tenjin-cli 0.1.0-alpha.1 → 0.1.0-alpha.2

package/dist/{chunk-EZROUI5U.js → chunk-IYLHQMT5.js}

@@ -3,29 +3,53 @@ import {
   CliError,
   configPath,
   external_exports
-} from "./chunk-YG2DO46P.js";
+} from "./chunk-OYMYCW7J.js";
 
 // src/lib/config.ts
 import { readFile } from "fs/promises";
 var atomicString = external_exports.string().regex(/^\d+$/, "expected an atomic USDC integer string");
+var PublishModeSchema = external_exports.enum(["review", "auto", "full-auto"]);
+function parsePublishModeFlag(value, flagName) {
+  const parsed = PublishModeSchema.safeParse(value);
+  if (parsed.success) return parsed.data;
+  throw new CliError("USAGE", `Invalid ${flagName} ${JSON.stringify(value)}`, {
+    fix: 'Use "review", "auto", or "full-auto".'
+  });
+}
+var PublishConfigSchema = external_exports.object({
+  mode: PublishModeSchema,
+  defaultPrice: atomicString
+});
 var ConfigSchema = external_exports.object({
   maxAutoSpend: atomicString,
   sessionBudget: atomicString,
   confirm: external_exports.union([external_exports.literal("always"), external_exports.string().regex(/^above:\d+$/)]),
   allowlistCreators: external_exports.array(external_exports.string()),
   baseUrl: external_exports.url(),
-  rpcUrl: external_exports.url()
+  rpcUrl: external_exports.url(),
+  /**
+   * Evaluation-cohort opt-in (spec 09 §3): when true, lookup sends
+   * X-Tenjin-Eval-Cohort: 1 and the server stores the generalized question for
+   * 90 days. Off by default; no query text is retained server-side without it.
+   */
+  evalCohort: external_exports.boolean(),
+  publish: PublishConfigSchema
 });
-var RawConfigSchema = ConfigSchema.partial();
+var RawConfigSchema = ConfigSchema.partial().extend({ publish: PublishConfigSchema.partial().passthrough().optional() }).passthrough();
 var CONFIG_DEFAULTS = {
   maxAutoSpend: "0",
   sessionBudget: "0",
   confirm: "always",
   allowlistCreators: [],
   baseUrl: "https://tenjin.blog",
-  rpcUrl: "https://mainnet.base.org"
+  rpcUrl: "https://mainnet.base.org",
+  evalCohort: false,
+  publish: { mode: "auto", defaultPrice: "100000" }
 };
-var CONFIG_KEYS = Object.keys(CONFIG_DEFAULTS);
+var CONFIG_KEYS = Object.keys(CONFIG_DEFAULTS).filter(
+  (key) => key !== "publish"
+);
+var PUBLISH_CONFIG_KEYS = ["publish.mode", "publish.defaultPrice"];
 async function loadRawConfig(dir) {
   const path = configPath(dir);
   let raw;
@@ -57,15 +81,57 @@ async function loadRawConfig(dir) {
   return parsed.data;
 }
 function resolveSettings(input) {
-  const { config, flags, env } = input;
+  const { config, flags, env, project } = input;
   return {
     maxAutoSpend: fileOrDefault("maxAutoSpend", config),
     sessionBudget: fileOrDefault("sessionBudget", config),
     confirm: fileOrDefault("confirm", config),
     allowlistCreators: fileOrDefault("allowlistCreators", config),
     baseUrl: resolveBaseUrl(config, flags, env),
-    rpcUrl: fileOrDefault("rpcUrl", config)
+    rpcUrl: fileOrDefault("rpcUrl", config),
+    evalCohort: fileOrDefault("evalCohort", config),
+    publishMode: resolvePublishMode({ config, project, env }),
+    publishDefaultPrice: resolvePublishDefaultPrice({ config, project })
+  };
+}
+var FULL_AUTO_DOWNGRADE_WARNING = 'Ignoring publish.mode "full-auto" from a committed .tenjin.json (cloning a repo must not enable auto-publish); using "auto". Add .tenjin.json to .gitignore to opt in.';
+function coercePublishMode(raw) {
+  if (raw === void 0 || raw.length === 0) return void 0;
+  const parsed = PublishModeSchema.safeParse(raw);
+  return parsed.success ? parsed.data : void 0;
+}
+function resolvePublishMode(input) {
+  const { config, project, env, flag } = input;
+  let winner = { value: CONFIG_DEFAULTS.publish.mode, source: "default" };
+  const fromFile = config.publish?.mode;
+  if (fromFile !== void 0) winner = { value: fromFile, source: "file" };
+  if (project !== void 0 && project.publish?.mode !== void 0) {
+    const fromProject = project.publish.mode;
+    if (fromProject === "full-auto" && !project.gitignored) {
+      winner = { value: "auto", source: "project", downgradedWarning: FULL_AUTO_DOWNGRADE_WARNING };
+    } else {
+      winner = { value: fromProject, source: "project" };
+    }
+  }
+  const fromEnv = coercePublishMode(env.TENJIN_PUBLISH_MODE);
+  if (fromEnv !== void 0) winner = { value: fromEnv, source: "env" };
+  const fromFlag = coercePublishMode(flag);
+  if (fromFlag !== void 0) winner = { value: fromFlag, source: "flag" };
+  return winner;
+}
+function resolvePublishDefaultPrice(input) {
+  const { config, project } = input;
+  let result = {
+    value: CONFIG_DEFAULTS.publish.defaultPrice,
+    source: "default"
   };
+  if (config.publish?.defaultPrice !== void 0) {
+    result = { value: config.publish.defaultPrice, source: "file" };
+  }
+  if (project?.publish?.defaultPrice !== void 0) {
+    result = { value: project.publish.defaultPrice, source: "project" };
+  }
+  return result;
 }
 function fileOrDefault(key, config) {
   const fromFile = config[key];
@@ -123,13 +189,23 @@ function atomicToUsd(atomic) {
 function toMoney(atomic) {
   return { atomic, usd: atomicToUsd(atomic) };
 }
+function formatUsdDisplay(atomic) {
+  const [whole, frac = ""] = atomicToUsd(atomic).split(".");
+  return `${whole}.${frac.padEnd(2, "0")}`;
+}
 
 export {
+  PublishModeSchema,
+  parsePublishModeFlag,
   RawConfigSchema,
   CONFIG_KEYS,
+  PUBLISH_CONFIG_KEYS,
   loadRawConfig,
   resolveSettings,
+  resolvePublishMode,
+  resolvePublishDefaultPrice,
   parseUsdToAtomic,
-  toMoney
+  toMoney,
+  formatUsdDisplay
 };
-//# sourceMappingURL=chunk-EZROUI5U.js.map
+//# sourceMappingURL=chunk-IYLHQMT5.js.map

