@hasna/configs 0.2.33 → 0.2.35

package/dist/cli/index.js

@@ -993,7 +993,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          } else {}
+          }
         };
       }
       return this;
@@ -2114,23 +2114,23 @@ var init_types = __esm(() => {
 import { createRequire } from "module";
 import { Database } from "bun:sqlite";
 import {
-  existsSync,
+  existsSync as existsSync2,
   mkdirSync,
   readdirSync,
   copyFileSync
 } from "fs";
-import { homedir } from "os";
-import { join, relative } from "path";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-import { readdirSync as readdirSync2, existsSync as existsSync3 } from "fs";
-import { join as join3 } from "path";
+import { join as join2, relative } from "path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "fs";
+import { homedir as homedir22 } from "os";
+import { join as join22 } from "path";
+import { readdirSync as readdirSync3, existsSync as existsSync6 } from "fs";
+import { join as join6 } from "path";
+import { homedir as homedir5 } from "os";
 import { homedir as homedir3 } from "os";
-import { homedir as homedir4 } from "os";
-import { join as join4 } from "path";
-import { join as join6, dirname } from "path";
-import { homedir as homedir5, platform } from "os";
+import { join as join3 } from "path";
+import { join as join5, dirname } from "path";
+import { homedir as homedir4, platform } from "os";
 function __accessProp2(key) {
   return this[key];
 }
@@ -2944,20 +2944,20 @@ function custom(check, _params = {}, fatal) {
   return ZodAny.create();
 }
 function getDataDir(serviceName) {
-  const dir = join(HASNA_DIR, serviceName);
+  const dir = join2(HASNA_DIR, serviceName);
   mkdirSync(dir, { recursive: true });
   return dir;
 }
 function getDbPath(serviceName) {
   const dir = getDataDir(serviceName);
-  return join(dir, `${serviceName}.db`);
+  return join2(dir, `${serviceName}.db`);
 }
 function migrateDotfile(serviceName) {
-  const legacyDir = join(homedir(), `.${serviceName}`);
-  const newDir = join(HASNA_DIR, serviceName);
-  if (!existsSync(legacyDir))
+  const legacyDir = join2(homedir2(), `.${serviceName}`);
+  const newDir = join2(HASNA_DIR, serviceName);
+  if (!existsSync2(legacyDir))
     return [];
-  if (existsSync(newDir))
+  if (existsSync2(newDir))
     return [];
   mkdirSync(newDir, { recursive: true });
   const migrated = [];
@@ -2967,8 +2967,8 @@ function migrateDotfile(serviceName) {
 function copyDirRecursive(src, dest, root, migrated) {
   const entries = readdirSync(src, { withFileTypes: true });
   for (const entry of entries) {
-    const srcPath = join(src, entry.name);
-    const destPath = join(dest, entry.name);
+    const srcPath = join2(src, entry.name);
+    const destPath = join2(dest, entry.name);
     if (entry.isDirectory()) {
       mkdirSync(destPath, { recursive: true });
       copyDirRecursive(srcPath, destPath, root, migrated);
@@ -2985,7 +2985,7 @@ function getConfigPath() {
   return CONFIG_PATH;
 }
 function getCloudConfig() {
-  if (!existsSync2(CONFIG_PATH)) {
+  if (!existsSync22(CONFIG_PATH)) {
     return CloudConfigSchema.parse({});
   }
   try {
@@ -3027,11 +3027,11 @@ function isSyncExcludedTable(table) {
   return SYNC_EXCLUDED_TABLE_PATTERNS.some((p) => p.test(table));
 }
 function discoverServices() {
-  const dataDir = join3(homedir3(), ".hasna");
-  if (!existsSync3(dataDir))
+  const dataDir = join6(homedir5(), ".hasna");
+  if (!existsSync6(dataDir))
     return [];
   try {
-    const entries = readdirSync2(dataDir, { withFileTypes: true });
+    const entries = readdirSync3(dataDir, { withFileTypes: true });
     return entries.filter((e) => {
       if (!e.isDirectory())
         return false;
@@ -3043,30 +3043,30 @@ function discoverServices() {
     return [];
   }
 }
-function discoverSyncableServices() {
+function discoverSyncableServices2() {
   const local = discoverServices();
   const pgSet = new Set(KNOWN_PG_SERVICES);
   return local.filter((s) => pgSet.has(s));
 }
 function getServiceDbPath(service) {
-  const dataDir = join3(homedir3(), ".hasna", service);
-  if (!existsSync3(dataDir))
+  const dataDir = join6(homedir5(), ".hasna", service);
+  if (!existsSync6(dataDir))
     return null;
   const candidates = [
-    join3(dataDir, `${service}.db`),
-    join3(dataDir, "data.db"),
-    join3(dataDir, "database.db")
+    join6(dataDir, `${service}.db`),
+    join6(dataDir, "data.db"),
+    join6(dataDir, "database.db")
   ];
   try {
-    const files = readdirSync2(dataDir);
+    const files = readdirSync3(dataDir);
     for (const f of files) {
       if (f.endsWith(".db") && !f.endsWith("-wal") && !f.endsWith("-shm")) {
-        candidates.push(join3(dataDir, f));
+        candidates.push(join6(dataDir, f));
       }
     }
   } catch {}
   for (const p of candidates) {
-    if (existsSync3(p))
+    if (existsSync6(p))
       return p;
   }
   return null;
@@ -3098,8 +3098,8 @@ class SyncProgressTracker {
   }
   start(table, total, direction) {
     const resumed = this.canResume(table);
-    const now = Date.now();
-    this.startTimes.set(table, now);
+    const now2 = Date.now();
+    this.startTimes.set(table, now2);
     const status = resumed ? "resumed" : "in_progress";
     const info = {
       table,
@@ -11417,7 +11417,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
     init_external();
   });
   init_dotfile = __esm2(() => {
-    HASNA_DIR = join(homedir(), ".hasna");
+    HASNA_DIR = join2(homedir2(), ".hasna");
   });
   exports_config = {};
   __export2(exports_config, {
@@ -11448,14 +11448,14 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         schedule_minutes: exports_external.number().default(0)
       }).default({})
     });
-    CONFIG_DIR = join2(homedir2(), ".hasna", "cloud");
-    CONFIG_PATH = join2(CONFIG_DIR, "config.json");
+    CONFIG_DIR = join22(homedir22(), ".hasna", "cloud");
+    CONFIG_PATH = join22(CONFIG_DIR, "config.json");
   });
   exports_discover = {};
   __export2(exports_discover, {
     isSyncExcludedTable: () => isSyncExcludedTable,
     getServiceDbPath: () => getServiceDbPath,
-    discoverSyncableServices: () => discoverSyncableServices,
+    discoverSyncableServices: () => discoverSyncableServices2,
     discoverServices: () => discoverServices,
     SYNC_EXCLUDED_TABLE_PATTERNS: () => SYNC_EXCLUDED_TABLE_PATTERNS,
     KNOWN_PG_SERVICES: () => KNOWN_PG_SERVICES
@@ -11510,15 +11510,13 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
   init_config();
   init_config();
   init_dotfile();
