@jungjaehoon/mama-os 0.77.0 → 0.78.0

package/dist/cli/launch-files.js

@@ -1,8 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SERVICE_STOP_SECONDS = exports.CRASH_LOG_CAP_BYTES = exports.CRASH_LOG_NAME = exports.TOOL_DIRECTORIES = exports.START_SCRIPT_MARKER = void 0;
 exports.findExecutable = findExecutable;
+exports.stableNodePath = stableNodePath;
+exports.versionedNodePath = versionedNodePath;
 exports.startScript = startScript;
+exports.startPathEntries = startPathEntries;
 exports.launchAgent = launchAgent;
+exports.systemdUnit = systemdUnit;
+exports.shellWords = shellWords;
+exports.startPathValue = startPathValue;
+exports.startExports = startExports;
+exports.readStartScript = readStartScript;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const secrets_js_1 = require("./secrets.js");
@@ -21,32 +30,69 @@ function findExecutable(name) {
     }
     return undefined;
 }
+/**
+ * A Node path that survives an upgrade. Homebrew removes a version's Cellar folder when it
+ * upgrades, but keeps `<prefix>/opt/<formula>` (and `<prefix>/bin/node` for `node`) pointing at
+ * the current one, so the launch files use those when the running Node lives in the Cellar.
+ */
+function stableNodePath(execPath, exists = node_fs_1.existsSync) {
+    const brew = /^(.*)\/Cellar\/(node(?:@\d+)?)\/[^/]+\/bin\/node$/.exec(execPath);
+    if (!brew)
+        return execPath;
+    const [, prefix, formula] = brew;
+    const candidates = [
+        (0, node_path_1.join)(prefix, 'opt', formula, 'bin', 'node'),
+        ...(formula === 'node' ? [(0, node_path_1.join)(prefix, 'bin', 'node')] : []),
+    ];
+    return candidates.find((candidate) => exists(candidate)) ?? execPath;
+}
+/** A Node path that a version manager or an upgrade removes (I6). */
+function versionedNodePath(path) {
+    return /\/Cellar\/node(@\d+)?\/|\/\.nvm\/versions\/node\/|\/\.volta\/tools\/image\/node\/|\/fnm\/node-versions\//.test(path);
+}
+/** The first comment line of every start.sh that mama writes. */
+exports.START_SCRIPT_MARKER = '# Written by mama init or mama service install; mama service install rewrites it.';
 function startScript(options) {
     const root = (0, node_path_1.join)(options.home, '.mama');
-    const path = [
-        ...new Set([
-            (0, node_path_1.dirname)(options.nodePath),
-            ...options.executablePaths.map(node_path_1.dirname),
-            '/usr/bin',
-            '/bin',
-            '/usr/sbin',
-            '/sbin',
-        ]),
-    ].join(':');
     return [
         '#!/bin/sh',
+        exports.START_SCRIPT_MARKER,
         'set -eu',
         'umask 077',
-        `export PATH=${(0, secrets_js_1.shellQuote)(path)}`,
+        `export PATH=${(0, secrets_js_1.shellQuote)(startPathEntries(options).join(':'))}`,
         `cd ${(0, secrets_js_1.shellQuote)(root)}`,
         'set -a',
         `. ${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, 'auth.env'))}`,
         'set +a',
+        `export MAMA_LOG_LEVEL=${(0, secrets_js_1.shellQuote)(options.logLevel.toUpperCase())}`,
         ...Object.entries(options.viewer).map(([name, value]) => `export ${name}=${(0, secrets_js_1.shellQuote)(value)}`),
-        `exec ${(0, secrets_js_1.shellQuote)(options.nodePath)} ${(0, secrets_js_1.shellQuote)(options.cliPath)} daemon >> ${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, 'logs', 'daemon.log'))} 2>&1`,
+        ...(options.carried ?? []),
+        ...crashLogLines(root),
+        `exec ${(0, secrets_js_1.shellQuote)(options.nodePath)} ${(0, secrets_js_1.shellQuote)(options.cliPath)} daemon >> "$crash" 2>&1`,
         '',
     ].join('\n');
 }
+/**
+ * Where a package manager installs the owner's command-line tools: Homebrew on Apple silicon
+ * (/opt/homebrew) and on Intel Macs and most Linux installs (/usr/local). The agent's shell runs
+ * those tools (python3 with its packages, sqlite3) and expects them ahead of the system's own, as
+ * in the owner's terminal.