package/dist/chunk-IYLHQMT5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/config.ts","../src/lib/money.ts"],"sourcesContent":["import { readFile } from 'node:fs/promises';\nimport { z } from 'zod';\nimport { CliError } from './errors';\nimport { configPath } from './paths';\nimport { writeFileAtomic } from './atomic-json';\n\n/** A non-negative integer string in USDC atomic units (6-decimal base). */\nconst atomicString = z.string().regex(/^\\d+$/, 'expected an atomic USDC integer string');\n\n/** The publish consent mode (B3, D38). `full-auto` is loosening-gated, below. */\nexport const PublishModeSchema = z.enum(['review', 'auto', 'full-auto']);\nexport type PublishMode = z.infer<typeof PublishModeSchema>;\n\n/**\n * Validate a publish-mode value at a command edge (`--mode`, `--publish-mode`):\n * an unrecognized value is USAGE (exit 2), never silently dropped. `flagName` is\n * woven into the message so the failing flag is named.\n */\nexport function parsePublishModeFlag(value: string, flagName: string): PublishMode {\n  const parsed = PublishModeSchema.safeParse(value);\n  if (parsed.success) return parsed.data;\n  throw new CliError('USAGE', `Invalid ${flagName} ${JSON.stringify(value)}`, {\n    fix: 'Use \"review\", \"auto\", or \"full-auto\".',\n  });\n}\n\n/**\n * The publish block (B3): `mode` governs the confirm cascade a `publish` runs,\n * `defaultPrice` is the atomic USDC price a card is published at when no\n * per-publish price is given. Stored atomic like the spend keys.\n */\nconst PublishConfigSchema = z.object({\n  mode: PublishModeSchema,\n  defaultPrice: atomicString,\n});\n\n/**\n * The persisted config shape. Spend keys are stored atomic (accepted as decimal\n * USD at the command edge, see lib/money); `confirm` is the stored form\n * \"always\" | \"above:<atomic>\". These are client-enforced guardrails, not a\n * security boundary — any process that runs the CLI can also edit this file.\n */\nexport const ConfigSchema = z.object({\n  maxAutoSpend: atomicString,\n  sessionBudget: atomicString,\n  confirm: z.union([z.literal('always'), z.string().regex(/^above:\\d+$/)]),\n  allowlistCreators: z.array(z.string()),\n  baseUrl: z.url(),\n  rpcUrl: z.url(),\n  /**\n   * Evaluation-cohort opt-in (spec 09 §3): when true, lookup sends\n   * X-Tenjin-Eval-Cohort: 1 and the server stores the generalized question for\n   * 90 days. Off by default; no query text is retained server-side without it.\n   */\n  evalCohort: z.boolean(),\n  publish: PublishConfigSchema,\n});\nexport type Config = z.infer<typeof ConfigSchema>;\n\n/**\n * Values as they may appear in config.json — every known key optional; absent =\n * default. `.passthrough()` PRESERVES unknown keys through load + persist: without\n * it an older binary's `config set` would strip (and re-serialize away) any newer\n * block a later CLI wrote, e.g. B3's `publish.*`. Known keys are still validated;\n * unknown keys ride along untouched.\n */\nexport const RawConfigSchema = ConfigSchema.partial()\n  // The publish block is itself partial + passthrough: `config set publish.mode`\n  // writes only the one subkey, and a subkey a newer CLI adds (e.g. publish.*\n  // beyond mode/defaultPrice) survives an older binary's set, same reason the\n  // outer object passes unknown keys through.\n  .extend({ publish: PublishConfigSchema.partial().passthrough().optional() })\n  .passthrough();\nexport type PartialConfig = z.infer<typeof RawConfigSchema>;\n\nexport const CONFIG_DEFAULTS: Config = {\n  maxAutoSpend: '0',\n  sessionBudget: '0',\n  confirm: 'always',\n  allowlistCreators: [],\n  baseUrl: 'https://tenjin.blog',\n  rpcUrl: 'https://mainnet.base.org',\n  evalCohort: false,\n  publish: { mode: 'auto', defaultPrice: '100000' },\n};\n\n/**\n * Scalar keys `config get/set/list` render one line each. `publish` is excluded:\n * it is a nested block addressed by the dotted `publish.mode`/`publish.defaultPrice`\n * keys (see PUBLISH_CONFIG_KEYS), so it is never rendered as a bare scalar.\n */\nexport type ScalarConfigKey = Exclude<keyof Config, 'publish'>;\nexport const CONFIG_KEYS = (Object.keys(CONFIG_DEFAULTS) as Array<keyof Config>).filter(\n  (key): key is ScalarConfigKey => key !== 'publish',\n);\n\n/** The dotted keys `config get/set` accept for the nested publish block. */\nexport const PUBLISH_CONFIG_KEYS = ['publish.mode', 'publish.defaultPrice'] as const;\nexport type PublishConfigKey = (typeof PUBLISH_CONFIG_KEYS)[number];\n\n/**\n * Read and validate config.json WITHOUT applying defaults, so provenance can\n * distinguish \"present in file\" from \"absent\". Missing file is fine (returns\n * {}); malformed JSON or a failed schema is CONFIG_INVALID with a fix.\n */\nexport async function loadRawConfig(dir: string): Promise<PartialConfig> {\n  const path = configPath(dir);\n  let raw: string;\n  try {\n    raw = await readFile(path, 'utf8');\n  } catch (err) {\n    if (isNotFound(err)) return {};\n    throw new CliError('CONFIG_INVALID', `Could not read config at ${path}`, {\n      fix: `Check file permissions on ${path}.`,\n      cause: err,\n    });\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(raw);\n  } catch (err) {\n    throw new CliError('CONFIG_INVALID', `Config at ${path} is not valid JSON`, {\n      fix: `Fix the JSON syntax in ${path}, or delete it to restore defaults.`,\n      cause: err,\n    });\n  }\n  const parsed = RawConfigSchema.safeParse(json);\n  if (!parsed.success) {\n    throw new CliError('CONFIG_INVALID', `Config at ${path} is invalid`, {\n      fix: `Correct the reported keys in ${path}, or delete it to restore defaults.