@knowzai/cli 0.1.0

package/dist/commands/activate.js

@@ -0,0 +1,103 @@
+import { Args, Flags } from '@oclif/core';
+import { registerSecret, validateCloudAiKeyFormat, validateInstallCredentialFormat, KnowzError, ExitCode, } from '@knowzai/core';
+import { BaseCommand } from '../base-command.js';
+import { openBrowser } from '../lib/browser.js';
+import { resolveEngineStatus, runEngineProbes } from '../lib/container-engine.js';
+import { formatLinkedStatus, persistActivation, persistCloudAiCredential, resolveActivationLinked, restartAndVerifyActivation, runDeviceCodeFlow, } from '../lib/activate.js';
+import { nodeProcessRunner, resolvePlatformPaths } from '../lib/platform-runtime.js';
+export default class Activate extends BaseCommand {
+    static id = 'activate';
+    static description = 'Link a portable Knowz installation to a mothership account.';
+    static args = { credential: Args.string({ required: false, description: 'Credential value when used after --paste' }) };
+    static flags = {
+        'mothership-url': Flags.string({ description: 'Knowz mothership URL', default: 'https://api.knowz.io' }),
+        name: Flags.string({ description: 'Runtime project name', default: 'knowz' }),
+        'config-dir': Flags.string({ description: 'Knowz configuration root' }),
+        paste: Flags.boolean({ description: 'Use a pre-minted credential; optionally provide it as the trailing argument' }),
+        scope: Flags.string({ description: 'Credential scope', options: ['install', 'cloud-ai'], default: 'install' }),
+        store: Flags.string({ description: 'Credential storage', options: ['identity', 'env'], default: 'identity' }),
+        'installation-id': Flags.string({ description: 'Installation GUID paired with a pasted credential' }),
+        open: Flags.boolean({ description: 'Open the approval URL', default: true, allowNo: true }),
+        restart: Flags.boolean({ description: 'Restart API and worker when running', default: true, allowNo: true }),
+    };
+    async run() {
+        const { flags, args } = await this.parse(Activate);
+        let credential;
+        let installationId;
+        let account;
+        let plan;
+        const cloudAi = flags.scope === 'cloud-ai';
+        if (flags.paste) {
+            credential = args.credential?.trim()
+                || (cloudAi ? process.env.KNOWZ_CLOUD_AI_KEY?.trim() : process.env.KNOWZ_INSTALL_CREDENTIAL?.trim())
+                || '';
+            if (!credential && process.stdin.isTTY) {
+                const { password } = await import('@inquirer/prompts');
+                credential = (await password({ message: `Paste the ${cloudAi ? 'Knowz Cloud AI' : 'installation'} credential (input is hidden)` })).trim();
+            }
+            const format = cloudAi ? validateCloudAiKeyFormat(credential) : validateInstallCredentialFormat(credential);
+            if (!format.ok) {
+                const expected = cloudAi ? 'kzai_' : 'kzin_';
+                throw new KnowzError(`Invalid credential. Expected ${expected} followed by 43 URL-safe characters.`, ExitCode.Usage);
+            }
+            installationId = cloudAi ? '' : flags['installation-id']?.trim() || process.env.KNOWZ_INSTALLATION_ID?.trim() || '';
+            if (!cloudAi && !installationId) {
+                throw new KnowzError('A pasted installation credential also requires --installation-id (or KNOWZ_INSTALLATION_ID).', ExitCode.Usage);
+            }
+        }
+        else {
+            const result = await runDeviceCodeFlow(flags['mothership-url'], {
+                fetch: globalThis.fetch,
+                runner: nodeProcessRunner,
+                openBrowser,
+                now: Date.now,
+                sleep: ms => new Promise(resolve => setTimeout(resolve, ms)),
+                emit: line => { if (!this.jsonEnabled())
+                    this.log(line); },
+            }, { scope: cloudAi ? 'cloud-ai' : 'installation', installationName: flags.name, noOpen: !flags.open });
+            credential = result.credential;
+            installationId = result.installationId;
+            account = result.account;
+            plan = result.plan;
+        }
+        registerSecret(credential);
+        const paths = resolvePlatformPaths(flags.name, flags['config-dir']);
+        if (cloudAi) {
+            await persistCloudAiCredential({ paths, credential });
+            if (!this.jsonEnabled()) {
+                this.log('✓ Knowz Cloud AI credential stored for this platform.');
+                this.log('Run `knowz up` to apply the credential to API and worker services.');
+            }
+            return { scope: 'cloud-ai', credentialStored: true, projectName: flags.name };
+        }
+        const engine = resolveEngineStatus(runEngineProbes(nodeProcessRunner), process.platform, process.env);
+        await persistActivation({
+            paths, projectName: flags.name, mothershipUrl: flags['mothership-url'],
+            credential, installationId, store: flags.store, engine,
+        });
+        const verification = await restartAndVerifyActivation({
+            paths, projectName: flags.name, engine, restart: flags.restart,
+        });
+        const linked = resolveActivationLinked(verification, { account, plan });
+        const status = formatLinkedStatus({
+            linked, account, displayPlan: verification.displayPlan ?? plan,
+            mothershipUrl: flags['mothership-url'],
+        });
+        if (!this.jsonEnabled()) {
+            if (linked)
+                this.log(`✓ ${status}`);
+            else
+                this.log(`Installation identity stored, but no verified lease is active${verification.statusReason ? ` (${verification.statusReason})` : ''} — check \`knowz status\`.`);
+            if (!verification.stackRunning)
+                this.log('The stack is down; start it with `knowz up`.');
+            else if (!flags.restart)
+                this.log('Restart api and worker, or run `knowz up`, to load the new credential.');
+        }
+        return {
+            linked, account, displayPlan: verification.displayPlan ?? plan,
+            mothershipUrl: flags['mothership-url'], restartRequested: flags.restart,
+            credentialStored: true,
+        };
+    }
+}
+//# sourceMappingURL=activate.js.map

