@justfortytwo/installer 0.1.0

package/dist/commands/init.js

@@ -0,0 +1,284 @@
+// init — first-run install + scaffold. The `create-fortytwo` happy path.
+//
+// End state after a successful init:
+//   - .fortytwo/identity.json  written from captured answers (gitignored)
+//   - .env                     written with secrets + runtime config (gitignored)
+//   - CLAUDE.md + context/*    rendered from @justfortytwo/persona templates
+//   - .mcp.json                wired to the memory MCP server
+//   - Ollama EMBED_MODEL pulled (warn-only); the memory DB migrated
+//   - .fortytwo/state.json     records the resolved sibling version set (rollback baseline)
+//   - next-step guidance: set ALLOWED_CHAT_IDS / attach the channel
+//
+// Authorization model (v0): the channel allowlist is the static ALLOWED_CHAT_IDS
+// (written to .env); the bridge authorizes off it. The dynamic /login pairing
+// handshake is a future enhancement — see pair.ts — and is intentionally NOT the
+// init path yet.
+import { writeFileSync, readFileSync, existsSync, mkdirSync } from 'node:fs';
+import { join, resolve, dirname } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { createInterface } from 'node:readline/promises';
+import { writeIdentity, recordVersionSet } from '../state.js';
+import { renderPersona, loadPersonaManifest } from '../render.js';
+import { loadMemory, readInstalledVersion, readSelfCompatRanges } from '../engine.js';
+// The embedder model the engine standardizes on (privacy: local-only embeddings).
+export const EMBED_MODEL = 'qwen3-embedding:0.6b';
+export const DEFAULT_OLLAMA_BASE_URL = 'http://localhost:11434';
+export const DEFAULT_DB_PATH = 'db/fortytwo.db';
+function envKey(key) {
+    return `FORTYTWO_${key.toUpperCase()}`;
+}
+function isEmpty(v) {
+    if (v == null)
+        return true;
+    if (typeof v === 'string')
+        return v.trim() === '';
+    if (Array.isArray(v))
+        return v.length === 0;
+    return false;
+}
+function coerceList(v) {
+    if (Array.isArray(v))
+        return v.map(String);
+    if (typeof v === 'string')
+        return v.split(/\r?\n|,/).map((s) => s.trim()).filter(Boolean);
+    return [];
+}
+/**
+ * Resolve every manifest field from (in precedence order) the answers file, the
+ * environment (FORTYTWO_<KEY>), CLI flags, then the manifest default. List
+ * fields are coerced to arrays; null/absent values become '' or [] so the
+ * renderer (which fails loud on null) never sees a hole. Required fields left
+ * empty are reported back, not silently defaulted.
+ */
+export function resolveAnswers(fields, sources) {
+    const env = sources.env ?? {};
+    const flags = sources.flags ?? {};
+    const file = sources.answersFile ?? {};
+    const answers = {};
+    const missingRequired = [];
+    for (const f of fields) {
+        const raw = file[f.key] ?? env[envKey(f.key)] ?? flags[f.key] ?? f.default ?? null;
+        const value = f.type === 'list' ? coerceList(raw) : raw == null ? '' : String(raw);
+        answers[f.key] = value;
+        if (f.required && isEmpty(value))
+            missingRequired.push(f.key);
+    }
+    return { answers, missingRequired };
+}
+/**
+ * Merge `vars` into existing `.env` content: update matching keys in place,
+ * append new ones, preserve comments and unrelated lines. Secrets NEVER go to
+ * identity.json — only here.
+ */
+export function mergeEnvContent(existing, vars) {
+    const out = [];
+    const written = new Set();
+    for (const line of existing ? existing.split('\n') : []) {
+        const key = line.match(/^([A-Z0-9_]+)=/)?.[1];
+        if (key && Object.prototype.hasOwnProperty.call(vars, key)) {
+            out.push(`${key}=${vars[key]}`);
+            written.add(key);
+        }
+        else {
+            out.push(line);
+        }
+    }
+    while (out.length && out[out.length - 1] === '')
+        out.pop();
+    for (const [k, v] of Object.entries(vars))
+        if (!written.has(k))
+            out.push(`${k}=${v}`);
+    return out.join('\n') + '\n';
+}
+/** Add (or replace) the `fortytwo-memory` MCP server entry, preserving others. */
+export function buildMcpConfig(existing, opts) {
+    const cfg = existing ?? { mcpServers: {} };