+ */
+exports.TOOL_DIRECTORIES = ['/opt/homebrew/bin', '/usr/local/bin'];
+/**
+ * The PATH a generated start.sh sets: Node's folder, the backend's and gws's, the package
+ * manager's folders that exist on this machine, then the system's.
+ */
+function startPathEntries(options) {
+    const exists = options.exists ?? node_fs_1.existsSync;
+    const system = ['/usr/bin', '/bin', '/usr/sbin', '/sbin'];
+    // A Node or backend in a system folder (/usr/bin/node on Linux) keeps the system's place, after
+    // the tool folders; start.sh runs Node by its full path either way.
+    const own = [(0, node_path_1.dirname)(options.nodePath), ...options.executablePaths.map(node_path_1.dirname)].filter((directory) => !system.includes(directory));
+    return [
+        ...new Set([...own, ...exports.TOOL_DIRECTORIES.filter((directory) => exists(directory)), ...system]),
+    ];
+}
 function xml(value) {
     return value
         .replace(/&/g, '&amp;')
@@ -55,6 +101,31 @@ function xml(value) {
         .replace(/"/g, '&quot;')
         .replace(/'/g, '&apos;');
 }
+/**
+ * What the service manager captures before the daemon writes its own rotated log (daemon.log):
+ * start.sh's own messages, a crash while Node loads, a fatal error, a native library's writes.
+ */
+exports.CRASH_LOG_NAME = 'crash.log';
+/** start.sh empties the crash log at start once it is past this size. */
+exports.CRASH_LOG_CAP_BYTES = 1024 * 1024;
+/**
+ * start.sh's crash log: only what comes before the daemon takes over its own output lands there;
+ * it is made owner-only and emptied at start once past the cap.
+ */
+function crashLogLines(root) {
+    return [
+        `crash=${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, 'logs', exports.CRASH_LOG_NAME))}`,
+        // launchd creates the file it redirects to before this script's umask applies.
+        `if [ -f "$crash" ]; then chmod 600 "$crash"; fi`,
+        `if [ -f "$crash" ] && [ "$(wc -c < "$crash")" -gt ${exports.CRASH_LOG_CAP_BYTES} ]; then : > "$crash"; fi`,
+    ];
+}
+/** Seconds a service manager waits for a stopping daemon before it kills it. */
+exports.SERVICE_STOP_SECONDS = 60;
+/**
+ * The LaunchAgent restarts the daemon only after a failure: a clean exit (a stop, or a refusal
+ * because another process holds the install) leaves it stopped.
+ */
 function launchAgent(home) {
     const root = (0, node_path_1.join)(home, '.mama');
     return `<?xml version="1.0" encoding="UTF-8"?>
@@ -65,10 +136,155 @@ function launchAgent(home) {
   <key>WorkingDirectory</key><string>${xml(root)}</string>
   <key>EnvironmentVariables</key><dict><key>HOME</key><string>${xml(home)}</string></dict>
   <key>RunAtLoad</key><true/>
-  <key>KeepAlive</key><true/>
-  <key>StandardOutPath</key><string>${xml((0, node_path_1.join)(root, 'logs', 'daemon.log'))}</string>
-  <key>StandardErrorPath</key><string>${xml((0, node_path_1.join)(root, 'logs', 'daemon.log'))}</string>
+  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>
+  <key>ExitTimeOut</key><integer>${exports.SERVICE_STOP_SECONDS}</integer>
+  <key>StandardOutPath</key><string>${xml((0, node_path_1.join)(root, 'logs', exports.CRASH_LOG_NAME))}</string>
+  <key>StandardErrorPath</key><string>${xml((0, node_path_1.join)(root, 'logs', exports.CRASH_LOG_NAME))}</string>
 </dict></plist>
 `;
 }
+/**
+ * The systemd user unit, with the same restart policy as the LaunchAgent. `%h` is the home folder,
+ * expanded by systemd per argument, so a path with spaces stays one argument. KillMode=mixed sends
+ * the stop signal to the daemon alone, which stops its children in order; anything left is killed
+ * when the stop times out.
