sept-agent 0.0.0-stage → 0.1.1

package/CONTRIBUTING.md

@@ -0,0 +1,48 @@
+# Contributing to SEPT
+
+Use a complete source checkout and Node.js >=22.19.0. Read the repository-only [AGENTS.md](https://github.com/DB-Conneely/sept/blob/main/AGENTS.md) and [TypeScript rules](https://github.com/DB-Conneely/sept/blob/main/.codex/rules/typescript.md) before changing source/tests. They are intentionally not shipped as npm build inputs. Keep the thin Pi-owned architecture and preserve user work and meaningful history. Deployment is performed manually by the user through GitHub CI/CD.
+
+## Setup and gates
+
+```sh
+npm ci
+npm run check
+```
+
+Dependencies are exact pins: Pi Durable/coding-agent/AI/Chord/codemode1.1.0, TypeScript 5.9.2 and Node types 24.3.1. Keep the lockfile, strict compiler, architecture rules, exported-behavior checks and test concurrency 4. Do not substitute a compiler, hide declaration failures with broader skips, or patch host npm Pi headers. The image-only native-search overlay is separately pinned and verified.
+
+For Docker-dependent gates, select one trusted canonical local Unix socket and clear ambient Docker selection. Run from the pinned full checkout; building is local verification, not deployment:
+
+```sh
+export SEPT_ENGINE_SOCKET=/run/docker.sock  # choose the actual trusted local socket
+export SEPT_ENGINE_SOCKET="$(node -e 'console.log(require("node:fs").realpathSync(process.env.SEPT_ENGINE_SOCKET))')"
+export SEPT_ENGINE_HOST="unix://$SEPT_ENGINE_SOCKET"
+env -u DOCKER_HOST -u DOCKER_CONTEXT docker --host "$SEPT_ENGINE_HOST" \
+  build --no-cache --iidfile /absolute/private/evidence/sept.iid -t sept:local .
+SEPT_HANDS_TEST_IMAGE="$(cat /absolute/private/evidence/sept.iid)" npm run gate
+npm audit
+```
+
+Create the evidence directory first; keep build/image receipts. Check the actual actor traversal, cgroup v2 and memory/PID/disk headroom. Gate fixture Engine selection follows the test host's configuration; the supplied-hands consumer recipe uses its explicit socket. Full native Linux/amd64 is the gate target; the bounded native Mac ARM Docker Linux smoke is separate. A full Darwin suite is not a release gate.
+
+After each coherent module: `npm run check`, directly affected tests, structural/TSDoc review, then unchanged `npm run gate`. The gate includes build, all compiled tests, meta-tests and `npm audit --omit=dev`. Before handoff also run `git diff --check` and full audit. A red/unrun gate is incomplete. Serialize independently launched heavy build/gate/provider work under nice 10; retain unchanged test concurrency 4. Join every job and independent finalizer. `npm run build` and `prepack` clean `dist`; wait for all dist consumers before running them.
+
+## Ownership and change expectations
+
+[Architecture](docs/architecture.md) names the mechanism boundaries. Cross-mechanism imports use intentional indexes. Pi alone owns providers/authentication, generation/tool tasks, native scheduling/replay and context accounting. SEPT owns durable task/lifecycle/evidence, bounded authenticated transport and explicitly supplied execution authority. Do not add another provider SDK, model loop, tokenizer, compactor, scheduler, extension ABI or provisioner.
+
+Keep functions/files cohesive and documented; validate hostile input once at its owning boundary, use typed domain errors, preserve first-cause cancellation and independent cleanup, bound resources before buffering, and preserve fsync-before-transition ordering. Credentials never enter prompts, durable/public state, telemetry, logs or images. Trusted extensions are full-authority brain code; workspace instructions/skills and mounts never grant executable authority. Hands checks live policy beside effects and fails closed.
+
+A focused PR should explain the concrete trigger and resulting behavior, exact owner/callers and relevant validation. Update public contracts/docs/examples together. Add meaningful focused regression coverage for behavior, important errors and both race orderings; avoid tests that merely mirror trivial implementation. Preserve exact dependency/security/limit/meta gates.
