@aopslabs/aops 0.3.0 → 0.3.2

package/dist/commands/community-server.js

@@ -13,7 +13,7 @@ import { resolveCommunityOfflineRelease, resolveCommunityPublishedRelease, } fro
 import { inspectCommunityDoctor } from './community-doctor.js';
 import { buildCommunityInstanceContract, } from '../lib/community-instance-contract.js';
 import { asCommunityDiagnosticError } from '../lib/community-diagnostic.js';
-import { assertCommunityNativePathLayout, attestCommunityNativeExternalSnapshot, inspectCommunityNativeInstall, inspectCommunityNativeRuntime, loadExternalPostgresUrl, loadExternalServerAuthConfig, planCommunityNativeInstalledMigration, readCommunityNativeLogs, rollbackCommunityNativeApplication, resolveCommunityNativeLaunchMode, resolveCommunityNativePaths, setupCommunityNativeInstall, startCommunityNativeInstall, stopCommunityNativeInstall, } from '../lib/community-native-lifecycle.js';
+import { assertCommunityNativePathLayout, attestCommunityNativeExternalSnapshot, inspectCommunityNativeInstall, inspectCommunityNativeRuntime, loadExternalPostgresUrl, loadExternalServerAuthConfig, planCommunityNativeInstalledMigration, readCommunityNativeLogs, rollbackCommunityNativeApplication, resolveCommunityNativeInstalledNpmSourceRoot, resolveCommunityNativeLaunchMode, resolveCommunityNativePaths, setupCommunityNativeInstall, startCommunityNativeInstall, stopCommunityNativeInstall, } from '../lib/community-native-lifecycle.js';
 import { inspectCommunityNativeApplicationRecoveryStatus } from '../lib/community-native-application-recovery.js';
 import { inspectCommunityNativeDatabaseRecoveryStatus, restoreCommunityNativeDatabaseForUpdate, } from '../lib/community-native-database-recovery.js';
 import { inspectCommunityNativePostgres, removeCommunityNativePostgresContainerForReset, removeCommunityNativeManagedPostgres, } from '../lib/community-native-postgres.js';
@@ -214,6 +214,8 @@ function resolveDependencies(dependencies = {}) {
         planNativeMigration: dependencies.planNativeMigration ?? planCommunityNativeInstalledMigration,
         attestNativeExternalSnapshot: dependencies.attestNativeExternalSnapshot ?? attestCommunityNativeExternalSnapshot,
         setupNativeInstall: dependencies.setupNativeInstall ?? setupCommunityNativeInstall,
+        startNativeInstall: dependencies.startNativeInstall ?? startCommunityNativeInstall,
+        resolveNativeInstalledNpmSourceRoot: dependencies.resolveNativeInstalledNpmSourceRoot ?? resolveCommunityNativeInstalledNpmSourceRoot,
         rollbackNativeApplication: dependencies.rollbackNativeApplication ?? rollbackCommunityNativeApplication,
         restoreNativeDatabase: dependencies.restoreNativeDatabase ?? restoreCommunityNativeDatabaseForUpdate,
         stopNativeCockpit: dependencies.stopNativeCockpit ?? stopCommunityNativeCockpit,
@@ -764,8 +766,9 @@ export async function runCommunityServerStart(options, dependencies = {}) {
     await withMutatingCommandScope(dependencies, async (runtime, signal) => {
         const native = inspectNativeFrom(options);
         if (native.status === 'installed') {
-            const launch = await withNativeOperation(options, 'start', runtime, signal, () => startCommunityNativeInstall({
+            const launch = await withNativeOperation(options, 'start', runtime, signal, () => runtime.startNativeInstall({
                 ...installSelection(options),
+                adoptSourceRoot: runtime.resolveNativeInstalledNpmSourceRoot(),
                 mode: resolveCommunityNativeLaunchMode(options),
                 signal,
             }));

