@askdkc/kiokuko 0.1.0

package/dist/commands/agent.js

@@ -0,0 +1,283 @@
+import { randomUUID } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { TextDecoder } from 'node:util';
+import { KiokukoError } from '../errors.js';
+import { successEnvelope } from '../serialization/envelope.js';
+import { createServerClient, } from '../client/server-client.js';
+const MAX_INPUT_BYTES = 2 * 1024 * 1024;
+const MAX_ID_BYTES = 256;
+const MAX_TEXT_BYTES = 16 * 1024;
+const MAX_INPUT_PATH_BYTES = 4 * 1024;
+const CONTROL_CHARACTERS = /\p{Cc}/u;
+const CAPTURE_PROFILES = new Set(['minimal', 'standard', 'full']);
+function validationError() {
+    return new KiokukoError('VALIDATION_ERROR', 'Agent input is invalid');
+}
+function boundedString(value, maximumBytes) {
+    if (typeof value !== 'string' || value.length === 0 || value.trim().length === 0
+        || Buffer.byteLength(value, 'utf8') > maximumBytes || CONTROL_CHARACTERS.test(value)) {
+        throw validationError();
+    }
+    return value;
+}
+function boundedId(value) {
+    return boundedString(value, MAX_ID_BYTES);
+}
+function assertPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw validationError();
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        throw validationError();
+    return value;
+}
+function validateInputPath(value) {
+    if (value === '-')
+        return value;
+    return boundedString(value, MAX_INPUT_PATH_BYTES);
+}
+async function readStdinBytes() {
+    const chunks = [];
+    let size = 0;
+    try {
+        for await (const chunk of process.stdin) {
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, 'utf8');
+            size += bytes.byteLength;
+            if (size > MAX_INPUT_BYTES)
+                throw validationError();
+            chunks.push(bytes);
+        }
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        throw validationError();
+    }
+    return Buffer.concat(chunks);
+}
+async function readStrictJsonInput(filePath) {
+    const safePath = validateInputPath(filePath);
+    let bytes;
+    try {
+        bytes = safePath === '-' ? await readStdinBytes() : await readFile(safePath);
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        throw validationError();
+    }
+    if (bytes.byteLength > MAX_INPUT_BYTES)
+        throw validationError();
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+    }
+    catch {
+        throw validationError();
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw validationError();
+    }
+}
+function captureProfile(value) {
+    if (typeof value !== 'string' || !CAPTURE_PROFILES.has(value))
+        throw validationError();
+    return value;
+}
+function transportCaptureProfile(value) {
+    return value === 'full' ? 'diagnostic' : value;
+}
+function runPath(runId, suffix) {
+    const id = boundedId(runId);
+    if (id === '.' || id === '..' || id.includes('/') || id.includes('\\'))
+        throw validationError();
+    const encoded = encodeURIComponent(id);
+    const path = `/api/v1/agent/runs/${encoded}/${suffix}`;
+    if (Buffer.byteLength(path, 'utf8') > MAX_INPUT_PATH_BYTES)
+        throw validationError();
+    return path;
+}
+function keyFromFactory(dependencies) {
+    const factory = dependencies.idempotencyKeyFactory ?? randomUUID;
+    try {
+        return boundedString(factory(), MAX_ID_BYTES);
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        throw validationError();
+    }
+}
+function bodyAndKey(value, dependencies) {
+    if (Object.prototype.hasOwnProperty.call(value, 'idempotencyKey')) {
+        const idempotencyKey = boundedString(value.idempotencyKey, MAX_ID_BYTES);
+        const { idempotencyKey: _removed, ...body } = value;
+        return { body, idempotencyKey };
+    }
+    return { body: value, idempotencyKey: keyFromFactory(dependencies) };
+}
+async function readInput(dependencies, filePath) {
+    const value = await (dependencies.readJsonInput === undefined
+        ? readStrictJsonInput(filePath)
+        : dependencies.readJsonInput(validateInputPath(filePath)));
+    return assertPlainObject(value);
+}
+async function getClient(dependencies) {
+    const factory = dependencies.createClient ?? createServerClient;
+    const options = dependencies.fetchImplementation === undefined
+        ? {}
+        : { fetchImplementation: dependencies.fetchImplementation };
+    try {
+        return await factory(options);
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        throw new KiokukoError('SERVICE_UNAVAILABLE', 'Kiokuko server is unavailable');
+    }
+}
+async function sendRequest(dependencies, request) {
+    try {
+        return await (await getClient(dependencies)).request(request);
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        throw new KiokukoError('SERVICE_UNAVAILABLE', 'Kiokuko server is unavailable');
+    }
+}
+function responseStatus(data) {
+    if (typeof data !== 'object' || data === null || Array.isArray(data))
+        return 'completed';
+    const value = data;
+    for (const field of ['intakeStatus', 'runStatus', 'status']) {
+        if (typeof value[field] === 'string')
+            return value[field];
+    }
+    return 'completed';
+}
