@bluefields/cli 0.2.0

package/dist/cli.js

@@ -0,0 +1,310 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-or-later
+/**
+ * `bf` — the Bluefield command line. A thin, dependency-free wrapper over the
+ * `@bluefields/cli` library. No arg-parsing dependency (a hand-rolled parser
+ * covers the small surface); no telemetry; no network beyond the fetch itself.
+ *
+ * Kept separate from `index.ts` so importing the library has no side effects
+ * and the binary runs reliably whether invoked as `node dist/cli.js` or via the
+ * `bf` bin symlink.
+ */
+import './quiet.js'; // MUST be first — silences engine logs before fetcher loads
+import { readFileSync } from 'node:fs';
+import process from 'node:process';
+import { openBluefield } from './bluefield.js';
+import { PROJECT_NAME, STANDARD_FULL } from './constants.js';
+import { runMcpServer } from './mcp-server.js';
+import { resolveStoreRoot, storePaths } from './paths.js';
+const VERSION = '0.1.0';
+/** Minimal argv parser: `--flag`, `--flag value`, `--flag=value`, positionals. */
+export function parse(argv) {
+    const positionals = [];
+    const flags = new Map();
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a.startsWith('--')) {
+            const eq = a.indexOf('=');
+            if (eq !== -1) {
+                flags.set(a.slice(2, eq), a.slice(eq + 1));
+            }
+            else {
+                const key = a.slice(2);
+                const next = argv[i + 1];
+                if (next !== undefined && !next.startsWith('--')) {
+                    flags.set(key, next);
+                    i += 1;
+                }
+                else {
+                    flags.set(key, true);
+                }
+            }
+        }
+        else {
+            positionals.push(a);
+        }
+    }
+    return { positionals, flags };
+}
+const out = (s) => process.stdout.write(`${s}\n`);
+const err = (s) => process.stderr.write(`${s}\n`);
+const json = (v) => out(JSON.stringify(v, null, 2));
+function num(v, dflt) {
+    if (typeof v !== 'string')
+        return dflt;
+    const n = Number(v);
+    return Number.isFinite(n) ? n : dflt;
+}
+const HELP = `${PROJECT_NAME} — git for web data. Local-first, signed, offline.
+
+Snapshots conform to the ${STANDARD_FULL}.
+
+USAGE
+  bf scrape <url> [options]     Capture a URL into the local store (signed)
+  bf log [url] [--limit N]      Show snapshot history (all, or one URL)
+  bf diff <a> [b]               Diff two snapshots (or last two of a URL)
+  bf watch <url> [options]      Poll a URL and report changes
+  bf verify <ref>               Verify a snapshot's content hash + signature
+  bf export <ref> [--out DIR]   Export raw content + portable proof bundle
+  bf key                        Show this machine's public signing identity
+  bf where                      Print the resolved store + keys locations
+  bf mcp                        Run the local MCP server (stdio)
+  bf help | --version
+
+A <ref> is a snapshot-id prefix (e.g. 3f9a2b) or a URL (its latest snapshot).
+
+SCRAPE OPTIONS
+  --no-sign               Do not sign the manifest
+  --extract               Run structured extraction (needs ANTHROPIC_API_KEY)
+  --schema <file.json>    JSON schema for structured extraction
+  --intent <text>         One-sentence extraction hint
+  --anchor                Best-effort transparency anchoring (no-op if absent)
+
+DIFF OPTIONS   --structured   Diff extracted structured data (JSON Patch)
+WATCH OPTIONS  --interval <sec> (default 300)   --times <n>
+VERIFY OPTIONS --trust-embedded   Trust the bundle's embedded key (TOFU)
+GLOBAL         --json     Machine-readable output
+
+STORAGE   \$BF_HOME overrides the store; else nearest ./.bf; else ~/.bluefield.
+          Signing keys always live in ~/.bluefield/keys (0600). No telemetry.