+    cfg.mcpServers = cfg.mcpServers ?? {};
+    cfg.mcpServers['fortytwo-memory'] = {
+        command: 'npx',
+        args: ['-y', '@justfortytwo/memory'],
+        env: { DB_PATH: opts.dbPath, EMBED_MODEL, OLLAMA_BASE_URL: DEFAULT_OLLAMA_BASE_URL },
+    };
+    return cfg;
+}
+/** Pin each declared sibling to its installed version; skip the absent. */
+export function buildVersionPins(compatRanges, readVersion) {
+    const pins = [];
+    for (const [name, range] of Object.entries(compatRanges)) {
+        const resolved = readVersion(name);
+        if (resolved)
+            pins.push({ name, range, resolved });
+    }
+    return pins;
+}
+// --- filesystem wrappers (thin; the merge logic above is what's unit-tested) ---
+function writeEnv(secrets, root) {
+    const path = join(root, '.env');
+    const existing = existsSync(path) ? readFileSync(path, 'utf8') : '';
+    writeFileSync(path, mergeEnvContent(existing, secrets), 'utf8');
+}
+function writeMcpJson(root, dbPath) {
+    const path = join(root, '.mcp.json');
+    const existing = existsSync(path)
+        ? JSON.parse(readFileSync(path, 'utf8'))
+        : null;
+    writeFileSync(path, JSON.stringify(buildMcpConfig(existing, { dbPath }), null, 2) + '\n', 'utf8');
+}
+function recordInstalledSet(root) {
+    const pins = buildVersionPins(readSelfCompatRanges(), readInstalledVersion);
+    recordVersionSet(pins, root);
+    return pins;
+}
+/**
+ * Provision local infra: pull the embedder model (warn-only, like wakeup.sh —
+ * the engine degrades to a fake embedder rather than hard-failing) and run the
+ * memory DB migrations via the memory package (the engine owns the schema; the
+ * CLI must not duplicate it).
+ */
+async function provision(opts) {
+    const notes = [];
+    // 1. embedder model (best-effort)
+    const pulled = spawnSync('ollama', ['pull', opts.embedModel], { stdio: 'ignore' });
+    if (pulled.status !== 0) {
+        notes.push(`! could not pull ${opts.embedModel} via ollama (semantic recall will degrade until it is present)`);
+    }
+    // 2. db migrations via the memory engine
+    const mem = await loadMemory();
+    if (mem && typeof mem.openDb === 'function' && typeof mem.runMigrations === 'function') {
+        mkdirSync(dirname(resolve(opts.dbPath)), { recursive: true });
+        const handle = mem.openDb(opts.dbPath);
+        try {
+            await mem.runMigrations(handle.k);
+            notes.push('✓ memory DB migrated');
+        }
+        finally {
+            try {
+                await handle.k?.destroy?.();
+            }
+            catch { /* best-effort */ }
+            try {
+                handle.close?.();
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    else {
+        notes.push('! @justfortytwo/memory not installed — skipped DB migration (run `fortytwo init` again after installing the engine)');
+    }
+    return notes;
+}
+/** Parse argv into structured init flags. `--key value` maps to a field/secret. */
+function parseInitArgs(argv) {
+    const flags = {};
+    const secrets = {};
+    let yes = false;
+    let answersFile;
+    let ollamaBaseUrl = process.env.OLLAMA_BASE_URL ?? DEFAULT_OLLAMA_BASE_URL;
+    let dbPath = process.env.DB_PATH ?? DEFAULT_DB_PATH;
+    const SECRET_FLAGS = {
+        'telegram-bot-token': 'TELEGRAM_BOT_TOKEN',
+        'allowed-chat-ids': 'ALLOWED_CHAT_IDS',
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === undefined)
+            continue;
+        if (a === '--yes' || a === '-y') {
+            yes = true;
+            continue;
+        }
+        if (!a.startsWith('--'))
+            continue;
+        const name = a.slice(2);
+        const val = argv[++i] ?? '';
+        if (name === 'answers')
+            answersFile = val;
+        else if (name === 'ollama-base-url')
+            ollamaBaseUrl = val;
+        else if (name === 'db-path')
+            dbPath = val;
+        else if (SECRET_FLAGS[name])
+            secrets[SECRET_FLAGS[name]] = val;
+        else
+            flags[name.replace(/-/g, '_')] = val; // --agent-name -> agent_name
+    }
+    if (process.env.TELEGRAM_BOT_TOKEN)
+        secrets.TELEGRAM_BOT_TOKEN ??= process.env.TELEGRAM_BOT_TOKEN;