package/dist/commands/host.js

@@ -4,7 +4,7 @@ import path from 'node:path';
 import { spawn } from 'node:child_process';
 import { Command } from 'commander';
 import { banner, logError, logInfo, logSuccess } from '@aopslabs/xf-cli-ui';
-import { getHostRegistrationsDir, listInstalledHostRegistrations, materializeHostRegistrationManifest, mergeHostRegistrationsIntoConfig, normalizeHostRegistrationManifest, unregisterHostRegistration, writeHostRegistration, } from '@aopslabs/aops-host-registration';
+import { getHostRegistrationsDir, listInstalledHostRegistrations, mergeHostRegistrationsIntoConfig, unregisterHostRegistration, } from '@aopslabs/aops-host-registration';
 import { getAopsServerEnvPath, inferAopsRepoDialect, readAopsServerEnvConfig, redactAopsRepoUrl, writeAopsServerEnvConfig, } from '@aopslabs/aops-runtime-config';
 import { createCliApiClientFromOptions, fetchCliHealth } from '../utils/api.js';
 import { applyCommonOptions, compactPayload } from '../utils/command.js';
@@ -325,71 +325,20 @@ function printHostRegistrationResult(payload, options) {
     }
     console.log(JSON.stringify(payload, null, 2));
 }
-function requireCommunityRegistrationJsonPath(options) {
-    const from = options.from?.trim();
-    if (!from)
-        throw new Error('Missing registration source. Use --from /path/to/host-registration.json.');
-    const filePath = path.resolve(process.cwd(), from);
-    if (path.extname(filePath).toLowerCase() !== '.json') {
-        throw new Error('Community host registration accepts JSON files only.');
-    }
-    const stats = fs.lstatSync(filePath);
-    if (!stats.isFile() || stats.isSymbolicLink()) {
-        throw new Error(`Community host registration must be a regular JSON file: ${filePath}`);
-    }
-    return fs.realpathSync(filePath);
-}
-function loadCommunityHostRegistrationJson(filePath) {
-    let parsed;
-    try {
-        parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
-    }
-    catch (error) {
-        throw new Error(`Host registration JSON parse failed: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    const materialized = materializeHostRegistrationManifest(normalizeHostRegistrationManifest(parsed), path.dirname(filePath));
-    return normalizeHostRegistrationManifest({
-        ...materialized,
-        provenance: {
-            ...materialized.provenance,
-            source: filePath,
-            sourceType: 'file',
-            registeredAt: new Date().toISOString(),
-        },
-    });
-}
 export async function runHostRegister(options = {}) {
-    const interactive = !options.yes && !options.json;
-    const source = requireCommunityRegistrationJsonPath(options);
-    const registrationsDir = resolveHostRegistrationsDir(options);
-    if (interactive) {
-        banner('AOPS Host Register');
-        logInfo(`Registry: ${registrationsDir}`);
-        logInfo(`Source: ${source}`);
-    }
-    try {
-        const manifest = loadCommunityHostRegistrationJson(source);
-        const filePath = writeHostRegistration(manifest, {
-            registrationsDir,
-            processEnv: process.env,
-        });
-        if (!options.json)
-            logSuccess(`Registered ${manifest.domain}.`);
-        printHostRegistrationResult({
-            ok: true,
-            domain: manifest.domain,
-            displayName: manifest.displayName ?? null,
-            packageName: manifest.packageName ?? null,
-            filePath,
-            registrationsDir,
-            manifest,
-        }, options);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        logError(`Registration failed: ${message}`);
-        process.exitCode = 1;
-    }
+    const unsupported = {
+        ok: false,
+        schemaVersion: 1,
+        error: 'commercial_profile_required',
+        profile: 'trusted-local',
+        action: 'host.register',
+        message: 'External domain registration is not available in the public trusted-local profile.',
+    };
+    if (options.json)
+        console.log(JSON.stringify(unsupported, null, 2));
+    else
+        logError(`${unsupported.error}: ${unsupported.message}`);
+    process.exitCode = 1;
 }
 export async function runHostRegistrations(options = {}) {
     const interactive = !options.yes && !options.json;
@@ -995,8 +944,8 @@ export function makeHostCommand() {
     }), { withAuth: false, withProject: false });
     applyHostRegistrationOptions(applyCommonOptions(cmd
         .command('register')
-        .description('Install a JSON host registration manifest into the operator registry')
-        .requiredOption('--from <path>', 'Path to a host registration JSON document')
+        .description('Return commercial_profile_required; external domains are disabled in trusted-local')
+        .option('--from <path>', 'Ignored registration source; retained only for a stable refusal contract')
         .action(async (options) => {
         await runHostRegister(options);
     }), { withAuth: false, withProject: false }));