-  init_adapter();
   init_config();
-  init_discover();
-  AUTO_SYNC_CONFIG_PATH = join4(homedir4(), ".hasna", "cloud", "config.json");
+  AUTO_SYNC_CONFIG_PATH = join3(homedir3(), ".hasna", "cloud", "config.json");
   init_config();
   init_adapter();
   init_dotfile();
   init_config();
-  CONFIG_DIR2 = join6(homedir5(), ".hasna", "cloud");
+  CONFIG_DIR2 = join5(homedir4(), ".hasna", "cloud");
   init_adapter();
   init_config();
   init_discover();
@@ -11533,8 +11531,8 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
 
 // src/db/database.ts
 import { mkdirSync as mkdirSync3 } from "fs";
-import { join as join5 } from "path";
-import { randomUUID } from "crypto";
+import { join as join4 } from "path";
+import { randomUUID as randomUUID3 } from "crypto";
 function getDbPath2() {
   if (process.env["HASNA_CONFIGS_DB_PATH"]) {
     return process.env["HASNA_CONFIGS_DB_PATH"];
@@ -11544,14 +11542,14 @@ function getDbPath2() {
   }
   migrateDotfile("configs");
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const dir = join5(home, ".hasna", "configs");
+  const dir = join4(home, ".hasna", "configs");
   mkdirSync3(dir, { recursive: true });
-  return join5(dir, "configs.db");
+  return join4(dir, "configs.db");
 }
 function uuid() {
-  return randomUUID();
+  return randomUUID3();
 }
-function now() {
+function now2() {
   return new Date().toISOString();
 }
 function slugify(name) {
@@ -11681,7 +11679,7 @@ function uniqueSlug(name, db, excludeId) {
 function createConfig(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   const slug = uniqueSlug(input.name, d);
   const tags = JSON.stringify(input.tags || []);
   d.run(`INSERT INTO configs (id, name, slug, kind, category, agent, target_path, format, content, description, tags, is_template, version, created_at, updated_at, synced_at)
@@ -11755,7 +11753,7 @@ function listConfigs(filter, db) {
 function updateConfig(idOrSlug, input, db) {
   const d = db || getDatabase();
   const existing = getConfig(idOrSlug, d);
-  const ts = now();
+  const ts = now2();
   const updates = ["updated_at = ?", "version = version + 1"];
   const params = [ts];
   if (input.name !== undefined) {
@@ -11883,7 +11881,7 @@ var init_template = __esm(() => {
 
 // src/lib/machine.ts
 import { arch as currentArch, homedir as homedir6, hostname as currentHostname, type as currentOsType } from "os";
-import { existsSync as existsSync6 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { join as join7 } from "path";
 function normalizeOsFamily(os) {
   const value = (os ?? "").trim().toLowerCase();
@@ -11900,7 +11898,7 @@ function detectMachineContext(overrides = {}) {
   const os = overrides.os ?? currentOsType();
   const osFamily = normalizeOsFamily(os);
   const bunBinDir = overrides.bun_bin_dir ?? join7(homeDir, ".bun", "bin");
-  const defaultBunPath = osFamily === "macos" && existsSync6(BREW_BUN_PATH) ? BREW_BUN_PATH : join7(bunBinDir, "bun");
+  const defaultBunPath = osFamily === "macos" && existsSync4(BREW_BUN_PATH) ? BREW_BUN_PATH : join7(bunBinDir, "bun");
   return {
     id: "current-machine",
     hostname: overrides.hostname ?? currentHostname(),
@@ -11985,7 +11983,7 @@ var init_machine = __esm(() => {
 function createSnapshot(configId, content, version, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   d.run("INSERT INTO config_snapshots (id, config_id, content, version, created_at) VALUES (?, ?, ?, ?, ?)", [id, configId, content, version, ts]);
   return { id, config_id: configId, content, version, created_at: ts };
 }
@@ -12008,7 +12006,7 @@ __export(exports_apply, {
   applyConfigs: () => applyConfigs,
   applyConfig: () => applyConfig
 });
-import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2, resolve } from "path";
 import { homedir as homedir8 } from "os";
 function expandPath(p) {
@@ -12024,11 +12022,11 @@ async function applyConfig(config, opts = {}) {
   const renderedTargetPath = opts.vars ? renderMachineAwareContent(config.target_path, opts.vars) : config.target_path;
   const renderedContent = opts.vars ? renderMachineAwareContent(config.content, opts.vars) : config.content;
   const path = expandPath(renderedTargetPath);
-  const previousContent = existsSync7(path) ? readFileSync2(path, "utf-8") : null;
+  const previousContent = existsSync5(path) ? readFileSync2(path, "utf-8") : null;
   const changed = previousContent !== renderedContent;
   if (!opts.dryRun) {
     const dir = dirname2(path);
-    if (!existsSync7(dir)) {
+    if (!existsSync5(dir)) {
       mkdirSync5(dir, { recursive: true });
     }
     if (previousContent !== null && changed) {
@@ -12037,7 +12035,7 @@ async function applyConfig(config, opts = {}) {
     }
     writeFileSync2(path, renderedContent, "utf-8");
     const db = opts.db || getDatabase();
-    updateConfig(config.id, { synced_at: now() }, db);
+    updateConfig(config.id, { synced_at: now2() }, db);
   }
   return {
     config_id: config.id,
@@ -12245,8 +12243,8 @@ var init_redact = __esm(() => {
 });
 
 // src/lib/sync-dir.ts
-import { existsSync as existsSync8, readdirSync as readdirSync3, readFileSync as readFileSync3, statSync } from "fs";
-import { join as join8, relative as relative2 } from "path";
+import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync3, statSync } from "fs";
+import { join as join9, relative as relative2 } from "path";
 import { homedir as homedir9 } from "os";
 function shouldSkip(p) {
   return SKIP.some((s) => p.includes(s));
@@ -12254,9 +12252,9 @@ function shouldSkip(p) {
 async function syncFromDir(dir, opts = {}) {
   const d = opts.db || getDatabase();
   const absDir = expandPath(dir);
-  if (!existsSync8(absDir))
+  if (!existsSync7(absDir))
     return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
-  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync3(absDir).map((f) => join8(absDir, f)).filter((f) => statSync(f).isFile());
+  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync2(absDir).map((f) => join9(absDir, f)).filter((f) => statSync(f).isFile());
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
   const home = homedir9();
   const allConfigs = listConfigs(undefined, d);
@@ -12310,8 +12308,8 @@ async function syncToDir(dir, opts = {}) {
   return result;
 }
 function walkDir(dir, files = []) {
-  for (const entry of readdirSync3(dir, { withFileTypes: true })) {
-    const full = join8(dir, entry.name);
+  for (const entry of readdirSync2(dir, { withFileTypes: true })) {
+    const full = join9(dir, entry.name);
     if (shouldSkip(full))
