@datagusto/cli 0.0.0-stage → 0.1.0

package/dist/display.js

@@ -0,0 +1,8 @@
+import { sep } from "node:path";
+/** Show paths under home as ~/…, which is shorter and hides the username. */
+export function tildify(path, homeDir) {
+    if (path === homeDir)
+        return "~";
+    return path.startsWith(homeDir + sep) ? "~" + path.slice(homeDir.length) : path;
+}
+//# sourceMappingURL=display.js.map

package/dist/display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"display.js","sourceRoot":"","sources":["../src/display.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhC,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAe;IACnD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC"}

package/dist/fs/atomic.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Crash-safe file writes.
+ *
+ * Every file the CLI writes (plugin config, hook entries, the installs
+ * ledger) goes through here so a failed or interrupted setup never leaves a
+ * half-written file behind (ADR-0003 TR-5). The data lands in a temp file in
+ * the same directory, gets its final mode, and is then renamed over the
+ * target — rename is atomic on the same filesystem.
+ */
+export interface AtomicWriteOptions {
+    /** Final file mode, e.g. 0o600 for anything holding an API key. */
+    mode?: number;
+}
+/** Write `data` to `path` via temp file → chmod → rename. */
+export declare function writeFileAtomic(path: string, data: string, options?: AtomicWriteOptions): Promise<void>;
+/** Create `dir` (and parents) if missing and force it to `mode`. */
+export declare function ensureDir(dir: string, mode?: number): Promise<void>;

package/dist/fs/atomic.js

@@ -0,0 +1,41 @@
+/**
+ * Crash-safe file writes.
+ *
+ * Every file the CLI writes (plugin config, hook entries, the installs
+ * ledger) goes through here so a failed or interrupted setup never leaves a
+ * half-written file behind (ADR-0003 TR-5). The data lands in a temp file in
+ * the same directory, gets its final mode, and is then renamed over the
+ * target — rename is atomic on the same filesystem.
+ */
+import { chmod, mkdir, open, rename, rm } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+import { basename, dirname, join } from "node:path";
+/** Write `data` to `path` via temp file → chmod → rename. */
+export async function writeFileAtomic(path, data, options = {}) {
+    const mode = options.mode ?? 0o644;
+    const tmp = join(dirname(path), `.${basename(path)}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`);
+    try {
+        // "wx" refuses to follow a pre-planted file or symlink at the temp path.
+        const handle = await open(tmp, "wx", mode);
+        try {
+            await handle.writeFile(data, "utf8");
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        // open()'s mode is filtered by the umask; set the final mode explicitly.
+        await chmod(tmp, mode);
+        await rename(tmp, path);
+    }
+    catch (err) {
+        await rm(tmp, { force: true });
+        throw err;
+    }
+}
+/** Create `dir` (and parents) if missing and force it to `mode`. */
+export async function ensureDir(dir, mode = 0o700) {
+    await mkdir(dir, { recursive: true, mode });
+    await chmod(dir, mode);
+}
+//# sourceMappingURL=atomic.js.map

package/dist/fs/atomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../../src/fs/atomic.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOpD,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,IAAY,EACZ,UAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CACd,OAAO,CAAC,IAAI,CAAC,EACb,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1E,CAAC;IAEF,IAAI,CAAC;QACH,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,yEAAyE;QACzE,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAI,GAAG,KAAK;IACvD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/key-input.d.ts

@@ -0,0 +1,24 @@
+import type { ReadStream } from "node:tty";
+export declare const API_KEY_ENV = "DATAGUSTO_API_KEY";
+export type KeySource = "env" | "stdin" | "prompt";
+export interface ResolvedKey {
+    key: string;
+    source: KeySource;
+}
+/** A key problem the user can fix; the message says how. */
+export declare class KeyInputError extends Error {
+    name: string;
+}
+export interface KeyInputDeps {
+    env?: NodeJS.ProcessEnv;
+    stdin?: NodeJS.ReadableStream & {
+        isTTY?: boolean;
+    };
+    /** Hidden-input prompt; injectable for tests. */
+    prompt?: (question: string) => Promise<string>;
+}
+export declare function resolveApiKey(deps?: KeyInputDeps): Promise<ResolvedKey>;
+/** Trim and sanity-check a key. Only the platform can say it is valid. */
+export declare function validateApiKey(raw: string, from: string): string;
+/** Read one line from a TTY without echoing it. */
+export declare function promptHidden(question: string, input?: ReadStream, output?: NodeJS.WritableStream): Promise<string>;

