@knowzai/cli 0.1.0

package/dist/commands/capture/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/commands/capture/status.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,UAAU,mBAAmB;IAC3B,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5F,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,IAAI,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF;AAED,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,WAAW;IACvD,OAAgB,EAAE,SAAoB;IACtC,OAAgB,WAAW,SACoE;IAC/F,OAAgB,QAAQ,WAAmF;IAC3G,OAAgB,KAAK;;;;MAInB;IAEI,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC;CAsC1C"}

package/dist/commands/capture/status.js

@@ -0,0 +1,52 @@
+import { Flags } from '@oclif/core';
+import { supportsOutbox } from '@knowzai/local-store';
+import { BaseCommand } from '../../base-command.js';
+export default class CaptureStatusCmd extends BaseCommand {
+    static id = 'capture:status';
+    static description = 'Show the agent-memory capture outbox (pending/inflight/done/dead) and observation backlog.';
+    static examples = ['<%= config.bin %> capture status', '<%= config.bin %> capture status --json'];
+    static flags = {
+        driver: Flags.string({ options: ['sqlite', 'postgres'] }),
+        db: Flags.string({ description: 'SQLite db path' }),
+        dsn: Flags.string({ description: 'Postgres DSN' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CaptureStatusCmd);
+        const store = await this.localStore(flags, flags);
+        try {
+            if (!supportsOutbox(store)) {
+                this.error('The active local store does not support agent-memory capture (use the default SQLite store).');
+            }
+            const outbox = await store.outboxStats();
+            const obs = await store.listObservations();
+            const unsealed = obs.filter((o) => !o.sealedIntoItemId).length;
+            const deadEntries = await store.listOutbox({ state: 'dead' });
+            const dead = deadEntries.map((d) => ({
+                key: d.idempotencyKey,
+                itemId: d.itemId,
+                attempts: d.attempts,
+                lastError: d.lastError,
+            }));
+            const result = {
+                outbox,
+                observations: { total: obs.length, unsealed },
+                dead,
+            };
+            if (this.jsonEnabled())
+                return result;
+            this.log(`outbox        pending=${outbox.pending} inflight=${outbox.inflight} done=${outbox.done} dead=${outbox.dead} conflict=${outbox.conflict}`);
+            this.log(`observations  total=${obs.length} unsealed=${unsealed}`);
+            if (dead.length > 0) {
+                this.log(`\ndead-letters (${dead.length}):`);
+                for (const d of dead) {
+                    this.log(`  ${d.key.slice(0, 12)}…  item=${d.itemId}  attempts=${d.attempts}  ${d.lastError ?? ''}`);
+                }
+            }
+            return result;
+        }
+        finally {
+            await store.close();
+        }
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/capture/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/commands/capture/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAQpD,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,WAAW;IACvD,MAAM,CAAU,EAAE,GAAG,gBAAgB,CAAC;IACtC,MAAM,CAAU,WAAW,GACzB,4FAA4F,CAAC;IAC/F,MAAM,CAAU,QAAQ,GAAG,CAAC,kCAAkC,EAAE,yCAAyC,CAAC,CAAC;IAC3G,MAAM,CAAU,KAAK,GAAG;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACzD,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACnD,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;KACnD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAC7G,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;YAC/D,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnC,GAAG,EAAE,CAAC,CAAC,cAAc;gBACrB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAwB;gBAClC,MAAM;gBACN,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE;gBAC7C,IAAI;aACL,CAAC;YACF,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,MAAM,CAAC;YACtC,IAAI,CAAC,GAAG,CACN,yBAAyB,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,QAAQ,SAAS,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,CAC1I,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,MAAM,aAAa,QAAQ,EAAE,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC7C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC"}

package/dist/commands/chat.d.ts

@@ -0,0 +1,21 @@
+import { BaseCommand } from '../base-command.js';
+import { type ChatTurnOutput } from '../lib/chat.js';
+export default class Chat extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        message: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        mode: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        persona: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        temperature: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        conversation: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'no-fallback': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<{
+        conversationId: string;
+    } | ChatTurnOutput>;
+    private printSources;
+}
+//# sourceMappingURL=chat.d.ts.map

package/dist/commands/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAKrF,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,WAAW;IAC3C,OAAgB,WAAW,SAAkE;IAC7F,OAAgB,QAAQ,WAGtB;IACF,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;;;;MAMnB;IAEI,GAAG,IAAI,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc,CAAC;IAuGjE,OAAO,CAAC,YAAY;CAMrB"}