package/dist/commands/activate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.js","sourceRoot":"","sources":["../../src/commands/activate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,+BAA+B,EAC/B,UAAU,EACV,QAAQ,GACT,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACjF,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEpF,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,WAAW;IAC/C,MAAM,CAAU,EAAE,GAAG,UAAU,CAAA;IAC/B,MAAM,CAAU,WAAW,GAAG,6DAA6D,CAAA;IAC3F,MAAM,CAAU,IAAI,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC,EAAE,CAAA;IAChI,MAAM,CAAU,KAAK,GAAG;QACtB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;QACxG,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC7E,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;QACvE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,6EAA6E,EAAE,CAAC;QACpH,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC9G,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAC7G,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;QACrG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3F,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KAC7G,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAClD,IAAI,UAAkB,CAAA;QACtB,IAAI,cAAsB,CAAA;QAC1B,IAAI,OAA2B,CAAA;QAC/B,IAAI,IAAwB,CAAA;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,UAAU,CAAA;QAC1C,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE;mBAC/B,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;mBACjG,EAAE,CAAA;YACP,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;gBACtD,UAAU,GAAG,CAAC,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,aAAa,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,+BAA+B,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC5I,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,UAAU,CAAC,CAAA;YAC3G,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;gBAC5C,MAAM,IAAI,UAAU,CAAC,gCAAgC,QAAQ,sCAAsC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YACtH,CAAC;YACD,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACnH,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;gBAChC,MAAM,IAAI,UAAU,CAClB,8FAA8F,EAC9F,QAAQ,CAAC,KAAK,CACf,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE;gBAC9D,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,iBAAiB;gBACzB,WAAW;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;aAC1D,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YACvG,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;YAC9B,cAAc,GAAG,MAAM,CAAC,cAAc,CAAA;YACtC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;YACxB,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QACpB,CAAC;QACD,cAAc,CAAC,UAAU,CAAC,CAAA;QAE1B,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACnE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,wBAAwB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAA;gBACjE,IAAI,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;YAChF,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QACrG,MAAM,iBAAiB,CAAC;YACtB,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC;YACtE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,KAA2B,EAAE,MAAM;SAC7E,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC;YACpD,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;SAC/D,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,uBAAuB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACvE,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,IAAI;YAC9D,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC;SACvC,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,MAAM;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;;gBAC9B,IAAI,CAAC,GAAG,CAAC,gEAAgE,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAA;YAC7K,IAAI,CAAC,YAAY,CAAC,YAAY;gBAAE,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAA;iBACnF,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAA;QAC7G,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,IAAI;YAC9D,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO;YACvE,gBAAgB,EAAE,IAAI;SACvB,CAAA;IACH,CAAC"}