+
+Only root, client and hands are public npm entries. Public API changes need strict external NodeNext compilation with normal Node types and `skipLibCheck=false`, a real production-only cold install outside repository module lookup, and actual behavioral callers. Native Pi extension authoring is a separate declaration/tooling concern; describe any upstream limits honestly. The [two copied external integrations](docs/index.md#developer-reading-order) must compile/copy/run explicitly because root tsconfig does not include them.
+
+## Installed evidence and cleanup
+
+Compilation and isolated tests support delivery; the actual installed runtime path is the completion criterion. Exercise the changed installed CLI/public import through production Pi and supplied hands. Container input changes require a fresh no-cache image and affected installed proof. The npm tarball excludes the Docker build context; build from full source and inspect final package inventory, source maps, legal/provenance files and allowed imports.
+
+Record exact source/tar/image/dependency identity, cwd/commands, actual child exit/signal/join, original failures and separately observed finalizers. Do not turn wrapper exit0 into a product verdict. Export needed tmpfs data before stopping the exact owned generation; independently close worker, provider/listener, attachments/leases and namespace even if one cleanup fails. Preserve stopped-generation proof, mutex inodes, evidence, recovery and unrelated resources. Never prune/delete them as incidental cleanup. See [operator finalization](docs/pi-contract.md#export-and-finalize-the-owned-generation).
+
+## Automated package releases
+
+[Release setup and retry policy](https://github.com/DB-Conneely/sept/blob/main/docs/releasing.md) describes the GitHub-hosted Linux/amd64 gate and main-push npm/GHCR/GitHub release workflow. It uses no live provider or local model. The publish job consumes the exact tested tarball and saved image; deployment remains manual.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SEPT contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,32 @@
+SEPT
+
+Copyright (c) 2026 SEPT contributors
+
+SEPT depends on @earendil-works/pi-coding-agent 1.1.0, distributed under the MIT
+License. Its upstream npm archive omits a LICENSE file. The complete upstream
+notice below is retained from repository commit
+abe508e1b89912adde45528136c3221eb69acdd7. Exact source URL, license hash and
+image-only native-search modification provenance are recorded in
+image/pi-native-search/provenance.json and image/pi-native-search/README.md.
+
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,94 @@
-# Temporary Holding Version
+# SEPT
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+SEPT is a durable, single-slot task worker for Node.js, built on the native Pi Durable Harness. Embed a complete worker in an application, submit tasks from an existing service, or use the installed `sept` CLI. Pi owns models, authentication, generation, tools and native conversation persistence; SEPT adds durable task/operator evidence, wait/wake, bounded HTTP transport, cancellation, drain and context rollover.
+
+## Install and prepare
+
+Requires Node.js **22.19.0 or newer**, ESM, Pi credentials or a suitable configured model, persistent local state, and an operator-supplied Docker Linux hands namespace. Valid hands are required even for text-only tasks. The package does not install Docker, serve models or provision hands.
+
+After npm publication, add SEPT to your application with `npm install --save-exact sept-agent`. The command is `sept` and the import name is `sept-agent`.
+
+To install a retained exact package artifact for a qualified source revision:
+
+```sh
+npm install --save-exact /absolute/path/sept-agent-0.1.0.tgz
+```
+
+This works without assuming a registry publication. For development from a complete checkout, use `npm ci` then `npm run build`. Configure [models and Pi authentication](docs/models.md), then follow the [supplied-hands setup](docs/pi-contract.md#executable-supplied-hands-setup), including the explicit first-boot policy **before starting a worker or direct run**.
+
+The supplied brain image runs as UID10001 and stores durable evidence at `/state/runs`. Container operation requires persistent storage, for example `-v sept-state:/state`, plus explicit private Pi credential storage and assigned workspaces. Supply hands as a separate namespace using the linked setup.
+
+## Embed a JavaScript worker
+
+Save as `worker.mjs`. These environment variables are application inputs; the library itself reads no CLI/environment defaults.