       continue;
     if (entry.isDirectory())
@@ -12345,8 +12343,8 @@ __export(exports_sync, {
   PROJECT_CONFIG_FILES: () => PROJECT_CONFIG_FILES,
   KNOWN_CONFIGS: () => KNOWN_CONFIGS
 });
-import { existsSync as existsSync9, readdirSync as readdirSync5, readFileSync as readFileSync4 } from "fs";
-import { extname, join as join9 } from "path";
+import { existsSync as existsSync9, readdirSync as readdirSync4, readFileSync as readFileSync4 } from "fs";
+import { extname, join as join10 } from "path";
 import { homedir as homedir10 } from "os";
 async function syncProject(opts) {
   const d = opts.db || getDatabase();
@@ -12356,7 +12354,7 @@ async function syncProject(opts) {
   const allConfigs = listConfigs(undefined, d);
   const machine = detectMachineContext();
   for (const pf of PROJECT_CONFIG_FILES) {
-    const abs = join9(absDir, pf.file);
+    const abs = join10(absDir, pf.file);
     if (!existsSync9(abs))
       continue;
     try {
@@ -12388,11 +12386,11 @@ async function syncProject(opts) {
       result.skipped.push(pf.file);
     }
   }
-  const rulesDir = join9(absDir, ".claude", "rules");
+  const rulesDir = join10(absDir, ".claude", "rules");
   if (existsSync9(rulesDir)) {
-    const mdFiles = readdirSync5(rulesDir).filter((f) => f.endsWith(".md"));
+    const mdFiles = readdirSync4(rulesDir).filter((f) => f.endsWith(".md"));
     for (const f of mdFiles) {
-      const abs = join9(rulesDir, f);
+      const abs = join10(rulesDir, f);
       const raw = readFileSync4(abs, "utf-8");
       const redacted = redactContent(raw, "markdown");
       const machineAware = templateizeMachineContent(redacted.content, machine);
@@ -12435,9 +12433,9 @@ async function syncKnown(opts = {}) {
         result.skipped.push(known.rulesDir);
         continue;
       }
-      const mdFiles = readdirSync5(absDir).filter((f) => f.endsWith(".md"));
+      const mdFiles = readdirSync4(absDir).filter((f) => f.endsWith(".md"));
       for (const f of mdFiles) {
-        const abs2 = join9(absDir, f);
+        const abs2 = join10(absDir, f);
         const targetPath = abs2.replace(home, "~");
         const raw = readFileSync4(abs2, "utf-8");
         const redacted = redactContent(raw, "markdown");
@@ -12641,6 +12639,690 @@ var init_sync = __esm(() => {
   ];
 });
 
+// node_modules/@hasna/events/dist/commander.js
+import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
+import { existsSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { createHmac, timingSafeEqual } from "crypto";
+import { randomUUID } from "crypto";
+import { spawn } from "child_process";
+import { randomUUID as randomUUID2 } from "crypto";
+function getPathValue(input, path) {
+  return path.split(".").reduce((value, part) => {
+    if (value && typeof value === "object" && part in value) {
+      return value[part];
+    }
+    return;
+  }, input);
+}
+function wildcardToRegExp(pattern) {
+  const escaped = pattern.replace(/[|\\{}()[\]^$+?.]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`);
+}
+function matchString(value, matcher) {
+  if (matcher === undefined)
+    return true;
+  if (value === undefined)
+    return false;
+  const matchers = Array.isArray(matcher) ? matcher : [matcher];
+  return matchers.some((item) => wildcardToRegExp(item).test(value));
+}
+function matchRecord(input, matcher) {
+  if (!matcher)
+    return true;
+  return Object.entries(matcher).every(([path, expected]) => {
+    const actual = getPathValue(input, path);
+    if (typeof expected === "string" || Array.isArray(expected)) {
+      return matchString(actual === undefined ? undefined : String(actual), expected);
+    }
+    return actual === expected;
+  });
+}
+function eventMatchesFilter(event, filter) {
+  return matchString(event.source, filter.source) && matchString(event.type, filter.type) && matchString(event.subject, filter.subject) && matchString(event.severity, filter.severity) && matchRecord(event.data, filter.data) && matchRecord(event.metadata, filter.metadata);
+}
+function channelMatchesEvent(channel, event) {
+  if (!channel.enabled)
+    return false;
+  if (!channel.filters || channel.filters.length === 0)
+    return true;
+  return channel.filters.some((filter) => eventMatchesFilter(event, filter));
+}
+var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR";
+var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
+function getEventsDataDir(override) {
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
+}
+
+class JsonEventsStore {
+  dataDir;
+  channelsPath;
+  eventsPath;
+  deliveriesPath;
+  constructor(dataDir = getEventsDataDir()) {
+    this.dataDir = dataDir;
+    this.channelsPath = join(dataDir, "channels.json");
+    this.eventsPath = join(dataDir, "events.json");
+    this.deliveriesPath = join(dataDir, "deliveries.json");
+  }
+  async init() {
+    await mkdir(this.dataDir, { recursive: true, mode: 448 });
+    await chmod(this.dataDir, 448).catch(() => {
+      return;
+    });
+    await this.ensureArrayFile(this.channelsPath);
+    await this.ensureArrayFile(this.eventsPath);
+    await this.ensureArrayFile(this.deliveriesPath);
+  }
+  async addChannel(channel) {
+    await this.init();
+    const channels = await this.readJson(this.channelsPath, []);
+    const index = channels.findIndex((item) => item.id === channel.id);
+    if (index >= 0) {
+      channels[index] = { ...channel, createdAt: channels[index].createdAt, updatedAt: new Date().toISOString() };
+    } else {
+      channels.push(channel);
+    }
+    await this.writeJson(this.channelsPath, channels);
+    return index >= 0 ? channels[index] : channel;
+  }
+  async listChannels() {
+    await this.init();
+    return this.readJson(this.channelsPath, []);
+  }
+  async getChannel(id) {
+    const channels = await this.listChannels();
+    return channels.find((channel) => channel.id === id);
+  }
+  async removeChannel(id) {
+    await this.init();
+    const channels = await this.readJson(this.channelsPath, []);
+    const next = channels.filter((channel) => channel.id !== id);
+    await this.writeJson(this.channelsPath, next);
+    return next.length !== channels.length;
+  }
+  async appendEvent(event) {
+    await this.init();
+    const events = await this.readJson(this.eventsPath, []);
+    events.push(event);
+    await this.writeJson(this.eventsPath, events);
+    return event;
+  }
+  async listEvents() {
+    await this.init();
+    return this.readJson(this.eventsPath, []);
+  }
+  async findEventByIdentity(identity) {