+function responseQuestion(data) {
+    if (typeof data !== 'object' || data === null || Array.isArray(data))
+        return undefined;
+    const value = data;
+    const question = value.currentQuestion;
+    if (typeof question !== 'object' || question === null || Array.isArray(question))
+        return undefined;
+    const id = question.id;
+    return typeof id === 'string' ? id : undefined;
+}
+function humanSummary(operation, data) {
+    const question = responseQuestion(data);
+    const status = responseStatus(data);
+    const context = typeof data === 'object' && data !== null && !Array.isArray(data)
+        && data.context !== null
+        && data.context !== undefined
+        ? '; initial context available'
+        : '';
+    return question === undefined
+        ? `Kiokuko ${operation}: ${status}${context}`
+        : `Kiokuko ${operation}: ${status} (current question ${question})${context}`;
+}
+function emitResult(json, operation, data) {
+    if (json)
+        process.stdout.write(`${JSON.stringify(successEnvelope(operation, data))}\n`);
+    else
+        process.stdout.write(`${humanSummary(operation, data)}\n`);
+}
+export function registerAgentCommand(cli, dependencies = {}) {
+    const agent = cli.command('agent').description('Send generic agent lifecycle requests through the Kiokuko server');
+    agent.command('open')
+        .description('Open an authenticated generic agent run')
+        .requiredOption('--workspace <workspace>')
+        .requiredOption('--client <kind>')
+        .requiredOption('--task <task>')
+        .option('--client-version <version>')
+        .option('--session-id <id>')
+        .option('--capture-profile <profile>', 'Capture profile: minimal, standard, or full', 'standard')
+        .option('--json')
+        .action(async (options) => {
+        const workspace = boundedString(options.workspace, MAX_TEXT_BYTES);
+        const clientKind = boundedId(options.client);
+        const task = boundedString(options.task, MAX_TEXT_BYTES);
+        const profile = captureProfile(options.captureProfile);
+        const client = {
+            kind: clientKind,
+            ...(options.clientVersion === undefined ? {} : { version: boundedId(options.clientVersion) }),
+            ...(options.sessionId === undefined ? {} : { sessionId: boundedId(options.sessionId) }),
+        };
+        const body = {
+            apiVersion: '1',
+            workspace,
+            client,
+            task: {
+                title: task,
+                query: task,
+                profileHints: { taskType: null, target: null, expected: null, constraints: null },
+            },
+            captureProfile: transportCaptureProfile(profile),
+            coverage: {
+                run: 'declared',
+                tool: 'declared',
+                command: 'declared',
+                file: 'declared',
+                approval: 'unavailable',
+            },
+            metadata: {},
+        };
+        const data = await sendRequest(dependencies, {
+            method: 'POST',
+            path: '/api/v1/agent/runs',
+            operation: 'agent.open',
+            body,
+            idempotencyKey: keyFromFactory(dependencies),
+        });
+        emitResult(options.json, 'agent.open', data);
+    });
+    agent.command('answer')
+        .description('Answer the current agent intake question without inference')
+        .argument('<run-id>')
+        .requiredOption('--question-id <id>')
+        .requiredOption('--value <answer>')
+        .option('--json')
+        .action(async (runId, options) => {
+        const questionId = boundedId(options.questionId);
+        const value = boundedString(options.value, MAX_TEXT_BYTES);
+        const data = await sendRequest(dependencies, {
+            method: 'POST',
+            path: runPath(runId, 'intake/answers'),
+            operation: 'agent.answer',
+            body: { apiVersion: '1', questionId, value },
+            idempotencyKey: keyFromFactory(dependencies),
+        });
+        emitResult(options.json, 'agent.answer', data);
+    });
+    for (const [name, operation, suffix] of [
+        ['events', 'agent.events', 'events'],
+        ['checkpoint', 'agent.checkpoint', 'checkpoints'],
+        ['close', 'agent.close', 'close'],
+        ['feedback', 'agent.feedback', 'feedback'],
+    ]) {
+        agent.command(name)
+            .description(`Send an ${name} request for an agent run`)
+            .argument('<run-id>')
+            .requiredOption('--input-json <file|->')
+            .option('--json')
+            .action(async (runId, options) => {
+            const input = await readInput(dependencies, options.inputJson);
+            const request = bodyAndKey(input, dependencies);
+            const data = await sendRequest(dependencies, {
+                method: 'POST',
+                path: runPath(runId, suffix),
+                operation,
+                body: request.body,
+                idempotencyKey: request.idempotencyKey,
+            });
+            emitResult(options.json, operation, data);
+        });
+    }
+    return agent;
+}
+//# sourceMappingURL=agent.js.map