package/dist/commands/chat.js

@@ -0,0 +1,142 @@
+import { Args, Flags } from '@oclif/core';
+import * as readline from 'node:readline/promises';
+import { randomUUID } from 'node:crypto';
+import chalk from 'chalk';
+import { KnowzError, ExitCode } from '@knowzai/core';
+import { BaseCommand } from '../base-command.js';
+import { runChatTurn } from '../lib/chat.js';
+import { readStdinText } from '../lib/prompt.js';
+const MODES = ['Balanced', 'Agentic', 'DeepResearch', 'Express', 'Standard'];
+export default class Chat extends BaseCommand {
+    static description = 'Live chat with your knowledge (SSE streaming, with sources).';
+    static examples = [
+        '<%= config.bin %> chat "What changed in the auth module?"',
+        '<%= config.bin %> chat --vault Engineering   # interactive REPL',
+    ];
+    static args = {
+        message: Args.string({ description: 'Message for a one-shot turn (omit for interactive REPL)' }),
+    };
+    static flags = {
+        mode: Flags.string({ description: 'Reasoning mode (agentic on the web = Agentic/DeepResearch)', options: MODES, default: 'Balanced' }),
+        persona: Flags.string({ description: 'Persona id' }),
+        temperature: Flags.string({ description: 'Sampling temperature (0.0–2.0)' }),
+        conversation: Flags.string({ description: 'Resume an existing conversation id' }),
+        'no-fallback': Flags.boolean({ description: 'Disable fallback to the non-streaming ask endpoint' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(Chat);
+        const client = await this.apiClient(flags);
+        const vaultId = await this.resolveVaultId(client, flags);
+        const conversationId = flags.conversation ?? randomUUID();
+        let temperature;
+        if (flags.temperature !== undefined) {
+            temperature = Number.parseFloat(flags.temperature);
+            if (Number.isNaN(temperature))
+                throw new KnowzError('--temperature must be a number', ExitCode.Usage);
+        }
+        const deps = {
+            openStream: (req, signal) => client.chat.streamTurn(req, { signal }),
+            askFallback: (r) => client.ask.ask({ question: r.question, vaultId: r.vaultId }),
+        };
+        const history = [];
+        const turn = async (message, stream) => {
+            const controller = new AbortController();
+            const onSig = () => controller.abort();
+            process.once('SIGINT', onSig);
+            let sawToken = false;
+            try {
+                const req = {
+                    conversationId,
+                    message,
+                    vaultIds: vaultId ? [vaultId] : undefined,
+                    mode: flags.mode,
+                    personaId: flags.persona,
+                    temperature,
+                    history: [...history],
+                    userTimezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                };
+                const out = await runChatTurn(req, deps, {
+                    allowFallback: !flags['no-fallback'],
+                    vaultId,
+                    signal: controller.signal,
+                    onToken: stream
+                        ? (t) => {
+                            if (!sawToken) {
+                                // Separate the live reasoning (stderr) from the answer (stdout).
+                                sawToken = true;
+                                process.stdout.write('\n');
+                            }
+                            process.stdout.write(t);
+                        }
+                        : undefined,
+                    // Agentic reasoning + status stream live to stderr (dim) so they show
+                    // the web's "thinking" experience without polluting the answer / --json.
+                    onThinking: stream
+                        ? (agent, step) => process.stderr.write(chalk.dim(`\n  ⚙ ${agent ?? 'agent'}${step ? `: ${step}` : ''}`))
+                        : undefined,
+                    onStatus: stream ? (m) => process.stderr.write(chalk.dim(`\n  · ${m}`)) : undefined,
+                });
+                history.push({ role: 'user', content: message }, { role: 'assistant', content: out.answer });
+                return out;
+            }
+            finally {
+                process.removeListener('SIGINT', onSig);
+            }
+        };
+        // One-shot (explicit message or piped stdin).
+        if (args.message || !process.stdin.isTTY) {
+            const message = (args.message ?? (await readStdinText())).trim();
+            if (!message)
+                throw new KnowzError('No message provided.', ExitCode.Usage);
+            const json = this.jsonEnabled();
+            const out = await turn(message, !json);
+            if (json)
+                return { answer: out.answer, sources: out.sources, conversationId };
+            if (out.viaFallback)
+                this.log(out.answer);
+            else
+                process.stdout.write('\n');
+            this.printSources(out.sources);
+            return out;
+        }
+        // Interactive REPL.
+        this.log(`knowz chat — conversation ${conversationId}. Commands: /exit, /reset, /sources.`);
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        let last;
+        try {
+            for (;;) {
+                const line = (await rl.question('\n> ')).trim();
+                if (!line)
+                    continue;
+                if (line === '/exit' || line === '/quit')
+                    break;
+                if (line === '/reset') {
+                    history.length = 0;
+                    this.log('(conversation history cleared)');
+                    continue;
+                }
+                if (line === '/sources') {
+                    this.printSources(last?.sources ?? []);
+                    continue;
+                }
+                last = await turn(line, true);
+                if (last.viaFallback)
+                    this.log(last.answer);
+                else
+                    process.stdout.write('\n');
+            }
+        }
+        finally {
+            rl.close();
+        }
+        return { conversationId };
+    }
+    printSources(sources) {
+        if (!sources.length)
+            return;
+        this.log('\nsources:');
+        for (const s of sources)
+            this.log(s.knowledgeId ? `  - ${s.title} (${s.knowledgeId})` : `  - ${s.title}`);
+    }
+}
+//# sourceMappingURL=chat.js.map