package/dist/commands/ask.d.ts

@@ -0,0 +1,14 @@
+import type { AskResult } from '@knowzai/types';
+import { BaseCommand } from '../base-command.js';
+export default class Ask extends BaseCommand {
+    static description: string;
+    static args: {
+        question: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        research: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        shared: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<AskResult>;
+}
+//# sourceMappingURL=ask.d.ts.map

package/dist/commands/ask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../src/commands/ask.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,GAAI,SAAQ,WAAW;IAC1C,OAAgB,WAAW,SAAmE;IAC9F,OAAgB,IAAI;;MAA+E;IACnG,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;CAoBhC"}

package/dist/commands/ask.js

@@ -0,0 +1,33 @@
+import { Args, Flags } from '@oclif/core';
+import { BaseCommand } from '../base-command.js';
+export default class Ask extends BaseCommand {
+    static description = 'Ask a question and get an AI-synthesized answer with sources.';
+    static args = { question: Args.string({ description: 'Your question', required: true }) };
+    static flags = {
+        research: Flags.boolean({ description: 'Enable deeper research mode' }),
+        shared: Flags.boolean({ description: 'Include shared vaults' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(Ask);
+        const client = await this.apiClient(flags);
+        const vaultId = await this.resolveVaultId(client, flags);
+        const res = await client.ask.ask({
+            question: args.question,
+            vaultId,
+            researchMode: flags.research,
+            includeSharedVaults: flags.shared,
+        });
+        if (this.jsonEnabled())
+            return res;
+        this.log(res.answer);
+        if (res.sources.length) {
+            this.log(`\nsources:`);
+            for (const s of res.sources)
+                this.log(s.knowledgeId ? `  - ${s.title} (${s.knowledgeId})` : `  - ${s.title}`);
+        }
+        if (res.confidence != null)
+            this.log(`\nconfidence: ${(res.confidence * 100).toFixed(0)}%`);
+        return res;
+    }
+}
+//# sourceMappingURL=ask.js.map

package/dist/commands/ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.js","sourceRoot":"","sources":["../../src/commands/ask.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,GAAI,SAAQ,WAAW;IAC1C,MAAM,CAAU,WAAW,GAAG,+DAA+D,CAAC;IAC9F,MAAM,CAAU,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACnG,MAAM,CAAU,KAAK,GAAG;QACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;QACvE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;KAChE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;YACP,YAAY,EAAE,KAAK,CAAC,QAAQ;YAC5B,mBAAmB,EAAE,KAAK,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,GAAG,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO;gBACzB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5F,OAAO,GAAG,CAAC;IACb,CAAC"}

package/dist/commands/auth/status.d.ts

@@ -0,0 +1,7 @@
+import { BaseCommand } from '../../base-command.js';
+import type { AuthSummary } from '@knowzai/core';
+export default class AuthStatus extends BaseCommand {
+    static description: string;
+    run(): Promise<AuthSummary>;
+}
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/auth/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/commands/auth/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,WAAW,SAAqE;IAE1F,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC;CAoBlC"}

package/dist/commands/auth/status.js

@@ -0,0 +1,26 @@
+import { BaseCommand } from '../../base-command.js';
+export default class AuthStatus extends BaseCommand {
+    static description = 'Show authentication status (no secrets) for the active profile.';
+    async run() {
+        const { flags } = await this.parse(AuthStatus);
+        const auth = await this.authState(flags);
+        const s = await auth.summary();
+        if (this.jsonEnabled())
+            return s;
+        this.log(`profile:        ${s.profile}`);
+        this.log(`api url:        ${s.apiUrl}`);
+        this.log(`authenticated:  ${s.authenticated}`);
+        this.log(`key type:       ${s.keyType ?? '—'}`);
+        this.log(`backend:        ${s.backend}${s.fileKeyMode ? ` (${s.fileKeyMode})` : ''}`);
+        if (s.tenantId)
+            this.log(`tenant:         ${s.tenantId}`);
+        if (s.email)
+            this.log(`email:          ${s.email}`);
+        if (s.fileKeyMode === 'machine-bound') {
+            this.warn('Credentials use a machine-bound key (obfuscation, not strong protection). ' +
+                'Set KNOWZ_KEYRING_PASSPHRASE for passphrase-derived encryption.');
+        }
+        return s;
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/auth/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/commands/auth/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,WAAW,GAAG,iEAAiE,CAAC;IAEhG,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CACP,4EAA4E;gBAC1E,iEAAiE,CACpE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC"}