+
+```js
+import { createWorker } from "sept-agent";
+
+const worker = await createWorker({
+  stateRoot: process.env.SEPT_STATE_DIR,
+  agentDir: process.env.PI_CODING_AGENT_DIR,
+  workspaceRoot: process.env.SEPT_WORKSPACE_ROOT,
+  handsConfigurationPath: process.env.SEPT_HANDS_CONFIGURATION,
+  token: process.env.SEPT_TOKEN,
+  host: "127.0.0.1",
+  port: 8090,
+});
+
+// The host owns signal handling and must await shutdown.
+for (const signal of ["SIGINT", "SIGTERM"]) {
+  process.once(signal, () => {
+    void worker.stop().catch(() => { process.exitCode = 1; });
+  });
+}
+console.log(worker.address);
+```
+
+Required roots/token must be nonempty; use canonical absolute paths and a persistent external state root. Readiness covers the listener/router and synchronous durable adoption; asynchronous Pi/backend execution is observed through task state. `stop()` joins the existing durable boundary. See [SDK lifecycle and ownership](docs/sdk.md#worker-lifecycle).
+
+## Submit from TypeScript
+
+```ts
+import { createTaskClient, type TaskRequest } from "sept-agent/client";
+
+const task: TaskRequest = {
+  task: "Summarize the supplied evidence, cite its IDs and state what remains unknown",
+  maxInvocations: 3,
+  maxEpochs: 2,
+  timeoutSeconds: 120,
+};
+const client = createTaskClient({
+  baseUrl: "http://127.0.0.1:8090",
+  token: process.env.SEPT_TOKEN ?? "",
+});
+const admission = await client.createTask({
+  source: "my-service",
+  eventId: "evidence-case-001",
+  task,
+});
+const current = await client.getTask(admission.runId);
+console.log(current.state.status);
+```
+
+Keep `source`/`eventId` stable across retries. Admission receipts retain their original `active` status; `getTask` reports current state. A timeout or abort can occur after durable acceptance. The [SDK guide](docs/sdk.md) covers all five client methods, finite cursor-gap recovery, limits and error classifications.
+
+## CLI and integrations
+
+The installed CLI uses the same complete worker composition:
+
+```sh
+sept auth login --provider openai-codex --method subscription --agent-dir "$PI_CODING_AGENT_DIR"
+sept models current --agent-dir "$PI_CODING_AGENT_DIR"
+sept worker --state-dir "$SEPT_STATE_DIR" --agent-dir "$PI_CODING_AGENT_DIR" \
+  --workspace-root "$SEPT_WORKSPACE_ROOT" --hands "$SEPT_HANDS_CONFIGURATION"
+```
+
+The bearer comes from `SEPT_TOKEN`, never a CLI token option. Every HTTP route requires it. One state root has one owner and one resident slot, including while waiting. The [Node application](examples/node-app/README.md) and [incident investigator](examples/incident-investigator/README.md) show the two integration patterns; each owns its finite work and cleanup.
+
+[Formal documentation and AI navigation](docs/index.md) · [HTTP/SSE API](docs/worker-api.md) · [Pi, hands and security contract](docs/pi-contract.md) · [Architecture](docs/architecture.md) · [Observability](docs/observability.md) · [Contributing](CONTRIBUTING.md)
+
+Support is scoped to qualified source/image/host combinations; see [version and support](docs/index.md#version-and-support). The npm artifact is a consumer package; build the Docker image from a pinned complete repository checkout. Host npm Pi stays stock; the [four native-search image assets](image/pi-native-search/README.md) describe the image-only overlay. No publication or deployment is performed by these instructions.
+
+SEPT is [MIT licensed](LICENSE). [NOTICE](NOTICE) retains the known upstream attribution and image-overlay provenance.
+
+Maintainers: [automatic checks and publishing setup](https://github.com/DB-Conneely/sept/blob/main/docs/releasing.md) describes main-push releases, npm trusted publishing and GHCR configuration. Publishing does not deploy a service.