package/dist/key-input.js

@@ -0,0 +1,96 @@
+// ---------------------------------------------------------------------------
+// dg CLI - API key input
+// ---------------------------------------------------------------------------
+//
+// The key is never taken from argv: a flag value lands in shell history and
+// is visible to every user on the machine via `ps` (ADR-0003 TR-4). Sources,
+// in order:
+//
+//   1. DATAGUSTO_API_KEY env var
+//   2. stdin, when it is piped    (`pbpaste | dg setup claude-code`)
+//   3. a hidden prompt, when stdin is a terminal
+export const API_KEY_ENV = "DATAGUSTO_API_KEY";
+const KEY_PREFIX = "agt_";
+/** A key problem the user can fix; the message says how. */
+export class KeyInputError extends Error {
+    name = "KeyInputError";
+}
+export async function resolveApiKey(deps = {}) {
+    const env = deps.env ?? process.env;
+    const stdin = deps.stdin ?? process.stdin;
+    const fromEnv = env[API_KEY_ENV];
+    if (fromEnv !== undefined && fromEnv.trim() !== "") {
+        return { key: validateApiKey(fromEnv, `the ${API_KEY_ENV} environment variable`), source: "env" };
+    }
+    if (!stdin.isTTY) {
+        const piped = await readAll(stdin);
+        if (piped.trim() === "") {
+            throw new KeyInputError(`No API key given. Pipe it in, set ${API_KEY_ENV}, or run this in a terminal to be prompted.`);
+        }
+        return { key: validateApiKey(piped, "stdin"), source: "stdin" };
+    }
+    const prompt = deps.prompt ?? ((q) => promptHidden(q, stdin));
+    const typed = await prompt("Paste your Datagusto API key (input is hidden): ");
+    return { key: validateApiKey(typed, "the prompt"), source: "prompt" };
+}
+/** Trim and sanity-check a key. Only the platform can say it is valid. */
+export function validateApiKey(raw, from) {
+    const key = raw.trim();
+    if (key === "") {
+        throw new KeyInputError(`The API key from ${from} is empty.`);
+    }
+    if (/\s/.test(key)) {
+        throw new KeyInputError(`The API key from ${from} contains spaces or line breaks. Copy it again from the Datagusto dashboard.`);
+    }
+    if (!key.startsWith(KEY_PREFIX)) {
+        throw new KeyInputError(`That doesn't look like a Datagusto agent API key (they start with "${KEY_PREFIX}"). ` +
+            "Copy it from your agent's page in the Datagusto dashboard.");
+    }
+    return key;
+}
+async function readAll(stream) {
+    let out = "";
+    stream.setEncoding("utf8");
+    for await (const chunk of stream)
+        out += chunk;
+    return out;
+}
+/** Read one line from a TTY without echoing it. */
+export function promptHidden(question, input = process.stdin, output = process.stderr) {
+    return new Promise((resolve, reject) => {
+        let value = "";
+        const finish = () => {
+            input.off("data", onData);
+            input.setRawMode(false);
+            input.pause();
+            output.write("\n");
+        };
+        const onData = (chunk) => {
+            for (const ch of chunk) {
+                if (ch === "\r" || ch === "\n" || ch === "\u0004") {
+                    finish();
+                    resolve(value);
+                    return;
+                }
+                if (ch === "\u0003") {
+                    // Raw mode swallows Ctrl-C's SIGINT, so honour it here.
+                    finish();
+                    reject(new KeyInputError("Cancelled."));
+                    return;
+                }
+                if (ch === "\u007f" || ch === "\b") {
+                    value = value.slice(0, -1);
+                }
+                else if (ch >= " ") {
+                    value += ch;
+                }
+            }
+        };
+        output.write(question);
+        input.setEncoding("utf8");
+        input.setRawMode(true);
+        input.resume();
+        input.on("data", onData);
+    });
+}
+//# sourceMappingURL=key-input.js.map

