#!/usr/bin/env node import { type ProviderCapability, type ProviderId, type TrustedServerSigningKeyset } from '@dharma-ai-labs/agent-fabric-contracts'; import { type TrajectoryCapsule } from '@dharma-ai-labs/agent-fabric-evidence-reduction'; import { type OrganizationPolicy } from '@dharma-ai-labs/agent-fabric-policy'; import { type ProviderSession } from '@dharma-ai-labs/agent-fabric-provider-adapters'; import { AgentFabricClient, type DeviceConfig, type SecureSecretStore } from '@dharma-ai-labs/agent-fabric-relay-client'; import { type SkillBundle } from '@dharma-ai-labs/agent-fabric-skill-manager'; import { type TaskEnvelope, type TaskReceipt } from '@dharma-ai-labs/agent-fabric-task-runner'; import { type RepositoryInstallerInput } from './repositoryInstallerFiles.js'; import { type CodexSetupFailureDiagnostic, type CodexSetupFailureObserver } from './codexSetupDiagnostic.js'; import { type BootstrapHostScope, type CodexBootstrapHostInput } from './bootstrapHostScope.js'; import { startCodexSetupNativeHost } from './codexSetupNativeHost.js'; export { startCodexSetupNativeHost } from './codexSetupNativeHost.js'; export { openCodexSetupVaultJournal } from './codexSetupVaultJournal.js'; export { createCodexSetupReadinessOwner } from './codexSetupReadiness.js'; import { type CodexSetupExecutionLease, type CodexSetupIntent } from './codexSetupAdmission.js'; import type { ScopedLocalVault } from '@dharma-ai-labs/agent-fabric-local-vault'; export { openCooperativeInboxSession, type CooperativeSessionContext } from './cooperativeInboxSession.js'; export type { CodexBootstrapHostInput } from './bootstrapHostScope.js'; type Output = unknown; export declare function loadAgentFabricOnboardingContract(): Promise<{ markdown: string; sha256: string; }>; interface WorkspaceRecord { workspaceId: string; organizationId: string; name: string; path: string; routeHash: string; repositoryRemoteHash: string | null; repositoryIdentityVersion?: 'normalized-v1' | 'legacy-v0'; repositoryAgentId?: string | null; repositoryBindingId?: string | null; endpointId?: string | null; repositoryPackage?: { state: 'absent' | 'accepted' | 'processing' | 'published' | 'blocked'; candidateId: string | null; operationId: string | null; snapshotHash: string | null; sourceManifestHash: string | null; releaseId: string | null; generation: number; consolidationMode: 'initial_repository' | 'repository_update' | null; sourcePolicyGenerationId?: string | null; localBaselineSnapshotHash?: string | null; publishedLocalSnapshotHash?: string | null; pendingLocalSnapshotHash?: string | null; pendingLocalOperationId?: string | null; }; repositoryRole?: { revision: number; profileHash: string; } | null; repositoryAgentKey?: string | null; controlBranch?: string | null; defaultBranch: string | null; status: 'active'; accessMode?: 'source' | 'knowledge_only'; } export declare function parseCliOptions(args: string[]): { positional: string[]; flags: Map; repeated: Map>; }; export declare function portalUrl(flags: Map, fallback?: string): string; export declare function commandExitCode(argv: string[], value: Output): number; export declare function isDirectExecution(argvPath: string | undefined, moduleUrl: string): boolean; export declare function loadOrCreateInstallationId(path?: string): Promise; export declare function pathExistsOrThrow(path: string, check?: (path: string) => Promise): Promise; export declare function canonicalFilesystemPath(path: string): Promise; export declare function rawLocalRetentionDays(policy: Pick): number; export declare function syncPendingRetentionCapsules(vault: { listPendingCapsuleSyncs(limit?: number, offset?: number): Promise>; markCapsuleSynced(trajectoryId: string, revision: number): void | Promise; discardPendingCapsuleSync(trajectoryId: string, revision: number, reason?: string): void | Promise; }, fabric: AgentFabricClient, policy: OrganizationPolicy, workspaceId: string): Promise; export declare function assertCapsuleIntegrity(capsule: Record): void; export declare function assertCapsuleAuthorizedByCurrentPolicy(capsule: Record, policy: OrganizationPolicy): void; export declare function reserveDailyContentUpload(capsule: Record, policy: OrganizationPolicy, store?: SecureSecretStore): Promise; export declare function releaseDailyContentUpload(capsule: Record, policy: OrganizationPolicy, _store?: SecureSecretStore): Promise; export declare function relayProcessState(home?: string): Promise<'running' | 'stopped' | 'unknown'>; export declare function relaySupervisorProcessState(home?: string): Promise<'running' | 'stopped' | 'unknown'>; export declare function acquireRelayProcessLease(home?: string): Promise<() => Promise>; export declare function acquireRelaySupervisorLease(home?: string): Promise<() => Promise>; export declare function materializeWorkspacePolicy(input: { workspace: string; organizationId: string; revision: string; serverPolicyAuthorization?: unknown; serverPublicKeyEd25519?: string; workspaceId?: string; dryRun?: boolean; secureStore?: SecureSecretStore; }): Promise<{ relativePath: string; policy: OrganizationPolicy; applied: boolean; }>; export declare function withRelayStartupMutation(operation: () => Promise, home?: string): Promise; export declare function withWorkspacePolicyRefreshLock(workspaceId: string, operation: () => Promise): Promise; export declare function withWorkspaceSkillActivationLock(workspaceId: string, provider: ProviderId, operation: () => Promise): Promise; export declare function applyServerEvidencePolicy(base: OrganizationPolicy, value: unknown, serverPublicKeyEd25519: string, organizationId: string, workspaceId: string, now?: Date): OrganizationPolicy; export declare function normalizeGitRemoteIdentity(value: string): string; export declare function sourceRepositoryFingerprint(remote: string | null, explicitKey?: string | null): { fingerprint: string; source: 'remote' | 'explicit_key'; }; export declare function preflightBootstrapWorkspaceIdentity(workspace: string, explicitKey?: string | null): Promise>; export declare function responseTextFromEvent(value: unknown): string | null; export declare function taskResponsePreview(receipt: TaskReceipt): { text: string; truncated: boolean; redactionClasses: string[]; redactedValues: number; } | null; export declare function assertTaskSkillPin(pinned: TaskEnvelope['skillBundle'], active: { bundleId: string; bundleHash: string; } | null): void; export declare function taskSkillPinFailureCode(error: unknown): string; type RelayProbeClient = Pick; export declare function probeRelayConnection(openClient?: () => Promise): Promise<{ ok: boolean; connected: boolean; organizationId: string; deviceId: string; relayVersion: string; }>; export declare function isTransientBootstrapError(error: unknown): boolean; export declare function retryBootstrapOnboarding(operation: () => Promise, options?: { delaysMs?: readonly number[]; wait?: (delayMs: number) => Promise; }): Promise; type BootstrapEvidenceSynchronization = { state: 'synchronized' | 'deferred' | 'denied_disclosure'; captured: number | null; synced: number | null; reason?: 'policy_boundary' | 'capture_unavailable' | 'retention_not_ready'; errorCode?: string; }; export declare function publishedPackageCanDeferSecretEvidence(evidence: BootstrapEvidenceSynchronization, repositoryPackage: NonNullable, sourcePolicyGenerationId: string): boolean; export declare function initialBootstrapEvidenceDisposition(discovered: number, disclosureReady: boolean): BootstrapEvidenceSynchronization; export declare function synchronizeBootstrapEvidence(operation: () => Promise<{ captured: number; synced: number; }>): Promise; export declare function deferUnavailableRelayRetention(operation: () => Promise): Promise<{ state: 'completed'; value: T; } | { state: 'deferred'; reason: 'retention_not_ready'; }>; export declare function requireCompletedBootstrapEvidence(result: BootstrapEvidenceSynchronization, discovered: number): void; export declare function stableRepositoryLauncherContents(version?: string, runtime?: { platform: NodeJS.Platform; nodeDirectory: string; npmCliPath?: string; codexDirectory?: string; }): { shell: string; windows: string; }; export declare function waitForRelayReadiness(options?: { processState?: () => Promise<'running' | 'stopped' | 'unknown'>; probe?: () => Promise>>; attempts?: number; delayMs?: number; wait?: (delayMs: number) => Promise; expectedVersion?: string; }): Promise<{ state: "running"; probe: { ok: boolean; connected: boolean; organizationId: string; deviceId: string; relayVersion: string; }; }>; export declare function providerHintFromEnvironment(env?: NodeJS.ProcessEnv): ProviderId | null; export declare function providerHintFromProcessArgv(lineage: string[][]): ProviderId | null; export declare function assertBootstrapResumeAuthority(input: { flags: Map; existing: Pick | null; organizationId: string; hqUrl: string; }): void; /** Planning-only trusted host entry. Effectful admission remains unavailable * until the full continuation and native owner lifecycle are qualified. */ export declare function bootstrapFromCodexSetup(input: CodexBootstrapHostInput): Promise; /** Native-owner continuation: no caller-selected flags or replacement authority. */ export declare function bootstrapFromCodexSetupScope(scope: BootstrapHostScope, observeFailure?: CodexSetupFailureObserver): Promise; type CodexCompletionVault = Pick; /** Trusted native host composition, not an MCP/model/peer tool. */ export declare function createCodexBootstrapCompletionOwner(scope: BootstrapHostScope, vault: CodexCompletionVault, observeFailure?: CodexSetupFailureObserver): Promise) => Promise<{ state: "completed"; readinessReceiptId: string; } | { state: "unconfirmed"; code: "setup_execution_unconfirmed"; }>; verify: (receiptId: string, requested: Readonly, intentDigest: string) => Promise; }>>; /** Controller entry: owns the official connection and never accepts a peer transport. */ export declare function openCodexBootstrapNativeHost(input: Omit[0], 'transport' | 'additionalFilesystemRules'> & { expectedAccountEmail: string; }): Promise Promise; settled: Promise; readonly diagnostics: readonly Readonly[]; }>>; /** Prepared controller ingress for the portal's public command, never a shell evaluator. */ export declare function openCodexBootstrapFromPortalCommand(input: Parameters[0] & { portalArgs: readonly string[]; }): Promise Promise; settled: Promise; readonly diagnostics: readonly Readonly[]; }>>; /** Official native-host composition. The caller supplies its already owned * transport and qualification, never a vault, executor or readiness callback. */ export declare function startCodexBootstrapNativeHost(input: Omit[0], 'openJournal' | 'execute' | 'verifyReadiness'>): Promise[]; threadId: string; turnId: string; close: () => Promise; settled: Promise; }>>; export declare function summarizeBootstrapOrganizationApi(input: { organizationId: string; organization: unknown; agents: unknown; experiments: unknown; failures: unknown; remediations: unknown; skills: unknown; usage: unknown; }): { ready: boolean; organizationId: string; counts: { agents: number | null; experiments: number | null; failures: number | null; remediations: number | null; skills: number | null; usage: number | null; }; }; export declare function requireExplicitConfirmation(flags: Map, action: string): void; export type ControlAgentCliClient = Pick; type ControlAgentCliClientFactory = () => Promise; export declare function controlAgentDecisionUrl(input: { portalOrigin: string; organizationId: string; toolCallId: string; decision: 'approve' | 'reject'; sessionId?: string; }): string; export declare function runAssistantCommand(subcommand: string | undefined, flags: Map, openClient?: ControlAgentCliClientFactory, openUrl?: (url: string) => Promise): Promise>; type AcceptedTrajectoryHead = { revision: number; capsuleHash: string; } | null; export declare function acceptedTrajectoryHead(value: unknown, trajectoryId: string): AcceptedTrajectoryHead; export declare function parseSelectedProviderIds(values: Array): ProviderId[] | null; export declare function actionDecisionCapabilityFreshUntil(keyset: TrustedServerSigningKeyset, trustedKeyVersions: string[], now?: Date): string; export declare function receiptAwareProviderCapabilities(providers: ProviderCapability[], now?: Date): Promise; export declare function repositorySharedReady(item: WorkspaceRecord, loadInstalled?: (workspace: WorkspaceRecord) => Promise): Promise; export declare function canonicalRepositoryPackage(value: unknown): NonNullable; export declare function canonicalRepositoryPackagePolicyGeneration(value: unknown): string | null | undefined; export declare function repositoryPackageNeedsPolicyRefresh(repositoryPackage: NonNullable, activeGenerationId: string): boolean; export declare function canonicalEndpointRole(value: unknown): WorkspaceRecord['repositoryRole']; export declare function installRepositoryAgentFabricSkill(input: RepositoryInstallerInput): Promise<{ skillPath: string; connectionPath: string; repositoryAgentPath: string; repositoryPackage: { manifestPath: string; snapshotPath: string; snapshotHash: string; managedCopiesPath: string | null; disposition: "candidate_only" | "local_bootstrap_inventory"; authority: "local_inventory_not_signed"; }; knowledge: import("./repositoryKnowledge.js").RepositoryKnowledgeInitializationResult | { catalog: import("./repositoryKnowledge.js").RepositoryDeliveredKnowledgeCatalog; relativePath: string; disposition: "signed_release_reused"; } | null; }>; export declare function repositorySourceResolutionCommand(flags: Map): Promise<{ ok: boolean; stage: string; dryRun: boolean; localMutation: boolean; serverMutation: boolean; protocolSessionCreated: boolean; serverSourceMutation: boolean; durableRelayStateMutation: boolean; authority: string; plan: import("./repositorySourceReconciliation.js").RepositorySourceResolutionPlan; planHash: string; resolvedSnapshotHash: string; published: boolean; }>; export declare function taskReceiptSession(task: TaskEnvelope, receipt: TaskReceipt, workspace: string): ProviderSession; export declare function assertRecoveredTaskWorkspacePolicy(input: { recoveryWorkspaceId: string; workspace: { workspaceId: string; organizationId: string; }; policy: Pick; }): void; export declare function recoveredTaskPolicyWasSuperseded(capsule: Pick, currentPolicy: Pick): boolean; export declare function assertTaskWorkspacePolicy(input: { task: Pick; workspace: { workspaceId: string; organizationId: string; }; policy: Pick; }): void; export declare function acknowledgeTaskActionDecision(input: { task: Pick; receipt: Pick; postEnforcement: (decisionId: string, acknowledgement: NonNullable) => Promise; }): Promise; export declare function postTaskOutcome(input: { task: Pick; receipt: Pick; payload: Record; postEnforcement: (decisionId: string, acknowledgement: NonNullable) => Promise; postEvent: (taskId: string, eventType: TaskReceipt['status'], payload: Record) => Promise; }): Promise; export declare function nativeSkillDirectory(provider: ProviderId, env?: NodeJS.ProcessEnv, home?: string): string; export declare function nativeSkillDirectoryForWorkspace(input: { provider: ProviderId; workspaceId: string; workspace?: string; env?: NodeJS.ProcessEnv; home?: string; }): Promise; export declare function nativeSkillRootMatchingAuthorization(input: { roots: readonly string[]; workspaceId: string; bundleId: string; receiptHash: string; }): Promise; export declare function installClaudeReadOnlyProjectPermissions(workspaceInput: string): Promise<{ path: string; addedRules: number; totalRules: number; scope: string; }>; type HermesSkillExecutor = (executable: string, argv: string[], options: { timeout: number; env: NodeJS.ProcessEnv; cwd: string; }) => Promise<{ stdout?: string | Buffer; }>; export declare function trustHermesProject(input: { workspace: string; env?: NodeJS.ProcessEnv; execute?: HermesSkillExecutor; }): Promise<{ workspace: string; trusted: boolean; }>; export declare function installNativeAgentFabricBootstrap(input: { provider: ProviderId; workspace: string; workspaceId: string; organizationId: string; hqUrl: string; env?: NodeJS.ProcessEnv; home?: string; executeHermes?: HermesSkillExecutor; }): Promise<{ provider: ProviderId; nativeSkillDirectory: string; skillPath: string; activation: string; verified: boolean; projectPermissions: { path: string; addedRules: number; totalRules: number; scope: string; } | null; }>; type NativeBootstrapCapability = { provider: string; skillInstall: string; }; type NativeBootstrapInstaller = typeof installNativeAgentFabricBootstrap; export declare function installAvailableNativeAgentFabricBootstraps(input: { providers: NativeBootstrapCapability[]; workspace: string; workspaceId: string; organizationId: string; hqUrl: string; install?: NativeBootstrapInstaller; }): Promise<{ installed: { provider: ProviderId; nativeSkillDirectory: string; skillPath: string; activation: string; verified: boolean; projectPermissions: { path: string; addedRules: number; totalRules: number; scope: string; } | null; }[]; failures: { provider: string; code: "native_skill_install_failed"; message: string; }[]; }>; export declare function verifyAgentFabricSkillInstallation(input: { provider: ProviderId; workspace: string; env?: NodeJS.ProcessEnv; home?: string; listAgyPlugins?: (executable: string, argv: string[], options: { timeout: number; env: NodeJS.ProcessEnv; }) => Promise<{ stdout: string | Buffer; }>; listHermesSkills?: HermesSkillExecutor; }): Promise<{ provider: ProviderId; ready: boolean; verificationScope: string; bootstrapReady: boolean; signedLifecycleReady: boolean; repositoryInstalled: boolean; nativeInstalled: boolean; nativeManaged: boolean; nativeDiscovered: boolean; activationAttested: boolean; repositorySkillPath: string; connectionPath: string; nativeSkillPath: string; workspaceId: string | null; activeBundleId: string | null; activeBundleHash: string | null; signedMarkerBundleId: string | null; activation: string; nextAction: string; }>; export declare function attestHermesSkillBundleActivation(input: { bundle: SkillBundle; workspace: string; nativeSkillDirectory?: string; env?: NodeJS.ProcessEnv; execute?: HermesSkillExecutor; }): Promise<{ name: string; status: "unavailable"; details: string; } | { name: string; status: "fail"; details: string; } | { name: string; status: "pass"; details: string; }>; type AgyPluginExecutor = (executable: string, argv: string[], options: { timeout: number; env: NodeJS.ProcessEnv; }) => Promise; export declare function activateAgyPlugin(input?: { env?: NodeJS.ProcessEnv; home?: string; execute?: AgyPluginExecutor; }): Promise; export declare function ensureAgyReadOnlyAttestationPermission(input?: { env?: NodeJS.ProcessEnv; home?: string; }): Promise<{ changed: boolean; settingsPath: string; permission: string; }>; type AgyAttestationExecutor = (executable: string, argv: string[], options: { timeout: number; env: NodeJS.ProcessEnv; cwd: string; }) => Promise<{ stdout: string | Buffer; }>; export declare function attestAgySkillActivation(input: { skillId: string; skillPath: string; workspace: string; challenge?: string; env?: NodeJS.ProcessEnv; execute?: AgyAttestationExecutor; }): Promise<{ name: string; status: "unavailable"; details: string; } | { name: string; status: "fail"; details: string; } | { name: string; status: "pass"; details: string; }>; export declare function attestAgySkillBundleActivation(input: { bundle: SkillBundle; nativeSkillDirectory: string; workspace: string; }): Promise<{ name: string; status: "unavailable"; details: string; } | { name: string; status: "fail"; details: string; } | { name: string; status: "pass"; details: string; }>; export declare function materializeInlineSkillFiles(bundle: SkillBundle, sourceRoot: string, assertCurrent?: () => void): Promise; export declare function validateSkillBundleSources(bundle: SkillBundle): { inlineRequired: boolean; singleSource: boolean; }; export declare function recoverLegacySkillBundleIdAfterAuthorizationFailure(input: { nativeSkillDirectory: string; workspaceId: string; authorizationError: unknown; }): Promise; export declare function installedBundleIdForSkillPollAfterAuthorizationFailure(input: { nativeSkillDirectory: string; workspaceId: string; authorizationError: unknown; }): Promise; export declare function loadSkillSynchronizationPolicy(policyPath: string, workspaceId: string, secureStore?: SecureSecretStore): Promise<{ workspace: WorkspaceRecord; policy: OrganizationPolicy; config: DeviceConfig; enrollment: import("@dharma-ai-labs/agent-fabric-relay-client").DeviceEnrollmentAnchor; }>; export declare function parseSkillRolloutResponse(response: unknown, organizationId: string): { id: string; bundle: unknown; repositoryPackage?: unknown; } | null; export declare function prepareSkillUpdate(input: { workspaceId: string; provider: ProviderId; policyPath: string; fabric?: AgentFabricClient; store?: SecureSecretStore; automatic?: boolean; assertRunning?: () => void; }): Promise<{ workspace: WorkspaceRecord; policy: OrganizationPolicy; config: DeviceConfig; destination: string; fabric: AgentFabricClient; rollout: { id: string; bundle: unknown; repositoryPackage?: unknown; }; bundle: SkillBundle; sourceRoot: string; repositoryDelivery: { files: import("./repositoryPackageTransfer.js").RepositoryTransferFile[]; bundle: SkillBundle; envelope: { [x: string]: unknown; }; index: import("./repositoryPackageTransfer.js").RepositoryTransferIndexV2; assertCurrent: () => void; } | undefined; assertCurrent: () => void; } | null>; export declare function skillSync(flags: Map, dryRunStore?: SecureSecretStore): Promise; export declare function run(argv: string[]): Promise; //# sourceMappingURL=index.d.ts.map