+ */
+function systemdUnit() {
+    return [
+        '[Unit]',
+        'Description=MAMA OS daemon',
+        '',
+        '[Service]',
+        'Type=simple',
+        'WorkingDirectory=%h/.mama',
+        'ExecStart="%h/.mama/start.sh"',
+        'Restart=on-failure',
+        'RestartSec=10',
+        `TimeoutStopSec=${exports.SERVICE_STOP_SECONDS}`,
+        'KillMode=mixed',
+        '',
+        '[Install]',
+        'WantedBy=default.target',
+        '',
+    ].join('\n');
+}
+/**
+ * Split a start.sh line into words as sh does before expansion: a `#` starting a word ends the
+ * line, single quotes are literal, double
+ * quotes keep their text (a backslash escapes `"`, `\\`, `$` and a backtick), and a backslash
+ * outside quotes escapes the next character. Variables stay as written.
+ */
+function shellWords(line) {
+    const words = [];
+    let word = null;
+    for (let index = 0; index < line.length; index += 1) {
+        const char = line[index];
+        if (char === "'") {
+            const end = line.indexOf("'", index + 1);
+            if (end < 0)
+                throw new Error('unterminated single quote');
+            word = (word ?? '') + line.slice(index + 1, end);
+            index = end;
+        }
+        else if (char === '"') {
+            let text = '';
+            index += 1;
+            while (index < line.length && line[index] !== '"') {
+                if (line[index] === '\\' && '"\\$`'.includes(line[index + 1] ?? ''))
+                    index += 1;
+                text += line[index];
+                index += 1;
+            }
+            if (index >= line.length)
+                throw new Error('unterminated double quote');
+            word = (word ?? '') + text;
+        }
+        else if (char === '\\') {
+            word = (word ?? '') + (line[index + 1] ?? '');
+            index += 1;
+        }
+        else if (/\s/.test(char)) {
+            if (word !== null)
+                words.push(word);
+            word = null;
+        }
+        else if (char === '#' && word === null) {
+            // A # that starts a word starts a comment.
+            break;
+        }
+        else {
+            word = (word ?? '') + char;
+        }
+    }
+    if (word !== null)
+        words.push(word);
+    return words;
+}
+/** The PATH entries an `export PATH=` value names, with `$HOME` and `~` read as `home`. */
+function startPathValue(value, home) {
+    return (shellWords(value)[0] ?? '')
+        .split(':')
+        .map((entry) => entry.replace(/^(\$HOME|\$\{HOME\}|~)(?=\/|$)/, home))
+        .filter((entry) => entry !== '' && entry !== '$PATH' && entry !== '${PATH}');
+}
+/** The values a start.sh's carried `export` lines set, unquoted. */
+function startExports(reading) {
+    return Object.fromEntries(reading.carried.flatMap((line) => {
+        const match = /^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+        return match ? [[match[1], shellWords(match[2])[0] ?? '']] : [];
+    }));
+}
+/**
+ * Read a start.sh against what this install's generated one holds. Only exact generated lines
+ * count as reproduced: a changed `cd` or a different sourced file is reported, not dropped.