+    if (process.env.ALLOWED_CHAT_IDS)
+        secrets.ALLOWED_CHAT_IDS ??= process.env.ALLOWED_CHAT_IDS;
+    return { yes, answersFile, flags, secrets, ollamaBaseUrl, dbPath };
+}
+/** Prompt (readline) for the required fields still missing. TTY only. */
+async function promptMissing(fields, missing, answers) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        for (const key of missing) {
+            const field = fields.find((f) => f.key === key);
+            const ans = (await rl.question(`${field.prompt}\n> `)).trim();
+            answers[key] = field.type === 'list' ? coerceList(ans) : ans;
+        }
+    }
+    finally {
+        rl.close();
+    }
+}
+export async function runInit(argv) {
+    const root = process.cwd();
+    const opts = parseInitArgs(argv);
+    const manifest = loadPersonaManifest();
+    const answersFile = opts.answersFile && existsSync(opts.answersFile)
+        ? JSON.parse(readFileSync(opts.answersFile, 'utf8'))
+        : undefined;
+    const resolved = resolveAnswers(manifest.fields, { answersFile, env: process.env, flags: opts.flags });
+    let { answers } = resolved;
+    const { missingRequired } = resolved;
+    if (missingRequired.length > 0) {
+        const interactive = process.stdin.isTTY && !opts.yes;
+        if (!interactive) {
+            process.stderr.write(`init: missing required answers: ${missingRequired.join(', ')}\n` +
+                `Provide them via --answers <file.json>, FORTYTWO_<KEY> env, or run interactively.\n`);
+            return 2;
+        }
+        await promptMissing(manifest.fields, missingRequired, answers);
+        const recheck = resolveAnswers(manifest.fields, { answersFile: answers, env: {}, flags: {} });
+        answers = recheck.answers;
+        if (recheck.missingRequired.length > 0) {
+            process.stderr.write(`init: still missing required answers: ${recheck.missingRequired.join(', ')}\n`);
+            return 2;
+        }
+    }
+    const identity = {
+        identityVersion: 1,
+        answers,
+        createdAt: new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+    };
+    writeIdentity(identity, root);
+    // Seed runtime config alongside any provided secrets.
+    writeEnv({
+        OLLAMA_BASE_URL: opts.ollamaBaseUrl,
+        EMBED_MODEL,
+        DB_PATH: opts.dbPath,
+        ...opts.secrets,
+    }, root);
+    const render = renderPersona(identity, { root });
+    writeMcpJson(root, opts.dbPath);
+    const provisionNotes = await provision({ ollamaBaseUrl: opts.ollamaBaseUrl, embedModel: EMBED_MODEL, dbPath: opts.dbPath });
+    const pins = recordInstalledSet(root);
+    // Report.
+    const out = process.stdout;
+    out.write(`✓ wrote .fortytwo/identity.json (${Object.keys(answers).length} answers)\n`);
+    out.write(`✓ wrote .env + .mcp.json (memory MCP wired)\n`);
+    out.write(`✓ rendered persona: ${render.written.length} written, ${render.skipped.length} preserved\n`);
+    for (const n of provisionNotes)
+        out.write(`  ${n}\n`);
+    out.write(`✓ recorded ${pins.length} installed engine package(s)\n`);
+    if (!opts.secrets.ALLOWED_CHAT_IDS) {
+        out.write(`\nNext: set ALLOWED_CHAT_IDS in .env to your Telegram chat id, then start the channel bridge.\n`);
+    }
+    else {
+        out.write(`\nNext: start the channel bridge; messages from ${opts.secrets.ALLOWED_CHAT_IDS} are authorized.\n`);
+    }
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,qCAAqC;AACrC,0EAA0E;AAC1E,kFAAkF;AAClF,6EAA6E;AAC7E,8DAA8D;AAC9D,oEAAoE;AACpE,4FAA4F;AAC5F,oEAAoE;AACpE,EAAE;AACF,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,iBAAiB;AAEjB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEtF,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAmBhD,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,YAAY,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACzC,CAAC;AACD,SAAS,OAAO,CAAC,CAAU;IACzB,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1F,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAuB,EACvB,OAAsB;IAEtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QACnF,MAAM,KAAK,GAAsB,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,IAA4B;IAC5E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAC/B,CAAC;AAOD