+    const events = await this.listEvents();
+    return events.find((event) => identity.id !== undefined && event.id === identity.id || identity.dedupeKey !== undefined && event.dedupeKey === identity.dedupeKey);
+  }
+  async appendDelivery(result) {
+    await this.init();
+    const deliveries = await this.readJson(this.deliveriesPath, []);
+    deliveries.push(result);
+    await this.writeJson(this.deliveriesPath, deliveries);
+    return result;
+  }
+  async listDeliveries() {
+    await this.init();
+    return this.readJson(this.deliveriesPath, []);
+  }
+  async exportData() {
+    return {
+      channels: await this.listChannels(),
+      events: await this.listEvents(),
+      deliveries: await this.listDeliveries()
+    };
+  }
+  async ensureArrayFile(path) {
+    if (!existsSync(path)) {
+      await writeFile(path, `[]
+`, { encoding: "utf-8", mode: 384 });
+    }
+    await chmod(path, 384).catch(() => {
+      return;
+    });
+  }
+  async readJson(path, fallback) {
+    try {
+      const raw = await readFile(path, "utf-8");
+      if (!raw.trim())
+        return fallback;
+      return JSON.parse(raw);
+    } catch (error) {
+      if (error.code === "ENOENT")
+        return fallback;
+      throw error;
+    }
+  }
+  async writeJson(path, value) {
+    const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(tempPath, `${JSON.stringify(value, null, 2)}
+`, { encoding: "utf-8", mode: 384 });
+    await rename(tempPath, path);
+    await chmod(path, 384).catch(() => {
+      return;
+    });
+  }
+}
+var DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
+function buildSignatureBase(timestamp, body) {
+  return `${timestamp}.${body}`;
+}
+function signPayload(secret, timestamp, body) {
+  const digest = createHmac("sha256", secret).update(buildSignatureBase(timestamp, body)).digest("hex");
+  return `sha256=${digest}`;
+}
+function now() {
+  return new Date().toISOString();
+}
+function truncate(value, max = 4096) {
+  return value.length > max ? `${value.slice(0, max)}...` : value;
+}
+function buildWebhookRequest(event, channel) {
+  if (!channel.webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const body = JSON.stringify(event);
+  const timestamp = event.time;
+  const headers = {
+    "Content-Type": "application/json",
+    "User-Agent": "@hasna/events",
+    "X-Hasna-Event-Id": event.id,
+    "X-Hasna-Event-Type": event.type,
+    "X-Hasna-Timestamp": timestamp,
+    ...channel.webhook.headers
+  };
+  if (channel.webhook.secret) {
+    headers["X-Hasna-Signature"] = signPayload(channel.webhook.secret, timestamp, body);
+  }
+  return { body, headers };
+}
+async function dispatchWebhook(event, channel, options = {}) {
+  if (!channel.webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const startedAt = now();
+  const { body, headers } = buildWebhookRequest(event, channel);
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), channel.webhook.timeoutMs ?? 15000);
+  try {
+    const response = await (options.fetchImpl ?? fetch)(channel.webhook.url, {
+      method: "POST",
+      headers,
+      body,
+      signal: controller.signal
+    });
+    const responseBody = truncate(await response.text());
+    return {
+      attempt: 1,
+      status: response.ok ? "success" : "failed",
+      startedAt,
+      completedAt: now(),
+      responseStatus: response.status,
+      responseBody,
+      error: response.ok ? undefined : `Webhook returned HTTP ${response.status}`
+    };
+  } catch (error) {
+    return {
+      attempt: 1,
+      status: "failed",
+      startedAt,
+      completedAt: now(),
+      error: error instanceof Error ? error.message : String(error)
+    };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function dispatchCommand(event, channel) {
+  if (!channel.command)
+    throw new Error(`Channel ${channel.id} has no command config`);
+  const startedAt = now();
+  const eventJson = JSON.stringify(event);
+  const env = {
+    ...process.env,
+    ...channel.command.env,
+    HASNA_CHANNEL_ID: channel.id,
+    HASNA_EVENT_ID: event.id,
+    HASNA_EVENT_TYPE: event.type,
+    HASNA_EVENT_SOURCE: event.source,
+    HASNA_EVENT_SUBJECT: event.subject ?? "",
+    HASNA_EVENT_SEVERITY: event.severity,
+    HASNA_EVENT_TIME: event.time,
+    HASNA_EVENT_DEDUPE_KEY: event.dedupeKey ?? "",
+    HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
+    HASNA_EVENT_JSON: eventJson
+  };
+  return new Promise((resolve) => {
+    const child = spawn(channel.command.command, channel.command.args ?? [], {
+      cwd: channel.command.cwd,
+      env,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    const timeout = setTimeout(() => child.kill("SIGTERM"), channel.command.timeoutMs ?? 15000);
+    child.stdin.end(eventJson);
+    child.stdout.on("data", (chunk) => {
+      stdout += chunk.toString();
+    });
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+    });
+    child.on("error", (error) => {
+      clearTimeout(timeout);
+      resolve({
+        attempt: 1,
+        status: "failed",
+        startedAt,
+        completedAt: now(),
+        stdout: truncate(stdout),
+        stderr: truncate(stderr),
+        error: error.message
+      });
+    });
+    child.on("close", (code, signal) => {
+      clearTimeout(timeout);
+      const success = code === 0;
+      resolve({
+        attempt: 1,
+        status: success ? "success" : "failed",
+        startedAt,
+        completedAt: now(),
+        stdout: truncate(stdout),
+        stderr: truncate(stderr),
+        error: success ? undefined : `Command exited with ${signal ? `signal ${signal}` : `code ${code}`}`
+      });
+    });
+  });
+}
+async function dispatchChannel(event, channel, options = {}) {
+  if (channel.transport === "webhook")
+    return dispatchWebhook(event, channel, options);
+  if (channel.transport === "command")
+    return dispatchCommand(event, channel);
+  return {
+    attempt: 1,
+    status: "skipped",
+    startedAt: now(),
+    completedAt: now(),
+    error: `Unsupported transport: ${channel.transport}`
+  };
+}
+function createDeliveryResult(event, channel, attempts) {
+  const status = attempts.some((attempt) => attempt.status === "success") ? "success" : attempts.every((attempt) => attempt.status === "skipped") ? "skipped" : "failed";
+  return {
+    id: randomUUID(),
+    eventId: event.id,
+    channelId: channel.id,
+    transport: channel.transport,
+    status,
+    attempts,
+    createdAt: attempts[0]?.startedAt ?? now(),
+    completedAt: attempts.at(-1)?.completedAt ?? now()