package/dist/commands/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EACL,kBAAkB,GAKnB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAC;AACtC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AACrC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAWlE,SAAS,eAAe;IACtB,OAAO,IAAI,YAAY,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,YAAoB;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;WAC3E,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,EAAE,CAAC;IACjG,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,eAAe,EAAE,CAAC;IAClF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,aAAa,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,EAAE,MAAM,CAAC,CAAC;YACpF,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,GAAG,eAAe;gBAAE,MAAM,eAAe,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,eAAe;QAAE,MAAM,eAAe,EAAE,CAAC;IAEhE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,EAAE,CAAC;IACvF,OAAO,KAA4B,CAAC;AACtC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA0B;IACzD,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,MAAc;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,eAAe,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,sBAAsB,OAAO,IAAI,MAAM,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,oBAAoB;QAAE,MAAM,eAAe,EAAE,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,YAAsC;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,qBAAqB,IAAI,UAAU,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B,EAAE,YAAsC;IAIxF,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAClE,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,YAAsC,EAAE,QAAgB;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,aAAa,KAAK,SAAS;QAC3D,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAC/B,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,YAAsC;IAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,IAAI,kBAAkB,CAAC;IAChE,MAAM,OAAO,GAA8B,YAAY,CAAC,mBAAmB,KAAK,SAAS;QACvF,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,YAAY,CAAC,mBAAmB,EAAE,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,YAAsC,EAAE,OAAsB;IAC1F,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAI,OAAO,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IACzF,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5D,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,KAAK,CAAW,CAAC;IACtE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC;IACvC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACnG,MAAM,EAAE,GAAI,QAAoC,CAAC,EAAE,CAAC;IACpD,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,IAAa;IACpD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;WAC3E,IAAgC,CAAC,OAAO,KAAK,IAAI;WACjD,IAAgC,CAAC,OAAO,KAAK,SAAS;QAC1D,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,WAAW,SAAS,KAAK,MAAM,GAAG,OAAO,EAAE;QAC7C,CAAC,CAAC,WAAW,SAAS,KAAK,MAAM,sBAAsB,QAAQ,IAAI,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,IAAyB,EAAE,SAAiB,EAAE,IAAa;IAC7E,IAAI,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;;QACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,eAAyC,EAAE;IAC5F,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,kEAAkE,CAAC,CAAC;IAEnH,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;SAClB,WAAW,CAAC,yCAAyC,CAAC;SACtD,cAAc,CAAC,yBAAyB,CAAC;SACzC,cAAc,CAAC,iBAAiB,CAAC;SACjC,cAAc,CAAC,eAAe,CAAC;SAC/B,MAAM,CAAC,4BAA4B,CAAC;SACpC,MAAM,CAAC,mBAAmB,CAAC;SAC3B,MAAM,CAAC,6BAA6B,EAAE,6CAA6C,EAAE,UAAU,CAAC;SAChG,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,KAAK,EAAE,OAQd,EAAE,EAAE;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,UAAU;YAChB,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;SACxF,CAAC;QACF,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,GAAY;YACxB,SAAS;YACT,MAAM;YACN,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,IAAI;gBACX,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aAClF;YACD,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC;YAChD,QAAQ,EAAE;gBACR,GAAG,EAAE,UAAmB;gBACxB,IAAI,EAAE,UAAmB;gBACzB,OAAO,EAAE,UAAmB;gBAC5B,IAAI,EAAE,UAAmB;gBACzB,QAAQ,EAAE,aAAsB;aACjC;YACD,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,YAAY;YACvB,IAAI;YACJ,cAAc,EAAE,cAAc,CAAC,YAAY,CAAC;SAC7C,CAAC,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;SACpB,WAAW,CAAC,4DAA4D,CAAC;SACzE,QAAQ,CAAC,UAAU,CAAC;SACpB,cAAc,CAAC,oBAAoB,CAAC;SACpC,cAAc,CAAC,kBAAkB,CAAC;SAClC,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA8D,EAAE,EAAE;QAC9F,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACtC,SAAS,EAAE,cAAc;YACzB,IAAI,EAAE,EAAE,UAAU,EAAE,GAAY,EAAE,UAAU,EAAE,KAAK,EAAE;YACrD,cAAc,EAAE,cAAc,CAAC,YAAY,CAAC;SAC7C,CAAC,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEL,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI;QACtC,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC;QACpC,CAAC,YAAY,EAAE,kBAAkB,EAAE,aAAa,CAAC;QACjD,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC;QACjC,CAAC,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC;KAClC,EAAE,CAAC;QACX,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;aAChB,WAAW,CAAC,WAAW,IAAI,2BAA2B,CAAC;aACvD,QAAQ,CAAC,UAAU,CAAC;aACpB,cAAc,CAAC,uBAAuB,CAAC;aACvC,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,OAA8C,EAAE,EAAE;YAC9E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;gBAC5B,SAAS;gBACT,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/backup.d.ts