+ */
+function readStartScript(script, home) {
+    const root = (0, node_path_1.join)(home, '.mama');
+    const generatedLines = new Set([
+        'set -eu',
+        'set -a',
+        'set +a',
+        'umask 077',
+        `cd ${(0, secrets_js_1.shellQuote)(root)}`,
+        `. ${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, 'auth.env'))}`,
+        ...crashLogLines(root),
+    ]);
+    const carried = [];
+    const notReproduced = [];
+    let path = null;
+    let logLevel = null;
+    let exec = null;
+    for (const raw of script.split('\n')) {
+        const line = raw.trim();
+        if (line === '')
+            continue;
+        const exported = /^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+        if (exported) {
+            if (exported[1] === 'PATH')
+                path = exported[2];
+            else if (exported[1] === 'MAMA_LOG_LEVEL')
+                logLevel = exported[2];
+            else
+                carried.push(line);
+            continue;
+        }
+        if (/^exec\s/.test(line)) {
+            exec = line;
+            continue;
+        }
+        if (line.startsWith('#') || generatedLines.has(line))
+            continue;
+        notReproduced.push(line);
+    }
+    const authLine = `. ${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, 'auth.env'))}`;
+    return {
+        generated: script.includes(exports.START_SCRIPT_MARKER),
+        loadsAuthEnv: script.split('\n').some((line) => line.trim() === authLine),
+        carried,
+        path,
+        logLevel,
+        exec,
+        notReproduced,
+    };
+}
 //# sourceMappingURL=launch-files.js.map

package/dist/cli/launch-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"launch-files.js","sourceRoot":"","sources":["../../src/cli/launch-files.ts"],"names":[],"mappings":";;AAIA,wCAYC;AAED,kCA+BC;AAWD,kCAeC;AA3ED,qCAAgD;AAChD,yCAAiE;AACjE,6CAA0C;AAE1C,SAAgB,cAAc,CAAC,IAAY;IACzC,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAS,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,IAAA,sBAAU,EAAC,SAAS,CAAC;YAAE,SAAS;QACrC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,IAAA,oBAAU,EAAC,IAAI,EAAE,mBAAS,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,WAAW,CAAC,OAM3B;IACC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG;QACX,GAAG,IAAI,GAAG,CAAC;YACT,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC;YACzB,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAO,CAAC;YACvC,UAAU;YACV,MAAM;YACN,WAAW;YACX,OAAO;SACR,CAAC;KACH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO;QACL,WAAW;QACX,SAAS;QACT,WAAW;QACX,eAAe,IAAA,uBAAU,EAAC,IAAI,CAAC,EAAE;QACjC,MAAM,IAAA,uBAAU,EAAC,IAAI,CAAC,EAAE;QACxB,QAAQ;QACR,KAAK,IAAA,uBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE;QACzC,QAAQ;QACR,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI,IAAA,uBAAU,EAAC,KAAK,CAAC,EAAE,CAAC;QAC/F,QAAQ,IAAA,uBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAA,uBAAU,EAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAA,uBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,OAAO;QACpI,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO;;;;8CAIqC,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;uCAClC,GAAG,CAAC,IAAI,CAAC;gEACgB,GAAG,CAAC,IAAI,CAAC;;;sCAGnC,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;wCACnC,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;;CAE5E,CAAC;AACF,CAAC"}
+{"version":3,"file":"launch-files.js","sourceRoot":"","sources":["../../src/cli/launch-files.ts"],"names":[],"mappings":";;;AAIA,wCAYC;AAOD,wCAYC;AAGD,8CAIC;AAMD,kCA+BC;AAcD,4CAgBC;AAuCD,kCAgBC;AAQD,kCAkBC;AAuBD,gCAmCC;AAGD,wCAKC;AAGD,oCAOC;AAMD,0CA2CC;AA3TD,qCAA4D;AAC5D,yCAAiE;AACjE,6CAA0C;AAE1C,SAAgB,cAAc,CAAC,IAAY;IACzC,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAS,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,IAAA,sBAAU,EAAC,SAAS,CAAC;YAAE,SAAS;QACrC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,IAAA,oBAAU,EAAC,IAAI,EAAE,mBAAS,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,QAAgB,EAChB,SAAoC,oBAAU;IAE9C,MAAM,IAAI,GAAG,mDAAmD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjC,MAAM,UAAU,GAAG;QACjB,IAAA,gBAAI,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;QAC3C,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,QAAQ,CAAC;AACvE,CAAC;AAED,qEAAqE;AACrE,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