+  };
+}
+function createEvent(input) {
+  return {
+    id: input.id ?? randomUUID2(),
+    source: input.source,
+    type: input.type,
+    time: normalizeTime(input.time),
+    subject: input.subject,
+    severity: input.severity ?? "info",
+    data: input.data ?? {},
+    message: input.message,
+    dedupeKey: input.dedupeKey,
+    schemaVersion: input.schemaVersion ?? "1.0",
+    metadata: input.metadata ?? {}
+  };
+}
+
+class EventsClient {
+  store;
+  redactors;
+  transportOptions;
+  constructor(options = {}) {
+    this.store = options.store ?? new JsonEventsStore(options.dataDir);
+    this.redactors = options.redactors ?? [];
+    this.transportOptions = { fetchImpl: options.fetchImpl };
+  }
+  async addChannel(input) {
+    const timestamp = new Date().toISOString();
+    return this.store.addChannel({
+      ...input,
+      createdAt: input.createdAt ?? timestamp,
+      updatedAt: input.updatedAt ?? timestamp
+    });
+  }
+  async listChannels() {
+    return this.store.listChannels();
+  }
+  async removeChannel(id) {
+    return this.store.removeChannel(id);
+  }
+  async emit(input, options = {}) {
+    const event = options.redactSensitiveData === false ? createEvent(input) : redactSensitiveKeys(createEvent(input));
+    if (options.dedupe !== false) {
+      const existing = await this.store.findEventByIdentity({ id: input.id, dedupeKey: event.dedupeKey });
+      if (existing) {
+        return { event: existing, deliveries: [], deduped: true };
+      }
+    }
+    await this.store.appendEvent(event);
+    const deliveries = options.deliver === false ? [] : await this.deliver(event);
+    return { event, deliveries, deduped: false };
+  }
+  async listEvents() {
+    return this.store.listEvents();
+  }
+  async listDeliveries() {
+    return this.store.listDeliveries();
+  }
+  async deliver(event) {
+    const channels = await this.store.listChannels();
+    const selected = channels.filter((channel) => channelMatchesEvent(channel, event));
+    const deliveries = [];
+    for (const channel of selected) {
+      const eventForChannel = await this.applyRedaction(event, channel);
+      const result = await this.deliverWithRetry(eventForChannel, channel);
+      await this.store.appendDelivery(result);
+      deliveries.push(result);
+    }
+    return deliveries;
+  }
+  async testChannel(id, input = {}) {
+    const channel = await this.store.getChannel(id);
+    if (!channel)
+      throw new Error(`Channel not found: ${id}`);
+    const event = createEvent({
+      source: input.source ?? "hasna.events",
+      type: input.type ?? "events.test",
+      subject: input.subject ?? id,
+      severity: input.severity ?? "info",
+      data: input.data ?? { test: true },
+      message: input.message ?? "Hasna events test delivery",
+      dedupeKey: input.dedupeKey,
+      schemaVersion: input.schemaVersion,
+      metadata: input.metadata,
+      time: input.time,
+      id: input.id
+    });
+    const eventForChannel = await this.applyRedaction(event, channel);
+    const result = await this.deliverWithRetry(eventForChannel, channel);
+    await this.store.appendDelivery(result);
+    return result;
+  }
+  async replay(options = {}) {
+    const events = (await this.store.listEvents()).filter((event) => {
+      if (options.eventId && event.id !== options.eventId)
+        return false;
+      if (options.source && event.source !== options.source)
+        return false;
+      if (options.type && event.type !== options.type)
+        return false;
+      return true;
+    });
+    if (options.dryRun)
+      return { events, deliveries: [] };
+    const deliveries = [];
+    for (const event of events) {
+      deliveries.push(...await this.deliver(event));
+    }
+    return { events, deliveries };
+  }
+  async applyRedaction(event, channel) {
+    let next = redactPaths(event, channel.redact?.paths ?? [], channel.redact?.replacement ?? "[REDACTED]");
+    for (const redactor of this.redactors) {
+      next = await redactor(next, channel);
+    }
+    return next;
+  }
+  async deliverWithRetry(event, channel) {
+    const policy = normalizeRetryPolicy(channel.retry);
+    const attempts = [];
+    for (let index = 0;index < policy.maxAttempts; index += 1) {
+      const attempt = await dispatchChannel(event, channel, this.transportOptions);
+      attempt.attempt = index + 1;
+      if (attempt.status === "failed" && index + 1 < policy.maxAttempts) {
+        attempt.nextBackoffMs = Math.round(policy.backoffMs * policy.multiplier ** index);
+      }
+      attempts.push(attempt);
+      if (attempt.status !== "failed")
+        break;
+      if (attempt.nextBackoffMs)
+        await Bun.sleep(attempt.nextBackoffMs);
+    }
+    return createDeliveryResult(event, channel, attempts);
+  }
+}
+function redactPaths(event, paths, replacement = "[REDACTED]") {
+  if (paths.length === 0)
+    return event;
+  const copy = structuredClone(event);
+  for (const path of paths) {
+    setPath(copy, path, replacement);
+  }
+  return copy;
+}
+function sanitizeChannelForOutput(channel) {
+  const copy = structuredClone(channel);
+  if (copy.webhook?.secret)
+    copy.webhook.secret = "[REDACTED]";
+  if (copy.command?.env) {
+    copy.command.env = Object.fromEntries(Object.entries(copy.command.env).map(([key, value]) => [key, shouldRedactKey(key) ? "[REDACTED]" : value]));
+  }
+  return copy;
+}
+function sanitizeChannelsForOutput(channels) {
+  return channels.map(sanitizeChannelForOutput);
+}
+function redactSensitiveKeys(event, replacement = "[REDACTED]") {
+  return redactValue(event, replacement);
+}
+function shouldRedactKey(key) {
+  return /secret|token|password|api[_-]?key|authorization/i.test(key);
+}
+function redactValue(value, replacement) {
+  if (Array.isArray(value))
+    return value.map((item) => redactValue(item, replacement));
+  if (!value || typeof value !== "object")
+    return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key,
+    shouldRedactKey(key) ? replacement : redactValue(item, replacement)
+  ]));
+}
+function setPath(input, path, replacement) {
+  const parts = path.split(".");
+  let cursor = input;
+  for (const part of parts.slice(0, -1)) {
+    const next = cursor[part];
+    if (!next || typeof next !== "object")
+      return;
+    cursor = next;
+  }
+  const last = parts.at(-1);
+  if (last && last in cursor)
+    cursor[last] = replacement;
+}
+function normalizeTime(value) {
+  if (!value)
+    return new Date().toISOString();