,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,QAA0B,EAAE,IAAwB;IACjF,MAAM,GAAG,GAAc,QAAQ,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACtD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IACtC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG;QAClC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACpC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,uBAAuB,EAAE;KACrF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAC9B,YAAoC,EACpC,WAA4C;IAE5C,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAElF,SAAS,QAAQ,CAAC,OAA+B,EAAE,IAAY;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAqB,UAAU,CAAC,IAAI,CAAC;QACjD,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe;QACvD,CAAC,CAAC,IAAI,CAAC;IACT,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,gBAAgB,CAAC,oBAAoB,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC5E,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,IAAmE;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,kCAAkC;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,UAAU,gEAAgE,CAAC,CAAC;IAClH,CAAC;IACD,yCAAyC;IACzC,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,OAAQ,GAAmC,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACxH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAuC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAO,GAAmE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnG,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,MAAO,MAAM,CAAC,CAAuC,EAAE,OAAO,EAAE,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACvG,IAAI,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,qHAAqH,CAAC,CAAC;IACpI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,mFAAmF;AACnF,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,WAA+B,CAAC;IACpC,IAAI,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB,CAAC;IAC3E,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC;IACpD,MAAM,YAAY,GAA2B;QAC3C,oBAAoB,EAAE,oBAAoB;QAC1C,kBAAkB,EAAE,kBAAkB;KACvC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS;YAAE,WAAW,GAAG,GAAG,CAAC;aACrC,IAAI,IAAI,KAAK,iBAAiB;YAAE,aAAa,GAAG,GAAG,CAAC;aACpD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,GAAG,GAAG,CAAC;aACrC,IAAI,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;;YAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,6BAA6B;IAC1E,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,CAAC,kBAAkB,KAAK,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAClG,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,CAAC,gBAAgB,KAAK,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC5F,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AACrE,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,aAAa,CAAC,MAAuB,EAAE,OAAiB,EAAE,OAAgB;IACvF,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAE,CAAC;YACjD,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;QAClE,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAA6B;QACjF,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACvG,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC3B,MAAM,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC;IAErC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACrD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACjE,qFAAqF,CACtF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC1B,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtG,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAa;QACzB,eAAe,EAAE,CAAC;QAClB,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE9B,sDAAsD;IACtD,QAAQ,CACN;QACE,eAAe,EAAE,IAAI,CAAC,aAAa;QACnC,WAAW;QACX,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,GAAG,IAAI,CAAC,OAAO;KAChB,EACD,IAAI,CACL,CAAC;IAEF,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEtC,UAAU;IACV,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,GAAG,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC;IACxF,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,CAAC,uBAAuB,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,cAAc;QAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,gCAAgC,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;IAC/G,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,mDAAmD,IAAI,CAAC,OAAO,CAAC,gBAAgB,oBAAoB,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/pair.d.ts