+`;
+export async function main(argv) {
+    const [cmd, ...rest] = argv;
+    const { positionals, flags } = parse(rest);
+    const asJson = flags.has('json');
+    if (!cmd || cmd === 'help' || cmd === '--help' || flags.has('help')) {
+        out(HELP);
+        return 0;
+    }
+    if (cmd === '--version' || cmd === 'version') {
+        out(VERSION);
+        return 0;
+    }
+    if (cmd === 'where') {
+        const p = storePaths(resolveStoreRoot());
+        if (asJson)
+            json({ storeRoot: p.root, objects: p.objects, db: p.db, keys: p.keys });
+        else {
+            out(`store root : ${p.root}`);
+            out(`objects    : ${p.objects}`);
+            out(`db         : ${p.db}`);
+            out(`keys       : ${p.keys}`);
+        }
+        return 0;
+    }
+    if (cmd === 'mcp') {
+        await runMcpServer();
+        return 0;
+    }
+    const bf = await openBluefield();
+    try {
+        switch (cmd) {
+            case 'scrape':
+                return await cmdScrape(bf, positionals, flags, asJson);
+            case 'log':
+                return await cmdLog(bf, positionals, flags, asJson);
+            case 'diff':
+                return await cmdDiff(bf, positionals, flags, asJson);
+            case 'watch':
+                return await cmdWatch(bf, positionals, flags, asJson);
+            case 'verify':
+                return await cmdVerify(bf, positionals, flags, asJson);
+            case 'export':
+                return await cmdExport(bf, positionals, flags, asJson);
+            case 'key': {
+                const id = bf.publicIdentity();
+                if (asJson)
+                    json(id);
+                else {
+                    out(`keyId: ${id.keyId}`);
+                    out(`jwk  : ${JSON.stringify(id.publicJwk)}`);
+                }
+                return 0;
+            }
+            default:
+                err(`unknown command: ${cmd}\n`);
+                out(HELP);
+                return 2;
+        }
+    }
+    finally {
+        await bf.close();
+    }
+}
+async function cmdScrape(bf, pos, flags, asJson) {
+    const url = pos[0];
+    if (!url) {
+        err('usage: bf scrape <url> [options]');
+        return 2;
+    }
+    const schemaFlag = flags.get('schema');
+    const schema = typeof schemaFlag === 'string' ? JSON.parse(readFileSync(schemaFlag, 'utf8')) : null;
+    const intent = flags.get('intent');
+    const r = await bf.scrape(url, {
+        sign: !flags.has('no-sign'),
+        extract: flags.has('extract'),
+        schema,
+        intent: typeof intent === 'string' ? intent : null,
+        anchor: flags.has('anchor'),
+    });
+    if (asJson) {
+        json(r);
+        return r.ok ? 0 : 1;
+    }
+    if (!r.ok) {
+        err(`blocked: ${r.reason} (${r.url})`);
+        return 1;
+    }
+    out(`captured ${r.url}`);
+    out(`  snapshot ${r.snapshotId}`);
+    out(`  sha256   ${r.contentHash}`);
+    out(`  signed   ${r.signed ? 'yes' : 'no'}    changed: ${r.changed ? 'yes' : 'no'}`);
+    if (r.extraction)
+        out(`  extract  ${r.extraction.extractionStatus}`);
+    if (r.anchor)
+        out(`  anchor   ${r.anchor.anchored ? 'yes' : `no — ${r.anchor.detail}`}`);
+    return 0;
+}
+async function cmdLog(bf, pos, flags, asJson) {
+    const rows = await bf.log(pos[0] ?? null, { limit: num(flags.get('limit'), 50) });
+    if (asJson) {
+        json(rows);
+        return 0;
+    }
+    if (rows.length === 0) {
+        out('(no snapshots yet)');
+        return 0;
+    }
+    for (const r of rows) {
+        out(`${r.snapshotId.slice(0, 8)}  ${r.fetchedAt.toISOString()}  ${String(r.responseStatus).padEnd(3)}  ${r.signed ? '🔏' : '  '}  ${r.contentHash.slice(0, 12)}  ${r.url}`);
+    }
+    return 0;
+}
+async function cmdDiff(bf, pos, flags, asJson) {
+    const a = pos[0];
+    if (!a) {
+        err('usage: bf diff <refA> [refB] [--structured]');
+        return 2;
+    }
+    const d = await bf.diff(a, pos[1], { mode: flags.has('structured') ? 'structured' : 'content' });
+    if (asJson) {
+        json(d);
+        return d.identical ? 0 : 1;
+    }
+    out(`--- ${d.from.snapshotId.slice(0, 8)}  ${d.from.fetchedAt.toISOString()}`);
+    out(`+++ ${d.to.snapshotId.slice(0, 8)}  ${d.to.fetchedAt.toISOString()}`);
+    if (d.identical) {