package/dist/commands/backup.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../base-command.js';
+export default class Backup extends BaseCommand {
+    static description: string;
+    static args: {
+        path: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        out: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        encrypt: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        name: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'config-dir': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<import("../lib/platform-backup.js").PortableBackupResult>;
+}
+//# sourceMappingURL=backup.d.ts.map

package/dist/commands/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAKhD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,OAAgB,WAAW,SAAuD;IAClF,OAAgB,IAAI;;MAAmG;IACvH,OAAgB,KAAK;;;;;MAKpB;IAEK,GAAG;CA6BV"}

package/dist/commands/backup.js

@@ -0,0 +1,52 @@
+import { Args, Flags } from '@oclif/core';
+import { ExitCode, KnowzError, registerSecret } from '@knowzai/core';
+import { BaseCommand } from '../base-command.js';
+import { resolveEngineStatus, runEngineProbes } from '../lib/container-engine.js';
+import { runPortableBackup } from '../lib/platform-backup.js';
+import { nodeProcessRunner, resolvePlatformPaths } from '../lib/platform-runtime.js';
+export default class Backup extends BaseCommand {
+    static description = 'Create a private portable-platform backup archive.';
+    static args = { path: Args.string({ required: false, description: 'Archive file or destination directory' }) };
+    static flags = {
+        out: Flags.string({ description: 'Archive file or destination directory' }),
+        encrypt: Flags.boolean({ description: 'Encrypt with a hidden passphrase' }),
+        name: Flags.string({ description: 'Runtime project name', default: 'knowz' }),
+        'config-dir': Flags.string({ description: 'Knowz configuration root' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(Backup);
+        if (args.path && flags.out)
+            throw new KnowzError('Use either the backup path argument or --out, not both.', ExitCode.Usage);
+        let passphrase = process.env.KNOWZ_BACKUP_PASSPHRASE;
+        if (flags.encrypt && !passphrase) {
+            if (!process.stdin.isTTY)
+                throw new KnowzError('Set KNOWZ_BACKUP_PASSPHRASE for encrypted non-interactive backups.', ExitCode.Auth);
+            const { password } = await import('@inquirer/prompts');
+            const first = await password({ message: 'Backup passphrase (input is hidden)' });
+            const second = await password({ message: 'Confirm backup passphrase' });
+            if (!first || first !== second)
+                throw new KnowzError('Backup passphrases did not match.', ExitCode.Usage);
+            passphrase = first;
+        }
+        if (passphrase)
+            registerSecret(passphrase);
+        const paths = resolvePlatformPaths(flags.name, flags['config-dir']);
+        const engine = resolveEngineStatus(runEngineProbes(nodeProcessRunner), process.platform, process.env);
+        const result = await runPortableBackup({
+            paths,
+            projectName: flags.name,
+            out: flags.out ?? args.path,
+            encrypt: flags.encrypt,
+            passphrase,
+            cliVersion: this.config.version,
+            engine,
+            runner: nodeProcessRunner,
+            emit: line => { if (!this.jsonEnabled())
+                this.log(line); },
+        });
+        if (!this.jsonEnabled())
+            this.log(`Backup written to ${result.archive} (mode 0600).`);
+        return result;
+    }
+}
+//# sourceMappingURL=backup.js.map