@@ -0,0 +1,2 @@
+export declare function runPair(_argv: string[]): Promise<number>;
+//# sourceMappingURL=pair.d.ts.map

package/dist/commands/pair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.d.ts","sourceRoot":"","sources":["../../src/commands/pair.ts"],"names":[],"mappings":"AAkBA,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAe9D"}

package/dist/commands/pair.js

@@ -0,0 +1,26 @@
+// pair — issue a one-time `/login` pairing code for a channel.
+//
+// Unlike init (which also provisions), pair is the standalone "bind another
+// device/chat" verb. It mints a short-lived code; the owner sends `/login <code>`
+// from the target chat, and the channel adapter confirms the binding (adding the
+// chat to the allowlist and recording it in identity.json's `channels`).
+//
+// This is the lifecycle counterpart to `unbind`.
+export async function runPair(_argv) {
+    // BLOCKED: dynamic /login pairing requires that an issued challenge be
+    // redeemable by the SEPARATELY-RUNNING bridge. TelegramAdapter currently keeps
+    // pending challenges in an in-memory Map, so a code minted by this CLI process
+    // is invisible to the bridge process — cross-process pairing can't work until
+    // @justfortytwo/telegram persists challenges in its store. The path that works
+    // today is the static allowlist: set ALLOWED_CHAT_IDS in .env (fortytwo init
+    // writes it), which the bridge authorizes against directly.
+    void resolveChannel;
+    process.stderr.write('pair: dynamic /login pairing is not available yet (it needs cross-process ' +
+        'challenge persistence in @justfortytwo/telegram). For now, authorize a chat ' +
+        'by adding its id to ALLOWED_CHAT_IDS in .env.\n');
+    return 2;
+}
+function resolveChannel(_flags, _identity) {
+    return 'telegram';
+}
+//# sourceMappingURL=pair.js.map

package/dist/commands/pair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.js","sourceRoot":"","sources":["../../src/commands/pair.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,kFAAkF;AAClF,iFAAiF;AACjF,yEAAyE;AACzE,EAAE;AACF,iDAAiD;AAWjD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAe;IAC3C,uEAAuE;IACvE,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,4DAA4D;IAC5D,KAAK,cAAc,CAAC;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4EAA4E;QAC5E,8EAA8E;QAC9E,iDAAiD,CAClD,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,MAAiB,EAAE,SAA0B;IACnE,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/commands/rollback.d.ts

@@ -0,0 +1,2 @@
+export declare function runRollback(_argv: string[]): Promise<number>;
+//# sourceMappingURL=rollback.d.ts.map

package/dist/commands/rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AAWA,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBlE"}

package/dist/commands/rollback.js

@@ -0,0 +1,32 @@
+// rollback — restore the prior version set after a bad update.
+//
+// The counterpart to `update`'s manual-rollback safety model. update records the
+// pre-upgrade set into state.json's `previous`; rollback re-installs exactly that
+// set and rotates the ledger back. This is the ONLY safety net under the
+// "latest-compatible, no bill-of-materials" policy: there's no canonical "known
+// good" list except what we captured at the last successful install.
+import { readState, recordVersionSet } from '../state.js';
+import { runDoctorChecks } from './doctor.js';
+export async function runRollback(_argv) {
+    // TODO(impl):
+    // Real local validation of the rollback ledger.
+    const state = readState();
+    if (!state) {
+        process.stderr.write('rollback: nothing to roll back — run `fortytwo init` first.\n');
+        return 2;
+    }
+    if (!state.previous) {
+        process.stderr.write('rollback: no prior version set recorded (only one install so far, or already rolled back).\n');
+        return 2;
+    }
+    // BLOCKED: the actual re-install of the previous set needs the npm registry
+    // (same blocker as `update`). The ledger is valid and the target is known —
+    // we just can't fetch the versions until the engine packages are published.
+    void recordVersionSet;
+    void runDoctorChecks;
+    process.stderr.write('rollback: not available yet — restoring the previous set re-installs from npm, ' +
+        'and the @justfortytwo/* engine packages are not published. Would restore:\n' +
+        state.previous.map((p) => `  ${p.name}@${p.resolved}`).join('\n') + '\n');
+    return 2;
+}
+//# sourceMappingURL=rollback.js.map