package/dist/src/cli/auth-interaction.d.ts

@@ -0,0 +1,7 @@
+import type { LoginInteraction } from "../model-access/index.js";
+/** A Pi login interaction whose terminal listeners and streams can be released idempotently. */
+export interface TerminalAuthInteraction extends LoginInteraction {
+    close(): void;
+}
+/** Terminal presentation only; Pi still owns every authentication flow and credential mutation. */
+export declare function createTerminalAuthInteraction(): TerminalAuthInteraction;

package/dist/src/cli/auth-interaction.js

@@ -0,0 +1,127 @@
+/**
+ * Adapts Pi-owned authentication prompts to this process's terminal. This module owns only
+ * bounded display, cancellation, and terminal cleanup; ModelAccess owns credentials and flows.
+ */
+import { createInterface } from "node:readline";
+import { Writable } from "node:stream";
+import { CliError } from "./errors.js";
+function display(value) {
+    return value
+        .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, "")
+        .replace(/\bBearer\s+\S+/gi, "[redacted]")
+        .slice(0, 4096);
+}
+class TerminalPrompter {
+    signal;
+    controller = new AbortController();
+    terminal = process.stdin.isTTY;
+    output;
+    input;
+    muted = false;
+    closed = false;
+    constructor() {
+        this.signal = this.controller.signal;
+        this.output = new Writable({
+            write: (chunk, _encoding, callback) => {
+                if (!this.muted) {
+                    process.stderr.write(chunk);
+                }
+                callback();
+            },
+        });
+        Object.assign(this.output, {
+            isTTY: process.stderr.isTTY,
+            columns: process.stderr.columns,
+        });
+        this.input = createInterface({
+            input: process.stdin,
+            output: this.output,
+            terminal: this.terminal,
+        });
+        process.once("SIGINT", this.cancel);
+    }
+    cancel = () => {
+        this.controller.abort();
+    };
+    question(message, secret, promptSignal) {
+        return new Promise((resolve, reject) => {
+            const signal = promptSignal
+                ? AbortSignal.any([this.controller.signal, promptSignal])
+                : this.controller.signal;
+            if (signal.aborted) {
+                reject(new CliError("Login cancelled"));
+                return;
+            }
+            let settled = false;
+            const finish = (error, answer) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                signal.removeEventListener("abort", abort);
+                if (secret && this.terminal && this.muted) {
+                    this.muted = false;
+                    process.stderr.write("\n");
+                }
+                if (error) {
+                    reject(error);
+                }
+                else {
+                    resolve(answer ?? "");
+                }
+            };
+            const abort = () => {
+                finish(new CliError("Login cancelled"));
+            };
+            signal.addEventListener("abort", abort, { once: true });
+            if (secret && this.terminal) {
+                process.stderr.write(`${display(message)}: `);
+                this.muted = true;
+            }
+            this.input.question(secret && this.terminal ? "" : `${display(message)}: `, (answer) => {
+                finish(undefined, answer);
+            });
+        });
+    }
+    // Pi may retain these callbacks independently of this owner, so receiver binding must survive.
+    prompt = async (prompt) => {
+        if (prompt.type === "select") {
+            process.stderr.write(`${display(prompt.message)}\n${prompt.options.map((option) => `  ${option.id}: ${display(option.label)}${option.description ? ` — ${display(option.description)}` : ""}`).join("\n")}\n`);
+            const selected = await this.question("Selection", false, prompt.signal);
+            if (!prompt.options.some((option) => option.id === selected)) {
+                throw new CliError("Login selection is invalid");
+            }
+            return selected;
+        }
+        return this.question(prompt.message, prompt.type === "secret" || prompt.type === "manual_code", prompt.signal);
+    };
+    notify = (event) => {
+        if (event.type === "auth_url") {
+            process.stderr.write(`Open this provider authorization URL:\n${display(event.url)}\n${event.instructions ? `${display(event.instructions)}\n` : ""}`);
+        }
+        else if (event.type === "device_code") {
+            process.stderr.write(`Open ${display(event.verificationUri)} and enter code ${display(event.userCode)}.\n`);
+        }
