@chude/memory 4.0.0 → 4.0.1

package/dist/presentation/cli/commands/audit-secrets.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Secret Audit Command
+ *
+ * Scans durable memory surfaces for likely secrets. Read-only by default;
+ * database redaction and event-log quarantine require explicit flags.
+ */
+import { Command } from "commander";
+import type { Database } from "bun:sqlite";
+import type { CommandResult } from "../command-result.js";
+import { SecretAuditService } from "../../../infrastructure/security/secret-audit-service.js";
+import type { IRedactor } from "../../../domain/ports/redactor.js";
+export interface AuditSecretsOptions {
+    /** Output as JSON */
+    json?: boolean | undefined;
+    /** Database path override */
+    db?: string | undefined;
+    /** Skip database scanning */
+    skipDb?: boolean | undefined;
+    /** Explicit event log path(s) to scan */
+    eventLog?: string[] | undefined;
+    /** Events directory override */
+    eventsDir?: string | undefined;
+    /** Skip event-log scanning */
+    skipEvents?: boolean | undefined;
+    /** Redact mutable database fields in-place */
+    redactDb?: boolean | undefined;
+    /** Quarantine raw event logs and write sanitized active copies */
+    quarantineEvents?: boolean | undefined;
+    /** Event-log quarantine directory override */
+    quarantineDir?: string | undefined;
+    /** Write a redacted evidence report */
+    report?: string | undefined;
+}
+export interface AuditSecretsCommandDeps {
+    getDefaultDbPath?: (() => string) | undefined;
+    databaseExists?: ((path: string) => boolean) | undefined;
+    initializeDatabase?: ((config: {
+        path: string;
+        create: boolean;
+        applySchema: boolean;
+        walMode: boolean;
+        quickCheck: boolean;
+    }) => {
+        db: Database;
+    }) | undefined;
+    closeDatabase?: ((db: Database) => void) | undefined;
+    getAllLogFiles?: ((eventsDir?: string) => string[]) | undefined;
+    createService?: ((redactor: IRedactor) => Pick<SecretAuditService, "audit">) | undefined;
+    redactor?: IRedactor | undefined;
+    writeFile?: ((path: string, content: string) => void) | undefined;
+    mkdir?: ((path: string) => void) | undefined;
+}
+export declare function createAuditSecretsCommand(): Command;
+export declare function executeAuditSecretsCommand(options?: AuditSecretsOptions, deps?: AuditSecretsCommandDeps): Promise<CommandResult>;

package/dist/presentation/cli/commands/friction/types.d.ts

@@ -43,8 +43,15 @@ export interface FrictionLogOptions extends FrictionCommandOptions {
 export interface FrictionListOptions extends FrictionCommandOptions {
     all?: boolean;
     status?: string;
+    severity?: string;
     category?: string;
     tool?: string;
+    project?: string;
+    since?: string;
+    descriptionContains?: string;
+    contextContains?: string;
+    count?: boolean;
+    min?: string;
     limit?: string;
 }
 /**
@@ -80,6 +87,12 @@ export interface FrictionExecuteOptions {
     limit?: string;
     resolution?: string;
     tool?: string;
+    project?: string;
+    since?: string;
+    descriptionContains?: string;
+    contextContains?: string;
+    count?: boolean;
+    min?: string;
     html?: boolean;
     dryRun?: boolean;
     force?: boolean;

package/dist/presentation/cli/commands/governance.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Governance CLI command.
+ *
+ * Inspect and control derived memory provenance/consent state.
+ */
+import { Command } from "commander";
+import type { CommandResult } from "../command-result.js";
+import { type MemoryGovernanceSurface } from "../../../domain/entities/memory-governance.js";
+export type GovernanceAction = "list" | "show" | "suppress" | "unsuppress" | "invalidate" | "expire" | "review" | "consent-grant" | "consent-revoke";
+export interface GovernanceCommandOptions {
+    action: GovernanceAction;
+    surface?: MemoryGovernanceSurface | undefined;
+    targetId?: string | undefined;
+    project?: string | undefined;
+    status?: string | undefined;
+    reason?: string | undefined;
+    at?: string | undefined;
+    scope?: string[] | undefined;
+    json?: boolean | undefined;
+    limit?: number | undefined;
+}
+export interface GovernanceCommandDeps {
+    dbPath?: string | undefined;
+    writeEvents?: boolean | undefined;
+}
+export declare function createGovernanceCommand(): Command;
+export declare function executeGovernanceCommand(options: GovernanceCommandOptions, deps?: GovernanceCommandDeps): Promise<CommandResult>;