@@ -0,0 +1,5 @@
+export declare function createBackup(output: string, databasePath?: string): Promise<{
+    output: string;
+    databasePath: string;
+}>;
+//# sourceMappingURL=backup.d.ts.map

package/dist/commands/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAGA,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAS3H"}

package/dist/commands/backup.js

@@ -0,0 +1,14 @@
+import { initializeDatabase } from './init.js';
+import { openConnection } from '../db/connection.js';
+export async function createBackup(output, databasePath) {
+    const initialized = await initializeDatabase(databasePath === undefined ? {} : { databasePath });
+    const database = openConnection(initialized.databasePath);
+    try {
+        await database.backup(output);
+    }
+    finally {
+        database.close();
+    }
+    return { output, databasePath: initialized.databasePath };
+}
+//# sourceMappingURL=backup.js.map

package/dist/commands/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,YAAqB;IACtE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,CAAC;AAC5D,CAAC"}

package/dist/commands/call.d.ts

@@ -0,0 +1,7 @@
+export interface CallRequest {
+    apiVersion: '1';
+    operation: string;
+    arguments: Record<string, unknown>;
+}
+export declare function parseCallRequest(value: unknown): CallRequest;
+//# sourceMappingURL=call.d.ts.map

package/dist/commands/call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../../src/commands/call.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAM5D"}

package/dist/commands/call.js

@@ -0,0 +1,10 @@
+export function parseCallRequest(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new Error('Request must be a JSON object');
+    const request = value;
+    if (request.apiVersion !== '1' || typeof request.operation !== 'string')
+        throw new Error('Invalid call request');
+    const args = request.arguments;
+    return { apiVersion: '1', operation: request.operation, arguments: typeof args === 'object' && args !== null && !Array.isArray(args) ? args : {} };
+}
+//# sourceMappingURL=call.js.map