+        else if (event.type === "info") {
+            process.stderr.write(`${display(event.message)}${event.links?.length ? `\n${event.links.map((link) => `${display(link.label ?? "Link")}: ${display(link.url)}`).join("\n")}` : ""}\n`);
+        }
+        else {
+            process.stderr.write(`${display(event.message)}\n`);
+        }
+    };
+    close = () => {
+        if (this.closed) {
+            return;
+        }
+        this.closed = true;
+        process.removeListener("SIGINT", this.cancel);
+        this.controller.abort();
+        this.input.close();
+        this.muted = false;
+    };
+}
+/** Terminal presentation only; Pi still owns every authentication flow and credential mutation. */
+export function createTerminalAuthInteraction() {
+    return new TerminalPrompter();
+}
+//# sourceMappingURL=auth-interaction.js.map

package/dist/src/cli/auth-interaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-interaction.js","sourceRoot":"","sources":["../../../src/cli/auth-interaction.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAkB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,OAAO,CAAC,iDAAiD,EAAE,EAAE,CAAC;SAC9D,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC;SACzC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACpB,CAAC;AAOD,MAAM,gBAAgB;IACJ,MAAM,CAAc;IACnB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAC/B,MAAM,CAAW;IACjB,KAAK,CAAY;IAC1B,KAAK,GAAG,KAAK,CAAC;IACd,MAAM,GAAG,KAAK,CAAC;IAEvB;QACE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC;YACzB,KAAK,EAAE,CAAC,KAA0B,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;gBACzD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;gBACD,QAAQ,EAAE,CAAC;YACb,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;YACzB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;YAC3B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAEgB,MAAM,GAAG,GAAS,EAAE;QACnC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEM,QAAQ,CAAC,OAAe,EAAE,MAAe,EAAE,YAA0B;QAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,YAAY;gBACzB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBACzD,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAe,EAAQ,EAAE;gBACtD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC3C,IAAI,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;oBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBACD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAS,EAAE;gBACvB,MAAM,CAAC,IAAI,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1C,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACrF,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+FAA+F;IAC/E,MAAM,GAAG,KAAK,EAC5B,MAAiD,EAChC,EAAE;QACnB,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzL,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAClB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EACzD,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC,CAAC;IAEc,MAAM,GAAG,CAAC,KAAgD,EAAQ,EAAE;QAClF,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChI,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,QAAQ,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,mBAAmB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CACtF,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CACjK,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEc,KAAK,GAAG,GAAS,EAAE;QACjC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC,CAAC;CACH;AAED,mGAAmG;AACnG,MAAM,UAAU,6BAA6B;IAC3C,OAAO,IAAI,gBAAgB,EAAE,CAAC;AAChC,CAAC"}

package/dist/src/cli/commands.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Composes validated CLI syntax with SEPT's public mechanism boundaries. Each handler owns one
+ * command lifecycle; durable state, credentials, telemetry, Pi sessions, and HTTP remain owned by
+ * their respective mechanisms.
+ */
+import { type Observability } from "../observability/index.js";
+import type { CliInvocation } from "./options.js";
+interface CommandContext extends CliInvocation {
+    agentDir: string;
+    piVersion: string;
+    septVersion: string;
+    telemetry: Observability;
+}
+/** Execute one parsed command through public mechanism boundaries without retaining credentials. */
+export declare function executeCommand(context: CommandContext): Promise<void>;
+/** Resolve the Pi agent directory only after argv syntax has been accepted. */
+export declare function resolveAgentDirectory(options: Record<string, string>): string;
+export {};

package/dist/src/cli/commands.js

@@ -0,0 +1,239 @@
+/**
+ * Composes validated CLI syntax with SEPT's public mechanism boundaries. Each handler owns one
+ * command lifecycle; durable state, credentials, telemetry, Pi sessions, and HTTP remain owned by
+ * their respective mechanisms.