package/dist/key-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-input.js","sourceRoot":"","sources":["../src/key-input.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAC9E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,YAAY;AACZ,EAAE;AACF,iCAAiC;AACjC,qEAAqE;AACrE,iDAAiD;AAIjD,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAC/C,MAAM,UAAU,GAAG,MAAM,CAAC;AAS1B,4DAA4D;AAC5D,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,GAAG,eAAe,CAAC;CACjC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAqB,EAAE;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAE1C,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,WAAW,uBAAuB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpG,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CACrB,qCAAqC,WAAW,6CAA6C,CAC9F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAmB,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,kDAAkD,CAAC,CAAC;IAC/E,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,oBAAoB,IAAI,YAAY,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CACrB,oBAAoB,IAAI,8EAA8E,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CACrB,sEAAsE,UAAU,MAAM;YACpF,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAA6B;IAClD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;QAAE,GAAG,IAAI,KAAK,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,QAAoB,OAAO,CAAC,KAAK,EACjC,SAAgC,OAAO,CAAC,MAAM;IAE9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,KAAK,GAAG,EAAE,CAAC;QAEf,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAClD,MAAM,EAAE,CAAC;oBACT,OAAO,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACpB,wDAAwD;oBACxD,MAAM,EAAE,CAAC;oBACT,MAAM,CAAC,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;oBACxC,OAAO;gBACT,CAAC;gBACD,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBACnC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7B,CAAC;qBAAM,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;oBACrB,KAAK,IAAI,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvB,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/state/installs.d.ts

@@ -0,0 +1,24 @@
+import { type AgentName } from "../adapters/types.js";
+export interface InstallRecord {
+    agent: AgentName;
+    /** Absolute workspace dir for per-workspace installs (Kiro), else null. */
+    workspace: string | null;
+    /** Datagusto agent UUID the installed key belongs to. */
+    agentId: string;
+    /** Every file or dir setup created or edited, for remove and status. */
+    paths: string[];
+    installedAt: string;
+    cliVersion: string;
+}
+/** The ledger exists but can't be trusted; we refuse to overwrite it. */
+export declare class LedgerError extends Error {
+    name: string;
+}
+/** `$DATAGUSTO_HOME`, else `~/.datagusto`. */
+export declare function datagustoHome(env?: NodeJS.ProcessEnv): string;
+export declare function listInstalls(dir?: string): Promise<InstallRecord[]>;
+export declare function findInstall(agent: AgentName, workspace: string | null, dir?: string): Promise<InstallRecord | undefined>;
+/** Add a record, replacing any earlier one for the same agent + workspace. */
+export declare function recordInstall(record: InstallRecord, dir?: string): Promise<void>;
+/** Drop the record for agent + workspace; returns it if there was one. */
+export declare function forgetInstall(agent: AgentName, workspace: string | null, dir?: string): Promise<InstallRecord | undefined>;