package/dist/commands/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/commands/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEpF,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,MAAM,CAAU,WAAW,GAAG,oDAAoD,CAAA;IAClF,MAAM,CAAU,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC,EAAE,CAAA;IACvH,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;QAC3E,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC7E,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;KACxE,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,yDAAyD,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3H,IAAI,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;QACpD,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,oEAAoE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;YACnI,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;YACtD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAA;YAChF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAA;YACvE,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YACzG,UAAU,GAAG,KAAK,CAAA;QACpB,CAAC;QACD,IAAI,UAAU;YAAE,cAAc,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACnE,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QACrG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK;YACL,WAAW,EAAE,KAAK,CAAC,IAAI;YACvB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;YACV,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC/B,MAAM;YACN,MAAM,EAAE,iBAAiB;YACzB,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;SAC1D,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,OAAO,eAAe,CAAC,CAAA;QACrF,OAAO,MAAM,CAAA;IACf,CAAC"}

package/dist/commands/capture/observe.d.ts

@@ -0,0 +1,23 @@
+import { BaseCommand } from '../../base-command.js';
+/**
+ * Records ONE agent tool-use observation. Designed as the Claude Code
+ * `PostToolUse` hook target: reads the hook JSON from stdin, builds a redacted
+ * one-line summary, and appends an `observations` row. It is FAIL-OPEN and
+ * OFFLINE by construction — a single redact + SQLite insert, no network — so a
+ * capture problem can never block or slow the agent's tool loop.
+ */
+export default class CaptureObserveCmd extends BaseCommand {
+    static id: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        session: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        tool: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        summary: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        driver: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        db: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        dsn: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=observe.d.ts.map

package/dist/commands/capture/observe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe.d.ts","sourceRoot":"","sources":["../../../src/commands/capture/observe.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD;;;;;;GAMG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,WAAW;IACxD,OAAgB,EAAE,SAAqB;IACvC,OAAgB,WAAW,SAC0E;IACrG,OAAgB,QAAQ,WAA+E;IACvG,OAAgB,KAAK;;;;;;;MAOnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAyC3B"}

package/dist/commands/capture/observe.js

@@ -0,0 +1,68 @@
+import { Flags } from '@oclif/core';
+import { randomUUID } from 'node:crypto';
+import { supportsOutbox } from '@knowzai/local-store';
+import { BaseCommand } from '../../base-command.js';
+import { readHookInput, summarizeToolUse, targetPath } from '../../lib/hook-io.js';
+import { redactAndTruncate, isDeniedPath, containsDeniedPath } from '../../lib/redact.js';
+/**
+ * Records ONE agent tool-use observation. Designed as the Claude Code
+ * `PostToolUse` hook target: reads the hook JSON from stdin, builds a redacted
+ * one-line summary, and appends an `observations` row. It is FAIL-OPEN and
+ * OFFLINE by construction — a single redact + SQLite insert, no network — so a
+ * capture problem can never block or slow the agent's tool loop.
+ */
+export default class CaptureObserveCmd extends BaseCommand {
+    static id = 'capture:observe';
+    static description = 'Record one agent tool-use observation (Claude Code PostToolUse hook target). Fail-open, offline.';
+    static examples = ['<%= config.bin %> capture observe --tool Edit --summary "edited foo.ts"'];
+    static flags = {
+        session: Flags.string({ description: 'Session id (else read from hook stdin)' }),
+        tool: Flags.string({ description: 'Tool name (else read from hook stdin)' }),
+        summary: Flags.string({ description: 'Explicit summary (bypasses stdin parsing)' }),
+        driver: Flags.string({ options: ['sqlite', 'postgres'] }),
+        db: Flags.string({ description: 'SQLite db path' }),
+        dsn: Flags.string({ description: 'Postgres DSN' }),
+    };
+    async run() {
+        // Whole body is fail-open: capture must never throw back into the agent loop.
+        try {
+            const { flags } = await this.parse(CaptureObserveCmd);
+            const hook = flags.summary ? undefined : await readHookInput();
+            const sessionId = flags.session ?? hook?.sessionId ?? 'unknown';
+            const toolName = flags.tool ?? hook?.toolName ?? 'tool';
+            // Deny-list: never record the path/content of a sensitive file — only that
+            // a sensitive file was touched. Covers both the tool's file_path field AND
+            // sensitive paths passed as Bash/Grep command arguments (M-1).
+            const tpath = targetPath(hook?.toolInput);
+            const candidate = flags.summary ?? summarizeToolUse(toolName, hook?.toolInput);
+            const rawSummary = (tpath && isDeniedPath(tpath)) || containsDeniedPath(candidate)
+                ? `${toolName}: <sensitive path elided>`
+                : candidate;
+            const red = redactAndTruncate(rawSummary, 280);
+            const store = await this.localStore(flags, flags);
+            try {
+                if (!supportsOutbox(store))
+                    return;
+                await store.recordObservation({
+                    id: randomUUID(),
+                    sessionId,
+                    ts: new Date().toISOString(),
+                    kind: 'tool',
+                    toolName,
+                    summary: red.text,
+                    redacted: red.redacted,
+                });
+            }
+            finally {
+                await store.close();
+            }
+        }
+        catch {
+            // swallow — fail-open. Optionally surface in verbose mode only.
+            if (this.argv.includes('-v') || this.argv.includes('--verbose')) {
+                this.warn('capture observe failed (ignored to keep the session alive)');
+            }
+        }
+    }
+}
+//# sourceMappingURL=observe.js.map