+ */
+import { join, resolve } from "node:path";
+import { acquireStateRootLease, RunStore } from "../durable/index.js";
+import { validateRequest, publicTaskProjection } from "../ingress/index.js";
+import { ModelAccessService } from "../model-access/index.js";
+import { classifyError } from "../observability/index.js";
+import { assertCompatibleStateRoot, getAgentDir, inspectPi } from "../pi-integration/index.js";
+import { CycleController } from "../runtime/index.js";
+import { createTerminalAuthInteraction } from "./auth-interaction.js";
+import { initializeCapabilities, assertCapabilityAdmission, capabilityHostFactory, createWorker, } from "../worker/index.js";
+import { runPermissions } from "./permissions.js";
+import { resumePermissionRun, assertLocalRunSlot } from "./permission-decisions.js";
+import { CliError } from "./errors.js";
+function writeJson(value) {
+    process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
+}
+function integer(value) {
+    return value === undefined ? undefined : Number(value);
+}
+async function selectModel(access, options) {
+    const provider = options.provider;
+    const model = options.model;
+    if (provider === undefined || model === undefined) {
+        throw new CliError("models select requires --provider and --model");
+    }
+    writeJson(await access.setPodDefault(provider, model, AbortSignal.timeout(15_000)));
+}
+async function runModels(context) {
+    const access = await ModelAccessService.create(context.agentDir);
+    if (context.action === "validate") {
+        writeJson(access.validateCustomConfiguration());
+    }
+    else if (context.action === "list") {
+        writeJson(await access.catalogue(context.options.provider, AbortSignal.timeout(15_000)));
+    }
+    else if (context.action === "current") {
+        const resolved = access.resolveSelection();
+        writeJson(await access.preflightSelection(resolved.provider, resolved.model, resolved.source, AbortSignal.timeout(15_000)));
+    }
+    else if (context.action === "select") {
+        await selectModel(access, context.options);
+    }
+    else {
+        throw new CliError("Usage: sept models list|current|validate|select [--provider <id>] [--model <id>]");
+    }
+}
+function authenticationMethod(value) {
+    if (value === "api-key") {
+        return "api_key";
+    }
+    if (value === "subscription" || value === "oauth") {
+        return value;
+    }
+    return undefined;
+}
+async function login(access, provider, methodOption) {
+    const method = authenticationMethod(methodOption);
+    if (method === undefined) {
+        throw new CliError("auth login requires --method api-key|subscription|oauth");
+    }
+    const interaction = createTerminalAuthInteraction();
+    try {
+        writeJson(await access.login(provider, method, interaction));
+    }
+    finally {
+        interaction.close();
+    }
+}
+async function runAuth(context) {
+    const provider = context.options.provider;
+    if (provider === undefined) {
+        throw new CliError("auth commands require --provider");
+    }
+    const access = await ModelAccessService.create(context.agentDir);
+    if (context.action === "status") {
+        writeJson(await access.authenticationStatus(provider, AbortSignal.timeout(15_000)));
+    }
+    else if (context.action === "logout") {
+        writeJson(await access.logout(provider, AbortSignal.timeout(15_000)));
+    }
+    else if (context.action === "login") {
+        await login(access, provider, context.options.method);
+    }
+    else {
+        throw new CliError("Usage: sept auth status|login|logout --provider <id> [--method api-key|subscription]");
+    }
+}
+function stateRoot(options) {
+    return resolve(options["state-dir"] ?? process.env.SEPT_STATE_DIR ?? join(process.cwd(), ".sept", "runs"));
+}
+function registerWorkerStop(service, telemetry) {
+    let stopping;
+    const stop = () => {
+        stopping ??= (async () => {
+            try {
+                await service.stop();
+            }
+            finally {
+                await telemetry.shutdown();
+            }
+        })().catch((error) => {
+            telemetry.log("process.failed", { "sept.outcome": "failure", "error.type": classifyError(error) }, "error");
+            process.stderr.write(`sept: ${error instanceof Error ? error.message : String(error)}\n`);
+            process.exitCode = 1;
+        });
+    };
+    process.on("SIGINT", stop);
+    process.on("SIGTERM", stop);
+}
+async function runWorker(context) {
+    const host = context.options.host;
+    const port = integer(context.options.port);
+    const handsConfigurationPath = context.options.hands ?? process.env.SEPT_HANDS_CONFIGURATION;
+    const worker = await createWorker({
+        stateRoot: stateRoot(context.options),
+        agentDir: context.agentDir,
+        workspaceRoot: resolve(context.options["workspace-root"] ?? process.env.SEPT_WORKSPACE_ROOT ?? process.cwd()),
+        token: process.env.SEPT_TOKEN ?? "",
+        telemetry: context.telemetry,