,0GAA0G,CAAC,IAAI,CACpH,IAAI,CACL,CAAC;AACJ,CAAC;AAED,iEAAiE;AACpD,QAAA,mBAAmB,GAC9B,mFAAmF,CAAC;AAEtF,SAAgB,WAAW,CAAC,OAY3B;IACC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO;QACL,WAAW;QACX,2BAAmB;QACnB,SAAS;QACT,WAAW;QACX,eAAe,IAAA,uBAAU,EAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE;QAChE,MAAM,IAAA,uBAAU,EAAC,IAAI,CAAC,EAAE;QACxB,QAAQ;QACR,KAAK,IAAA,uBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE;QACzC,QAAQ;QACR,yBAAyB,IAAA,uBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE;QACrE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI,IAAA,uBAAU,EAAC,KAAK,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAC1B,GAAG,aAAa,CAAC,IAAI,CAAC;QACtB,QAAQ,IAAA,uBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAA,uBAAU,EAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B;QAC7F,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AAExE;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAKhC;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,oBAAU,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,gGAAgG;IAChG,oEAAoE;IACpE,MAAM,GAAG,GAAG,CAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAO,CAAC,CAAC,CAAC,MAAM,CACrF,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3C,CAAC;IACF,OAAO;QACL,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,wBAAgB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACU,QAAA,cAAc,GAAG,WAAW,CAAC;AAC1C,yEAAyE;AAC5D,QAAA,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO;QACL,SAAS,IAAA,uBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,sBAAc,CAAC,CAAC,EAAE;QACzD,+EAA+E;QAC/E,iDAAiD;QACjD,qDAAqD,2BAAmB,2BAA2B;KACpG,CAAC;AACJ,CAAC;AAED,gFAAgF;AACnE,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAEvC;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO;;;;8CAIqC,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;uCAClC,GAAG,CAAC,IAAI,CAAC;gEACgB,GAAG,CAAC,IAAI,CAAC;;;mCAGtC,4BAAoB;sCACjB,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,sBAAc,CAAC,CAAC;wCACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,sBAAc,CAAC,CAAC;;CAE9E,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW;IACzB,OAAO;QACL,QAAQ;QACR,4BAA4B;QAC5B,EAAE;QACF,WAAW;QACX,aAAa;QACb,2BAA2B;QAC3B,+BAA+B;QAC/B,oBAAoB;QACpB,eAAe;QACf,kBAAkB,4BAAoB,EAAE;QACxC,gBAAgB;QAChB,EAAE;QACF,WAAW;QACX,yBAAyB;QACzB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAiBD;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,GAAG,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACjD,KAAK,GAAG,GAAG,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBAAE,KAAK,IAAI,CAAC,CAAC;gBAChF,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;YACD,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,IAAI,IAAI,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzC,2CAA2C;YAC3C,MAAM;QACR,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAgB,cAAc,CAAC,KAAa,EAAE,IAAY;IACxD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAChC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gCAAgC,EAAE,IAAI,CAAC,CAAC;SACrE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC;AACjF,CAAC;AAED,oEAAoE;AACpE,SAAgB,YAAY,CAAC,OAA2B;IACtD,OAAO,MAAM,CAAC,WAAW,CACvB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAAc,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,MAAM,IAAA,uBAAU,EAAC,IAAI,CAAC,EAAE;QACxB,KAAK,IAAA,uBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE;QACzC,GAAG,aAAa,CAAC,IAAI,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,MAAM,QAAQ,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;iBAC1C,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,gBAAgB;gBAAE,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;;gBAC7D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/D,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,IAAA,uBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;IAC3D,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,2BAAmB,CAAC;QAC/C,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;QACzE,OAAO;QACP,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/cli/runtime/backend-probe.d.ts

@@ -0,0 +1,34 @@
+import { type SpawnSyncReturns } from 'node:child_process';
+/**
+ * The oldest backend CLI versions a MAMA release was verified on. MAMA depends on their sandbox,
+ * hook, settings and permission behaviour, so an older CLI is refused; raise these only after
+ * verifying a newer one.