+        out('(no changes)');
+        return 0;
+    }
+    out(`(${d.mode}) +${d.added} -${d.removed}`);
+    out(d.text);
+    return 1;
+}
+async function cmdWatch(bf, pos, flags, asJson) {
+    const url = pos[0];
+    if (!url) {
+        err('usage: bf watch <url> [--interval sec] [--times n]');
+        return 2;
+    }
+    const controller = new AbortController();
+    process.on('SIGINT', () => controller.abort());
+    const intervalMs = num(flags.get('interval'), 300) * 1000;
+    const times = flags.has('times') ? num(flags.get('times'), 1) : Number.POSITIVE_INFINITY;
+    if (!asJson)
+        out(`watching ${url} every ${intervalMs / 1000}s (Ctrl-C to stop)`);
+    await bf.watch(url, {
+        intervalMs,
+        times,
+        signal: controller.signal,
+        onTick: (r, i) => {
+            if (asJson) {
+                json({ iteration: i, ...r });
+            }
+            else if (r.ok) {
+                out(`[${new Date().toISOString()}] #${i} ${r.changed ? 'CHANGED' : 'unchanged'} ${r.contentHash.slice(0, 12)} ${r.snapshotId.slice(0, 8)}`);
+            }
+            else {
+                out(`[${new Date().toISOString()}] #${i} blocked: ${r.reason}`);
+            }
+        },
+    });
+    return 0;
+}
+async function cmdVerify(bf, pos, flags, asJson) {
+    const ref = pos[0];
+    if (!ref) {
+        err('usage: bf verify <ref> [--trust-embedded]');
+        return 2;
+    }
+    const v = await bf.verify(ref, { trustEmbedded: flags.has('trust-embedded') });
+    if (asJson) {
+        json(v);
+        return v.ok ? 0 : 1;
+    }
+    out(`${v.ok ? '✓ VERIFIED' : '✗ FAILED'}  ${v.snapshotId?.slice(0, 8) ?? ''}`);
+    out(`  content hash matches : ${v.contentHashMatches ? 'yes' : 'NO'}`);
+    out(`  signature valid      : ${v.signatureValid ? 'yes' : 'NO'}`);
+    out(`  keyId                : ${v.keyId}`);
+    if (!v.ok && v.detail)
+        out(`  ${v.detail}`);
+    return v.ok ? 0 : 1;
+}
+async function cmdExport(bf, pos, flags, asJson) {
+    const ref = pos[0];
+    if (!ref) {
+        err('usage: bf export <ref> [--out dir]');
+        return 2;
+    }
+    const outDir = typeof flags.get('out') === 'string' ? flags.get('out') : '.';
+    const e = await bf.export(ref, outDir);
+    if (asJson)
+        json(e);
+    else {
+        out(`exported ${e.snapshotId}`);
+        out(`  ${e.contentFile}`);
+        out(`  ${e.bundleFile}`);
+    }
+    return 0;
+}
+/** Only auto-run when invoked as the entry point (not when imported by a test). */
+function isMainEntry() {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        return import.meta.url === new URL(`file://${entry}`).href || entry.endsWith('cli.js');
+    }
+    catch {
+        return false;
+    }
+}
+if (isMainEntry()) {
+    main(process.argv.slice(2))
+        .then((code) => process.exit(code))
+        .catch((e) => {
+        err(`error: ${e instanceof Error ? e.message : String(e)}`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,6CAA6C;AAC7C;;;;;;;;GAQG;AAEH,OAAO,YAAY,CAAC,CAAC,4DAA4D;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAkB,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,OAAO,GAAG,OAAO,CAAC;AAOxB,kFAAkF;AAClF,MAAM,UAAU,KAAK,CAAC,IAAc;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACd,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACrB,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1D,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAE7D,SAAS,GAAG,CAAC,CAA4B,EAAE,IAAY;IACrD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,IAAI,GAAG,GAAG,YAAY;;2BAED,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BvC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,CAAC;QACb,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC/E,CAAC;YACJ,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,MAAM,YAAY,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ;gBACX,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,KAAK,KAAK;gBACR,OAAO,MAAM,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACtD,KAAK,MAAM;gBACT,OAAO,MAAM,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACvD,KAAK,OAAO;gBACV,OAAO,MAAM,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxD,KAAK,QAAQ;gBACX,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,KAAK,QAAQ;gBACX,OAAO,MAAM,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC;gBAC/B,IAAI,MAAM;oBAAE,IAAI,CAAC,EAAE,CAAC,CAAC;qBAChB,CAAC;oBACJ,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC1B,GAAG,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;YACD;gBACE,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;gBACjC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACV,OAAO,CAAC,CAAC;QACb,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,EAAa,EACb,GAAa,EACb,KAAiC,EACjC,MAAe;IAEf,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,MAAM,GACV,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;QAC7B,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3B,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,MAAM;QACN,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAClD,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzB,GAAG,CAAC,cAAc,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,EAAa,EACb,GAAa,EACb,KAAiC,EACjC,MAAe;IAEf,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAClF,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,GAAG,CACD,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAC9F,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IACpB,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,EAAa,EACb,GAAa,EACb,KAAiC,EACjC,MAAe;IAEf,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,cAAc,CAAC,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,EAAa,EACb,GAAa,EACb,KAAiC,EACjC,MAAe;IAEf,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IACzF,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,UAAU,UAAU,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACjF,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QAClB,UAAU;QACV,KAAK;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACf,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBAChB,GAAG,CACD,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,IACjC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAC1B,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAC7D,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,EAAa,EACb,GAAa,EACb,KAAiC,EACjC,MAAe;IAEf,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,4BAA4B,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,GAAG,CAAC,4BAA4B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,EAAa,EACb,GAAa,EACb,KAAiC,EACjC,MAAe;IAEf,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC;IACzF,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC;SACf,CAAC;QACJ,GAAG,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,WAAW,EAAE,EAAE,CAAC;IAClB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACX,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Single source of truth for user-facing project + standard names.
+ *
+ * A rename is one edit HERE and nowhere else. Everything the CLI prints, and
+ * every default directory name,
+ * derives from these constants. Do NOT hard-code "Bluefield" / "BPM" anywhere
+ * else in the package — import from this module.
+ */
+/** Product name (the CLI, the library, the local store). */
+export declare const PROJECT_NAME: "Bluefield";
+/** Lowercase slug used for directories, env-var prefixes, and the bin name. */
+export declare const PROJECT_SLUG: "bluefield";
+/** The provenance standard the signed manifests conform to. */
+export declare const STANDARD_NAME: "Bluefield Provenance Manifest";
+/** Short abbreviation for the standard. */
+export declare const STANDARD_ABBR: "BPM";
+/** Convenience: "Bluefield Provenance Manifest / BPM". */
+export declare const STANDARD_FULL: "Bluefield Provenance Manifest / BPM";
+/** Default global home directory (under the user's home). */
+export declare const HOME_DIR_NAME: ".bluefield";
+/** Repo-local store directory name (git-style, walked up from cwd). */
+export declare const LOCAL_DIR_NAME: ".bf";
+/** Env var that overrides the store root outright. */
+export declare const HOME_ENV: "BF_HOME";
+/** Public repository URL. Referenced by the User-Agent below and by docs. */
+export declare const REPO_URL: "https://github.com/danielvhofmann/bluefield";
+/** User-Agent presented to origins for local captures. */
+export declare const USER_AGENT: "Bluefield-CLI/0.1 (+local; https://github.com/danielvhofmann/bluefield)";

package/dist/constants.js

@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+/**
+ * Single source of truth for user-facing project + standard names.
