOUTLINE_NO_FALLBACK — boolean kill-switch: any non-empty value
+ *     disables fallback, so there is nothing to validate (listed here
+ *     because the door set is the contract, not just the checks).
+ *
+ * Pure; throws ValidationError on a bad door. `main` runs this
+ * pre-dispatch for every command (help/version bare short-circuits have
+ * already returned) and owns the error envelope.
+ */
+export function validateEnvDoors(env, command, explicitProvider) {
+    resolveFusionMode(env, undefined);
+    // PR #253 round 1: a present --provider flag (any value — id, comma
+    // list, or "all") wins the precedence chain, so SCOUTLINE_PROVIDER is
+    // a dead value on a pinned run and must not fail it. The flag's own
+    // value is validated downstream, where the consuming command reads it.
+    if (command !== "science" &&
+        explicitProvider === undefined &&
+        env.SCOUTLINE_PROVIDER !== undefined) {
+        parseProviderId(env.SCOUTLINE_PROVIDER);
+    }
+}
+// ---------------------------------------------------------------------------
 // Save-artifacts flag surface (batch ticket T3). `--save [<path>]`,
 // `--save-format <json|markdown>`, and `--save-force` are global options:
 // extracted for every command, removed from the rest stream, and consumed
@@ -871,6 +1173,14 @@ async function handleSearch(args, outputMode, deps) {
     if (typeof flags["context-stdin"] === "string") {
         throw new ValidationError("--context-stdin does not take a value.", 'Pipe the context on standard input: cat notes.md | scoutline search "<query>" --context-stdin.');
     }
+    // Fusion seed-24 AC-1 pin: search takes NO --fusion flag — the
+    // algorithm is a standing setting, not a per-query option — so a
+    // query flag could never exist. rejectFlagPair (#242) guards BOTH
+    // spellings (parseArgs maps `--no-fusion` to flags.fusion=false AND
+    // flags["no-fusion"]=true); rejection runs BEFORE the help-gate for
+    // the same reason as `--context` above (parseArgs swallows the value
+    // into flag state, and help would exit 0).
+    rejectFlagPair(flags, "fusion", () => new ValidationError("search has no --fusion flag; the ranking algorithm is a standing setting, not a per-query option.", "Use `scoutline config set fusion <rrf|occurrence>` or the SCOUTLINE_FUSION environment variable."));
     if (flags.help || flags.h || positional.length === 0) {
         deps.invocation.writeStdout(SEARCH_HELP);
         return 0;
@@ -1227,6 +1537,9 @@ async function handleSearch(args, outputMode, deps) {
                 env: deps.env,
                 query: dispatchQuery,
                 searchOptions,
+                // Seed-24 T3: the resolved ranking mode (env > config >
+                // "rrf") — the executor's merge names it explicitly.
+                fusionMode: deps.fusionMode ?? "rrf",
                 dependencies: {
                     cache: deps.searchCache,
                     sleep: deps.searchSleep,
@@ -1268,6 +1581,10 @@ async function handleSearch(args, outputMode, deps) {
                 cache: deps.searchCache,
                 sleep: deps.searchSleep,
                 random: deps.searchRandom,
+                // Seed-24 T3: the resolved ranking mode (env > config >
+                // "rrf") reaches the single-provider --merge seam too, so
+                // one merge implementation serves both paths.
+                fusionMode: deps.fusionMode ?? "rrf",
                 // PB-T2 parity with the fan-out path above (usage-ledger
                 // DESIGN D7): thread the configured consumption sink +
                 // clock so every billable sub-query on the single-pin path
@@ -3891,6 +4208,39 @@ export async function main(args, dependencies) {
     }
     const command = rest[0] ?? "";
     const commandArgs = rest.slice(1);
+    // #244: validate the env doors ONCE, pre-dispatch, for ALL command
+    // RUNS — a typo'd env value used to fail only on the paths that
+    // happened to resolve it first (quota yes, config get no). Help
+    // invocations stay exempt (documentation, not a run — the same
+    // doctrine as the --max-chars/--no-journal gates and the existing
+    // "<cmd> --help succeeds with an invalid SCOUTLINE_PROVIDER" pins:
+    // rendering help must never require a valid environment). Runs before
+    // the strict-flags gate and every command-specific gate, and before
+    // any disk or network work (the agent-registration check below), so a
+    // doomed run costs nothing. Bare `--help`/`--version` already
+    // returned above.