package/dist/presentation/cli/commands/index.d.ts

@@ -18,12 +18,15 @@ export { createInstallCommand, executeInstallCommand } from "./install.js";
 export { createUninstallCommand, executeUninstallCommand } from "./uninstall.js";
 export { createStatusCommand, executeStatusCommand } from "./status.js";
 export { createDoctorCommand, executeDoctorCommand } from "./doctor.js";
+export { createAuditSecretsCommand, executeAuditSecretsCommand } from "./audit-secrets.js";
 export { createPurgeCommand, executePurgeCommand } from "./purge.js";
 export { createMigrateCommand, executeMigrateCommand } from "./migrate.js";
 export { createExportCommand, executeExportCommand } from "./export.js";
 export { createImportCommand, executeImportCommand } from "./import.js";
 export { createCompletionCommand, executeCompletionCommand } from "./completion.js";
 export { createFrictionCommand, executeFrictionCommand } from "./friction/index.js";
+export { createGovernanceCommand, executeGovernanceCommand } from "./governance.js";
+export { createProfileCommand, executeProfileCommand } from "./profile.js";
 export { createBackfillCommand, executeBackfillCommand } from "./backfill.js";
 export { createExtractCommand, executeExtractCommand } from "./extract.js";
 export { createFactsCommand, executeFactsCommand } from "./facts.js";
@@ -41,11 +44,14 @@ export type { BrowseCommandOptions } from "./browse.js";
 export type { InstallOptions } from "./install.js";
 export type { UninstallOptions } from "./uninstall.js";
 export type { DoctorOptions } from "./doctor.js";
+export type { AuditSecretsOptions } from "./audit-secrets.js";
 export type { PurgeCommandOptions, PurgeResult } from "./purge.js";
 export type { ExportOptions } from "./export.js";
 export type { ImportOptions } from "./import.js";
 export type { ShellType } from "./completion.js";
 export type { StatusOptions, StatusInfo, EmbeddingStatus, GatherStatusOptions } from "./status.js";
 export type { FrictionCommandOptions, FrictionLogOptions, FrictionListOptions, FrictionResolveOptions, FrictionExecuteOptions, } from "./friction/index.js";
+export type { GovernanceAction, GovernanceCommandDeps, GovernanceCommandOptions, } from "./governance.js";
+export type { ProfileAction, ProfileCommandDeps, ProfileCommandOptions, } from "./profile.js";
 export type { BackfillCommandOptions, BackfillServiceDeps, } from "./backfill.js";
 export type { MigrateCommandOptions } from "./migrate.js";

package/dist/presentation/cli/commands/profile.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Profile CLI command.
+ *
+ * Exposes persona/procedural memory as a governed, explainable user surface.
+ */
+import { Command } from "commander";
+import type { CommandResult } from "../command-result.js";
+import { type PersonaEntryKind } from "../../../domain/entities/persona-entry.js";
+export type ProfileAction = "show" | "export" | "rebuild";
+export interface ProfileCommandOptions {
+    action: ProfileAction;
+    project?: string | undefined;
+    kind?: PersonaEntryKind | undefined;
+    limit?: number | undefined;
+    all?: boolean | undefined;
+    json?: boolean | undefined;
+}
+export interface ProfileCommandDeps {
+    dbPath?: string | undefined;
+    now?: (() => Date) | undefined;
+}
+export declare function createProfileCommand(): Command;
+export declare function executeProfileCommand(options: ProfileCommandOptions, deps?: ProfileCommandDeps): Promise<CommandResult>;

package/dist/presentation/cli/commands/remote.d.ts

@@ -14,9 +14,22 @@ import { GitSyncer } from "../../../infrastructure/hooks/git-syncer.js";
 export interface RemoteCommandOptions {
     configPathOverride?: string;
     eventsDirOverride?: string;
+    backupDirOverride?: string;
     loadConfig?: typeof loadConfig;
     saveConfig?: typeof saveConfig;
     createGitSyncer?: (eventsDir?: string) => Pick<GitSyncer, "isGitRepo" | "initRepo" | "configureRemote" | "removeRemote" | "getRemoteUrl">;
+    auditRemoteEventLogs?: () => Promise<{
+        eventLogFindings: number;
+    }>;
+    allowLocalPathRemote?: boolean;
+    now?: () => Date;
+}
+export interface RemoteCliOptions {
+    json?: boolean;
+    allowLocalPath?: boolean;
+    autoPull?: boolean;
+    autoPush?: boolean;
+    confirm?: boolean;
 }
 /**
  * Create the remote command group for Commander.js.
@@ -25,12 +38,17 @@ export declare function createRemoteCommand(opts?: RemoteCommandOptions): Comman
 /**
  * Configure the remote sync repository.
  */
-export declare function executeRemoteSetCommand(repositoryUrl: string, opts?: RemoteCommandOptions): Promise<CommandResult>;
+export declare function executeRemoteSetCommand(repositoryUrl: string, opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
 /**
  * Remove remote sync configuration.
  */
-export declare function executeRemoteRemoveCommand(opts?: RemoteCommandOptions): Promise<CommandResult>;
+export declare function executeRemoteRemoveCommand(opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
 /**
  * Display current remote sync configurations and status.
  */
-export declare function executeRemoteStatusCommand(opts?: RemoteCommandOptions): Promise<CommandResult>;
+export declare function executeRemoteStatusCommand(opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
+export declare function executeRemotePreflightCommand(repositoryUrl: string | undefined, opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
+export declare function executeRemoteDoctorCommand(opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
+export declare function executeRemoteBackupCommand(outputDir: string | undefined, opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
+export declare function executeRemoteRestoreCommand(backupDir: string, opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;
+export declare function executeRemoteRollbackCommand(backupDir: string, opts?: RemoteCommandOptions, commandOptions?: RemoteCliOptions): Promise<CommandResult>;