+ *
+ * A rename is one edit HERE and nowhere else. Everything the CLI prints, and
+ * every default directory name,
+ * derives from these constants. Do NOT hard-code "Bluefield" / "BPM" anywhere
+ * else in the package — import from this module.
+ */
+/** Product name (the CLI, the library, the local store). */
+export const PROJECT_NAME = 'Bluefield';
+/** Lowercase slug used for directories, env-var prefixes, and the bin name. */
+export const PROJECT_SLUG = 'bluefield';
+/** The provenance standard the signed manifests conform to. */
+export const STANDARD_NAME = 'Bluefield Provenance Manifest';
+/** Short abbreviation for the standard. */
+export const STANDARD_ABBR = 'BPM';
+/** Convenience: "Bluefield Provenance Manifest / BPM". */
+export const STANDARD_FULL = `${STANDARD_NAME} / ${STANDARD_ABBR}`;
+/** Default global home directory (under the user's home). */
+export const HOME_DIR_NAME = `.${PROJECT_SLUG}`;
+/** Repo-local store directory name (git-style, walked up from cwd). */
+export const LOCAL_DIR_NAME = '.bf';
+/** Env var that overrides the store root outright. */
+export const HOME_ENV = 'BF_HOME';
+/** Public repository URL. Referenced by the User-Agent below and by docs. */
+export const REPO_URL = 'https://github.com/danielvhofmann/bluefield';
+/** User-Agent presented to origins for local captures. */
+export const USER_AGENT = `${PROJECT_NAME}-CLI/0.1 (+local; ${REPO_URL})`;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C;;;;;;;GAOG;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,WAAoB,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,WAAoB,CAAC;AAEjD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,+BAAwC,CAAC;AAEtE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,aAAa,GAAG,KAAc,CAAC;AAE5C,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,aAAa,MAAM,aAAa,EAAW,CAAC;AAE5E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,YAAY,EAAW,CAAC;AAEzD,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAc,CAAC;AAE7C,sDAAsD;AACtD,MAAM,CAAC,MAAM,QAAQ,GAAG,SAAkB,CAAC;AAE3C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,QAAQ,GAAG,6CAAsD,CAAC;AAE/E,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,YAAY,qBAAqB,QAAQ,GAAY,CAAC"}

package/dist/fs-storage.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Filesystem `StorageAdapter` — the content-addressed "objects" store, the
+ * git-like heart of the local snapshot repository.
+ *
+ * Satisfies the exact `StorageAdapter` interface the engine's `fetchAndStore`
+ * injects, so the fetcher orchestration is reused verbatim: it just writes to
+ * `<store>/objects/<ab>/<sha256>` on the user's disk instead of R2. Content
+ * addressing means identical captures dedupe automatically and every object's
+ * name IS its SHA-256 — a built-in integrity check.
+ *
+ * Layout mirrors `buildR2Key` from `@bluefields/fetcher` (`content/<ab>/<sha>`)
+ * minus the `content/` prefix, which the on-disk `objects/` directory already
+ * provides.
+ */
+import type { StorageAdapter } from '@bluefields/fetcher';
+/**
+ * Create a filesystem-backed storage adapter rooted at `objectsDir`
+ * (`<store>/objects`). The directory is created on demand.
+ */
+export declare function createFsStorageAdapter(objectsDir: string): StorageAdapter;

package/dist/fs-storage.js

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+/**
+ * Filesystem `StorageAdapter` — the content-addressed "objects" store, the
+ * git-like heart of the local snapshot repository.