package/dist/commands/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/commands/rollback.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,yEAAyE;AACzE,gFAAgF;AAChF,qEAAqE;AAErE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAe;IAC/C,cAAc;IACd,gDAAgD;IAChD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;QACrH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,KAAK,gBAAgB,CAAC;IAAC,KAAK,eAAe,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iFAAiF;QACjF,6EAA6E;QAC7E,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACzE,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/unbind.d.ts

@@ -0,0 +1,16 @@
+import { type ChannelBinding } from '../state.js';
+/**
+ * Pure prune: drop bindings matching the selector. With `all`, drop every
+ * binding for the (optional) channel; otherwise drop bindings whose
+ * allowedChatIds include `chatId`. Bindings for other channels are untouched.
+ */
+export declare function pruneChannels(channels: ChannelBinding[], sel: {
+    channel?: string;
+    chatId?: string;
+    all?: boolean;
+}): {
+    kept: ChannelBinding[];
+    removed: ChannelBinding[];
+};
+export declare function runUnbind(argv: string[]): Promise<number>;
+//# sourceMappingURL=unbind.d.ts.map

package/dist/commands/unbind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbind.d.ts","sourceRoot":"","sources":["../../src/commands/unbind.ts"],"names":[],"mappings":"AAOA,OAAO,EAA+B,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAQ/E;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,cAAc,EAAE,EAC1B,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAAC,OAAO,EAAE,cAAc,EAAE,CAAA;CAAE,CASvD;AAcD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB/D"}

package/dist/commands/unbind.js

@@ -0,0 +1,67 @@
+// unbind — revoke a channel binding (the inverse of `pair`).
+//
+// Removes the binding from identity.json's `channels`. The actual authorization
+// today is the static ALLOWED_CHAT_IDS in .env, so unbind also reminds the owner
+// to drop the id there. (Server-side challenge revocation is N/A until dynamic
+// pairing lands in the channel adapter — see pair.ts.)
+import { readIdentity, writeIdentity } from '../state.js';
+/**
+ * Pure prune: drop bindings matching the selector. With `all`, drop every
+ * binding for the (optional) channel; otherwise drop bindings whose
+ * allowedChatIds include `chatId`. Bindings for other channels are untouched.
+ */
+export function pruneChannels(channels, sel) {
+    const removed = [];
+    const kept = channels.filter((c) => {
+        if (sel.channel && c.channel !== sel.channel)
+            return true;
+        const match = sel.all === true || (sel.chatId != null && (c.allowedChatIds ?? []).includes(sel.chatId));
+        if (match) {
+            removed.push(c);
+            return false;
+        }
+        return true;
+    });
+    return { kept, removed };
+}
+function parseUnbindArgs(argv) {
+    const flags = {};
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === undefined)
+            continue;
+        if (a === '--all')
+            flags.all = true;
+        else if (a === '--channel')
+            flags.channel = argv[++i];
+        else if (a === '--chat-id')
+            flags.chatId = argv[++i];
+    }
+    return flags;
+}
+export async function runUnbind(argv) {
+    const root = process.cwd();
+    const flags = parseUnbindArgs(argv);
+    const identity = readIdentity(root);
+    if (!identity) {
+        process.stderr.write('unbind: no .fortytwo/identity.json — run `fortytwo init` first.\n');
+        return 2;
+    }
+    if (!flags.all && !flags.chatId) {
+        process.stderr.write('unbind: specify --chat-id <id> or --all (optionally --channel <name>).\n');
+        return 2;
+    }
+    const { kept, removed } = pruneChannels(identity.channels ?? [], flags);
+    if (removed.length === 0) {
+        process.stdout.write('unbind: no matching binding found; nothing changed.\n');
+        return 0;
+    }
+    writeIdentity({ ...identity, channels: kept }, root);
+    const ids = removed.flatMap((c) => c.allowedChatIds ?? []);
+    process.stdout.write(`✓ removed ${removed.length} binding(s) from identity.json\n`);
+    if (ids.length) {
+        process.stdout.write(`  Also remove ${ids.join(', ')} from ALLOWED_CHAT_IDS in .env to fully revoke access.\n`);
+    }
+    return 0;
+}
+//# sourceMappingURL=unbind.js.map