+  return value instanceof Date ? value.toISOString() : value;
+}
+function normalizeRetryPolicy(policy) {
+  return {
+    maxAttempts: Math.max(1, policy?.maxAttempts ?? 1),
+    backoffMs: Math.max(0, policy?.backoffMs ?? 250),
+    multiplier: Math.max(1, policy?.multiplier ?? 2)
+  };
+}
+function parseJsonObject(value, fallback) {
+  if (!value)
+    return fallback;
+  const parsed = JSON.parse(value);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("Expected a JSON object");
+  }
+  return parsed;
+}
+function parseHeaders(values) {
+  if (!values?.length)
+    return;
+  const headers = {};
+  for (const value of values) {
+    const separator = value.indexOf("=");
+    if (separator === -1)
+      throw new Error(`Invalid header, expected name=value: ${value}`);
+    headers[value.slice(0, separator)] = value.slice(separator + 1);
+  }
+  return headers;
+}
+function parseFilter(options) {
+  const filter2 = {};
+  if (options.source)
+    filter2.source = options.source;
+  if (options.type)
+    filter2.type = options.type;
+  if (options.subject)
+    filter2.subject = options.subject;
+  if (options.severity)
+    filter2.severity = options.severity;
+  return Object.keys(filter2).length > 0 ? [filter2] : undefined;
+}
+function createClient(options) {
+  if (options.createClient)
+    return options.createClient();
+  return new EventsClient({ store: new JsonEventsStore(options.dataDir) });
+}
+function print(value, json, text) {
+  if (json)
+    console.log(JSON.stringify(value, null, 2));
+  else
+    console.log(text);
+}
+function hasJsonOption(options) {
+  return Boolean(options?.json || options?.opts?.().json || options?.optsWithGlobals?.().json || options?.parent?.opts?.().json || options?.parent?.optsWithGlobals?.().json);
+}
+function wantsJson(actionOptions, command) {
+  return hasJsonOption(actionOptions) || hasJsonOption(command);
+}
+function registerWebhookCommands(program, options) {
+  const webhooks = program.command(options.webhooksCommandName ?? "webhooks").description("Manage Hasna event webhook subscriptions");
+  webhooks.command("add").description("Add or replace a webhook or command subscription").argument("<target>", "Webhook URL or command binary").requiredOption("--id <id>", "Subscription/channel identifier").option("--transport <kind>", "Transport kind: webhook or command", "webhook").option("--name <name>", "Display name").option("--type <pattern>", "Event type filter, e.g. todos.task.*").option("--source <pattern>", "Event source filter").option("--subject <pattern>", "Event subject filter").option("--severity <pattern>", "Event severity filter").option("--secret <secret>", "Webhook HMAC secret").option("--header <name=value...>", "Webhook header", collectValues, []).option("--arg <arg...>", "Command argument", collectValues, []).option("--timeout-ms <ms>", "Transport timeout in milliseconds", parseNumber).option("--retry-attempts <n>", "Maximum delivery attempts", parseNumber).option("--retry-backoff-ms <ms>", "Initial retry backoff in milliseconds", parseNumber).option("--redact <path...>", "Event field path to redact before delivery", collectValues, []).option("--disabled", "Create channel disabled", false).option("-j, --json", "Print JSON output", false).action(async (target, actionOptions, command) => {
+    const timestamp = new Date().toISOString();
+    const channel = {
+      id: actionOptions.id,
+      name: actionOptions.name,
+      enabled: !actionOptions.disabled,
+      transport: actionOptions.transport,
+      filters: parseFilter(actionOptions),
+      retry: actionOptions.retryAttempts || actionOptions.retryBackoffMs ? { maxAttempts: actionOptions.retryAttempts, backoffMs: actionOptions.retryBackoffMs } : undefined,
+      redact: actionOptions.redact?.length ? { paths: actionOptions.redact } : undefined,
+      createdAt: timestamp,
+      updatedAt: timestamp
+    };
+    if (actionOptions.transport === "webhook") {
+      channel.webhook = { url: target, secret: actionOptions.secret, headers: parseHeaders(actionOptions.header), timeoutMs: actionOptions.timeoutMs };
+    } else if (actionOptions.transport === "command") {
+      channel.command = { command: target, args: actionOptions.arg ?? [], timeoutMs: actionOptions.timeoutMs };
+    } else {
+      throw new Error(`Transport ${actionOptions.transport} is reserved for future use and cannot be added yet`);
+    }
+    const saved = await createClient(options).addChannel(channel);
+    print(sanitizeChannelForOutput(saved), wantsJson(actionOptions, command), `Added ${saved.transport} channel ${saved.id}`);
+  });
+  webhooks.command("list").description("List configured subscriptions").option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    const channels = await createClient(options).listChannels();
+    if (wantsJson(actionOptions, command)) {
+      console.log(JSON.stringify(sanitizeChannelsForOutput(channels), null, 2));
+      return;
+    }
+    if (!channels.length) {
+      console.log("No channels configured.");
+      return;
+    }
+    for (const channel of channels) {
+      console.log(`${channel.id}	${channel.enabled ? "enabled" : "disabled"}	${channel.transport}	${channel.webhook?.url ?? channel.command?.command ?? channel.transport}`);
+    }
+  });
+  webhooks.command("remove").description("Remove a subscription").argument("<id>", "Subscription/channel identifier").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
+    const removed = await createClient(options).removeChannel(id);
+    print({ removed }, wantsJson(actionOptions, command), removed ? `Removed ${id}` : `Channel not found: ${id}`);
+  });
+  webhooks.command("test").description("Send a test event to one subscription").argument("<id>", "Subscription/channel identifier").option("--type <type>", "Event type", "events.test").option("--subject <subject>", "Event subject").option("--message <message>", "Event message", "Hasna events test delivery").option("--data <json>", "Event data JSON object").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
+    const result = await createClient(options).testChannel(id, {
+      source: options.source,
+      type: actionOptions.type,
+      subject: actionOptions.subject ?? id,
+      message: actionOptions.message,
+      data: parseJsonObject(actionOptions.data, { test: true })
+    });
+    print(result, wantsJson(actionOptions, command), `${result.status}: ${result.channelId}`);
+  });
+  return webhooks;
+}
+function registerEventCommands(program, options) {