+ */
+export declare const MINIMUM_BACKEND_VERSIONS: {
+    readonly claude: "2.1.299";
+    readonly codex: "0.160.1";
+};
+export type BackendName = keyof typeof MINIMUM_BACKEND_VERSIONS;
+export type ProbeRun = (command: string, args: string[], env?: NodeJS.ProcessEnv) => SpawnSyncReturns<string>;
+export declare function defaultProbeRun(command: string, args: string[], env?: NodeJS.ProcessEnv): SpawnSyncReturns<string>;
+/** Compare dotted numeric versions; a missing part counts as 0. */
+export declare function compareVersions(left: string, right: string): number;
+export interface BackendProbe {
+    readonly version: string | null;
+    readonly minimum: string;
+    readonly versionOk: boolean;
+    readonly loggedIn: boolean;
+    /** Why the version or the login could not be read; never a credential. */
+    readonly problem: string | null;
+}
+/**
+ * Read a backend CLI's version and whether it is signed in, without printing anything the CLI
+ * says about the account. `env` is the environment the daemon gives the backend, so a login that
+ * only this shell's variables provide does not count; Codex is asked about the managed home.
+ */
+export declare function probeBackend(backend: BackendName, executable: string, options?: {
+    codexHome?: string;
+    run?: ProbeRun;
+    env?: NodeJS.ProcessEnv;
+}): BackendProbe;
+//# sourceMappingURL=backend-probe.d.ts.map

package/dist/cli/runtime/backend-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-probe.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/backend-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;CAG3B,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAEhE,MAAM,MAAM,QAAQ,GAAG,CACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,KACpB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE9B,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GACtB,gBAAgB,CAAC,MAAM,CAAC,CAE1B;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAQnE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,QAAQ,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAC5E,YAAY,CA6Cd"}

package/dist/cli/runtime/backend-probe.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MINIMUM_BACKEND_VERSIONS = void 0;
+exports.defaultProbeRun = defaultProbeRun;
+exports.compareVersions = compareVersions;
+exports.probeBackend = probeBackend;
+const node_child_process_1 = require("node:child_process");
+/**
+ * The oldest backend CLI versions a MAMA release was verified on. MAMA depends on their sandbox,
+ * hook, settings and permission behaviour, so an older CLI is refused; raise these only after
+ * verifying a newer one.
+ */
+exports.MINIMUM_BACKEND_VERSIONS = {
+    claude: '2.1.299',
+    codex: '0.160.1',
+};
+function defaultProbeRun(command, args, env) {
+    return (0, node_child_process_1.spawnSync)(command, args, { encoding: 'utf8', timeout: 20_000, env: env ?? process.env });
+}
+/** Compare dotted numeric versions; a missing part counts as 0. */
+function compareVersions(left, right) {
+    const a = left.split('.').map((part) => Number.parseInt(part, 10) || 0);
+    const b = right.split('.').map((part) => Number.parseInt(part, 10) || 0);
+    for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
+        const difference = (a[index] ?? 0) - (b[index] ?? 0);
+        if (difference !== 0)
+            return difference;
+    }
+    return 0;
+}
+/**
+ * Read a backend CLI's version and whether it is signed in, without printing anything the CLI
+ * says about the account. `env` is the environment the daemon gives the backend, so a login that
+ * only this shell's variables provide does not count; Codex is asked about the managed home.