package/dist/lib/community-diagnostic.js

@@ -66,7 +66,7 @@ function guidance(code) {
         return {
             summary: 'The installed npm server package no longer matches the source or build fingerprint AOPS previously verified.',
             nextActions: Object.freeze([
-                'Reinstall the matching public `@aopslabs/aops` and `@aopslabs/aops-server` packages separately.',
+                'Reinstall the public `@aopslabs/aops` package so npm restores its exact Server dependency.',
                 'Re-run `aops setup init` for the selected path after the verified package bytes have been restored.',
             ]),
         };

package/dist/lib/community-native-lifecycle.js

@@ -7,6 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { parseEnv } from 'node:util';
 import { COMMUNITY_NATIVE_CHILD_PROTOCOL, COMMUNITY_NATIVE_CONTROL_PROTOCOL, } from './community-native-child.js';
 import { resolveCommunityInstallPaths } from './community-lifecycle.js';
+import { buildCommunityInstanceContract, } from './community-instance-contract.js';
 import { COMMUNITY_NATIVE_POSTGRES_CONTRACT_PATH, assertCommunityNativePostgresInstanceState, assertCommunityNativePostgresState, buildCommunityNativePostgresUrl, setupCommunityNativePostgres, startCommunityNativePostgres, stopCommunityNativePostgres, } from './community-native-postgres.js';
 import { COMMUNITY_NATIVE_MIGRATION_POLICY_PATH, assertCommunityNativeMigrationReceiptV1, planCommunityNativeMigration, runCommunityNativeMigration, } from './community-native-migration.js';
 import { createCommunityExternalSnapshotAttestationV1, writeCommunityExternalSnapshotAttestationV1, } from './community-migration-snapshot.js';
@@ -660,20 +661,29 @@ function sourceLayout(root, manifest = sourcePackage(root)) {
 function isPackagedCommunityServerSource(source) {
     return sourceLayout(source.root).kind === 'npm-package';
 }
+function isPersistedPackagedCommunityServerState(state) {
+    return samePhysicalPath(state.build.hostEntry, path.join(state.source.root, PACKAGE_BUILD_PATHS.hostEntry)) &&
+        samePhysicalPath(state.build.handlerEntry, path.join(state.source.root, PACKAGE_BUILD_PATHS.handlerEntry)) &&
+        samePhysicalPath(state.build.cockpitIndex, path.join(state.source.root, PACKAGE_BUILD_PATHS.cockpitIndex));
+}
 export function isCommunityNativeNpmPackageSource(sourceRoot) {
     const resolved = path.resolve(sourceRoot);
     return sourceLayout(realpathSync(resolved)).kind === 'npm-package';
 }
 export function resolveCommunityNativeDefaultSourceRoot(fallbackRoot = process.cwd(), moduleUrl = import.meta.url) {
+    return resolveCommunityNativeInstalledNpmSourceRoot(moduleUrl) ?? path.resolve(fallbackRoot);
+}
+export function resolveCommunityNativeInstalledNpmSourceRoot(moduleUrl = import.meta.url) {
     try {
         const require = createRequire(moduleUrl);
         const packageJsonPath = require.resolve(`${PUBLIC_SERVER_PACKAGE_NAME}/package.json`);
         const packageRoot = path.dirname(packageJsonPath);
-        sourceLayout(packageRoot);
+        if (sourceLayout(packageRoot).kind !== 'npm-package')
+            return null;
         return packageRoot;
     }
     catch {
-        return path.resolve(fallbackRoot);
+        return null;
     }
 }
 export function inspectCommunityNativeSource(sourceRoot = process.cwd()) {
@@ -827,6 +837,12 @@ export function reconcileCommunityNativePriorApplication(params) {
         throw new Error('community_native_container_postgres_contract_required');
     }
     if (!samePhysicalPath(state.source.root, selectedSource.root)) {
+        if (sourceLayout(selectedSource.root).kind === 'npm-package') {
+            const comparison = compareCommunityReleaseVersions(selectedSource.releaseVersion, state.source.releaseVersion);
+            if (comparison < 0) {
+                throw new Error(`community_native_application_downgrade_refused:${state.source.releaseVersion}:to:${selectedSource.releaseVersion}`);
+            }
+        }
         return 'application-source-adopted';
     }
     try {
@@ -2443,15 +2459,62 @@ export async function startCommunityNativeInstall(params) {