package/dist/commands/capture/observe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe.js","sourceRoot":"","sources":["../../../src/commands/capture/observe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE1F;;;;;;GAMG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,WAAW;IACxD,MAAM,CAAU,EAAE,GAAG,iBAAiB,CAAC;IACvC,MAAM,CAAU,WAAW,GACzB,kGAAkG,CAAC;IACrG,MAAM,CAAU,QAAQ,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACvG,MAAM,CAAU,KAAK,GAAG;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;QAChF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;QAC5E,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QACnF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACzD,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACnD,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;KACnD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,SAAS,IAAI,SAAS,CAAC;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC;YAExD,2EAA2E;YAC3E,2EAA2E;YAC3E,+DAA+D;YAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/E,MAAM,UAAU,GACd,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC;gBAC7D,CAAC,CAAC,GAAG,QAAQ,2BAA2B;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEhB,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;oBAAE,OAAO;gBACnC,MAAM,KAAK,CAAC,iBAAiB,CAAC;oBAC5B,EAAE,EAAE,UAAU,EAAE;oBAChB,SAAS;oBACT,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,MAAM;oBACZ,QAAQ;oBACR,OAAO,EAAE,GAAG,CAAC,IAAI;oBACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC"}

package/dist/commands/capture/seal.d.ts

@@ -0,0 +1,27 @@
+import { BaseCommand } from '../../base-command.js';
+export default class CaptureSealCmd extends BaseCommand {
+    static id: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        'from-pending': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        session: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        all: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        quiet: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        file: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        dir: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        archive: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        passphrase: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        driver: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        db: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        dsn: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+    private runSessionSeal;
+    private runFromPending;
+    /** Best-effort flush; offline / unauthenticated leaves items durably in the outbox. */
+    private tryFlush;
+    private resolveDefaultVault;
+}
+//# sourceMappingURL=seal.d.ts.map

package/dist/commands/capture/seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../../../src/commands/capture/seal.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AASpD,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,WAAW;IACrD,OAAgB,EAAE,SAAkB;IACpC,OAAgB,WAAW,SACuE;IAClG,OAAgB,QAAQ,WAItB;IACF,OAAgB,KAAK;;;;;;;;;;;;;MAenB;IAEI,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;YAWf,cAAc;YA8Bd,cAAc;IAsC5B,uFAAuF;YACzE,QAAQ;YAcR,mBAAmB;CAQlC"}