+  const events = program.command(options.eventsCommandName ?? "events").description("Emit, list, and replay Hasna events");
+  events.command("emit").description("Emit an event from this app").argument("<type>", "Event type").option("--source <source>", "Event source override").option("--subject <subject>", "Event subject").option("--severity <severity>", "Event severity", "info").option("--message <message>", "Event message").option("--dedupe-key <key>", "Dedupe key").option("--data <json>", "Event data JSON object").option("--metadata <json>", "Event metadata JSON object").option("--no-deliver", "Record without delivering").option("--no-dedupe", "Allow duplicate id/dedupeKey events").option("-j, --json", "Print JSON output", false).action(async (type, actionOptions, command) => {
+    const result = await createClient(options).emit({
+      source: actionOptions.source ?? options.source,
+      type,
+      subject: actionOptions.subject,
+      severity: actionOptions.severity,
+      message: actionOptions.message,
+      dedupeKey: actionOptions.dedupeKey,
+      data: parseJsonObject(actionOptions.data, {}),
+      metadata: parseJsonObject(actionOptions.metadata, {})
+    }, { deliver: actionOptions.deliver, dedupe: actionOptions.dedupe });
+    print(result, wantsJson(actionOptions, command), `${result.deduped ? "Deduped" : "Emitted"} ${result.event.id} to ${result.deliveries.length} channel(s)`);
+  });
+  events.command("list").description("List recorded events").option("--source <source>", "Filter by source").option("--type <type>", "Filter by type").option("--limit <n>", "Limit results", parseNumber).option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    let rows = await createClient(options).listEvents();
+    if (actionOptions.source)
+      rows = rows.filter((event) => event.source === actionOptions.source);
+    if (actionOptions.type)
+      rows = rows.filter((event) => event.type === actionOptions.type);
+    if (actionOptions.limit)
+      rows = rows.slice(-actionOptions.limit);
+    if (wantsJson(actionOptions, command)) {
+      console.log(JSON.stringify(rows, null, 2));
+      return;
+    }
+    if (!rows.length) {
+      console.log("No events recorded.");
+      return;
+    }
+    for (const event of rows)
+      console.log(`${event.time}	${event.id}	${event.source}	${event.type}	${event.severity}`);
+  });
+  events.command("replay").description("Replay recorded events").option("--id <id>", "Replay one event id").option("--source <source>", "Filter by source").option("--type <type>", "Filter by type").option("--dry-run", "Preview without delivery", false).option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    const result = await createClient(options).replay({
+      eventId: actionOptions.id,
+      source: actionOptions.source,
+      type: actionOptions.type,
+      dryRun: actionOptions.dryRun
+    });
+    print(result, wantsJson(actionOptions, command), `Replayed ${result.events.length} event(s), ${result.deliveries.length} delivery result(s)`);
+  });
+  return events;
+}
+function registerEventsCommands(program, options) {
+  registerWebhookCommands(program, options);
+  registerEventCommands(program, options);
+}
+function parseNumber(value) {
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed))
+    throw new Error(`Expected a number, got ${value}`);
+  return parsed;
+}
+function collectValues(value, previous) {
+  previous.push(value);
+  return previous;
+}
+
 // node_modules/commander/esm.mjs
 var import__ = __toESM(require_commander(), 1);
 var {
@@ -12662,7 +13344,7 @@ init_configs();
 import chalk from "chalk";
 import { existsSync as existsSync12, readFileSync as readFileSync6 } from "fs";
 import { homedir as homedir11 } from "os";
-import { join as join12, resolve as resolve4 } from "path";
+import { join as join13, resolve as resolve4 } from "path";
 
 // src/db/profiles.ts
 init_types();
@@ -12690,7 +13372,7 @@ function uniqueProfileSlug(name, db, excludeId) {
 function createProfile(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const ts = now();
+  const ts = now2();
   const slug = uniqueProfileSlug(input.name, d);
   d.run("INSERT INTO profiles (id, name, slug, description, selectors, variables, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)", [
     id,
@@ -12718,7 +13400,7 @@ function listProfiles(db) {
 function updateProfile(idOrSlug, input, db) {
   const d = db || getDatabase();
   const existing = getProfile(idOrSlug, d);
-  const ts = now();
+  const ts = now2();
   const updates = ["updated_at = ?"];
   const params = [ts];
   if (input.name !== undefined) {
@@ -12802,25 +13484,25 @@ init_redact();
 init_database();
 init_configs();
 import { existsSync as existsSync10, mkdirSync as mkdirSync6, rmSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join10, resolve as resolve2 } from "path";
+import { join as join11, resolve as resolve2 } from "path";
 import { tmpdir } from "os";
 async function exportConfigs(outputPath, opts = {}) {
   const d = opts.db || getDatabase();
   const configs = listConfigs(opts.filter, d);
   const absOutput = resolve2(outputPath);
-  const tmpDir = join10(tmpdir(), `configs-export-${Date.now()}`);
-  const contentsDir = join10(tmpDir, "contents");
+  const tmpDir = join11(tmpdir(), `configs-export-${Date.now()}`);
+  const contentsDir = join11(tmpDir, "contents");
   try {
     mkdirSync6(contentsDir, { recursive: true });
     const manifest = {
       version: "1.0.0",
-      exported_at: now(),
+      exported_at: now2(),
       configs: configs.map(({ content: _content, ...meta }) => meta)
     };
-    writeFileSync3(join10(tmpDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf-8");
+    writeFileSync3(join11(tmpDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf-8");
     for (const config of configs) {
       const fileName = `${config.slug}.${config.format === "text" ? "txt" : config.format}`;
-      writeFileSync3(join10(contentsDir, fileName), config.content, "utf-8");
+      writeFileSync3(join11(contentsDir, fileName), config.content, "utf-8");
     }
     const proc = Bun.spawn(["tar", "czf", absOutput, "-C", tmpDir, "."], {
       stdout: "pipe",
@@ -12843,13 +13525,13 @@ async function exportConfigs(outputPath, opts = {}) {
 init_database();
 init_configs();
 import { existsSync as existsSync11, mkdirSync as mkdirSync7, readFileSync as readFileSync5, rmSync as rmSync2 } from "fs";
-import { join as join11, resolve as resolve3 } from "path";