package/dist/presentation/cli/commands/sync/ambient.d.ts

@@ -20,3 +20,10 @@ import type { SyncCommandOptions, AmbientContextDeps } from "./types.js";
  * @param deps Optional dependency overrides for testing
  */
 export declare function runAmbientContextGeneration(db: ReturnType<typeof initializeDatabase>["db"], options: SyncCommandOptions, deps?: AmbientContextDeps): Promise<void>;
+export declare function createDefaultAmbientService(db: ReturnType<typeof initializeDatabase>["db"]): Promise<{
+    generateAmbientContext: (opts: any) => Promise<{
+        success: boolean;
+        contextTokens?: number;
+        reason?: string;
+    }>;
+}>;

package/dist/presentation/cli/commands/sync/types.d.ts

@@ -29,13 +29,11 @@ export interface SyncCommandOptions {
     background?: boolean;
     /** Explicitly index legacy ~/.memory / MEMORY_HOME markdown files */
     includeMemoryFiles?: boolean;
+    /** Explicitly synchronize canonical event logs with configured remote */
+    remote?: boolean;
 }
-export interface RemoteSyncer {
-    sync(machineId: string, remoteUrl: string, autoPull?: boolean, autoPush?: boolean): Promise<{
-        success: boolean;
-        rebuildNeeded: boolean;
-        error?: string;
-    }>;
+export interface RemoteEventSyncCommandService {
+    sync(request: import("../../../../application/services/index.js").RemoteEventSyncRequest): Promise<import("../../../../application/services/index.js").RemoteEventSyncResult>;
 }
 /**
  * Dependency overrides for executeSyncCommand.
@@ -92,12 +90,10 @@ export interface SyncCommandDeps {
     };
     /** Override config loading */
     loadConfig?: () => import("../../../../infrastructure/hooks/config-manager.js").MemoryConfig;
-    /** Override remote syncer construction */
-    createGitSyncer?: () => RemoteSyncer | Promise<RemoteSyncer>;
-    /** Override projection rebuild after remote pulls */
-    rebuildProjections?: (db: import("bun:sqlite").Database) => Promise<void>;
-    /** Explicitly enable the unfinished Phase 38 remote-sync prototype */
-    experimentalRemoteSync?: boolean;
+    /** Override remote event sync service construction */
+    createRemoteEventSyncService?: (deps: {
+        db: import("bun:sqlite").Database;
+    }) => RemoteEventSyncCommandService | Promise<RemoteEventSyncCommandService>;
     /** Override memory file sync */
     runMemoryFileSync?: typeof import("./memory-files.js").runMemoryFileSync;
     /** Override memory file sync reporting */

package/dist/presentation/cli/formatters/envelope.d.ts

@@ -27,7 +27,7 @@ export declare const ENVELOPE_SCHEMA_VERSION: "1";
  * can use both the values (e.g. `QUERY_COMMAND_NAMES.includes(x)`) and the
  * literal union type (`QueryCommandName`). Per Codex HIGH-1.
  */
-export declare const QUERY_COMMAND_NAMES: readonly ["search", "context", "show", "list", "related", "stats", "query"];
+export declare const QUERY_COMMAND_NAMES: readonly ["search", "context", "show", "list", "related", "stats", "query", "friction"];
 /**
  * Union of valid query command names, derived from QUERY_COMMAND_NAMES.
  */
@@ -37,7 +37,7 @@ export type QueryCommandName = (typeof QUERY_COMMAND_NAMES)[number];
  * (HIGH-4) has a stable kind in the envelope. Phase 32.5 will route the
  * unified query primitive's `--kind` flag through this same set.
  */
-export declare const QUERY_RESULT_KINDS: readonly ["message", "session", "context", "related", "stats", "file"];
+export declare const QUERY_RESULT_KINDS: readonly ["message", "session", "context", "related", "stats", "file", "friction"];
 /**
  * Union of valid query result kinds, derived from QUERY_RESULT_KINDS.
  */