package/dist/commands/unbind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbind.js","sourceRoot":"","sources":["../../src/commands/unbind.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,uDAAuD;AAEvD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAC;AAQ/E;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,QAA0B,EAC1B,GAAyD;IAEzD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACxG,IAAI,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,IAAc;IACrC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,CAAC,KAAK,OAAO;YAAE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;aAC/B,IAAI,CAAC,KAAK,WAAW;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACjD,IAAI,CAAC,KAAK,WAAW;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC1F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;QACjG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,MAAM,kCAAkC,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,2 @@
+export declare function runUpdate(_argv: string[]): Promise<number>;
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AA6CA,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBhE"}

package/dist/commands/update.js

@@ -0,0 +1,60 @@
+// update — upgrade the engine within the declared semver ranges.
+//
+// Distribution policy: "semver ranges, latest-compatible". There is NO curated
+// bill-of-materials. update therefore:
+//   1. RECORD the current resolved version set as the rollback baseline
+//      (state.json: current -> previous) BEFORE changing anything.
+//   2. RESOLVE latest-in-range for every @justfortytwo/* sibling (the ranges in
+//      this package's peerDeps / fortytwo.compat).
+//   3. INSTALL that set.
+//   4. POST-VERIFY with doctor (the health check).
+//   5. On success: record the new set as `current`. On failure: leave the failed
+//      set in place but LOUDLY point the user at `fortytwo rollback`. Rollback is
+//      MANUAL by design — we never auto-revert, so the user can inspect first.
+//
+// Re-render the persona's MANAGED scaffold afterward (render.ts is idempotent and
+// does not clobber captured fields), in case a new persona template version ships.
+import { recordVersionSet, readState } from '../state.js';
+import { renderPersona } from '../render.js';
+import { runDoctorChecks } from './doctor.js';
+/**
+ * Resolve latest-in-range for each sibling from the declared ranges.
+ * TODO(wire): read this package's peerDeps + fortytwo.compat for ranges, then
+ * query the registry (npm view <pkg> versions) and pick the highest satisfying
+ * version per range. Returns the VersionPin[] for state.json.
+ */
+async function resolveLatestInRange() {
+    throw new Error('TODO(wire): resolveLatestInRange — npm registry resolve against declared ranges');
+}
+/**
+ * Install the resolved set.
+ * TODO(wire): shell out to the user's package manager (npm/pnpm/yarn detected
+ * from the lockfile) to install the resolved versions, or update peerDep pins.
+ */
+async function installSet(_set) {
+    throw new Error('TODO(wire): installSet — install resolved sibling versions');
+}
+export async function runUpdate(_argv) {
+    // Real local check: there must be an install baseline (init has run).
+    const prior = readState();
+    if (!prior) {
+        process.stderr.write('update: no install found — run `fortytwo init` first.\n');
+        return 2;
+    }
+    // BLOCKED: resolving latest-in-range and installing require the npm registry,
+    // and the @justfortytwo/* engine packages are not published yet. The orchestration
+    // (record baseline -> resolveLatestInRange -> installSet -> doctor -> render ->
+    // point at rollback on failure) is ready to wire the moment they publish.
+    void recordVersionSet;
+    void resolveLatestInRange;
+    void installSet;
+    void runDoctorChecks;
+    void renderPersona;
+    void null;
+    void null;
+    process.stderr.write('update: not available yet — it resolves + installs from npm, and the ' +
+        '@justfortytwo/* engine packages are not published. Current set:\n' +
+        prior.current.map((p) => `  ${p.name}@${p.resolved} (${p.range})`).join('\n') + '\n');
+    return 2;
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,+EAA+E;AAC/E,uCAAuC;AACvC,wEAAwE;AACxE,mEAAmE;AACnE,gFAAgF;AAChF,mDAAmD;AACnD,yBAAyB;AACzB,mDAAmD;AACnD,iFAAiF;AACjF,kFAAkF;AAClF,+EAA+E;AAC/E,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AAEnF,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAqB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAO9C;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;AACrG,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,IAAwC;IAChE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAe;IAC7C,sEAAsE;IACtE,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,8EAA8E;IAC9E,mFAAmF;IACnF,gFAAgF;IAChF,0EAA0E;IAC1E,KAAK,gBAAgB,CAAC;IAAC,KAAK,oBAAoB,CAAC;IAAC,KAAK,UAAU,CAAC;IAClE,KAAK,eAAe,CAAC;IAAC,KAAK,aAAa,CAAC;IACzC,KAAM,IAAgC,CAAC;IACvC,KAAM,IAA+B,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE;QACvE,mEAAmE;QACnE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACrF,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/engine.d.ts