`,\n      details: parsed.error.issues,\n    });\n  }\n  return parsed.data;\n}\n\n/** File values merged over defaults — the effective persisted config. The nested\n *  publish block is merged per-subkey so a file that sets only publish.mode keeps\n *  the default defaultPrice (a shallow spread would drop it). */\nexport async function loadConfig(dir: string): Promise<Config> {\n  const raw = await loadRawConfig(dir);\n  return {\n    ...CONFIG_DEFAULTS,\n    ...raw,\n    publish: {\n      mode: raw.publish?.mode ?? CONFIG_DEFAULTS.publish.mode,\n      defaultPrice: raw.publish?.defaultPrice ?? CONFIG_DEFAULTS.publish.defaultPrice,\n    },\n  };\n}\n\nexport type Provenance = 'default' | 'file' | 'project' | 'env' | 'flag';\n\nexport interface ResolvedSetting<T> {\n  value: T;\n  source: Provenance;\n}\n\n/**\n * The per-project `.tenjin.json` layer (B3, D38): publish overrides discovered by\n * walking up from cwd, plus whether that file is gitignored. `gitignored` gates\n * `full-auto` — a committed file requesting it is downgraded (loosening gate).\n */\nexport interface ProjectPublishLayer {\n  publish?: { mode?: PublishMode; defaultPrice?: string };\n  gitignored: boolean;\n}\n\n/** publish.mode resolution: value, source, and the downgrade warning (if any). */\nexport interface PublishModeResolution {\n  value: PublishMode;\n  source: Provenance;\n  /** Set when a committed `.tenjin.json`'s `full-auto` was downgraded to `auto`. */\n  downgradedWarning?: string;\n}\n\n/** Effective value + where it came from, per key. What `config` (bare) renders. */\nexport interface EffectiveSettings {\n  maxAutoSpend: ResolvedSetting<string>;\n  sessionBudget: ResolvedSetting<string>;\n  confirm: ResolvedSetting<string>;\n  allowlistCreators: ResolvedSetting<string[]>;\n  baseUrl: ResolvedSetting<string>;\n  rpcUrl: ResolvedSetting<string>;\n  evalCohort: ResolvedSetting<boolean>;\n  publishMode: PublishModeResolution;\n  publishDefaultPrice: ResolvedSetting<string>;\n}\n\n/** CLI flags that participate in settings precedence (`--base-url`). */\nexport interface SettingsFlags {\n  baseUrl?: string;\n}\n\nexport interface ResolveSettingsInput {\n  /** Raw file values (present keys only) — from loadRawConfig, not loadConfig. */\n  config: PartialConfig;\n  flags: SettingsFlags;\n  env: NodeJS.ProcessEnv;\n  /** The nearest `.tenjin.json` layer, when one was found (see publish-settings). */\n  project?: ProjectPublishLayer;\n}\n\n/**\n * Apply precedence flag > env > file > default per key, returning each effective\n * value with its source. In B1 only baseUrl has flag/env overrides\n * (`--base-url`, TENJIN_BASE_URL); the rest resolve file-or-default. B3 adds the\n * publish keys, which additionally fold in the per-project `.tenjin.json` layer.\n */\nexport function resolveSettings(input: ResolveSettingsInput): EffectiveSettings {\n  const { config, flags, env, project } = input;\n  return {\n    maxAutoSpend: fileOrDefault('maxAutoSpend', config),\n    sessionBudget: fileOrDefault('sessionBudget', config),\n    confirm: fileOrDefault('confirm', config),\n    allowlistCreators: fileOrDefault('allowlistCreators', config),\n    baseUrl: resolveBaseUrl(config, flags, env),\n    rpcUrl: fileOrDefault('rpcUrl', config),\n    evalCohort: fileOrDefault('evalCohort', config),\n    publishMode: resolvePublishMode({ config, project, env }),\n    publishDefaultPrice: resolvePublishDefaultPrice({ config, project }),\n  };\n}\n\n/**\n * The loosening gate (D38): a committed (not-gitignored) `.tenjin.json` requesting\n * `full-auto` is downgraded to `auto`, never silently honored — cloning a repo\n * must not enable auto-publish. `full-auto` from global config / env / flag (all\n * inherently local, not cloned) is always honored.\n */\nconst FULL_AUTO_DOWNGRADE_WARNING =\n  'Ignoring publish.mode \"full-auto\" from a committed .tenjin.json (cloning a repo must not enable auto-publish); using \"auto\". Add .tenjin.json to .gitignore to opt in.';\n\nfunction coercePublishMode(raw: string | undefined): PublishMode | undefined {\n  if (raw === undefined || raw.length === 0) return undefined;\n  const parsed = PublishModeSchema.safeParse(raw);\n  return parsed.success ? parsed.data : undefined;\n}\n\n/**\n * Resolve publish.mode through global file < project `.tenjin.json` < env\n * (TENJIN_PUBLISH_MODE) < flag (`--mode`). Total: an invalid env/flag value is\n * ignored (validation lives at the command edge, like baseUrl). The project\n * layer's `full-auto` is gated on that file being gitignored.\n */\nexport function resolvePublishMode(input: {\n  config: PartialConfig;\n  project?: ProjectPublishLayer;\n  env: NodeJS.ProcessEnv;\n  flag?: string;\n}): PublishModeResolution {\n  const { config, project, env, flag } = input;\n  let winner: PublishModeResolution = { value: CONFIG_DEFAULTS.publish.mode, source: 'default' };\n\n  const fromFile = config.publish?.mode;\n  if (fromFile !== undefined) winner = { value: fromFile, source: 'file' };\n\n  if (project !== undefined && project.publish?.mode !== undefined) {\n    const fromProject = project.publish.mode;\n    if (fromProject === 'full-auto' && !project.gitignored) {\n      winner = { value: 'auto', source: 'project', downgradedWarning: FULL_AUTO_DOWNGRADE_WARNING };\n    } else {\n      winner = { value: fromProject, source: 'project' };\n    }\n  }\n\n  const fromEnv = coercePublishMode(env.TENJIN_PUBLISH_MODE);\n  if (fromEnv !== undefined) winner = { value: fromEnv, source: 'env' };\n\n  const fromFlag = coercePublishMode(flag);\n  if (fromFlag !== undefined) winner = { value: fromFlag, source: 'flag' };\n\n  return winner;\n}\n\n/** Resolve publish.defaultPrice (atomic) through global file < project < default. */\nexport function resolvePublishDefaultPrice(input: {\n  config: PartialConfig;\n  project?: ProjectPublishLayer;\n}): ResolvedSetting<string> {\n  const { config, project } = input;\n  let result: ResolvedSetting<string> = {\n    value: CONFIG_DEFAULTS.publish.defaultPrice,\n    source: 'default',\n  };\n  if (config.publish?.defaultPrice !== undefined) {\n    result = { value: config.publish.defaultPrice, source: 'file' };\n  }\n  if (project?.publish?.defaultPrice !