package/dist/state/installs.js

@@ -0,0 +1,110 @@
+// ---------------------------------------------------------------------------
+// dg CLI - installs ledger (~/.datagusto/installs.json)
+// ---------------------------------------------------------------------------
+//
+// Remembers what `dg setup` touched so `dg status` and `dg remove` can find
+// it again, which matters for Kiro, where every workspace has its own hooks.
+// It holds paths and the Datagusto agent id only. The API key lives in the
+// plugin's own config file and must never be written here.
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { AGENT_NAMES } from "../adapters/types.js";
+import { ensureDir, writeFileAtomic } from "../fs/atomic.js";
+const LEDGER_FILE = "installs.json";
+const LEDGER_VERSION = 1;
+/** The ledger exists but can't be trusted; we refuse to overwrite it. */
+export class LedgerError extends Error {
+    name = "LedgerError";
+}
+/** `$DATAGUSTO_HOME`, else `~/.datagusto`. */
+export function datagustoHome(env = process.env) {
+    return env.DATAGUSTO_HOME || join(homedir(), ".datagusto");
+}
+export async function listInstalls(dir = datagustoHome()) {
+    return (await readLedger(dir)).installs;
+}
+export async function findInstall(agent, workspace, dir = datagustoHome()) {
+    return (await listInstalls(dir)).find((r) => sameTarget(r, agent, workspace));
+}
+/** Add a record, replacing any earlier one for the same agent + workspace. */
+export async function recordInstall(record, dir = datagustoHome()) {
+    const ledger = await readLedger(dir);
+    const installs = ledger.installs.filter((r) => !sameTarget(r, record.agent, record.workspace));
+    installs.push(pick(record));
+    await writeLedger(dir, installs);
+}
+/** Drop the record for agent + workspace; returns it if there was one. */
+export async function forgetInstall(agent, workspace, dir = datagustoHome()) {
+    const ledger = await readLedger(dir);
+    const existing = ledger.installs.find((r) => sameTarget(r, agent, workspace));
+    if (!existing)
+        return undefined;
+    await writeLedger(dir, ledger.installs.filter((r) => r !== existing));
+    return existing;
+}
+// -- Internal helpers ---------------------------------------------------------
+function sameTarget(r, agent, workspace) {
+    return r.agent === agent && r.workspace === workspace;
+}
+/** Copy known fields only, so nothing else (e.g. an API key) is persisted. */
+function pick(r) {
+    return {
+        agent: r.agent,
+        workspace: r.workspace,
+        agentId: r.agentId,
+        paths: [...r.paths],
+        installedAt: r.installedAt,
+        cliVersion: r.cliVersion,
+    };
+}
+async function readLedger(dir) {
+    const path = join(dir, LEDGER_FILE);
+    let raw;
+    try {
+        raw = await readFile(path, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return { version: LEDGER_VERSION, installs: [] };
+        }
+        throw err;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new LedgerError(`${path} is not valid JSON. Fix or delete it, then run the command again.`);
+    }
+    if (!isLedger(parsed)) {
+        throw new LedgerError(`${path} isn't a ledger this version of dg understands. Update the CLI, or fix or delete the file.`);
+    }
+    return parsed;
+}
+async function writeLedger(dir, installs) {
+    await ensureDir(dir, 0o700);
+    const body = { version: LEDGER_VERSION, installs };
+    await writeFileAtomic(join(dir, LEDGER_FILE), JSON.stringify(body, null, 2) + "\n", {
+        mode: 0o600,
+    });
+}
+function isLedger(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const l = v;
+    return l.version === LEDGER_VERSION && Array.isArray(l.installs) && l.installs.every(isRecord);
+}
+function isRecord(v) {
+    if (typeof v !== "object" || v === null)
+        return false;
+    const r = v;
+    return (AGENT_NAMES.includes(r.agent) &&
+        (r.workspace === null || typeof r.workspace === "string") &&
+        typeof r.agentId === "string" &&
+        Array.isArray(r.paths) &&
+        r.paths.every((p) => typeof p === "string") &&
+        typeof r.installedAt === "string" &&
+        typeof r.cliVersion === "string");
+}
+//# sourceMappingURL=installs.js.map

package/dist/state/installs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installs.js","sourceRoot":"","sources":["../../src/state/installs.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAC9E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,2DAA2D;AAE3D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAkB,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE7D,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,cAAc,GAAG,CAAC,CAAC;AAmBzB,yEAAyE;AACzE,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,aAAa,CAAC;CAC/B;AAED,8CAA8C;AAC9C,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,OAAO,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAG,GAAG,aAAa,EAAE;IACtD,OAAO,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAgB,EAChB,SAAwB,EACxB,GAAG,GAAG,aAAa,EAAE;IAErB,OAAO,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAqB,EAAE,GAAG,GAAG,aAAa,EAAE;IAC9E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/F,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5B,MAAM,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAgB,EAChB,SAAwB,EACxB,GAAG,GAAG,aAAa,EAAE;IAErB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,WAAW,CACf,GAAG,EACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAC9C,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,SAAS,UAAU,CAAC,CAAgB,EAAE,KAAgB,EAAE,SAAwB;IAC9E,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,SAAS,IAAI,CAAC,CAAgB;IAC5B,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,mEAAmE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CACnB,GAAG,IAAI,4FAA4F,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,QAAyB;IAC/D,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAe,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC/D,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAClF,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAAwB,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,KAAK,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA2B,CAAC;IACtC,OAAO,CACL,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAkB,CAAC;QAC1C,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;QACzD,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAC3C,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CACjC,CAAC;AACJ,CAAC"}