package/dist/commands/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAA0C,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,KAAK,GAAe,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAEzF,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,WAAW;IAC3C,MAAM,CAAU,WAAW,GAAG,8DAA8D,CAAC;IAC7F,MAAM,CAAU,QAAQ,GAAG;QACzB,2DAA2D;QAC3D,iEAAiE;KAClE,CAAC;IACF,MAAM,CAAU,IAAI,GAAG;QACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;KACjG,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4DAA4D,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACtI,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QACpD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;QAC5E,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;QACjF,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;KACpG,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC;QAE1D,IAAI,WAA+B,CAAC;QACpC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,IAAI,GAAiB;YACzB,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC;YACpE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACjF,CAAC;QAEF,MAAM,OAAO,GAAsD,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,KAAK,EAAE,OAAe,EAAE,MAAe,EAA2B,EAAE;YAC/E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAoB;oBAC3B,cAAc;oBACd,OAAO;oBACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACzC,IAAI,EAAE,KAAK,CAAC,IAAgB;oBAC5B,SAAS,EAAE,KAAK,CAAC,OAAO;oBACxB,WAAW;oBACX,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;oBACrB,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ;iBAC/D,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE;oBACvC,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;oBACpC,OAAO;oBACP,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,MAAM;wBACb,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;4BACJ,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,iEAAiE;gCACjE,QAAQ,GAAG,IAAI,CAAC;gCAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;4BAC7B,CAAC;4BACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC1B,CAAC;wBACH,CAAC,CAAC,SAAS;oBACb,sEAAsE;oBACtE,yEAAyE;oBACzE,UAAU,EAAE,MAAM;wBAChB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACzG,CAAC,CAAC,SAAS;oBACb,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;iBACpF,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7F,OAAO,GAAG,CAAC;YACb,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC;QAEF,8CAA8C;QAC9C,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC;YAC9E,IAAI,GAAG,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,GAAG,CAAC;QACb,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,GAAG,CAAC,6BAA6B,cAAc,sCAAsC,CAAC,CAAC;QAC5F,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,IAAI,IAAgC,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;oBAAE,MAAM;gBAChD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;oBAC3C,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxB,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,WAAW;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;oBACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY,CAAC,OAAqE;QACxF,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC5B,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,OAAO;YACrB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC"}

package/dist/commands/cmek/decrypt.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../base-command.js';
+export default class CmekDecrypt extends BaseCommand {
+    static id: string;
+    static description: string;
+    static flags: {
+        file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        passphrase: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<{
+        plaintext: string;
+    }>;
+}
+//# sourceMappingURL=decrypt.d.ts.map

package/dist/commands/cmek/decrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.d.ts","sourceRoot":"","sources":["../../../src/commands/cmek/decrypt.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,OAAgB,EAAE,SAAkB;IACpC,OAAgB,WAAW,SAAoF;IAC/G,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAU5C"}

package/dist/commands/cmek/decrypt.js

@@ -0,0 +1,25 @@
+import { Flags } from '@oclif/core';
+import { readFileSync } from 'node:fs';
+import { resolveKek, decryptString, parseEnvelope } from '@knowzai/crypto';
+import { loadConfig, resolveProfileName } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+import { readStdinText } from '../../lib/prompt.js';
+export default class CmekDecrypt extends BaseCommand {
+    static id = 'cmek:decrypt';
+    static description = 'Decrypt a CMEK envelope (from --file or stdin) back to plaintext (local only).';
+    static flags = {
+        file: Flags.file({ description: 'Read the envelope from a file', exists: true }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (passphrase mode)' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CmekDecrypt);
+        const cfg = loadConfig();
+        const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
+        const blob = flags.file ? readFileSync(flags.file, 'utf8') : await readStdinText();
+        const kek = resolveKek(profile, { passphrase: flags.passphrase });
+        const plaintext = decryptString(parseEnvelope(blob), kek);
+        this.log(plaintext);
+        return { plaintext };
+    }
+}
+//# sourceMappingURL=decrypt.js.map