     if (inspection.status !== 'installed' || !inspection.state) {
         throw new Error(`community_native_not_installed:${inspection.status}:${inspection.error ?? 'run_server_setup'}`);
     }
+    const runtime = params.runtime ?? communityNativeRuntime;
+    const now = params.now ?? (() => new Date());
+    const createId = params.createId ?? randomUUID;
+    const mode = params.mode ?? 'detached';
+    const readyTimeoutMs = params.readyTimeoutMs ?? DEFAULT_READY_TIMEOUT_MS;
+    if (params.adoptSourceRoot
+        && isPersistedPackagedCommunityServerState(inspection.state)
+        && inspection.state.server.host === '127.0.0.1'
+        && inspection.state.server.exposure === 'loopback'
+        && inspection.state.server.authProvider === 'trusted-local') {
+        const selectedSource = inspectCommunityNativeSource(params.adoptSourceRoot);
+        const state = inspection.state;
+        const contract = buildCommunityInstanceContract({
+            runtime: 'native',
+            postgres: state.postgres.mode,
+            postgresConfig: state.postgres.mode === 'external' ? state.postgres.configRef : undefined,
+            postgresTls: state.postgres.mode === 'external' ? state.postgres.tlsPolicy : undefined,
+            exposure: state.server.exposure,
+            auth: state.server.authProvider,
+            publicPort: state.server.publicPort,
+            instance: state.instanceName,
+            port: state.server.port,
+            processEnv: params.env,
+        });
+        const reconciliation = reconcileCommunityNativePriorApplication({
+            state,
+            selectedSource,
+            contract,
+            selectedExternalConfigRef: state.postgres.mode === 'external' ? state.postgres.configRef : undefined,
+        });
+        if (reconciliation === 'application-source-adopted') {
+            const refreshed = await setupCommunityNativeInstall({
+                contract,
+                sourceRoot: selectedSource.root,
+                dataRoot: params.dataRoot,
+                mode,
+                runtime,
+                postgresRuntime: params.postgresRuntime,
+                now,
+                createId,
+                readyTimeoutMs,
+                env: params.env,
+                signal: params.signal,
+            });
+            return refreshed.launch;
+        }
+    }
     return launchInstalledNative({
         paths: inspection.paths,
         state: inspection.state,
-        mode: params.mode ?? 'detached',
-        runtime: params.runtime ?? communityNativeRuntime,
+        mode,
+        runtime,
         postgresRuntime: params.postgresRuntime,
-        now: params.now ?? (() => new Date()),
-        createId: params.createId ?? randomUUID,
-        readyTimeoutMs: params.readyTimeoutMs ?? DEFAULT_READY_TIMEOUT_MS,
+        now,
+        createId,
+        readyTimeoutMs,
         env: params.env,
         signal: params.signal,
     });

package/dist/lib/setup-readiness.js

@@ -709,12 +709,12 @@ export async function inspectSetupReadiness(options = {}) {
                     : 'Native source runtime requirements are available.'
                 : needsDocker
                     ? 'The installed npm server runtime (or an explicit source checkout) and a running Docker daemon are required.'
-                    : 'Install the matching @aopslabs/aops-server package separately, or provide a valid development checkout with pnpm 11.',
+                    : 'Install or update @aopslabs/aops so its matching Server dependency is present, or provide a valid development checkout with pnpm 11.',
             next: runtimeReady
                 ? undefined
                 : needsDocker
                     ? 'Install and start Docker Desktop/Engine, then retry the npm-server setup.'
-                    : 'Install the matching npm server package or provide a valid Community source checkout.',
+                    : 'Install or update the @aopslabs/aops package, or provide a valid Community source checkout.',
             data: {
                 node: process.version,
                 sourceRoot: selectedSourceRoot,