+ */
+function probeBackend(backend, executable, options = {}) {
+    const run = options.run ?? defaultProbeRun;
+    const env = options.env ?? process.env;
+    const minimum = exports.MINIMUM_BACKEND_VERSIONS[backend];
+    const versionRun = run(executable, ['--version'], env);
+    const version = versionRun.error
+        ? null
+        : (/(\d+\.\d+\.\d+)/.exec(`${versionRun.stdout ?? ''}`)?.[1] ?? null);
+    if (version === null) {
+        return {
+            version: null,
+            minimum,
+            versionOk: false,
+            loggedIn: false,
+            problem: `${backend} --version printed no version`,
+        };
+    }
+    const versionOk = compareVersions(version, minimum) >= 0;
+    if (backend === 'claude') {
+        const status = run(executable, ['auth', 'status', '--json'], env);
+        let loggedIn = false;
+        try {
+            loggedIn = JSON.parse(`${status.stdout ?? ''}`).loggedIn === true;
+        }
+        catch {
+            return {
+                version,
+                minimum,
+                versionOk,
+                loggedIn: false,
+                problem: 'claude auth status did not answer in JSON',
+            };
+        }
+        return { version, minimum, versionOk, loggedIn, problem: null };
+    }
+    const status = run(executable, ['login', 'status'], {
+        ...env,
+        ...(options.codexHome ? { CODEX_HOME: options.codexHome } : {}),
+    });
+    return {
+        version,
+        minimum,
+        versionOk,
+        loggedIn: !status.error && status.status === 0,
+        problem: null,
+    };
+}
+//# sourceMappingURL=backend-probe.js.map

package/dist/cli/runtime/backend-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-probe.js","sourceRoot":"","sources":["../../../src/cli/runtime/backend-probe.ts"],"names":[],"mappings":";;;AAoBA,0CAMC;AAGD,0CAQC;AAgBD,oCAiDC;AAtGD,2DAAsE;AAEtE;;;;GAIG;AACU,QAAA,wBAAwB,GAAG;IACtC,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;CACR,CAAC;AAUX,SAAgB,eAAe,CAC7B,OAAe,EACf,IAAc,EACd,GAAuB;IAEvB,OAAO,IAAA,8BAAS,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,mEAAmE;AACnE,SAAgB,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAWD;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,OAAoB,EACpB,UAAkB,EAClB,UAA2E,EAAE;IAE7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,gCAAwB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,GAAG,OAAO,+BAA+B;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAA4B,CAAC,QAAQ,KAAK,IAAI,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO;gBACP,OAAO;gBACP,SAAS;gBACT,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,2CAA2C;aACrD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;QAClD,GAAG,GAAG;QACN,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,OAAO;QACL,OAAO;QACP,OAAO;QACP,SAAS;QACT,QAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAC9C,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/cli/runtime/backup.d.ts

@@ -0,0 +1,114 @@
+import { type Stats } from 'node:fs';
+import type { W1Config } from '../../runtime/config.js';
+/** One path in a backup, named by its place in the archive. */
+export interface BackupEntry {
+    readonly path: string;
+    readonly type: 'file' | 'dir' | 'symlink';
+    /** Permission bits as they were. */
+    readonly mode: number;
+    readonly size?: number;
+    readonly sha256?: string;
+    /** A symlink's target, as stored. */
+    readonly target?: string;
+}
+export interface BackupManifest {
+    readonly format: 'mama-backup';
+    readonly version: 1;
+    readonly createdAt: string;
+    readonly mama: string;
+    readonly platform: string;
+    /** The highest migration applied to the database, or null when it has none. */
+    readonly schemaVersion: number | null;
+    readonly includesSecrets: boolean;
+    readonly includesLogs: boolean;
+    /** Each archive prefix and the physical path it came from. */
+    readonly roots: Record<string, string>;
+    /** Every path the install was configured with, as written and as it really is. */
+    readonly configured: Record<string, ConfiguredPath | null>;
+    /** MAMA's own databases in the archive, each checked with integrity_check. */
+    readonly databases: string[];
+    readonly entries: BackupEntry[];
+}
+/** A tree or file archived under `prefix`, and which of its paths to keep. */
+export interface BackupSource {
+    readonly prefix: string;
+    /** Physical path. */
+    readonly path: string;
+    readonly keep: (relativePath: string, stat: Stats) => boolean;
+}
+export interface BackupPlan {
+    readonly sources: BackupSource[];
+    /** The database file boot opens; the archive holds a copy taken with SQLite's backup. */
+    readonly database: string;
+    readonly configured: Record<string, ConfiguredPath | null>;
+    /** Top-level names in the MAMA root that this version does not read. */
+    readonly leftOut: string[];
+    /** Credentials that exist and were left out because they were not asked for. */
+    readonly secretsLeftOut: string[];
+}
+/** runtime/ files the current code reads back; the rest of runtime/ is per boot or per run. */
+/** Files directly in the MAMA root that a backup keeps; restore accepts no other root files. */
+export declare const ROOT_FILES: readonly ["config.yaml", "connectors.json", "owner-policy.md", "report-slots.json", "start.sh"];
+/** Folders in the MAMA root that a backup keeps (logs only when asked), besides the workspace. */
+export declare const ROOT_DIRS: readonly ["connectors", "downloads", "runtime", "logs"];
+/** Folders in runtime/ that a backup keeps. */
+export declare const RUNTIME_DIRS: readonly ["backfill"];
+export declare const RUNTIME_FILES: Set<string>;
+/** Setting paths whose string value sits under a credential name. Values are never read out. */
+export declare function secretShapedKeys(value: unknown): string[];
+/** A configured path as written and as it really is; restore rewrites both. */
+export interface ConfiguredPath {
+    readonly configured: string;
+    readonly physical: string;
+}
+/**
+ * What a backup holds, from what the current code reads and writes (not from what a root happens
+ * to contain): the MAMA root's state, the database, the workspace, every person's tree under
+ * member_root, the published common skills, the wiki MAMA writes and Jev's vocabulary.