package/dist/commands/cmek/decrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["../../../src/commands/cmek/decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,MAAM,CAAU,EAAE,GAAG,cAAc,CAAC;IACpC,MAAM,CAAU,WAAW,GAAG,gFAAgF,CAAC;IAC/G,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAChF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;KAC/E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC"}

package/dist/commands/cmek/encrypt.d.ts

@@ -0,0 +1,15 @@
+import { type CmekEnvelope } from '@knowzai/crypto';
+import { BaseCommand } from '../../base-command.js';
+export default class CmekEncrypt extends BaseCommand {
+    static id: string;
+    static description: string;
+    static args: {
+        text: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        passphrase: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<CmekEnvelope>;
+}
+//# sourceMappingURL=encrypt.d.ts.map

package/dist/commands/cmek/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../../src/commands/cmek/encrypt.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0C,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE5F,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,OAAgB,EAAE,SAAkB;IACpC,OAAgB,WAAW,SAA+E;IAC1G,OAAgB,IAAI;;MAAqF;IACzG,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC;CAUnC"}

package/dist/commands/cmek/encrypt.js

@@ -0,0 +1,26 @@
+import { Args, Flags } from '@oclif/core';
+import { readFileSync } from 'node:fs';
+import { resolveKek, encrypt, serializeEnvelope } from '@knowzai/crypto';
+import { loadConfig, resolveProfileName } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+import { readStdinText } from '../../lib/prompt.js';
+export default class CmekEncrypt extends BaseCommand {
+    static id = 'cmek:encrypt';
+    static description = 'Encrypt text/file into a CMEK envelope (local only; prints the envelope).';
+    static args = { text: Args.string({ description: 'Text to encrypt (or use --file / stdin)' }) };
+    static flags = {
+        file: Flags.file({ description: 'Read plaintext from a file', exists: true }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (passphrase mode)' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(CmekEncrypt);
+        const cfg = loadConfig();
+        const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
+        const plaintext = args.text ?? (flags.file ? readFileSync(flags.file, 'utf8') : await readStdinText());
+        const kek = resolveKek(profile, { passphrase: flags.passphrase });
+        const env = encrypt(plaintext, kek);
+        this.log(serializeEnvelope(env));
+        return env;
+    }
+}
+//# sourceMappingURL=encrypt.js.map

package/dist/commands/cmek/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sourceRoot":"","sources":["../../../src/commands/cmek/encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAqB,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,MAAM,CAAU,EAAE,GAAG,cAAc,CAAC;IACpC,MAAM,CAAU,WAAW,GAAG,2EAA2E,CAAC;IAC1G,MAAM,CAAU,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC,EAAE,CAAC;IACzG,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7E,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;KAC/E,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;QACvG,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC"}

package/dist/commands/cmek/init.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../base-command.js';
+export default class CmekInit extends BaseCommand {
+    static id: string;
+    static description: string;
+    static flags: {
+        keyfile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<{
+        enabled: boolean;
+        mode?: string;
+    }>;
+}
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/cmek/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/cmek/init.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,WAAW;IAC/C,OAAgB,EAAE,SAAe;IACjC,OAAgB,WAAW,SAC6D;IACxF,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAc1D"}