package/dist/commands/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../../src/commands/call.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1H,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAC/B,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAA+B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAChL,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,31 @@
+import { initializeDatabase } from './init.js';
+export interface DoctorCheck {
+    ok: boolean;
+    count?: number;
+    detail?: string;
+}
+export interface DoctorResult {
+    ok: boolean;
+    databasePath: string;
+    currentVersion: number;
+    capabilities: Awaited<ReturnType<typeof initializeDatabase>>['capabilities'];
+    integrity: string;
+    fts5: boolean;
+    checks: {
+        integrity: DoctorCheck;
+        migrations: DoctorCheck;
+        fts: DoctorCheck;
+        danglingLinks: DoctorCheck;
+        contradictions: DoctorCheck;
+        bindings: DoctorCheck;
+        agentFiles: DoctorCheck;
+        permissions: DoctorCheck;
+        secrets: DoctorCheck;
+        ledger: DoctorCheck;
+        runtime: DoctorCheck;
+    };
+}
+export declare function runDoctor(options?: {
+    databasePath?: string;
+}): Promise<DoctorResult>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAU/C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE;QACN,SAAS,EAAE,WAAW,CAAC;QACvB,UAAU,EAAE,WAAW,CAAC;QACxB,GAAG,EAAE,WAAW,CAAC;QACjB,aAAa,EAAE,WAAW,CAAC;QAC3B,cAAc,EAAE,WAAW,CAAC;QAC5B,QAAQ,EAAE,WAAW,CAAC;QACtB,UAAU,EAAE,WAAW,CAAC;QACxB,WAAW,EAAE,WAAW,CAAC;QACzB,OAAO,EAAE,WAAW,CAAC;QACrB,MAAM,EAAE,WAAW,CAAC;QACpB,OAAO,EAAE,WAAW,CAAC;KACtB,CAAC;CACH;AA6CD,wBAAsB,SAAS,CAAC,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CA+E9F"}