== undefined) {\n    result = { value: project.publish.defaultPrice, source: 'project' };\n  }\n  return result;\n}\n\n/** Persist a full, validated config via the atomic writer (0700 dir, 0644 file). */\nexport async function writeConfig(dir: string, config: Config): Promise<void> {\n  const validated = ConfigSchema.parse(config);\n  await writeFileAtomic(configPath(dir), `${JSON.stringify(validated, null, 2)}\\n`, {\n    mode: 0o644,\n    dirMode: 0o700,\n  });\n}\n\nfunction fileOrDefault<K extends keyof Config>(\n  key: K,\n  config: PartialConfig,\n): ResolvedSetting<Config[K]> {\n  const fromFile = config[key];\n  // PartialConfig[K] is Config[K] | undefined; narrowing an indexed access of a\n  // type parameter doesn't refine K, so assert the excluded-undefined type.\n  if (fromFile !== undefined) return { value: fromFile as Config[K], source: 'file' };\n  return { value: CONFIG_DEFAULTS[key], source: 'default' };\n}\n\nfunction resolveBaseUrl(\n  config: PartialConfig,\n  flags: SettingsFlags,\n  env: NodeJS.ProcessEnv,\n): ResolvedSetting<string> {\n  if (flags.baseUrl !== undefined && flags.baseUrl.length > 0) {\n    return { value: flags.baseUrl, source: 'flag' };\n  }\n  const fromEnv = env.TENJIN_BASE_URL;\n  if (fromEnv !== undefined && fromEnv.length > 0) {\n    return { value: fromEnv, source: 'env' };\n  }\n  if (config.baseUrl !== undefined) return { value: config.baseUrl, source: 'file' };\n  return { value: CONFIG_DEFAULTS.baseUrl, source: 'default' };\n}\n\nfunction isNotFound(err: unknown): boolean {\n  return (\n    typeof err === 'object' &&\n    err !== null &&\n    'code' in err &&\n    (err as { code?: unknown }).code === 'ENOENT'\n  );\n}\n","import { CliError } from './errors';\nimport type { Money } from '../schemas';\n\n/** USDC is a 6-decimal token; one dollar is 1_000_000 atomic units. */\nconst USDC_DECIMALS = 6;\n\n/**\n * Decimal USD at the CLI edge -> atomic USDC string (O1). Accepts \"0\", \"0.25\",\n * \"5\"; rejects negatives, non-numeric input, and more than 6 decimal places as\n * USAGE so a fat-fingered amount fails loudly instead of truncating money.\n * String math throughout — a float would lose precision at the 6th decimal.\n */\nexport function parseUsdToAtomic(input: string): string {\n  const trimmed = input.trim();\n  if (!/^\\d+(\\.\\d+)?$/.test(trimmed)) {\n    throw new CliError('USAGE', `Invalid USD amount: ${JSON.stringify(input)}`, {\n      fix: 'Pass a non-negative decimal like 0.25 or 5.',\n    });\n  }\n  const [whole, frac = ''] = trimmed.split('.');\n  if (frac.length > USDC_DECIMALS) {\n    throw new CliError(\n      'USAGE',\n      `USD amount ${JSON.stringify(input)} has more than 6 decimal places`,\n      {\n        fix: 'USDC supports at most 6 decimal places (micro-dollars).',\n      },\n    );\n  }\n  const atomic = BigInt(`${whole}${frac.padEnd(USDC_DECIMALS, '0')}`);\n  return atomic.toString();\n}\n\n/**\n * Atomic USDC string -> decimal USD string, trailing zeros trimmed (\"250000\" ->\n * \"0.25\", \"5000000\" -> \"5\", \"0\" -> \"0\"). Throws INTERNAL on a malformed atomic\n * value: atomic strings come from validated config or on-chain reads, so a bad\n * one is a bug, not user input.\n */\nexport function atomicToUsd(atomic: string): string {\n  const trimmed = atomic.trim();\n  if (!/^\\d+$/.test(trimmed)) {\n    throw new CliError('INTERNAL', `Malformed atomic amount: ${JSON.stringify(atomic)}`);\n  }\n  const value = BigInt(trimmed);\n  const base = 10n ** BigInt(USDC_DECIMALS);\n  const whole = value / base;\n  const frac = (value % base).toString().padStart(USDC_DECIMALS, '0').replace(/0+$/, '');\n  return frac.length > 0 ? `${whole}.${frac}` : whole.toString();\n}\n\n/** Dual-form money object for machine output. */\nexport function toMoney(atomic: string): Money {\n  return { atomic, usd: atomicToUsd(atomic) };\n}\n\n/**\n * Canonical USD for human COPY (a price a person reads): always at least two\n * decimals (\"0.10\", \"5.00\"), keeping any finer precision below a cent\n * (\"0.000001\"). Distinct from `atomicToUsd`, which trims to the shortest exact\n * form for machine output; use this only where a dollar amount is shown to a human.\n */\nexport function formatUsdDisplay(atomic: string): string {\n  const [whole, frac = ''] = atomicToUsd(atomic).split('.');\n  return `${whole}.${frac.padEnd(2, '0')}`;\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,gBAAgB;AAOzB,IAAM,eAAe,iBAAE,OAAO,EAAE,MAAM,SAAS,wCAAwC;AAGhF,IAAM,oBAAoB,iBAAE,KAAK,CAAC,UAAU,QAAQ,WAAW,CAAC;AAQhE,SAAS,qBAAqB,OAAe,UAA+B;AACjF,QAAM,SAAS,kBAAkB,UAAU,KAAK;AAChD,MAAI,OAAO,QAAS,QAAO,OAAO;AAClC,QAAM,IAAI,SAAS,SAAS,WAAW,QAAQ,IAAI,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,IAC1E,KAAK;AAAA,EACP,CAAC;AACH;AAOA,IAAM,sBAAsB,iBAAE,OAAO;AAAA,EACnC,MAAM;AAAA,EACN,cAAc;AAChB,CAAC;AAQM,IAAM,eAAe,iBAAE,OAAO;AAAA,EACnC,cAAc;AAAA,EACd,eAAe;AAAA,EACf,SAAS,iBAAE,MAAM,CAAC,iBAAE,QAAQ,QAAQ,GAAG,iBAAE,OAAO,EAAE,MAAM,aAAa,CAAC,CAAC;AAAA,EACvE,mBAAmB,iBAAE,MAAM,iBAAE,OAAO,CAAC;AAAA,EACrC,SAAS,iBAAE,IAAI;AAAA,EACf,QAAQ,iBAAE,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMd,YAAY,iBAAE,QAAQ;AAAA,EACtB,SAAS;AACX,CAAC;AAUM,IAAM,kBAAkB,aAAa,QAAQ,EAKjD,OAAO,EAAE,SAAS,oBAAoB,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAC1E,YAAY;AAGR,IAAM,kBAA0B;AAAA,EACrC,cAAc;AAAA,EACd,eAAe;AAAA,EACf,SAAS;AAAA,EACT,mBAAmB,CAAC;AAAA,EACpB,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,SAAS,EAAE,MAAM,QAAQ,cAAc,SAAS;AAClD;AAQO,IAAM,cAAe,OAAO,KAAK,eAAe,EAA0B;AAAA,EAC/E,CAAC,QAAgC,QAAQ;AAC3C;AAGO,IAAM,sBAAsB,CAAC,gBAAgB,sBAAsB;AAQ1E,eAAsB,cAAc,KAAqC;AACvE,QAAM,OAAO,WAAW,GAAG;AAC3B,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,MAAM;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,WAAW,GAAG,EAAG,QAAO,CAAC;AAC7B,UAAM,IAAI,SAAS,kBAAkB,4BAA4B,IAAI,IAAI;AAAA,MACvE,KAAK,6BAA6B,IAAI;AAAA,MACtC,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,SAAS,KAAK;AACZ,UAAM,IAAI,SAAS,kBAAkB,aAAa,IAAI,sBAAsB;AAAA,MAC1E,KAAK,0BAA0B,IAAI;AAAA,MACnC,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,QAAM,SAAS,gBAAgB,UAAU,IAAI;AAC7C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI,SAAS,kBAAkB,aAAa,IAAI,eAAe;AAAA,MACnE,KAAK,gCAAgC,IAAI;AAAA,MACzC,SAAS,OAAO,MAAM;AAAA,IACxB,CAAC;AAAA,EACH;AACA,SAAO,OAAO;AAChB;AA2EO,SAAS,gBAAgB,OAAgD;AAC9E,QAAM,EAAE,QAAQ,OAAO,KAAK,QAAQ,IAAI;AACxC,SAAO;AAAA,IACL,cAAc,cAAc,gBAAgB,MAAM;AAAA,IAClD,eAAe,cAAc,iBAAiB,MAAM;AAAA,IACpD,SAAS,cAAc,WAAW,MAAM;AAAA,IACxC,mBAAmB,cAAc,qBAAqB,MAAM;AAAA,IAC5D,SAAS,eAAe,QAAQ,OAAO,GAAG;AAAA,IAC1C,QAAQ,cAAc,UAAU,MAAM;AAAA,IACtC,YAAY,cAAc,cAAc,MAAM;AAAA,IAC9C,aAAa,mBAAmB,EAAE,QAAQ,SAAS,IAAI,CAAC;AAAA,IACxD,qBAAqB,2BAA2B,EAAE,QAAQ,QAAQ,CAAC;AAAA,EACrE;AACF;AAQA,IAAM,8BACJ;AAEF,SAAS,kBAAkB,KAAkD;AAC3E,MAAI,QAAQ,UAAa,IAAI,WAAW,EAAG,QAAO;AAClD,QAAM,SAAS,kBAAkB,UAAU,GAAG;AAC9C,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAQO,SAAS,mBAAmB,OAKT;AACxB,QAAM,EAAE,QAAQ,SAAS,KAAK,KAAK,IAAI;AACvC,MAAI,SAAgC,EAAE,OAAO,gBAAgB,QAAQ,MAAM,QAAQ,UAAU;AAE7F,QAAM,WAAW,OAAO,SAAS;AACjC,MAAI,aAAa,OAAW,UAAS,EAAE,OAAO,UAAU,QAAQ,OAAO;AAEvE,MAAI,YAAY,UAAa,QAAQ,SAAS,SAAS,QAAW;AAChE,UAAM,cAAc,QAAQ,QAAQ;AACpC,QAAI,gBAAgB,eAAe,CAAC,QAAQ,YAAY;AACtD,eAAS,EAAE,OAAO,QAAQ,QAAQ,WAAW,mBAAmB,4BAA4B;AAAA,IAC9F,OAAO;AACL,eAAS,EAAE,OAAO,aAAa,QAAQ,UAAU;AAAA,IACnD;AAAA,EACF;AAEA,QAAM,UAAU,kBAAkB,IAAI,mBAAmB;AACzD,MAAI,YAAY,OAAW,UAAS,EAAE,OAAO,SAAS,QAAQ,MAAM;AAEpE,QAAM,WAAW,kBAAkB,IAAI;AACvC,MAAI,aAAa,OAAW,UAAS,EAAE,OAAO,UAAU,QAAQ,OAAO;AAEvE,SAAO;AACT;AAGO,SAAS,2BAA2B,OAGf;AAC1B,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,MAAI,SAAkC;AAAA,IACpC,OAAO,gBAAgB,QAAQ;AAAA,IAC/B,QAAQ;AAAA,EACV;AACA,MAAI,OAAO,SAAS,iBAAiB,QAAW;AAC9C,aAAS,EAAE,OAAO,OAAO,QAAQ,cAAc,QAAQ,OAAO;AAAA,EAChE;AACA,MAAI,SAAS,SAAS,iBAAiB,QAAW;AAChD,aAAS,EAAE,OAAO,QAAQ,QAAQ,cAAc,QAAQ,UAAU;AAAA,EACpE;AACA,SAAO;AACT;AAWA,SAAS,cACP,KACA,QAC4B;AAC5B,QAAM,WAAW,OAAO,GAAG;AAG3B,MAAI,aAAa,OAAW,QAAO,EAAE,OAAO,UAAuB,QAAQ,OAAO;AAClF,SAAO,EAAE,OAAO,gBAAgB,GAAG,GAAG,QAAQ,UAAU;AAC1D;AAEA,SAAS,eACP,QACA,OACA,KACyB;AACzB,MAAI,MAAM,YAAY,UAAa,MAAM,QAAQ,SAAS,GAAG;AAC3D,WAAO,EAAE,OAAO,MAAM,SAAS,QAAQ,OAAO;AAAA,EAChD;AACA,QAAM,UAAU,IAAI;AACpB,MAAI,YAAY,UAAa,QAAQ,SAAS,GAAG;AAC/C,WAAO,EAAE,OAAO,SAAS,QAAQ,MAAM;AAAA,EACzC;AACA,MAAI,OAAO,YAAY,OAAW,QAAO,EAAE,OAAO,OAAO,SAAS,QAAQ,OAAO;AACjF,SAAO,EAAE,OAAO,gBAAgB,SAAS,QAAQ,UAAU;AAC7D;AAEA,SAAS,WAAW,KAAuB;AACzC,SACE,OAAO,QAAQ,YACf,QAAQ,QACR,UAAU,OACT,IAA2B,SAAS;AAEzC;;;AC7UA,IAAM,gBAAgB;AAQf,SAAS,iBAAiB,OAAuB;AACtD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,gBAAgB,KAAK,OAAO,GAAG;AAClC,UAAM,IAAI,SAAS,SAAS,uBAAuB,KAAK,UAAU,KAAK,CAAC,IAAI;AAAA,MAC1E,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AACA,QAAM,CAAC,OAAO,OAAO,EAAE,IAAI,QAAQ,MAAM,GAAG;AAC5C,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,cAAc,KAAK,UAAU,KAAK,CAAC;AAAA,MACnC;AAAA,QACE,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,GAAG,KAAK,GAAG,KAAK,OAAO,eAAe,GAAG,CAAC,EAAE;AAClE,SAAO,OAAO,SAAS;AACzB;AAQO,SAAS,YAAY,QAAwB;AAClD,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAQ,KAAK,OAAO,GAAG;AAC1B,UAAM,IAAI,SAAS,YAAY,4BAA4B,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,EACrF;AACA,QAAM,QAAQ,OAAO,OAAO;AAC5B,QAAM,OAAO,OAAO,OAAO,aAAa;AACxC,QAAM,QAAQ,QAAQ;AACtB,QAAM,QAAQ,QAAQ,MAAM,SAAS,EAAE,SAAS,eAAe,GAAG,EAAE,QAAQ,OAAO,EAAE;AACrF,SAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,SAAS;AAC/D;AAGO,SAAS,QAAQ,QAAuB;AAC7C,SAAO,EAAE,QAAQ,KAAK,YAAY,MAAM,EAAE;AAC5C;AAQO,SAAS,iBAAiB,QAAwB;AACvD,QAAM,CAAC,OAAO,OAAO,EAAE,IAAI,YAAY,MAAM,EAAE,MAAM,GAAG;AACxD,SAAO,GAAG,KAAK,IAAI,KAAK,OAAO,GAAG,GAAG,CAAC;AACxC;","names":[]}

package/dist/chunk-JPHG2JW3.js

@@ -0,0 +1,96 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  withFileLock
+} from "./chunk-YBMMV4Y4.js";
+import {
+  writeFileAtomic
+} from "./chunk-MUBUQVC3.js";
+import {
+  external_exports
+} from "./chunk-OYMYCW7J.js";
+
+// src/lib/lookup-store.ts
+import { mkdir, readFile } from "fs/promises";
+import { join } from "path";
+var MAX_ENTRIES = 50;
+var StoredCandidateSchema = external_exports.object({
+  resourceId: external_exports.string(),
+  url: external_exports.string(),
+  title: external_exports.string(),
+  price: external_exports.string()
+});
+var StoredLookupSchema = external_exports.object({
+  lookupId: external_exports.string(),
+  at: external_exports.string(),
+  question: external_exports.string(),
+  decision: external_exports.string(),
+  candidates: external_exports.array(StoredCandidateSchema)
+});
+var StoreSchema = external_exports.object({
+  schemaVersion: external_exports.literal(1),
+  lookups: external_exports.array(StoredLookupSchema)
+});
+function storePath(dataDir) {
+  return join(dataDir, "lookups.json");
+}
+async function loadLookups(dataDir) {
+  let raw;
+  try {
+    raw = await readFile(storePath(dataDir), "utf8");
+  } catch {
+    return [];
+  }
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    return [];
+  }
+  const parsed = StoreSchema.safeParse(json);
+  return parsed.success ? parsed.data.lookups : [];
+}
+async function recordLookup(dataDir, entry) {
+  await mkdir(dataDir, { recursive: true, mode: 448 });
+  const lockPath = `${storePath(dataDir)}.lock`;
+  await withFileLock(lockPath, async () => {
+    const existing = await loadLookups(dataDir);
+    const lookups = [entry, ...existing.filter((l) => l.lookupId !== entry.lookupId)].slice(
+      0,
+      MAX_ENTRIES
+    );
+    await writeFileAtomic(
+      storePath(dataDir),
+      `${JSON.stringify({ schemaVersion: 1, lookups }, null, 2)}
+`,
+      { mode: 420, dirMode: 448 }
+    );
+  });
+}
+async function latestLookup(dataDir) {
+  const lookups = await loadLookups(dataDir);
+  return lookups[0] ?? null;
+}
+async function findStoredCandidate(dataDir, resourceId) {
+  for (const lookup of await loadLookups(dataDir)) {
+    const hit = lookup.candidates.find((c) => c.resourceId === resourceId);
+    if (hit) return hit;