package/dist/vendor.d.ts

@@ -0,0 +1,16 @@
+export interface VendoredPlugin {
+    pluginVersion: string;
+    /** POSIX path relative to the plugin root → sha256 hex. */
+    files: Record<string, string>;
+}
+/** The bundled builds are missing or unreadable, i.e. a broken package. */
+export declare class VendorError extends Error {
+    name: string;
+}
+/** cli/vendor/, resolved from dist/vendor.js. */
+export declare function defaultVendorDir(): string;
+export declare function loadVendoredPlugin(vendorDir: string, plugin: string): Promise<VendoredPlugin>;
+/** sha256 of the raw bytes, hex. Must match scripts/write-vendor-manifest.mjs. */
+export declare function hashFile(path: string): Promise<string>;
+/** Files under `root` that are missing or don't match `files`' hashes. */
+export declare function changedFiles(root: string, files: Record<string, string>): Promise<string[]>;

package/dist/vendor.js

@@ -0,0 +1,60 @@
+// ---------------------------------------------------------------------------
+// dg CLI - bundled plugin builds (cli/vendor/)
+// ---------------------------------------------------------------------------
+//
+// scripts/vendor-plugins.sh copies each plugin's runtime files into
+// vendor/<plugin>/ and hashes them into vendor/manifest.json. Setup checks
+// the copies against the manifest before installing them, and doctor checks
+// the installed files against the hashes recorded at install time.
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+const MANIFEST_FILE = "manifest.json";
+const MANIFEST_VERSION = 1;
+/** The bundled builds are missing or unreadable, i.e. a broken package. */
+export class VendorError extends Error {
+    name = "VendorError";
+}
+/** cli/vendor/, resolved from dist/vendor.js. */
+export function defaultVendorDir() {
+    return fileURLToPath(new URL("../vendor/", import.meta.url));
+}
+export async function loadVendoredPlugin(vendorDir, plugin) {
+    const path = join(vendorDir, MANIFEST_FILE);
+    let manifest;
+    try {
+        manifest = JSON.parse(await readFile(path, "utf8"));
+    }
+    catch {
+        throw new VendorError(`The plugin files bundled with dg are missing (${path}). Reinstall the CLI: npm install -g @datagusto/cli`);
+    }
+    const entry = manifest.version === MANIFEST_VERSION ? manifest.plugins?.[plugin] : undefined;
+    const safe = (rel) => rel !== "" && !rel.startsWith("/") && !rel.split("/").some((p) => p === ".." || p === "");
+    if (!entry ||
+        typeof entry.files !== "object" ||
+        Object.keys(entry.files).length === 0 ||
+        !Object.keys(entry.files).every(safe)) {
+        throw new VendorError(`This copy of dg doesn't include the ${plugin} plugin. Reinstall the CLI: npm install -g @datagusto/cli`);
+    }
+    return entry;
+}
+/** sha256 of the raw bytes, hex. Must match scripts/write-vendor-manifest.mjs. */
+export async function hashFile(path) {
+    return createHash("sha256").update(await readFile(path)).digest("hex");
+}
+/** Files under `root` that are missing or don't match `files`' hashes. */
+export async function changedFiles(root, files) {
+    const bad = [];
+    for (const [rel, expected] of Object.entries(files)) {
+        try {
+            if ((await hashFile(join(root, ...rel.split("/")))) !== expected)
+                bad.push(rel);
+        }
+        catch {
+            bad.push(rel);
+        }
+    }
+    return bad;
+}
+//# sourceMappingURL=vendor.js.map

