
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
@czap/command
Advanced tools
Shared capsule command registry + dispatcher — one command truth for the CLI and MCP adapters
The shared command catalog and dispatcher behind the czap CLI and the MCP server — one definition of every command's name and input schema (plus the handler, for commands that execute here; terminal-owned verbs are descriptor-only), so both surfaces stay in sync by construction.
You usually don't install this directly — it arrives as a dependency of
@czap/cliand@czap/mcp-server. Install one of those instead unless you're building your own adapter (a new protocol skin) over the same commands.
pnpm add @czap/cli # brings @czap/command with it
This package declares effect (>= 4.0.0-beta.0) as a peer dependency: pnpm add effect@beta.
import { commandRegistry, CommandDispatcher } from '@czap/command';
const dispatcher = CommandDispatcher.make(commandRegistry);
const result = await dispatcher.dispatch(
{ name: 'glossary', args: { term: 'boundary' } },
{}, // CommandContext — pure commands like glossary need no host capabilities
);
console.log(result.status, result.payload);
Logs ok and a payload containing the glossary entry for "boundary". The dispatcher never throws across this seam: an unknown command name returns { status: 'failed', payload: { error: 'unknown_command' } } instead of an exception.
This is the core of the command layer. It depends on @czap/core (command descriptor and result types) and @czap/assets (the asset-analysis handlers). The main entry is pure; anything that touches the host — process spawning, the ffmpeg render backend, the input-hash idempotency cache, capsule-manifest resolution — lives behind the @czap/command/host subpath (Node) and @czap/command/host-browser (browser, including the WebMCP projection), so importing the catalog never drags in child_process. Terminal-owned verbs like doctor, gauntlet, and ship appear here as descriptor-only catalog entries; their execution lives in @czap/cli. See the package surfaces map for the full layout.
Dispatching a catalog command that has no handler here (a CLI-owned verb such as doctor) returns a structured failure with payload.error: 'no_registry_handler' — nothing throws and nothing prints. Run those verbs through @czap/cli, which owns their execution.
Part of LiteShip — powered by the CZAP engine (Content-Zoned Adaptive Projection), distributed as @czap/* packages.
FAQs
The shared command registry behind LiteShip's tooling: one source of command definitions that both the `czap` CLI and the MCP server project from.
The npm package @czap/command receives a total of 45 weekly downloads. As such, @czap/command popularity was classified as not popular.
We found that @czap/command demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.