+  }
+  return null;
+}
+async function findLookupForResource(dataDir, match) {
+  for (const lookup of await loadLookups(dataDir)) {
+    const hit = lookup.candidates.some(
+      (c) => match.resourceId !== void 0 && c.resourceId === match.resourceId || match.url !== void 0 && c.url === match.url
+    );
+    if (hit) return lookup.lookupId;
+  }
+  return null;
+}
+
+export {
+  recordLookup,
+  latestLookup,
+  findStoredCandidate,
+  findLookupForResource
+};
+//# sourceMappingURL=chunk-JPHG2JW3.js.map

package/dist/chunk-JPHG2JW3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/lookup-store.ts"],"sourcesContent":["import { mkdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { z } from 'zod';\nimport { writeFileAtomic } from './atomic-json';\nimport { withFileLock } from './lock';\n\n/**\n * A small local ledger of recent lookups so `outcome --last` can target the most\n * recent one and `buy <resourceId>` can resolve the payable read URL a candidate\n * carried (the read route is keyed by handle/slug, not id, so an id alone can't\n * build the URL). Bounded and best-effort: a corrupt file reads as empty rather\n * than blocking a command. NOT an entitlement record, that is the library receipt.\n */\n\nconst MAX_ENTRIES = 50;\n\nconst StoredCandidateSchema = z.object({\n  resourceId: z.string(),\n  url: z.string(),\n  title: z.string(),\n  price: z.string(),\n});\nexport type StoredCandidate = z.infer<typeof StoredCandidateSchema>;\n\nconst StoredLookupSchema = z.object({\n  lookupId: z.string(),\n  at: z.string(),\n  question: z.string(),\n  decision: z.string(),\n  candidates: z.array(StoredCandidateSchema),\n});\nexport type StoredLookup = z.infer<typeof StoredLookupSchema>;\n\nconst StoreSchema = z.object({\n  schemaVersion: z.literal(1),\n  lookups: z.array(StoredLookupSchema),\n});\n\nfunction storePath(dataDir: string): string {\n  return join(dataDir, 'lookups.json');\n}\n\nexport async function loadLookups(dataDir: string): Promise<StoredLookup[]> {\n  let raw: string;\n  try {\n    raw = await readFile(storePath(dataDir), 'utf8');\n  } catch {\n    return [];\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(raw);\n  } catch {\n    return [];\n  }\n  const parsed = StoreSchema.safeParse(json);\n  return parsed.success ? parsed.data.lookups : [];\n}\n\n/** Prepend a lookup (newest first), cap to MAX_ENTRIES, persist under a lock so\n *  concurrent lookups don't drop each other's entry. */\nexport async function recordLookup(dataDir: string, entry: StoredLookup): Promise<void> {\n  await mkdir(dataDir, { recursive: true, mode: 0o700 });\n  const lockPath = `${storePath(dataDir)}.lock`;\n  await withFileLock(lockPath, async () => {\n    const existing = await loadLookups(dataDir);\n    const lookups = [entry, ...existing.filter((l) => l.lookupId !== entry.lookupId)].slice(\n      0,\n      MAX_ENTRIES,\n    );\n    await writeFileAtomic(\n      storePath(dataDir),\n      `${JSON.stringify({ schemaVersion: 1, lookups }, null, 2)}\\n`,\n      { mode: 0o644, dirMode: 0o700 },\n    );\n  });\n}\n\nexport async function latestLookup(dataDir: string): Promise<StoredLookup | null> {\n  const lookups = await loadLookups(dataDir);\n  return lookups[0] ?? null;\n}\n\n/** The stored candidate for a resourceId across recent lookups (newest first). */\nexport async function findStoredCandidate(\n  dataDir: string,\n  resourceId: string,\n): Promise<StoredCandidate | null> {\n  for (const lookup of await loadLookups(dataDir)) {\n    const hit = lookup.candidates.find((c) => c.resourceId === resourceId);\n    if (hit) return hit;\n  }\n  return null;\n}\n\n/** The most recent lookupId that surfaced this resource (by id or url), for\n *  purchase attribution (`X-Tenjin-Lookup-Id`). Null when no local lookup did. */\nexport async function findLookupForResource(\n  dataDir: string,\n  match: { resourceId?: string; url?: string },\n): Promise<string | null> {\n  for (const lookup of await loadLookups(dataDir)) {\n    const hit = lookup.candidates.some(\n      (c) =>\n        (match.resourceId !== undefined && c.resourceId === match.resourceId) ||\n        (match.url !== undefined && c.url === match.url),\n    );\n    if (hit) return lookup.lookupId;\n  }\n  return null;\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,OAAO,gBAAgB;AAChC,SAAS,YAAY;AAarB,IAAM,cAAc;AAEpB,IAAM,wBAAwB,iBAAE,OAAO;AAAA,EACrC,YAAY,iBAAE,OAAO;AAAA,EACrB,KAAK,iBAAE,OAAO;AAAA,EACd,OAAO,iBAAE,OAAO;AAAA,EAChB,OAAO,iBAAE,OAAO;AAClB,CAAC;AAGD,IAAM,qBAAqB,iBAAE,OAAO;AAAA,EAClC,UAAU,iBAAE,OAAO;AAAA,EACnB,IAAI,iBAAE,OAAO;AAAA,EACb,UAAU,iBAAE,OAAO;AAAA,EACnB,UAAU,iBAAE,OAAO;AAAA,EACnB,YAAY,iBAAE,MAAM,qBAAqB;AAC3C,CAAC;AAGD,IAAM,cAAc,iBAAE,OAAO;AAAA,EAC3B,eAAe,iBAAE,QAAQ,CAAC;AAAA,EAC1B,SAAS,iBAAE,MAAM,kBAAkB;AACrC,CAAC;AAED,SAAS,UAAU,SAAyB;AAC1C,SAAO,KAAK,SAAS,cAAc;AACrC;AAEA,eAAsB,YAAY,SAA0C;AAC1E,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,UAAU,OAAO,GAAG,MAAM;AAAA,EACjD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,SAAS,YAAY,UAAU,IAAI;AACzC,SAAO,OAAO,UAAU,OAAO,KAAK,UAAU,CAAC;AACjD;AAIA,eAAsB,aAAa,SAAiB,OAAoC;AACtF,QAAM,MAAM,SAAS,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrD,QAAM,WAAW,GAAG,UAAU,OAAO,CAAC;AACtC,QAAM,aAAa,UAAU,YAAY;AACvC,UAAM,WAAW,MAAM,YAAY,OAAO;AAC1C,UAAM,UAAU,CAAC,OAAO,GAAG,SAAS,OAAO,CAAC,MAAM,EAAE,aAAa,MAAM,QAAQ,CAAC,EAAE;AAAA,MAChF;AAAA,MACA;AAAA,IACF;AACA,UAAM;AAAA,MACJ,UAAU,OAAO;AAAA,MACjB,GAAG,KAAK,UAAU,EAAE,eAAe,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,MACzD,EAAE,MAAM,KAAO,SAAS,IAAM;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,aAAa,SAA+C;AAChF,QAAM,UAAU,MAAM,YAAY,OAAO;AACzC,SAAO,QAAQ,CAAC,KAAK;AACvB;AAGA,eAAsB,oBACpB,SACA,YACiC;AACjC,aAAW,UAAU,MAAM,YAAY,OAAO,GAAG;AAC/C,UAAM,MAAM,OAAO,WAAW,KAAK,CAAC,MAAM,EAAE,eAAe,UAAU;AACrE,QAAI,IAAK,QAAO;AAAA,EAClB;AACA,SAAO;AACT;AAIA,eAAsB,sBACpB,SACA,OACwB;AACxB,aAAW,UAAU,MAAM,YAAY,OAAO,GAAG;AAC/C,UAAM,MAAM,OAAO,WAAW;AAAA,MAC5B,CAAC,MACE,MAAM,eAAe,UAAa,EAAE,eAAe,MAAM,cACzD,MAAM,QAAQ,UAAa,EAAE,QAAQ,MAAM;AAAA,IAChD;AACA,QAAI,IAAK,QAAO,OAAO;AAAA,EACzB;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-ZPZFPVDN.js → chunk-MUBUQVC3.js}