package/dist/commands/cmek/init.js

@@ -0,0 +1,27 @@
+import { Flags } from '@oclif/core';
+import { initCmek, cmekStatus } from '@knowzai/crypto';
+import { loadConfig, resolveProfileName } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+export default class CmekInit extends BaseCommand {
+    static id = 'cmek:init';
+    static description = 'Enable Model-3 CMEK for the active profile (passphrase-derived key, or a key file).';
+    static flags = {
+        keyfile: Flags.string({ description: 'Path to a 32-byte / 64-hex / base64 key file (else passphrase mode)' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CmekInit);
+        const cfg = loadConfig();
+        const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
+        const config = initCmek(profile, { keyfile: flags.keyfile });
+        const status = cmekStatus(profile);
+        if (this.jsonEnabled())
+            return status;
+        this.log(`CMEK enabled for profile '${profile}' (${config.mode}).`);
+        if (config.mode === 'passphrase') {
+            this.log('Set KNOWZ_CMEK_PASSPHRASE (or pass --passphrase) when encrypting/decrypting/syncing.');
+        }
+        this.log('Cloud sync will now store ciphertext only; decryption happens locally.');
+        return status;
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/cmek/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/cmek/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,WAAW;IAC/C,MAAM,CAAU,EAAE,GAAG,WAAW,CAAC;IACjC,MAAM,CAAU,WAAW,GACzB,qFAAqF,CAAC;IACxF,MAAM,CAAU,KAAK,GAAG;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qEAAqE,EAAE,CAAC;KAC9G,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,6BAA6B,OAAO,MAAM,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC"}

package/dist/commands/cmek/status.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from '../../base-command.js';
+export default class CmekStatus extends BaseCommand {
+    static id: string;
+    static description: string;
+    run(): Promise<{
+        enabled: boolean;
+        mode?: string;
+        keyfile?: string;
+    }>;
+}
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/cmek/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/commands/cmek/status.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,EAAE,SAAiB;IACnC,OAAgB,WAAW,SAAsD;IAE3E,GAAG,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAY5E"}

package/dist/commands/cmek/status.js

@@ -0,0 +1,23 @@
+import { cmekStatus } from '@knowzai/crypto';
+import { loadConfig, resolveProfileName } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+export default class CmekStatus extends BaseCommand {
+    static id = 'cmek:status';
+    static description = 'Show Model-3 CMEK status for the active profile.';
+    async run() {
+        const { flags } = await this.parse(CmekStatus);
+        const cfg = loadConfig();
+        const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
+        const status = cmekStatus(profile);
+        if (this.jsonEnabled())
+            return status;
+        this.log(`profile: ${profile}`);
+        this.log(`cmek:    ${status.enabled ? 'enabled' : 'disabled'}`);
+        if (status.mode)
+            this.log(`mode:    ${status.mode}`);
+        if (status.keyfile)
+            this.log(`keyfile: ${status.keyfile}`);
+        return status;
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/cmek/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/commands/cmek/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,EAAE,GAAG,aAAa,CAAC;IACnC,MAAM,CAAU,WAAW,GAAG,kDAAkD,CAAC;IAEjF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC"}

package/dist/commands/completion.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../base-command.js';
+export default class Completion extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        shell: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<{
+        shell: string;
+        script: string;
+    }>;
+}
+//# sourceMappingURL=completion.d.ts.map

package/dist/commands/completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion.d.ts","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,WAAW,SACoF;IAC/G,OAAgB,QAAQ,WAA6E;IACrG,OAAgB,IAAI;;MAA+F;IAE7G,GAAG,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CASxD"}

package/dist/commands/completion.js

@@ -0,0 +1,19 @@
+import { Args } from '@oclif/core';
+import { BaseCommand } from '../base-command.js';
+import { bashCompletion, zshCompletion } from '../lib/completion.js';
+export default class Completion extends BaseCommand {
+    static description = 'Output a shell completion script. Install with: eval "$(knowz completion bash)" (or zsh) in your shell rc.';
+    static examples = ['<%= config.bin %> completion bash', '<%= config.bin %> completion zsh'];
+    static args = { shell: Args.string({ description: 'Shell', options: ['bash', 'zsh'], default: 'bash' }) };
+    async run() {
+        const { args } = await this.parse(Completion);
+        const bin = this.config.bin || 'knowz';
+        const ids = this.config.commandIDs.filter((id) => id !== 'completion');
+        const script = args.shell === 'zsh' ? zshCompletion(bin, ids) : bashCompletion(bin, ids);
+        if (this.jsonEnabled())
+            return { shell: args.shell, script };
+        this.log(script);
+        return { shell: args.shell, script };
+    }
+}
+//# sourceMappingURL=completion.js.map

package/dist/commands/completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../src/commands/completion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErE,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,WAAW,GACzB,4GAA4G,CAAC;IAC/G,MAAM,CAAU,QAAQ,GAAG,CAAC,mCAAmC,EAAE,kCAAkC,CAAC,CAAC;IACrG,MAAM,CAAU,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAEnH,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC"}

package/dist/commands/config/get.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../base-command.js';
+export default class ConfigGet extends BaseCommand {
+    static id: string;
+    static description: string;
+    static args: {
+        key: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<{
+        key: string;
+        value?: string;
+    }>;
+}
+//# sourceMappingURL=get.d.ts.map