+import { join as join12, resolve as resolve3 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 async function importConfigs(bundlePath, opts = {}) {
   const d = opts.db || getDatabase();
   const conflict = opts.conflict ?? "skip";
   const absPath = resolve3(bundlePath);
-  const tmpDir = join11(tmpdir2(), `configs-import-${Date.now()}`);
+  const tmpDir = join12(tmpdir2(), `configs-import-${Date.now()}`);
   const result = { created: 0, updated: 0, skipped: 0, errors: [] };
   try {
     mkdirSync7(tmpDir, { recursive: true });
@@ -12862,14 +13544,14 @@ async function importConfigs(bundlePath, opts = {}) {
       const stderr = await new Response(proc.stderr).text();
       throw new Error(`tar extraction failed: ${stderr}`);
     }
-    const manifestPath = join11(tmpDir, "manifest.json");
+    const manifestPath = join12(tmpDir, "manifest.json");
     if (!existsSync11(manifestPath))
       throw new Error("Invalid bundle: missing manifest.json");
     const manifest = JSON.parse(readFileSync5(manifestPath, "utf-8"));
     for (const meta of manifest.configs) {
       try {
         const ext = meta.format === "text" ? "txt" : meta.format;
-        const contentFile = join11(tmpDir, "contents", `${meta.slug}.${ext}`);
+        const contentFile = join12(tmpDir, "contents", `${meta.slug}.${ext}`);
         const content = existsSync11(contentFile) ? readFileSync5(contentFile, "utf-8") : "";
         let existing = null;
         try {
@@ -13160,15 +13842,15 @@ program.command("sync").description("Sync known AI coding configs from disk into
   if (opts.project) {
     const dir = typeof opts.project === "string" ? opts.project : process.cwd();
     if (opts.all) {
-      const { readdirSync: readdirSync4, statSync: st } = await import("fs");
+      const { readdirSync: readdirSync5, statSync: st } = await import("fs");
       const absDir = expandPath(dir);
-      const entries = readdirSync4(absDir, { withFileTypes: true });
+      const entries = readdirSync5(absDir, { withFileTypes: true });
       let totalAdded = 0, totalUpdated = 0, totalUnchanged = 0, projects = 0;
       for (const entry of entries) {
         if (!entry.isDirectory())
           continue;
-        const projDir = join12(absDir, entry.name);
-        const hasClaude = existsSync12(join12(projDir, "CLAUDE.md")) || existsSync12(join12(projDir, ".mcp.json")) || existsSync12(join12(projDir, ".claude"));
+        const projDir = join13(absDir, entry.name);
+        const hasClaude = existsSync12(join13(projDir, "CLAUDE.md")) || existsSync12(join13(projDir, ".mcp.json")) || existsSync12(join13(projDir, ".claude"));
         if (!hasClaude)
           continue;
         const result2 = await syncProject({ projectDir: projDir, dryRun: opts.dryRun });
@@ -13216,7 +13898,7 @@ program.command("import <file>").description("Import configs from a tar.gz bundl
   }
 });
 program.command("whoami").description("Show setup summary").action(async () => {
-  const dbPath = process.env["CONFIGS_DB_PATH"] || join12(homedir11(), ".hasna", "configs", "configs.db");
+  const dbPath = process.env["CONFIGS_DB_PATH"] || join13(homedir11(), ".hasna", "configs", "configs.db");
   const stats = getConfigStats();
   console.log(chalk.bold("@hasna/configs") + chalk.dim(" v" + pkg.version));
   console.log(chalk.cyan("DB:") + " " + dbPath);
@@ -13590,7 +14272,7 @@ mcpCmd.command("uninstall").alias("remove").description("Remove configs MCP serv
   }
 });
 program.command("init").description("First-time setup: sync all known configs, create default profile").option("--force", "delete existing DB and start fresh").action(async (opts) => {
-  const dbPath = join12(homedir11(), ".hasna", "configs", "configs.db");
+  const dbPath = join13(homedir11(), ".hasna", "configs", "configs.db");
   if (opts.force && existsSync12(dbPath)) {
     const { rmSync: rmSync3 } = await import("fs");
     rmSync3(dbPath);
@@ -13644,7 +14326,7 @@ DB stats:`));
 DB: ${dbPath}`));
 });
 program.command("status").description("Health check: total configs, drift from disk, unredacted secrets").action(async () => {
-  const dbPath = join12(homedir11(), ".hasna", "configs", "configs.db");
+  const dbPath = join13(homedir11(), ".hasna", "configs", "configs.db");
   const stats = getConfigStats();
   const { statSync: st } = await import("fs");
   const dbSize = existsSync12(dbPath) ? st(dbPath).size : 0;
@@ -13681,10 +14363,10 @@ program.command("status").description("Health check: total configs, drift from d
 });
 program.command("backup").description("Export configs to a timestamped backup file").action(async () => {
   const { mkdirSync: mk } = await import("fs");
-  const backupDir = join12(homedir11(), ".hasna", "configs", "backups");
+  const backupDir = join13(homedir11(), ".hasna", "configs", "backups");
   mk(backupDir, { recursive: true });
   const ts = new Date().toISOString().replace(/[:.]/g, "-").replace("T", "-").slice(0, 19);
-  const outPath = join12(backupDir, `configs-${ts}.tar.gz`);
+  const outPath = join13(backupDir, `configs-${ts}.tar.gz`);
   const result = await exportConfigs(outPath);
   const { statSync: st } = await import("fs");
   const size = st(outPath).size;
@@ -13837,9 +14519,9 @@ program.command("watch").description("Watch known config files for changes and a
       const absDir = expandPath2(k.rulesDir);
       if (!existsSync12(absDir))
         continue;
-      const { readdirSync: readdirSync4 } = await import("fs");
-      for (const f of readdirSync4(absDir).filter((f2) => f2.endsWith(".md"))) {
-        const abs = join12(absDir, f);
+      const { readdirSync: readdirSync5 } = await import("fs");
+      for (const f of readdirSync5(absDir).filter((f2) => f2.endsWith(".md"))) {
+        const abs = join13(absDir, f);
         mtimes.set(abs, st(abs).mtimeMs);
       }
     } else {
@@ -13867,7 +14549,7 @@ program.command("watch").description("Watch known config files for changes and a
         if (!existsSync12(absDir))
           continue;
         for (const f of rd(absDir).filter((f2) => f2.endsWith(".md"))) {
-          const abs = join12(absDir, f);
+          const abs = join13(absDir, f);
           if (!mtimes.has(abs)) {
             mtimes.set(abs, st(abs).mtimeMs);
             changed++;
@@ -14059,4 +14741,5 @@ program.command("feedback <message>").description("Send feedback about this serv
   console.log(chalk.green("\u2713") + " Feedback saved. Thank you!");
 });
 program.version(pkg.version).name("configs");
+registerEventsCommands(program, { source: "configs" });
 program.parse(process.argv);