package/dist/commands/doctor.js

@@ -0,0 +1,142 @@
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, readFileSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { initializeDatabase } from './init.js';
+import { openConnection } from '../db/connection.js';
+import { BEGIN_MARKER, END_MARKER } from '../agent-file/managed-block.js';
+import { readProjectConfig } from '../config/project-config.js';
+import { getDatabaseLockPath, getRuntimeDescriptorPath } from '../config/paths.js';
+import { isPidAlive } from '../server/instance-lock.js';
+import { readRuntimeDescriptor } from '../server/runtime-descriptor.js';
+import { inspectLedger } from '../ledger/maintenance.js';
+import { findSecret } from '../memory/secrets.js';
+function count(database, sql, ...parameters) {
+    return Number(database.prepare(sql).get(...parameters)?.count ?? 0);
+}
+function balancedMarkers(content) {
+    return content.split(BEGIN_MARKER).length - 1 === 1 && content.split(END_MARKER).length - 1 === 1;
+}
+async function runtimeCheck(databasePath) {
+    let findings = 0;
+    let descriptor;
+    let descriptorPresent = false;
+    let lockPresent = false;
+    try {
+        descriptor = await readRuntimeDescriptor(getRuntimeDescriptorPath());
+        descriptorPresent = descriptor !== undefined;
+        if (descriptor !== undefined) {
+            const expected = `sha256:${createHash('sha256').update(path.resolve(databasePath), 'utf8').digest('hex')}`;
+            if (descriptor.databaseFingerprint !== expected || !(await isPidAlive(descriptor.pid)))
+                findings += 1;
+        }
+    }
+    catch {
+        findings += 1;
+    }
+    const lockPath = getDatabaseLockPath(databasePath);
+    try {
+        const info = lstatSync(lockPath);
+        lockPresent = true;
+        if (info.isSymbolicLink() || !info.isFile() || (process.platform !== 'win32' && (info.mode & 0o077) !== 0))
+            findings += 1;
+        try {
+            const value = JSON.parse(readFileSync(lockPath, 'utf8'));
+            if (typeof value.instanceId !== 'string' || typeof value.pid !== 'number' || !(await isPidAlive(value.pid)))
+                findings += 1;
+            if (descriptor !== undefined && value.instanceId !== descriptor.instanceId)
+                findings += 1;
+        }
+        catch {
+            findings += 1;
+        }
+    }
+    catch (error) {
+        if (!(error instanceof Error && 'code' in error && error.code === 'ENOENT'))
+            findings += 1;
+    }
+    if (descriptorPresent !== lockPresent)
+        findings += 1;
+    return { ok: findings === 0, count: findings, detail: `findings=${findings}` };
+}
+export async function runDoctor(options = {}) {
+    const initialized = await initializeDatabase(options);
+    const database = openConnection(initialized.databasePath);
+    try {
+        const integrity = database.prepare('PRAGMA integrity_check').get()?.integrity_check ?? 'unknown';
+        const fts5 = Boolean(database.prepare("SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = 'entries_fts'").get());
+        const migrationRows = count(database, 'SELECT COUNT(*) AS count FROM schema_migrations');
+        const expectedMigrations = initialized.currentVersion;
+        const migrationCheck = { ok: migrationRows === expectedMigrations, count: migrationRows, detail: `expected ${expectedMigrations}` };
+        const entryCount = count(database, 'SELECT COUNT(*) AS count FROM entries');
+        const ftsCount = fts5 ? count(database, 'SELECT COUNT(*) AS count FROM entries_fts') : 0;
+        const ftsCheck = { ok: !fts5 || entryCount === ftsCount, count: Math.abs(entryCount - ftsCount), detail: `entries=${entryCount}, fts=${ftsCount}` };
+        const danglingLinks = count(database, `
+      SELECT COUNT(*) AS count FROM entry_links l
+      LEFT JOIN entries f ON f.id = l.from_entry_id
+      LEFT JOIN entries t ON t.id = l.to_entry_id
+      WHERE f.id IS NULL OR t.id IS NULL
+    `);
+        const contradictions = count(database, `
+      SELECT COUNT(*) AS count FROM entry_links l
+      JOIN entries f ON f.id = l.from_entry_id
+      JOIN entries t ON t.id = l.to_entry_id
+      WHERE l.relation = 'contradicts' AND f.status = 'verified' AND t.status = 'verified'
+    `);
+        const bindingRows = database.prepare('SELECT repository_id, canonical_root FROM repository_locations ORDER BY canonical_root').all();
+        const missingRoots = bindingRows.filter((row) => !existsSync(row.canonical_root)).length;
+        const bindingCheck = { ok: missingRoots === 0, count: missingRoots, detail: `locations=${bindingRows.length}` };
+        let missingAgentFiles = 0;
+        for (const row of bindingRows) {
+            if (!existsSync(row.canonical_root))
+                continue;
+            const configPath = `${row.canonical_root}/.kiokuko.json`;
+            try {
+                const config = await readProjectConfig(configPath);
+                const agentPath = `${row.canonical_root}/${config.agentFile}`;
+                if (!existsSync(agentPath) || !balancedMarkers(readFileSync(agentPath, 'utf8')))
+                    missingAgentFiles += 1;
+            }
+            catch {
+                missingAgentFiles += 1;
+            }
+        }
+        const agentFilesCheck = { ok: missingAgentFiles === 0, count: missingAgentFiles };
+        let secretCount = 0;
+        const secretRows = database.prepare('SELECT title, body, summary, scope_json, provenance_json FROM entries').all();