@@ -64,4 +64,4 @@ export {
   writeFileAtomic,
   writeFileAtomicExclusive
 };
-//# sourceMappingURL=chunk-ZPZFPVDN.js.map
+//# sourceMappingURL=chunk-MUBUQVC3.js.map

package/dist/chunk-MUBUQVC3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/atomic-json.ts"],"sourcesContent":["import { chmod, link, mkdir, open, rename, rm, writeFile } from 'node:fs/promises';\nimport { randomBytes } from 'node:crypto';\nimport { basename, dirname, join } from 'node:path';\n\n/** fs modes are no-ops on Windows; the 0600/0700 custody story does not apply. */\nconst isWindows = process.platform === 'win32';\n\nexport interface AtomicWriteOptions {\n  /** Mode for the written file (ignored on win32). Default 0o644. */\n  mode?: number;\n  /** Mode for the parent dir when this call creates it (ignored on win32). Default 0o755. */\n  dirMode?: number;\n}\n\n/**\n * Write `data` to `targetPath` atomically: a uniquely-named temp file is created\n * in the SAME directory (so the rename is atomic — a cross-filesystem rename is\n * not), given the final mode at open time, then renamed over the target. A\n * reader therefore sees either the old file or the fully-written new one, never\n * a partial write.\n *\n * The temp file is born with the caller's `mode` (0o600 for a wallet key) so the\n * bytes are never written through a world-readable descriptor; the follow-up\n * chmod only makes the mode exact under an unusual umask and only ever touches\n * the temp path, so the live target still appears atomically at its final mode.\n */\nexport async function writeFileAtomic(\n  targetPath: string,\n  data: string | Buffer,\n  opts: AtomicWriteOptions = {},\n): Promise<void> {\n  const dir = dirname(targetPath);\n  const fileMode = opts.mode ?? 0o644;\n  const dirMode = opts.dirMode ?? 0o755;\n\n  await mkdir(dir, { recursive: true, ...(isWindows ? {} : { mode: dirMode }) });\n\n  const tmpPath = join(dir, `.${basename(targetPath)}.${randomBytes(6).toString('hex')}.tmp`);\n  try {\n    await writeFile(tmpPath, data, isWindows ? undefined : { mode: fileMode });\n    if (!isWindows) await chmod(tmpPath, fileMode);\n    await rename(tmpPath, targetPath);\n  } catch (err) {\n    await rm(tmpPath, { force: true }).catch(() => undefined);\n    throw err;\n  }\n}\n\n/**\n * Like {@link writeFileAtomic} but NO-CLOBBER and crash-durable: the commit fails\n * with `EEXIST` when `targetPath` already exists instead of replacing it, and the\n * new entry is fsynced before returning. This is what a wallet key needs — two\n * concurrent `create`/`import` runs must not both \"succeed\" and silently lose one\n * key; the loser gets a distinguishable EEXIST the wallet layer maps to\n * WALLET_EXISTS.\n *\n * The temp file is fsynced, then `link()` commits it — link is atomic and throws\n * EEXIST if the target already exists, so the check-then-write race is closed at\n * the filesystem, not by an earlier stat. The parent dir is then fsynced so the\n * new entry survives a crash. On win32, link semantics differ and a directory\n * cannot be fsynced, so we fall back to an exclusive `wx` open (still atomic\n * create-or-EEXIST, just not crash-durable — win32 has no 0600 custody story to\n * protect anyway).\n */\nexport async function writeFileAtomicExclusive(\n  targetPath: string,\n  data: string,\n  opts: AtomicWriteOptions = {},\n): Promise<void> {\n  const dir = dirname(targetPath);\n  const fileMode = opts.mode ?? 0o644;\n  const dirMode = opts.dirMode ?? 0o755;\n\n  await mkdir(dir, { recursive: true, ...(isWindows ? {} : { mode: dirMode }) });\n\n  if (isWindows) {\n    const handle = await open(targetPath, 'wx');\n    try {\n      await handle.writeFile(data);\n      await handle.sync();\n    } finally {\n      await handle.close();\n    }\n    return;\n  }\n\n  const tmpPath = join(dir, `.${basename(targetPath)}.${randomBytes(6).toString('hex')}.tmp`);\n  try {\n    const handle = await open(tmpPath, 'wx', fileMode);\n    try {\n      await handle.writeFile(data);\n      await handle.chmod(fileMode); // exact mode even under an unusual umask\n      await handle.sync();\n    } finally {\n      await handle.close();\n    }\n    await link(tmpPath, targetPath); // atomic; throws EEXIST when the target exists\n    await fsyncDir(dir);\n  } finally {\n    // On success the temp is now a redundant link to the target; on EEXIST it is\n    // the orphaned write. Either way remove it before returning/throwing.\n    await rm(tmpPath, { force: true }).catch(() => undefined);\n  }\n}\n\n/** fsync a directory so a freshly linked entry is durable. Never called on win32. */\nasync function fsyncDir(dir: string): Promise<void> {\n  const handle = await open(dir, 'r');\n  try {\n    await handle.sync();\n  } finally {\n    await handle.close();\n  }\n}\n"],"mappings":";;;AAAA,SAAS,OAAO,MAAM,OAAO,MAAM,QAAQ,IAAI,iBAAiB;AAChE,SAAS,mBAAmB;AAC5B,SAAS,UAAU,SAAS,YAAY;AAGxC,IAAM,YAAY,QAAQ,aAAa;AAqBvC,eAAsB,gBACpB,YACA,MACA,OAA2B,CAAC,GACb;AACf,QAAM,MAAM,QAAQ,UAAU;AAC9B,QAAM,WAAW,KAAK,QAAQ;AAC9B,QAAM,UAAU,KAAK,WAAW;AAEhC,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,GAAI,YAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,EAAG,CAAC;AAE7E,QAAM,UAAU,KAAK,KAAK,IAAI,SAAS,UAAU,CAAC,IAAI,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM;AAC1F,MAAI;AACF,UAAM,UAAU,SAAS,MAAM,YAAY,SAAY,EAAE,MAAM,SAAS,CAAC;AACzE,QAAI,CAAC,UAAW,OAAM,MAAM,SAAS,QAAQ;AAC7C,UAAM,OAAO,SAAS,UAAU;AAAA,EAClC,SAAS,KAAK;AACZ,UAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACxD,UAAM;AAAA,EACR;AACF;AAkBA,eAAsB,yBACpB,YACA,MACA,OAA2B,CAAC,GACb;AACf,QAAM,MAAM,QAAQ,UAAU;AAC9B,QAAM,WAAW,KAAK,QAAQ;AAC9B,QAAM,UAAU,KAAK,WAAW;AAEhC,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,GAAI,YAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,EAAG,CAAC;AAE7E,MAAI,WAAW;AACb,UAAM,SAAS,MAAM,KAAK,YAAY,IAAI;AAC1C,QAAI;AACF,YAAM,OAAO,UAAU,IAAI;AAC3B,YAAM,OAAO,KAAK;AAAA,IACpB,UAAE;AACA,YAAM,OAAO,MAAM;AAAA,IACrB;AACA;AAAA,EACF;AAEA,QAAM,UAAU,KAAK,KAAK,IAAI,SAAS,UAAU,CAAC,IAAI,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM;AAC1F,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,SAAS,MAAM,QAAQ;AACjD,QAAI;AACF,YAAM,OAAO,UAAU,IAAI;AAC3B,YAAM,OAAO,MAAM,QAAQ;AAC3B,YAAM,OAAO,KAAK;AAAA,IACpB,UAAE;AACA,YAAM,OAAO,MAAM;AAAA,IACrB;AACA,UAAM,KAAK,SAAS,UAAU;AAC9B,UAAM,SAAS,GAAG;AAAA,EACpB,UAAE;AAGA,UAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,EAC1D;AACF;AAGA,eAAe,SAAS,KAA4B;AAClD,QAAM,SAAS,MAAM,KAAK,KAAK,GAAG;AAClC,MAAI;AACF,UAAM,OAAO,KAAK;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;","names":[]}

package/dist/chunk-N62ROTMC.js

@@ -0,0 +1,79 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+
+// package.json
+var package_default = {
+  name: "tenjin-cli",
+  version: "0.1.0-alpha.2",
+  type: "module",
+  description: "Tenjin agent CLI for the x402 knowledge marketplace.",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/BackTrackCo/tenjin-agent.git"
+  },
+  homepage: "https://tenjin.blog/agents",
+  bugs: "https://github.com/BackTrackCo/tenjin-agent/issues",
+  keywords: [
+    "x402",
+    "usdc",
+    "base",
+    "ai-agents",
+    "agent-payments",
+    "mcp",
+    "knowledge-marketplace",
+    "micropayments",
+    "claude",
+    "codex",
+    "cli"
+  ],
+  bin: {
+    tenjin: "dist/index.js"
+  },
+  engines: {
+    node: ">=22"
+  },
+  files: [
+    "dist",
+    "skills",
+    "NOTICE.md"
+  ],
+  packageManager: "pnpm@11.11.0",
+  scripts: {
+    build: "tsup",
+    test: "vitest run",
+    typecheck: "tsc --noEmit",
+    lint: "eslint .",
+    format: "prettier --write .",
+    "format:check": "prettier --check .",
+    check: "pnpm run build && pnpm run test",
+    "sync:skill": "node scripts/sync-skill.mjs",
+    "pack-smoke": "bash scripts/pack-smoke.sh",
+    changeset: "changeset",
+    prepublishOnly: "pnpm run build",
+    prepare: "git config core.hooksPath .githooks || true"
+  },
+  devDependencies: {
+    "@changesets/cli": "^2.31.1",
+    "@eslint/js": "^9",
+    "@types/node": "^25",
+    "@x402/core": "2.17.0",
+    "@x402/evm": "2.17.0",
+    "@x402/extensions": "2.17.0",
+    commander: "^14.0.1",
+    eslint: "^9",
+    "eslint-config-prettier": "^10",
+    ox: "0.14.30",
+    prettier: "^3",
+    tsup: "^8.5.0",
+    typescript: "^6",
+    "typescript-eslint": "^8",
+    viem: "^2.53.1",
+    vitest: "^4.1.9",
+    zod: "^4.4.3"
+  }
+};
+
+export {
+  package_default
+};
+//# sourceMappingURL=chunk-N62ROTMC.js.map

package/dist/chunk-N62ROTMC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../package.json"],"sourcesContent":["{\n  \"name\": \"tenjin-cli\",\n  \"version\": \"0.1.0-alpha.2\",\n  \"type\": \"module\",\n  \"description\": \"Tenjin agent CLI for the x402 knowledge marketplace.\",\n  \"license\": \"MIT\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/BackTrackCo/tenjin-agent.git\"\n  },\n  \"homepage\": \"https://tenjin.blog/agents\",\n  \"bugs\": \"https://github.com/BackTrackCo/tenjin-agent/issues\",\n  \"keywords\": [\n    \"x402\",\n    \"usdc\",\n    \"base\",\n    \"ai-agents\",\n    \"agent-payments\",\n    \"mcp\",\n    \"knowledge-marketplace\",\n    \"micropayments\",\n    \"claude\",\n    \"codex\",\n    \"cli\"\n  ],\n  \"bin\": {\n    \"tenjin\": \"dist/index.js\"\n  },\n  \"engines\": {\n    \"node\": \">=22\"\n  },\n  \"files\": [\n    \"dist\",\n    \"skills\",\n    \"NOTICE.md\"\n  ],\n  \"packageManager\": \"pnpm@11.11.0\",\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"test\": \"vitest run\",\n    \"typecheck\": \"tsc --noEmit\",\n    \"lint\": \"eslint .\",\n    \"format\": \"prettier --write .\",\n    \"format:check\": \"prettier --check .\",\n    \"check\": \"pnpm run build && pnpm run test\",\n    \"sync:skill\": \"node scripts/sync-skill.mjs\",\n    \"pack-smoke\": \"bash scripts/pack-smoke.sh\",\n    \"changeset\": \"changeset\",\n    \"prepublishOnly\": \"pnpm run build\",\n    \"prepare\": \"git config core.hooksPath .githooks || true\"\n  },\n  \"devDependencies\": {\n    \"@changesets/cli\": \"^2.31.1\",\n    \"@eslint/js\": \"^9\",\n    \"@types/node\": \"^25\",\n    \"@x402/core\": \"2.17.0\",\n    \"@x402/evm\": \"2.17.0\",\n    \"@x402/extensions\": \"2.17.0\",\n    \"commander\": \"^14.0.1\",\n    \"eslint\": \"^9\",\n    \"eslint-config-prettier\": \"^10\",\n    \"ox\": \"0.14.30\",\n    \"prettier\": \"^3\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^6\",\n    \"typescript-eslint\": \"^8\",\n    \"viem\": \"^2.53.1\",\n    \"vitest\": \"^4.1.9\",\n    \"zod\": \"^4.4.3\"\n  }\n}\n"],"mappings":";;;AAAA;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,MAAQ;AAAA,EACR,aAAe;AAAA,EACf,SAAW;AAAA,EACX,YAAc;AAAA,IACZ,MAAQ;AAAA,IACR,KAAO;AAAA,EACT;AAAA,EACA,UAAY;AAAA,EACZ,MAAQ;AAAA,EACR,UAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,KAAO;AAAA,IACL,QAAU;AAAA,EACZ;AAAA,EACA,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,OAAS;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,gBAAkB;AAAA,EAClB,SAAW;AAAA,IACT,OAAS;AAAA,IACT,MAAQ;AAAA,IACR,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,QAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,OAAS;AAAA,IACT,cAAc;AAAA,IACd,cAAc;AAAA,IACd,WAAa;AAAA,IACb,gBAAkB;AAAA,IAClB,SAAW;AAAA,EACb;AAAA,EACA,iBAAmB;AAAA,IACjB,mBAAmB;AAAA,IACnB,cAAc;AAAA,IACd,eAAe;AAAA,IACf,cAAc;AAAA,IACd,aAAa;AAAA,IACb,oBAAoB;AAAA,IACpB,WAAa;AAAA,IACb,QAAU;AAAA,IACV,0BAA0B;AAAA,IAC1B,IAAM;AAAA,IACN,UAAY;AAAA,IACZ,MAAQ;AAAA,IACR,YAAc;AAAA,IACd,qBAAqB;AAAA,IACrB,MAAQ;AAAA,IACR,QAAU;AAAA,IACV,KAAO;AAAA,EACT;AACF;","names":[]}