+ *
+ * Satisfies the exact `StorageAdapter` interface the engine's `fetchAndStore`
+ * injects, so the fetcher orchestration is reused verbatim: it just writes to
+ * `<store>/objects/<ab>/<sha256>` on the user's disk instead of R2. Content
+ * addressing means identical captures dedupe automatically and every object's
+ * name IS its SHA-256 — a built-in integrity check.
+ *
+ * Layout mirrors `buildR2Key` from `@bluefields/fetcher` (`content/<ab>/<sha>`)
+ * minus the `content/` prefix, which the on-disk `objects/` directory already
+ * provides.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { buildR2Key } from '@bluefields/fetcher';
+/**
+ * Create a filesystem-backed storage adapter rooted at `objectsDir`
+ * (`<store>/objects`). The directory is created on demand.
+ */
+export function createFsStorageAdapter(objectsDir) {
+    mkdirSync(objectsDir, { recursive: true });
+    const pathFor = (contentHash) => {
+        // buildR2Key validates the hash shape (64-char lowercase hex) and shards
+        // by the first two chars — reuse it so on-disk layout tracks the engine's.
+        const key = buildR2Key(contentHash); // content/<ab>/<sha>
+        const rel = key.slice('content/'.length); // <ab>/<sha>
+        return join(objectsDir, rel);
+    };
+    return {
+        async storeSnapshot(content) {
+            const contentHash = createHash('sha256').update(content).digest('hex');
+            const dest = pathFor(contentHash);
+            // Idempotent: identical content → identical path. Skip the write if the
+            // object already exists (dedup); this is what makes re-scraping an
+            // unchanged page cheap and keeps the store append-only-ish.
+            if (!existsSync(dest)) {
+                mkdirSync(join(dest, '..'), { recursive: true });
+                writeFileSync(dest, content, 'utf8');
+            }
+            return { contentHash, r2Key: buildR2Key(contentHash) };
+        },
+        async getSnapshot(contentHash) {
+            const src = pathFor(contentHash);
+            try {
+                return readFileSync(src, 'utf8');
+            }
+            catch {
+                throw new Error(`snapshot object not found: ${contentHash}`);
+            }
+        },
+        async hasSnapshot(contentHash) {
+            return existsSync(pathFor(contentHash));
+        },
+    };
+}
+//# sourceMappingURL=fs-storage.js.map

package/dist/fs-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-storage.js","sourceRoot":"","sources":["../src/fs-storage.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,CAAC,WAAmB,EAAU,EAAE;QAC9C,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa;QACvD,OAAO,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,OAAe;YACjC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;YAClC,wEAAwE;YACxE,mEAAmE;YACnE,4DAA4D;YAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,WAAmB;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,WAAmB;YACnC,OAAO,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @bluefields/cli — public library surface.
+ *
+ * `bf` on the command line is a thin wrapper over this library. Import it
+ * directly to embed a local-first, content-addressed, cryptographically
+ * signed web-snapshot store in your own program — no server required.
+ *
+ *   import { openBluefield } from '@bluefields/cli';
+ *   const bf = await openBluefield();
+ *   const r = await bf.scrape('https://example.com');
+ *   await bf.close();
+ */
+export { Bluefield, openBluefield, type OpenOptions, type ScrapeOptions, type ScrapeResult, type SnapshotSummary, type DiffResult, type VerifyResult, type ExportResult, } from './bluefield.js';
+export { type AnchorResult, tryAnchor } from './anchor.js';
+export { type LocalIdentity, loadOrCreateIdentity, defaultKeysDir } from './keystore.js';
+export { type StorePaths, storePaths, resolveStoreRoot, globalHome, findLocalStore, } from './paths.js';
+export { PROJECT_NAME, PROJECT_SLUG, STANDARD_NAME, STANDARD_ABBR, STANDARD_FULL, } from './constants.js';
+export type { AttestationBundle, SignedManifest, Ed25519Jwk } from '@bluefields/attest';
+export { signedManifestFromRow, toBundle, localTrustStore, writeBundleSidecar, readBundleSidecar, } from './attestation.js';

package/dist/index.js

@@ -0,0 +1,20 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+/**
+ * @bluefields/cli — public library surface.