+        ...(handsConfigurationPath === undefined ? {} : { handsConfigurationPath }),
+        ...(host === undefined ? {} : { host }),
+        ...(port === undefined ? {} : { port }),
+    });
+    const address = worker.address;
+    process.stdout.write(`SEPT Pi worker listening on http://${address.host}:${String(address.port)}\n`);
+    registerWorkerStop(worker, context.telemetry);
+}
+function directRequest(options) {
+    return {
+        task: options.task,
+        role: options.role,
+        workspace: options.workspace,
+        provider: options.provider,
+        model: options.model,
+        thinking: options.thinking,
+        maxInvocations: integer(options["max-invocations"]),
+        maxEpochs: integer(options["max-epochs"]),
+        timeoutSeconds: integer(options.timeout),
+    };
+}
+async function createDirectRun(context, root) {
+    const validated = validateRequest(directRequest(context.options), context.piVersion);
+    const access = await ModelAccessService.create(context.agentDir);
+    const explicit = context.options.provider !== undefined && context.options.model !== undefined
+        ? { provider: validated.provider, model: validated.model }
+        : undefined;
+    const resolved = access.resolveSelection(explicit);
+    const preflight = await access.preflightSelection(resolved.provider, resolved.model, resolved.source, AbortSignal.timeout(15_000));
+    return context.telemetry.spanSync("sept.task.create", {}, () => RunStore.create(root, {
+        ...validated,
+        provider: preflight.selected.provider,
+        model: preflight.selected.model,
+    }));
+}
+async function executeDirectRun(context, store) {
+    context.telemetry.workerStarted("none", "run");
+    context.telemetry.setWorkerState("busy");
+    const snapshot = store.snapshot();
+    context.telemetry.setRunState(snapshot.status, snapshot.epoch, snapshot.invocations, store.pendingMessages().length);
+    context.telemetry.log(context.options.resume === undefined ? "task.created" : "task.resumed", {
+        "sept.run.id": store.runId,
+        "sept.run.state": "active",
+        "sept.outcome": "accepted",
+    });
+    process.stdout.write(`${store.runId}\n`);
+    await new CycleController(store, context.agentDir, capabilityHostFactory(stateRoot(context.options), context.options.hands ?? process.env.SEPT_HANDS_CONFIGURATION), context.telemetry).run();
+    process.stdout.write(`${JSON.stringify(publicTaskProjection(store).state)}\n`);
+}
+async function runDirect(context) {
+    const root = stateRoot(context.options);
+    assertCompatibleStateRoot(root, context.telemetry);
+    const policy = await initializeCapabilities(root, context.options.hands ?? process.env.SEPT_HANDS_CONFIGURATION);
+    const releaseRoot = acquireStateRootLease(root);
+    try {
+        assertLocalRunSlot(root, context.options.resume);
+        assertCapabilityAdmission(policy, context.options.hands ?? process.env.SEPT_HANDS_CONFIGURATION);
+        const resumed = await resumePermissionRun(context, root, context.agentDir);
+        await executeDirectRun(context, resumed ?? (await createDirectRun(context, root)));
+    }
+    finally {
+        try {
+            releaseRoot();
+        }
+        finally {
+            await context.telemetry.shutdown();
+        }
+    }
+}
+async function runDoctor(context) {
+    const diagnostic = await inspectPi(context.agentDir, context.options.provider ?? "openai-codex");
+    writeJson({
+        node: process.version,
+        sept: context.septVersion,
+        piSdk: context.piVersion,
+        agentDir: context.agentDir,
+        ...diagnostic,
+    });
+}
+async function runHealth(context) {
+    const token = process.env.SEPT_TOKEN ?? "";
+    if (!token) {
+        throw new CliError("SEPT_TOKEN is required for the authenticated health check");
+    }
+    const url = context.options.url ?? "http://127.0.0.1:8090/health";
+    const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
+    if (!response.ok) {
+        throw new CliError(`SEPT worker health check failed (${String(response.status)})`);
+    }
+    process.stdout.write("SEPT worker healthy\n");
+}
+/** Execute one parsed command through public mechanism boundaries without retaining credentials. */
+export async function executeCommand(context) {
+    switch (context.command) {
+        case "permissions":
+            writeJson(await runPermissions(context, stateRoot(context.options), context.agentDir));
+            return;
+        case "models":
+            return runModels(context);
+        case "auth":
+            return runAuth(context);
+        case "worker":
+            return runWorker(context);
+        case "run":
+            return runDirect(context);
+        case "doctor":
+            return runDoctor(context);
+        case "health":
+            return runHealth(context);
+    }
+}
+/** Resolve the Pi agent directory only after argv syntax has been accepted. */
+export function resolveAgentDirectory(options) {
+    return resolve(options["agent-dir"] ?? process.env.PI_CODING_AGENT_DIR ?? getAgentDir());