@@ -0,0 +1,37 @@
+/** Dynamically import an engine sibling; null if it is not installed. */
+export declare function loadSibling<T = Record<string, unknown>>(spec: string): Promise<T | null>;
+export declare const loadGate: () => Promise<{
+    POLICY_SCHEMA_VERSION?: number;
+} | null>;
+export declare const loadMemory: () => Promise<{
+    MEMORY_TOOL_CONTRACT_VERSION?: number;
+    openDb?: (path: string) => {
+        k: {
+            schema: {
+                hasTable(name: string): Promise<boolean>;
+            };
+        };
+    };
+    runMigrations?: (k: unknown) => Promise<void>;
+} | null>;
+export declare const loadTelegram: () => Promise<Record<string, unknown> | null>;
+/** Installed version of a sibling (its package.json `version`), or null. */
+export declare function readInstalledVersion(spec: string): string | null;
+/** The CLI's declared compat ranges (package.json `fortytwo.compat`). */
+export declare function readSelfCompatRanges(): Record<string, string>;
+/**
+ * Minimal semver-range satisfaction for the forms this CLI's compat contract
+ * uses: exact (`1.2.3`) and caret (`^1.2.3`, with npm's 0.x rule where the
+ * left-most non-zero element is the lock point). Avoids a runtime dependency.
+ */
+export declare function satisfiesRange(version: string, range: string): boolean;
+/** GET {baseUrl}/api/tags; return installed model names, or null if unreachable. */
+export declare function fetchOllamaModels(baseUrl: string): Promise<string[] | null>;
+export type MigrationState = 'ok' | 'missing' | 'pending' | 'unavailable';
+/**
+ * Migration health for the memory DB: 'missing' (no DB file → run init),
+ * 'ok' (the migrated `memories` table exists), 'pending' (DB present but not
+ * migrated), or 'unavailable' (memory package not installed / DB unreadable).
+ */
+export declare function readMigrationState(dbPath: string): Promise<MigrationState>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAcA,yEAAyE;AACzE,wBAAsB,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAM9F;AAED,eAAO,MAAM,QAAQ;4BAA+C,MAAM;SAAyB,CAAC;AACpG,eAAO,MAAM,UAAU;mCAEY,MAAM;aAG5B,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,CAAC,EAAE;YAAE,MAAM,EAAE;gBAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;aAAE,CAAA;SAAE,CAAA;KAAE;oBAC1E,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC;SACrB,CAAC;AAC7B,eAAO,MAAM,YAAY,+CAA8C,CAAC;AAExE,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyChE;AAoBD,yEAAyE;AACzE,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI7D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAetE;AAED,oFAAoF;AACpF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CASjF;AAED,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAE1E;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAehF"}