package/dist/main.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { Command } from 'commander';
+import { createCliProgram, runCli } from '@aopslabs/cli-kit';
 import { logError } from '@aopslabs/xf-cli-ui';
 import { resolveCommunityCliIdentity } from './lib/community-client-contract.js';
 import { makeInitCommand } from './commands/init.js';
@@ -28,7 +29,6 @@ import { makeMissionCommand } from './commands/mission.js';
 import { makePlaybookCommand } from './commands/playbook.js';
 import { makeResourceCommand } from './commands/resource.js';
 import { makeArtifactCommand } from './commands/artifact.js';
-import { makeCommercialLicenseCommand } from './commands/commercial-license.js';
 import { makeActivityCommand } from './commands/activity.js';
 import { makeSkillCommand } from './commands/skill.js';
 import { makeDocCommand } from './commands/doc.js';
@@ -40,6 +40,61 @@ import { makeTargetCommand } from './commands/target.js';
 import { makeVersionCommand } from './commands/version.js';
 import { launchBundledTui, shouldLaunchBundledTui } from './lib/tui-launcher.js';
 import { CommunityDiagnosticError, formatCommunityDiagnostic, } from './lib/community-diagnostic.js';
+import { resolveCliApiBaseUrl } from './utils/api.js';
+const KERNEL_COMMANDS_REPLACED_BY_AOPS = new Set(['agent', 'api', 'auth', 'client', 'host']);
+function removeReplacedKernelCommands(program) {
+    const mutable = program;
+    mutable.commands = mutable.commands.filter((command) => !KERNEL_COMMANDS_REPLACED_BY_AOPS.has(command.name()));
+}
+function renderTrustedLocalLicenseStatus(command) {
+    const payload = {
+        ok: true,
+        schemaVersion: 1,
+        contract: 'aops-trusted-local-license-status-v1',
+        profile: 'trusted-local',
+        commercialAvailable: false,
+        southRequired: false,
+        builtInDomains: ['agentspace', 'chatv3', 'docman', 'projectman', 'sys'],
+        next: 'South-backed licensing and external domains are not available in this public profile.',
+    };
+    const json = command.optsWithGlobals().json === true;
+    process.stdout.write(`${JSON.stringify(payload, null, json ? 0 : 2)}\n`);
+}
+function refuseTrustedLocalCommercialActivation(command) {
+    const payload = {
+        ok: false,
+        schemaVersion: 1,
+        error: 'commercial_profile_required',
+        profile: 'trusted-local',
+        action: 'license.activate',
+        message: 'South-backed licensing is not available in the public trusted-local profile.',
+    };
+    const json = command.optsWithGlobals().json === true;
+    const output = `${JSON.stringify(payload, null, json ? 0 : 2)}\n`;
+    if (json)
+        process.stdout.write(output);
+    else
+        process.stderr.write(output);
+    process.exitCode = 1;
+}
+function makeTrustedLocalLicenseCommand() {
+    const command = new Command('license')
+        .description('Inspect the public trusted-local license profile; commercial activation is unavailable');
+    command
+        .command('status')
+        .description('Show the free built-in domain profile')
+        .option('--json', 'Emit compact JSON')
+        .action((_options, actionCommand) => renderTrustedLocalLicenseStatus(actionCommand));
+    command
+        .command('activate')
+        .description('Return commercial_profile_required without accepting commercial evidence')
+        .allowUnknownOption(true)
+        .allowExcessArguments(true)
+        .argument('[args...]')
+        .option('--json', 'Emit compact JSON')
+        .action((_args, _options, actionCommand) => refuseTrustedLocalCommercialActivation(actionCommand));
+    return command;
+}
 for (const stream of [process.stdout, process.stderr]) {
     stream.on('error', (error) => {
         if (error?.code === 'EPIPE') {
@@ -49,13 +104,18 @@ for (const stream of [process.stdout, process.stderr]) {
     });
 }
 export function buildCommunityProgram() {
-    const program = new Command();
     const version = resolveCommunityCliIdentity().version;
+    const program = createCliProgram({
+        name: 'aops',
+        version,
+        description: 'AOPS Community operator CLI for local-trusted, self-hosted workflows',
+        brand: 'aops',
+        defaultApiBaseUrl: resolveCliApiBaseUrl(),
+        moduleSearchRoot: process.cwd(),
+    });
+    removeReplacedKernelCommands(program);
     program
-        .name('aops')
-        .description('AOPS Community operator CLI for local-trusted, self-hosted workflows')
         .enablePositionalOptions()
-        .version(version)
         .version(version, '--cli-version', 'output the CLI version (legacy alias)');
     program.addCommand(makeInitCommand());
     program.addCommand(makeCommunitySetupCommand());
@@ -83,7 +143,7 @@ export function buildCommunityProgram() {
     program.addCommand(makePlaybookCommand());
     program.addCommand(makeResourceCommand());
     program.addCommand(makeArtifactCommand());
-    program.addCommand(makeCommercialLicenseCommand());
+    program.addCommand(makeTrustedLocalLicenseCommand());
     program.addCommand(makeActivityCommand());
     program.addCommand(makeSkillCommand());
     program.addCommand(makeDocCommand());
@@ -124,7 +184,10 @@ async function main() {
             : process.argv;
         guardChatv3UnknownSubcommand(argv);
         guardCommunitySecretArgv(argv);
-        await program.parseAsync(argv);
+        const kernelArgv = argv.includes('--no-client-plugin')
+            ? argv
+            : [argv[0], argv[1], '--no-client-plugin', ...argv.slice(2)];
+        await runCli(program, kernelArgv);
     }
     catch (error) {
         if (error instanceof CommunityDiagnosticError) {