+        for (const row of secretRows) {
+            if (findSecret(`${row.title}\n${row.body}\n${row.summary ?? ''}\n${row.scope_json}\n${row.provenance_json}`))
+                secretCount += 1;
+        }
+        const permissions = (() => {
+            try {
+                const mode = statSync(initialized.databasePath).mode & 0o777;
+                return { ok: (mode & 0o077) === 0, count: mode, detail: `mode=${mode.toString(8)}` };
+            }
+            catch {
+                return { ok: false, count: 0, detail: 'database file is not accessible' };
+            }
+        })();
+        const ledgerReport = inspectLedger(database);
+        const ledgerCheck = { ok: ledgerReport.ok, count: ledgerReport.findingCount, detail: `findings=${ledgerReport.findingCount}` };
+        const runtime = await runtimeCheck(initialized.databasePath);
+        const checks = {
+            integrity: { ok: integrity === 'ok', detail: integrity },
+            migrations: migrationCheck,
+            fts: ftsCheck,
+            danglingLinks: { ok: danglingLinks === 0, count: danglingLinks },
+            contradictions: { ok: contradictions === 0, count: contradictions, detail: 'verified contradictions require review' },
+            bindings: bindingCheck,
+            agentFiles: agentFilesCheck,
+            permissions,
+            secrets: { ok: secretCount === 0, count: secretCount },
+            ledger: ledgerCheck,
+            runtime,
+        };
+        const ok = Object.values(checks).every((check) => check.ok);
+        return { ok, databasePath: '<redacted>', currentVersion: initialized.currentVersion, capabilities: initialized.capabilities, integrity, fts5, checks };
+    }
+    finally {
+        database.close();
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AA8BlD,SAAS,KAAK,CAAC,QAA2C,EAAE,GAAW,EAAE,GAAG,UAAoB;IAC9F,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAoB,GAAG,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,YAAoB;IAC9C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAA6D,CAAC;IAClE,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,qBAAqB,CAAC,wBAAwB,EAAE,CAAC,CAAC;QACrE,iBAAiB,GAAG,UAAU,KAAK,SAAS,CAAC;QAC7C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3G,IAAI,UAAU,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAAE,QAAQ,IAAI,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,WAAW,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,QAAQ,IAAI,CAAC,CAAC;QAC1H,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4C,CAAC;YACpG,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,QAAQ,IAAI,CAAC,CAAC;YAC3H,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU;gBAAE,QAAQ,IAAI,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAE,QAAQ,IAAI,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,iBAAiB,KAAK,WAAW;QAAE,QAAQ,IAAI,CAAC,CAAC;IACrD,OAAO,EAAE,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,QAAQ,EAAE,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAqC,EAAE;IACrE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAA+B,EAAE,eAAe,IAAI,SAAS,CAAC;QAC9H,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACrI,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;QACzF,MAAM,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC;QACtD,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,aAAa,KAAK,kBAAkB,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,kBAAkB,EAAE,EAAE,CAAC;QAEpI,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,UAAU,KAAK,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,UAAU,SAAS,QAAQ,EAAE,EAAE,CAAC;QACpJ,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE;;;;;KAKrC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,EAAE;;;;;KAKtC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,EAAqD,CAAC;QACxL,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;QACzF,MAAM,YAAY,GAAG,EAAE,EAAE,EAAE,YAAY,KAAK,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAEhH,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC;gBAAE,SAAS;YAC9C,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,cAAc,gBAAgB,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACnD,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC9D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAAE,iBAAiB,IAAI,CAAC,CAAC;YAC1G,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,eAAe,GAAG,EAAE,EAAE,EAAE,iBAAiB,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAElF,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,EAAwG,CAAC;QACzN,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,EAAE,KAAK,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;gBAAE,WAAW,IAAI,CAAC,CAAC;QACjI,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;gBAC7D,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/H,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,KAAK,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;YACxD,UAAU,EAAE,cAAc;YAC1B,GAAG,EAAE,QAAQ;YACb,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa,KAAK,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;YAChE,cAAc,EAAE,EAAE,EAAE,EAAE,cAAc,KAAK,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,wCAAwC,EAAE;YACrH,QAAQ,EAAE,YAAY;YACtB,UAAU,EAAE,eAAe;YAC3B,WAAW;YACX,OAAO,EAAE,EAAE,EAAE,EAAE,WAAW,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE;YACtD,MAAM,EAAE,WAAW;YACnB,OAAO;SACR,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzJ,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/commands/export.d.ts