+    if (!isCommandHelpInvocation(commandArgs)) {
+        try {
+            validateEnvDoors(env, command, provider);
+        }
+        catch (error) {
+            invocation.writeStderr(formatErrorOutput(error, outputMode, envSecrets));
+            return getErrorExitCode(error);
+        }
+    }
+    // #241: opt-in strict flag mode. Fires before every other pre-dispatch
+    // gate (and before the agent-registration disk check) so a doomed run
+    // costs nothing: with SCOUTLINE_STRICT_FLAGS set to any non-empty
+    // value, a flag token the command's allowlist does not name rejects
+    // with the batch-style error. The lenient default (unset/empty env)
+    // stays byte-identical — unknown flags are accepted and dropped.
+    if (typeof env.SCOUTLINE_STRICT_FLAGS === "string" && env.SCOUTLINE_STRICT_FLAGS.length > 0) {
+        const unknownFlag = findUnknownStrictFlag(command, commandArgs);
+        if (unknownFlag !== undefined) {
+            invocation.writeStderr(formatErrorOutput(new ValidationError(`unknown flag "${unknownFlag}" for command "${command}" (SCOUTLINE_STRICT_FLAGS is enabled)`, `Run "scoutline ${command} --help" for the accepted flags, or unset SCOUTLINE_STRICT_FLAGS to restore lenient flag handling.`), outputMode, envSecrets));
+            return 1;
+        }
+    }
     // Lazy agent-registration stamp check (agent registration D5/D6):
     // fires exactly once per CLI run, before command dispatch. Stamp-absent
     // runs are zero-cost no-ops; drift refreshes the registered tools. A
@@ -4010,7 +4360,7 @@ export async function main(args, dependencies) {
     // Build HandlerDependencies for a given credential view. The
     // cache/sleep/random fields are always available (resolved above); only
     // env/secrets/fallbackEnabled depend on whether config has been loaded.
-    const buildHandlerDeps = (credEnv, credSecrets, credFallback, credRouting = undefined, credFanout = undefined) => ({
+    const buildHandlerDeps = (credEnv, credSecrets, credFallback, credRouting = undefined, credFanout = undefined, credFusion = undefined) => ({
         invocation,
         env: credEnv,
         secrets: credSecrets,
@@ -4020,6 +4370,7 @@ export async function main(args, dependencies) {
         fallbackEnabled: credFallback,
         routing: credRouting,
         configFanout: credFanout,
+        fusionMode: credFusion,
         searchCache,
         searchSleep,
         searchRandom,
@@ -4541,9 +4892,14 @@ export async function main(args, dependencies) {
     // Ticket 4. Read leniently: an absent or non-boolean field simply means
     // fan-out stays off.
     const configFanout = dependencies.configFanout ?? config.fanout === true;
+    // Fusion seed-24: resolve the effective ranking mode ONCE per
+    // invocation, injectable-wins exactly like configFanout above.
+    // Strict: a non-enum SCOUTLINE_FUSION throws here (exit 1) — typos
+    // never silently fall back to rrf.
+    const fusionMode = dependencies.fusionMode ?? resolveFusionMode(env, config);
     const handlerDeps = buildHandlerDeps(resolvedEnv, secrets, fallbackEnabled, 
     // #72: injectable-wins, mirroring configFanout above.
-    dependencies.routing ?? config.routing, configFanout);
+    dependencies.routing ?? config.routing, configFanout, fusionMode);
     // PB-T5 — derive Plan A verification records from the loaded config
     // AFTER `config` is in scope. `buildHandlerDeps` runs once BEFORE
     // config load (the cache short-circuit), so this derivation cannot