+ *
+ * `bf` on the command line is a thin wrapper over this library. Import it
+ * directly to embed a local-first, content-addressed, cryptographically
+ * signed web-snapshot store in your own program — no server required.
+ *
+ *   import { openBluefield } from '@bluefields/cli';
+ *   const bf = await openBluefield();
+ *   const r = await bf.scrape('https://example.com');
+ *   await bf.close();
+ */
+export { Bluefield, openBluefield, } from './bluefield.js';
+export { tryAnchor } from './anchor.js';
+export { loadOrCreateIdentity, defaultKeysDir } from './keystore.js';
+export { storePaths, resolveStoreRoot, globalHome, findLocalStore, } from './paths.js';
+export { PROJECT_NAME, PROJECT_SLUG, STANDARD_NAME, STANDARD_ABBR, STANDARD_FULL, } from './constants.js';
+export { signedManifestFromRow, toBundle, localTrustStore, writeBundleSidecar, readBundleSidecar, } from './attestation.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,aAAa,GAQd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAqB,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAsB,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,EAEL,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,eAAe,EACf,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC"}

package/dist/keystore.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Local signing identity.
+ *
+ * On first use we generate a fresh Ed25519 keypair and persist it under
+ * `~/.bluefield/keys`:
+ *   - `ed25519.key.jwk`  — PRIVATE key, written 0600. NEVER logged or printed.
+ *   - `ed25519.pub.jwk`  — PUBLIC key + keyId, world-readable, safe to publish.
+ *
+ * The signer is `@bluefields/attest`'s `LocalEd25519Signer` — the same audited
+ * crypto core the server uses in dev/test — constructed from the persisted
+ * `KeyObject`. Custody here is a 0600 file rather than a KMS HSM: appropriate
+ * for a single-user local tool and clearly labelled as such. The keyId is the
+ * RFC-7638 JWK thumbprint of the public key, so it is stable and
+ * self-certifying.
+ *
+ * Security invariant: private key material must never reach a log line, a
+ * thrown error message, stdout, or a manifest. Only the public JWK and the
+ * keyId are ever surfaced. We generate the keypair here (rather than via
+ * `LocalEd25519Signer.generate`, which does not expose the private half) so
+ * the private JWK can be persisted without reaching into signer internals.
+ */
+import { type Ed25519Jwk, type Signer } from '@bluefields/attest';
+/** The public half of the local identity — safe to share. */
+export interface LocalIdentity {
+    signer: Signer;
+    publicJwk: Ed25519Jwk;
+    keyId: string;
+}
+/**
+ * Default keys directory: `~/.bluefield/keys` (never inside a project `.bf`).
+ * `BF_KEYS_DIR` relocates it for power users and tests; the default keeps the
+ * signing identity global and out of any shareable store.
+ */
+export declare function defaultKeysDir(env?: NodeJS.ProcessEnv): string;
+/**
+ * Load the local signing identity, generating + persisting one on first use.
+ *
+ * @param keysDir Override the keys directory (tests pass a temp dir).
+ */
+export declare function loadOrCreateIdentity(keysDir?: string): LocalIdentity;

package/dist/keystore.js

@@ -0,0 +1,77 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+/**
+ * Local signing identity.
+ *
+ * On first use we generate a fresh Ed25519 keypair and persist it under
+ * `~/.bluefield/keys`:
+ *   - `ed25519.key.jwk`  — PRIVATE key, written 0600. NEVER logged or printed.
+ *   - `ed25519.pub.jwk`  — PUBLIC key + keyId, world-readable, safe to publish.
