/** * Allow-list of package-bundled Node workflow scripts, addressed by name. This * is a security boundary: `hula script ` resolves ONLY these names to * their module in {@link SCRIPT_LOADERS} — it never accepts or resolves an * arbitrary filesystem path from user input, so it cannot be coerced into * executing an out-of-package module. * * `session-hook` is intentionally absent: Claude Code invokes it directly as * `hula session-hook`, so it is a top-level command, not a `hula script` target. */ export declare const ALLOWED_SCRIPTS: readonly ["backlog-add", "backlog-init", "backlog-list", "backlog-pull", "backlog-resync", "fix-setup", "fix-commit", "verify-gather", "verify-post", "approve-local", "approve-remote", "launch-run", "schedule-run", "schedule-manage"]; export type ScriptName = (typeof ALLOWED_SCRIPTS)[number]; /** Shape every ported script module exposes. */ interface ScriptModule { main(args: string[]): Promise; } /** * Static `import()` per script. Literal specifiers (rather than a path built * from ``) let `bun build --compile` bundle every script into the * standalone binary, which has no `dist/scripts/` on disk. */ export declare const SCRIPT_LOADERS: Record Promise>; /** * `hula script [-- ]` — resolve and run a package-bundled Node * workflow script by name. * * - Unknown/arbitrary `` → prints the available scripts to stderr and * returns a non-zero exit code (never resolves an arbitrary path). * - Passthrough args after an optional `--` separator are forwarded verbatim to * the script's `main(args)`. * - The script's returned exit code becomes this command's exit code; the * script owns all stdout (its JSON contract) and stderr (its logs). * * @param argv Arguments after the `script` subcommand (i.e. `[name, ...rest]`). * @returns the process exit code. */ export declare function runScriptCommand(argv: string[]): Promise; export {}; //# sourceMappingURL=script.d.ts.map