@@ -0,0 +1,21 @@
+import type { SqliteDatabase } from '../db/adapter.js';
+export interface ExportOptions {
+    workspace: string;
+    output?: string;
+}
+export interface ExportResult {
+    workspace: string;
+    count: number;
+    checksum: string;
+    output?: string;
+    content: string;
+}
+/**
+ * Export a complete workspace snapshot as deterministic, checksummed JSONL.
+ * The first line is the checksum of every following line, including its final newline.
+ */
+export declare function exportWorkspace(database: SqliteDatabase, options: ExportOptions): ExportResult;
+export declare function writeExport(database: SqliteDatabase, options: ExportOptions & {
+    output: string;
+}): Promise<ExportResult>;
+//# sourceMappingURL=export.d.ts.map

package/dist/commands/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAmBD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,GAAG,YAAY,CA6D9F;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAI9H"}

package/dist/commands/export.js

@@ -0,0 +1,68 @@
+import { createHash } from 'node:crypto';
+import { writeFile } from 'node:fs/promises';
+import { canonicalJson, requireWorkspace } from '../serialization/validate.js';
+function rows(database, sql, ...parameters) {
+    return database.prepare(sql).all(...parameters);
+}
+function canonicalStoredJson(value, label) {
+    try {
+        return canonicalJson(JSON.parse(String(value)));
+    }
+    catch {
+        throw new Error(`Stored ${label} is not valid JSON`);
+    }
+}
+/**
+ * Export a complete workspace snapshot as deterministic, checksummed JSONL.
+ * The first line is the checksum of every following line, including its final newline.
+ */
+export function exportWorkspace(database, options) {
+    const workspace = requireWorkspace(options.workspace);
+    const entries = rows(database, `SELECT id, workspace, kind, status, title, body, summary, scope_json, provenance_json,
+            trust_level, confidence, content_hash, revision, superseded_by, created_by,
+            created_at, updated_at, verified_at
+     FROM entries WHERE workspace = ? ORDER BY id ASC`, workspace).map((entry) => ({
+        ...entry,
+        scope_json: canonicalStoredJson(entry.scope_json, 'scope'),
+        provenance_json: canonicalStoredJson(entry.provenance_json, 'provenance'),
+    }));
+    const entryIds = new Set(entries.map((entry) => String(entry.id)));
+    const tags = rows(database, `SELECT entry_id, tag FROM tags WHERE entry_id IN (SELECT id FROM entries WHERE workspace = ?)
+     ORDER BY entry_id ASC, tag ASC`, workspace);
+    const links = rows(database, `SELECT l.from_entry_id, l.to_entry_id, l.relation, l.created_at, l.created_by
+     FROM entry_links l
+     JOIN entries from_entry ON from_entry.id = l.from_entry_id
+     JOIN entries to_entry ON to_entry.id = l.to_entry_id
+     WHERE from_entry.workspace = ? AND to_entry.workspace = ?
+     ORDER BY l.from_entry_id ASC, l.to_entry_id ASC, l.relation ASC`, workspace, workspace);
+    const audit = rows(database, `SELECT event_id, entry_id, workspace, operation, actor, details_json, created_at
+     FROM audit_events WHERE workspace = ? ORDER BY event_id ASC`, workspace).filter((event) => event.entry_id === null || entryIds.has(String(event.entry_id))).map((event) => ({
+        ...event,
+        details_json: canonicalStoredJson(event.details_json, 'audit details'),
+    }));
+    const manifest = {
+        type: 'manifest',
+        apiVersion: '1',
+        workspace,
+        format: 'kiokuko-jsonl',
+        version: 2,
+        counts: { entries: entries.length, tags: tags.length, links: links.length, audit: audit.length },
+    };
+    const payloadLines = [
+        manifest,
+        ...entries.map((entry) => ({ type: 'entry', ...entry })),
+        ...tags.map((tag) => ({ type: 'tag', ...tag })),
+        ...links.map((link) => ({ type: 'link', ...link })),
+        ...audit.map((event) => ({ type: 'audit', ...event })),
+    ];
+    const payload = `${payloadLines.map((value) => canonicalJson(value)).join('\n')}\n`;
+    const checksum = createHash('sha256').update(payload, 'utf8').digest('hex');
+    const content = `${canonicalJson({ type: 'checksum', sha256: checksum })}\n${payload}`;
+    return { workspace, count: entries.length, checksum, ...(options.output === undefined ? {} : { output: options.output }), content };
+}
+export async function writeExport(database, options) {
+    const result = exportWorkspace(database, options);
+    await writeFile(options.output, result.content, 'utf8');
+    return result;
+}
+//# sourceMappingURL=export.js.map