+ *
+ * The signer is `@bluefields/attest`'s `LocalEd25519Signer` — the same audited
+ * crypto core the server uses in dev/test — constructed from the persisted
+ * `KeyObject`. Custody here is a 0600 file rather than a KMS HSM: appropriate
+ * for a single-user local tool and clearly labelled as such. The keyId is the
+ * RFC-7638 JWK thumbprint of the public key, so it is stable and
+ * self-certifying.
+ *
+ * Security invariant: private key material must never reach a log line, a
+ * thrown error message, stdout, or a manifest. Only the public JWK and the
+ * keyId are ever surfaced. We generate the keypair here (rather than via
+ * `LocalEd25519Signer.generate`, which does not expose the private half) so
+ * the private JWK can be persisted without reaching into signer internals.
+ */
+import { createPrivateKey, createPublicKey, generateKeyPairSync, } from 'node:crypto';
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { LocalEd25519Signer, exportPublicJwk, jwkThumbprint, } from '@bluefields/attest';
+import { keysDir } from './paths.js';
+const PRIVATE_FILE = 'ed25519.key.jwk';
+const PUBLIC_FILE = 'ed25519.pub.jwk';
+/**
+ * Default keys directory: `~/.bluefield/keys` (never inside a project `.bf`).
+ * `BF_KEYS_DIR` relocates it for power users and tests; the default keeps the
+ * signing identity global and out of any shareable store.
+ */
+export function defaultKeysDir(env = process.env) {
+    return keysDir(env);
+}
+/**
+ * Load the local signing identity, generating + persisting one on first use.
+ *
+ * @param keysDir Override the keys directory (tests pass a temp dir).
+ */
+export function loadOrCreateIdentity(keysDir = defaultKeysDir()) {
+    const privPath = join(keysDir, PRIVATE_FILE);
+    const pubPath = join(keysDir, PUBLIC_FILE);
+    const storedPriv = tryReadJson(privPath);
+    if (storedPriv) {
+        const privateKey = createPrivateKey({ key: storedPriv, format: 'jwk' });
+        const publicKey = createPublicKey(privateKey);
+        const storedPub = tryReadJson(pubPath);
+        const keyId = storedPub?.kid ?? jwkThumbprint(publicKey);
+        const publicJwk = storedPub ?? exportPublicJwk(publicKey, keyId);
+        return { signer: new LocalEd25519Signer(privateKey, keyId), publicJwk, keyId };
+    }
+    // First run: generate, persist private 0600 + public sidecar.
+    const { publicKey, privateKey } = generateKeyPairSync('ed25519');
+    const keyId = jwkThumbprint(publicKey);
+    const publicJwk = exportPublicJwk(publicKey, keyId);
+    const privateJwk = privateKey.export({ format: 'jwk' });
+    mkdirSync(keysDir, { recursive: true, mode: 0o700 });
+    writeFileSync(privPath, `${JSON.stringify(privateJwk, null, 2)}\n`, { mode: 0o600 });
+    chmodSync(privPath, 0o600); // enforce even if umask widened the create mode
+    writeFileSync(pubPath, `${JSON.stringify(publicJwk, null, 2)}\n`, { mode: 0o644 });
+    return { signer: new LocalEd25519Signer(privateKey, keyId), publicJwk, keyId };
+}
+/** Read + parse a JSON file, returning null if it does not exist. */
+function tryReadJson(path) {
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch {
+        return null; // ENOENT (first run) or unreadable — treat as absent
+    }
+    return JSON.parse(raw);
+}
+//# sourceMappingURL=keystore.js.map

package/dist/keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore.js","sourceRoot":"","sources":["../src/keystore.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAEL,kBAAkB,EAElB,eAAe,EACf,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAStC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,cAAc,EAAE;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,UAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAsB,CAAC;QAC5D,MAAM,KAAK,GAAG,SAAS,EAAE,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,SAAS,IAAI,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,IAAI,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;IAED,8DAA8D;IAC9D,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAExD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,gDAAgD;IAC5E,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnF,OAAO,EAAE,MAAM,EAAE,IAAI,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACjF,CAAC;AAED,qEAAqE;AACrE,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,qDAAqD;IACpE,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}