+}
+//# sourceMappingURL=commands.js.map

package/dist/src/cli/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAA6B,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAsB,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,YAAY,GAEb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAUvC,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAA0B,EAC1B,OAA+B;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACtE,CAAC;IACD,SAAS,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAuB;IAC9C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,SAAS,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACrC,SAAS,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC3C,SAAS,CACP,MAAM,MAAM,CAAC,kBAAkB,CAC7B,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,MAAM,EACf,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,QAAQ,CAChB,kFAAkF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB;IACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,KAAK,CAClB,MAA0B,EAC1B,QAAgB,EAChB,YAAgC;IAEhC,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,WAAW,GAAG,6BAA6B,EAAE,CAAC;IACpD,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAuB;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,SAAS,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,SAAS,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,QAAQ,CAChB,sFAAsF,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B;IAChD,OAAO,OAAO,CACZ,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,SAAwB;IACnE,IAAI,QAAmC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,SAAS,CAAC,GAAG,CACX,gBAAgB,EAChB,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EACjE,OAAO,CACR,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAuB;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,OAAO,CACpB,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CACtF;QACD,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC;QAC3E,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAC/E,CAAC;IACF,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,OAA+B;IACpD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACnD,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAY;IAClE,MAAM,SAAS,GAAG,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;QAC3E,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE;QAC1D,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAC/C,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,MAAM,EACf,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CAAC;IACF,OAAO,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7D,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;QACpB,GAAG,SAAS;QACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;QACrC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;KAChC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAuB,EAAE,KAAe;IACtE,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClC,OAAO,CAAC,SAAS,CAAC,WAAW,CAC3B,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,WAAW,EACpB,KAAK,CAAC,eAAe,EAAE,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,EAAE;QAC5F,aAAa,EAAE,KAAK,CAAC,KAAK;QAC1B,gBAAgB,EAAE,QAAQ;QAC1B,cAAc,EAAE,UAAU;KAC3B,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,eAAe,CACvB,KAAK,EACL,OAAO,CAAC,QAAQ,EAChB,qBAAqB,CACnB,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAC1B,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAC9D,EACD,OAAO,CAAC,SAAS,CAClB,CAAC,GAAG,EAAE,CAAC;IACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAuB;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,IAAI,EACJ,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAC9D,CAAC;IACF,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,yBAAyB,CACvB,MAAM,EACN,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAC9D,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,WAAW,EAAE,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAuB;IAC9C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC;IACjG,SAAS,CAAC;QACR,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,IAAI,EAAE,OAAO,CAAC,WAAW;QACzB,KAAK,EAAE,OAAO,CAAC,SAAS;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,UAAU;KACd,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAuB;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,2DAA2D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,8BAA8B,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,oCAAoC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAChD,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,aAAa;YAChB,SAAS,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvF,OAAO;QACT,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,WAAW,EAAE,CAAC,CAAC;AAC3F,CAAC"}

package/dist/src/cli/errors.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Typed failures owned by CLI composition. Command handlers may present these messages, while
+ * credential and runtime mechanisms remain responsible for their own classified failures.
+ */
+/** A safe operator-facing failure caused by invalid CLI input or interaction. */
+export declare class CliError extends Error {
+    constructor(message: string);
+}