+ * Credentials, and any file that can hold one, come only with `includeSecrets`; logs only with
+ * `includeLogs`.
+ */
+export declare function planBackup(config: W1Config, configPath: string, options: {
+    includeSecrets: boolean;
+    includeLogs: boolean;
+    home: string;
+}): BackupPlan;
+export interface CollectedEntries {
+    readonly entries: BackupEntry[];
+    /** Each entry's physical path, in archive order. */
+    readonly absolutes: string[];
+}
+/**
+ * The entries each source keeps, in the order tar will write them. A path reached twice (through
+ * overlapping sources) is kept once, under the first source that reached it.
+ */
+export declare function collectEntries(sources: readonly BackupSource[]): Promise<CollectedEntries>;
+/** Copy a SQLite database with its backup API and confirm the copy with integrity_check. */
+export declare function copyDatabase(source: string, destination: string): Promise<{
+    schemaVersion: number | null;
+}>;
+/**
+ * integrity_check must answer ok. For MAMA's main database, also read the highest applied
+ * migration; another database's tables are its own.
+ */
+export declare function checkDatabase(path: string, options?: {
+    schema: boolean;
+}): {
+    schemaVersion: number | null;
+};
+/** The raw stores under connectors/: MAMA's own databases besides the main one. */
+export declare function rawStores(root: string): string[];
+/**
+ * Write exactly the collected entries, manifest first, each under its archive name, with modes
+ * and symlinks as they are. The file is created 0600 and flushed to disk before it returns.
+ */
+export declare function writeArchive(file: string, manifestPath: string, collected: CollectedEntries): Promise<void>;
+/** Flush a file or a folder's entries to disk. */
+export declare function syncPath(path: string): void;
+/**
+ * Read the archive back: the manifest comes first, every entry it lists is there once with its
+ * type and link target, nothing else is, and every file hashes to what the manifest recorded.
+ */
+export declare function verifyArchive(file: string, manifest: BackupManifest): Promise<void>;
+export declare function archiveName(now: Date): string;
+//# sourceMappingURL=backup.d.ts.map

package/dist/cli/runtime/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/backup.ts"],"names":[],"mappings":"AACA,OAAO,EAWL,KAAK,KAAK,EACX,MAAM,SAAS,CAAC;AAKjB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAKxD,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IAC1C,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;CACjC;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC;CAC/D;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IACjC,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;IAC3D,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,+FAA+F;AAC/F,gGAAgG;AAChG,eAAO,MAAM,UAAU,iGAMb,CAAC;AACX,kGAAkG;AAClG,eAAO,MAAM,SAAS,yDAA0D,CAAC;AACjF,+CAA+C;AAC/C,eAAO,MAAM,YAAY,uBAAwB,CAAC;AAClD,eAAO,MAAM,aAAa,aAOxB,CAAC;AA0BH,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAkBzD;AAgBD,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAMD;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,QAAQ,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvE,UAAU,CAyLZ;AAqBD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;IAChC,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiChG;AAED,4FAA4F;AAC5F,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAQ3C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,EAAE,OAAO,CAAA;CAAqB,GAC9C;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAyBlC;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMhD;AASD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,gBAAgB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,kDAAkD;AAClD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO3C;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkEzF;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,CAG7C"}