package/dist/commands/capture/seal.js

@@ -0,0 +1,144 @@
+import { Flags } from '@oclif/core';
+import { rename } from 'node:fs/promises';
+import { supportsOutbox } from '@knowzai/local-store';
+import { BaseCommand } from '../../base-command.js';
+import { readHookInput } from '../../lib/hook-io.js';
+import { sealUnsealed, drainPendingToOutbox, flushOutboxFully, } from '../../lib/seal-core.js';
+export default class CaptureSealCmd extends BaseCommand {
+    static id = 'capture:seal';
+    static description = 'Seal captured agent memory into the durable outbox and flush it to the cloud knowledge graph.';
+    static examples = [
+        '<%= config.bin %> capture seal --session abc123',
+        '<%= config.bin %> capture seal --all',
+        '<%= config.bin %> capture seal --from-pending',
+    ];
+    static flags = {
+        'from-pending': Flags.boolean({
+            description: 'Drain legacy pending_captures*.md / knowz-pending.md into the outbox + cloud',
+        }),
+        session: Flags.string({ description: 'Session id to seal (else read from hook stdin)' }),
+        all: Flags.boolean({ description: 'Seal every unsealed session' }),
+        quiet: Flags.boolean({ description: 'Fail-open: never error (Stop/SessionEnd/PreCompact hooks)' }),
+        file: Flags.string({ multiple: true, description: 'Explicit pending file(s) to drain (repeatable)' }),
+        dir: Flags.string({ description: 'Repo root to scan for pending files', default: '.' }),
+        'dry-run': Flags.boolean({ description: 'Parse/seal + enqueue only; do not flush to the cloud' }),
+        archive: Flags.boolean({ description: 'Rename fully-drained pending files to *.drained-<ts>' }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (customer-managed encryption profiles)' }),
+        driver: Flags.string({ options: ['sqlite', 'postgres'] }),
+        db: Flags.string({ description: 'SQLite db path' }),
+        dsn: Flags.string({ description: 'Postgres DSN' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CaptureSealCmd);
+        if (flags['from-pending'])
+            return this.runFromPending(flags);
+        try {
+            return await this.runSessionSeal(flags);
+        }
+        catch (err) {
+            if (flags.quiet)
+                return { sealed: 0, items: 0, flushed: null }; // fail-open for hooks
+            throw err;
+        }
+    }
+    async runSessionSeal(flags) {
+        const sessionId = flags.session ?? (flags.all ? undefined : (await readHookInput()).sessionId);
+        if (!sessionId && !flags.all) {
+            if (flags.quiet)
+                return { sealed: 0, items: 0, flushed: null };
+            this.error('Provide --session <id>, pipe a hook payload on stdin, or use --all.');
+        }
+        const store = (await this.localStore(flags, flags));
+        try {
+            if (!supportsOutbox(store)) {
+                if (flags.quiet)
+                    return { sealed: 0, items: 0, flushed: null };
+                this.error('The active local store does not support the capture outbox (use SQLite).');
+            }
+            const dryRun = flags['dry-run'] ?? false;
+            const defaultVault = dryRun ? undefined : await this.resolveDefaultVault(flags);
+            const { sealed, items } = await sealUnsealed(store, { sessionId, all: flags.all, defaultVault });
+            if (sealed === 0) {
+                if (!this.jsonEnabled() && !flags.quiet)
+                    this.log('Nothing to seal.');
+                return { sealed: 0, items: 0, flushed: null };
+            }
+            const flushed = dryRun ? null : await this.tryFlush(store, flags, 'session-seal');
+            if (!this.jsonEnabled() && !flags.quiet) {
+                this.log(`sealed ${sealed} observation(s) into ${items} session digest item(s).`);
+                this.log(flushed ? `flushed: sent=${flushed.sent} failed=${flushed.failed} dead=${flushed.dead}` : '(not flushed)');
+            }
+            return { sealed, items, flushed };
+        }
+        finally {
+            await store.close();
+        }
+    }
+    async runFromPending(flags) {
+        const store = (await this.localStore(flags, flags));
+        try {
+            if (!supportsOutbox(store))
+                this.error('The active local store does not support the capture outbox (use SQLite).');
+            const dryRun = flags['dry-run'] ?? false;
+            const defaultVault = dryRun ? undefined : await this.resolveDefaultVault(flags);
+            const { files, parsed, enqueued } = await drainPendingToOutbox(store, {
+                files: flags.file,
+                dir: flags.dir,
+                defaultVault,
+            });
+            if (files.length === 0) {
+                if (!this.jsonEnabled())
+                    this.log('No pending-capture files found.');
+                return { files: [], parsed: 0, enqueued: 0, flushed: null };
+            }
+            if (dryRun) {
+                if (!this.jsonEnabled())
+                    this.log(`parsed ${parsed}, enqueued ${enqueued} (dry-run — not flushed)`);
+                return { files, parsed, enqueued, flushed: null };
+            }
+            const flushed = await this.tryFlush(store, flags, 'pending-drain');
+            if (flushed && flags.archive && flushed.failed === 0 && flushed.dead === 0) {
+                for (const f of files)
+                    await rename(f, `${f}.drained-${Date.now()}`).catch(() => undefined);
+            }
+            if (!this.jsonEnabled()) {
+                this.log(`parsed ${parsed}, enqueued ${enqueued}`);
+                if (flushed) {
+                    this.log(`flushed: claimed=${flushed.claimed} sent=${flushed.sent} failed=${flushed.failed} dead=${flushed.dead}`);
+                    if (flushed.failed > 0 || flushed.dead > 0) {
+                        this.log('Re-run --from-pending to retry deferred items; see `knowz capture status` for dead-letters.');
+                    }
+                }
+            }
+            return { files, parsed, enqueued, flushed };
+        }
+        finally {
+            await store.close();
+        }
+    }
+    /** Best-effort flush; offline / unauthenticated leaves items durably in the outbox. */
+    async tryFlush(store, flags, source) {
+        try {
+            const client = await this.apiClient(flags);
+            const encryptor = this.cmekEncryptor(flags);
+            return await flushOutboxFully(store, client, { encryptor, source });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (!flags.quiet) {
+                this.warn(`seal: enqueued durably but flush deferred (${msg}). Run \`knowz capture seal\` or \`knowz sync\` later.`);
+            }
+            return null;
+        }
+    }
+    async resolveDefaultVault(flags) {
+        try {
+            const client = await this.apiClient(flags);
+            return await this.resolveVaultId(client, flags);
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+//# sourceMappingURL=seal.js.map