package/dist/vendor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../src/vendor.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAC9E,EAAE;AACF,oEAAoE;AACpE,2EAA2E;AAC3E,4EAA4E;AAC5E,mEAAmE;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAc3B,2EAA2E;AAC3E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,aAAa,CAAC;CAC/B;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,MAAc;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CACnB,iDAAiD,IAAI,qDAAqD,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACxH,IACE,CAAC,KAAK;QACN,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QACrC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,uCAAuC,MAAM,2DAA2D,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAA6B;IAC5E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,59 @@
 {
   "name": "@datagusto/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Connect a coding agent (Claude Code, Kiro) to your company's Datagusto server with one command",
+  "homepage": "https://github.com/datagusto/safety-platform-plugins/tree/main/cli#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/datagusto/safety-platform-plugins.git",
+    "directory": "cli"
+  },
+  "bugs": {
+    "url": "https://github.com/datagusto/safety-platform-plugins/issues"
+  },
+  "type": "module",
+  "bin": {
+    "dg": "bin/run.js",
+    "datagusto": "bin/run.js"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "vendor": "./scripts/vendor-plugins.sh",
+    "build": "tsc",
+    "prepublishOnly": "npm run vendor && npm run build",
+    "test": "npm run vendor && npm run build && node --test tests/*.test.mjs"
+  },
+  "files": [
+    "bin/",
+    "dist/",
+    "vendor/",
+    "README.md"
+  ],
+  "oclif": {
+    "bin": "dg",
+    "binAliases": [
+      "datagusto"
+    ],
+    "dirname": "datagusto",
+    "commands": "./dist/commands",
+    "plugins": [
+      "@oclif/plugin-help"
+    ],
+    "topicSeparator": " "
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@oclif/core": "^5.1.2",
+    "@oclif/plugin-help": "^7.0.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^6.0.3"
+  }
+}

package/vendor/claude_code/.claude-plugin/plugin.json

@@ -0,0 +1,55 @@
+{
+  "name": "datagusto-safety-plugin",
+  "description": "Integrates Datagusto safety validation API with Claude Code's hook lifecycle (PreToolUse / PermissionRequest / PostToolUse / PostToolUseFailure / UserPromptSubmit / SessionStart / SessionEnd).",
+  "version": "1.0.0",
+  "author": { "name": "Datagusto" },
+  "userConfig": {
+    "server_url": {
+      "type": "string",
+      "title": "Datagusto server URL",
+      "description": "Datagusto server base URL, e.g. https://datagusto.example.com. Leave empty if you connected with `dg setup claude-code`, which writes it to claude-code.json."
+    },
+    "api_key": {
+      "type": "string",
+      "title": "Datagusto API key",
+      "description": "Bearer auth key for the Datagusto API. Leave empty if you connected with `dg setup claude-code`, which writes it to claude-code.json.",
+      "sensitive": true
+    },
+    "timeout_ms": {
+      "type": "number",
+      "title": "Request timeout (ms)",
+      "description": "Per-request timeout for Datagusto API calls.",
+      "default": 30000
+    },
+    "fail_closed": {
+      "type": "boolean",
+      "title": "Fail closed on API errors",
+      "description": "Deny/block tool execution when the API is unreachable or errors.",
+      "default": true
+    },
+    "verbose": {
+      "type": "boolean",
+      "title": "Verbose logging",
+      "description": "Per-hook debug logging to stderr.",
+      "default": false
+    },
+    "monitor_only": {
+      "type": "boolean",
+      "title": "Monitor-only mode",
+      "description": "Log decisions without enforcing them.",
+      "default": false
+    },
+    "auto_approve_vetted_permissions": {
+      "type": "boolean",
+      "title": "Auto-approve vetted permissions",
+      "description": "When Datagusto's PreToolUse check already allowed a call, auto-resolve Claude Code's own native permission dialog instead of prompting the user again. Never overrides an explicit Datagusto ask/deny. Off by default — opt in to reduce double-prompting.",
+      "default": false
+    },
+    "allow_uncategorized_tools": {
+      "type": "boolean",
+      "title": "Allow uncategorized tools",
+      "description": "The alignment layer default-denies tools its intent-judge didn't predict from the prompt. When true, that specific deny is downgraded to allow if the assigned guardrail rules also allowed the call. Intent violations and assigned-rule blocks are never downgraded.",
+      "default": true
+    }
+  }
+}