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@aopslabs/aops",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "type": "module",
   "description": "AOPS CLI and terminal setup application.",
-  "aopsDockerServerVersion": "0.2.2",
+  "aopsDockerServerVersion": "0.2.4",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {
     "type": "git",
@@ -47,6 +47,7 @@
     "test:r6-cutover-baseline": "node scripts/verify-r6-cutover-baseline.mjs",
     "test:r6-auth-cutover": "node --test test/r6-auth-cutover.test.mjs",
     "test:container-runtime": "node --test test/container-runtime.test.mjs",
+    "test:kernel-alignment": "node --test test/kernel-alignment.test.mjs",
     "test:home": "node --test test/home-menu.test.mjs",
     "test:launchers": "node --test test/terminal-launchers.test.mjs",
     "test:shortcuts": "pnpm run test:home && pnpm run test:cockpit && pnpm run test:launchers && pnpm run test:assets-menu && pnpm run test:agent-assets-content && pnpm run test:setup-install && pnpm run test:container-runtime && pnpm run test:native-lifecycle && pnpm run test:operation-journal && pnpm run test:commercial-canonical-order && pnpm run test:commercial-runtime-closure && pnpm run test:commercial-artifact && pnpm run test:commercial-final-readiness && pnpm run test:commercial-admission && pnpm run test:commercial-license && pnpm run test:commercial-runbook && pnpm run test:package-identity && pnpm run test:skill-discovery && pnpm run test:target-transport && pnpm run test:target-auth && pnpm run test:r6-auth-cutover && pnpm run test:r6-cutover-baseline",
@@ -54,7 +55,9 @@
     "start": "node dist/main.js"
   },
   "dependencies": {
-    "@aopslabs/artifact-trust-contracts": "0.2.0",
+    "@aopslabs/aops-server": "0.2.4",
+    "@aopslabs/artifact-trust-contracts": "0.3.0",
+    "@aopslabs/cli-kit": "0.1.0",
     "@aopslabs/aops-host-registration": "0.2.0",
     "@aopslabs/aops-pg-bootstrap": "0.2.0",
     "@aopslabs/aops-runtime-config": "0.2.0",