package/dist/commands/capture/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../src/commands/capture/seal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAoB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,WAAW;IACrD,MAAM,CAAU,EAAE,GAAG,cAAc,CAAC;IACpC,MAAM,CAAU,WAAW,GACzB,+FAA+F,CAAC;IAClG,MAAM,CAAU,QAAQ,GAAG;QACzB,iDAAiD;QACjD,sCAAsC;QACtC,+CAA+C;KAChD,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC;YAC5B,WAAW,EAAE,8EAA8E;SAC5F,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;QACxF,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;QAClE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,2DAA2D,EAAE,CAAC;QAClG,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;QACrG,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACvF,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;QACjG,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;QAC/F,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;QACnG,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACzD,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACnD,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;KACnD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,sBAAsB;YACtF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,KAAgB;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAgB,CAAC;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,KAAK;oBAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;YACzC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACjG,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;oBAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBACtE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAChD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YAClF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,wBAAwB,KAAK,0BAA0B,CAAC,CAAC;gBAClF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,IAAI,WAAW,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACtH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,KAAgB;QAC3C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAgB,CAAC;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;YACnH,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;YACzC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE;gBACpE,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,YAAY;aACb,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBACrE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9D,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,cAAc,QAAQ,0BAA0B,CAAC,CAAC;gBACpG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACpD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;YACnE,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3E,KAAK,MAAM,CAAC,IAAI,KAAK;oBAAE,MAAM,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,cAAc,QAAQ,EAAE,CAAC,CAAC;gBACnD,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,IAAI,WAAW,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;wBAC3C,IAAI,CAAC,GAAG,CAAC,6FAA6F,CAAC,CAAC;oBAC1G,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,QAAQ,CAAC,KAAkB,EAAE,KAAgB,EAAE,MAAc;QACzE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,8CAA8C,GAAG,wDAAwD,CAAC,CAAC;YACvH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,KAAgB;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC"}

package/dist/commands/capture/status.d.ts

@@ -0,0 +1,33 @@
+import { BaseCommand } from '../../base-command.js';
+interface CaptureStatusResult {
+    outbox: {
+        pending: number;
+        inflight: number;
+        done: number;
+        dead: number;
+        conflict: number;
+    };
+    observations: {
+        total: number;
+        unsealed: number;
+    };
+    dead: Array<{
+        key: string;
+        itemId: string;
+        attempts: number;
+        lastError?: string;
+    }>;
+}
+export default class CaptureStatusCmd extends BaseCommand {
+    static id: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        driver: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        db: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        dsn: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<CaptureStatusResult>;
+}
+export {};
+//# sourceMappingURL=status.d.ts.map