package/dist/commands/config/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../src/commands/config/get.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,OAAgB,EAAE,SAAgB;IAClC,OAAgB,WAAW,SAA2F;IACtH,OAAgB,IAAI;;MAElB;IAEI,GAAG,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAetD"}

package/dist/commands/config/get.js

@@ -0,0 +1,28 @@
+import { Args } from '@oclif/core';
+import { loadConfig, resolveProfileName, getProfileValue, getUiFrontend } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+export default class ConfigGet extends BaseCommand {
+    static id = 'config:get';
+    static description = 'Get a setting on the active (or --profile) profile, or a global key like ui.frontend.';
+    static args = {
+        key: Args.string({ description: 'apiUrl | defaultVaultId | email | label | pgDsn | ui.frontend', required: true }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(ConfigGet);
+        const cfg = loadConfig();
+        if (args.key === 'ui.frontend') {
+            const v = getUiFrontend(cfg);
+            if (this.jsonEnabled())
+                return { key: args.key, value: v };
+            this.log(v ?? '');
+            return { key: args.key, value: v };
+        }
+        const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
+        const value = getProfileValue(cfg, profile, args.key);
+        if (this.jsonEnabled())
+            return { key: args.key, value };
+        this.log(value ?? '');
+        return { key: args.key, value };
+    }
+}
+//# sourceMappingURL=get.js.map

package/dist/commands/config/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../src/commands/config/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAU,EAAE,GAAG,YAAY,CAAC;IAClC,MAAM,CAAU,WAAW,GAAG,uFAAuF,CAAC;IACtH,MAAM,CAAU,IAAI,GAAG;QACrB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,+DAA+D,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACnH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAClB,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC"}

package/dist/commands/config/list.d.ts

@@ -0,0 +1,7 @@
+import { BaseCommand } from '../../base-command.js';
+export default class ConfigList extends BaseCommand {
+    static id: string;
+    static description: string;
+    run(): Promise<unknown>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/config/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/config/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,EAAE,SAAiB;IACnC,OAAgB,WAAW,SAAmF;IAExG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;CAgB9B"}

package/dist/commands/config/list.js

@@ -0,0 +1,28 @@
+import { loadConfig, configPath } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+export default class ConfigList extends BaseCommand {
+    static id = 'config:list';
+    static description = 'Show the full config (profiles + active profile). No secrets are stored here.';
+    async run() {
+        await this.parse(ConfigList);
+        const cfg = loadConfig();
+        if (this.jsonEnabled())
+            return cfg;
+        this.log(`config: ${configPath()}`);
+        this.log(`active: ${cfg.activeProfile}\n`);
+        for (const [name, p] of Object.entries(cfg.profiles)) {
+            this.log(`[${name}${name === cfg.activeProfile ? ' *' : ''}]`);
+            this.log(`  apiUrl:        ${p.apiUrl}`);
+            if (p.defaultVaultId)
+                this.log(`  defaultVaultId: ${p.defaultVaultId}`);
+            if (p.email)
+                this.log(`  email:         ${p.email}`);
+            if (p.label)
+                this.log(`  label:         ${p.label}`);
+            if (p.pgDsn)
+                this.log(`  pgDsn:         ${p.pgDsn}`);
+        }
+        return cfg;
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/config/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/config/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,EAAE,GAAG,aAAa,CAAC;IACnC,MAAM,CAAU,WAAW,GAAG,+EAA+E,CAAC;IAE9G,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,GAAG,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,cAAc;gBAAE,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC"}

package/dist/commands/config/path.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../base-command.js';
+export default class ConfigPath extends BaseCommand {
+    static id: string;
+    static description: string;
+    run(): Promise<{
+        path: string;
+    }>;
+}
+//# sourceMappingURL=path.d.ts.map

package/dist/commands/config/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../src/commands/config/path.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,EAAE,SAAiB;IACnC,OAAgB,WAAW,SAAwC;IAE7D,GAAG,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAOvC"}

package/dist/commands/config/path.js

@@ -0,0 +1,15 @@
+import { configPath } from '@knowzai/core';
+import { BaseCommand } from '../../base-command.js';
+export default class ConfigPath extends BaseCommand {
+    static id = 'config:path';
+    static description = 'Print the path to the config file.';
+    async run() {
+        await this.parse(ConfigPath);
+        const path = configPath();
+        if (this.jsonEnabled())
+            return { path };
+        this.log(path);
+        return { path };
+    }
+}
+//# sourceMappingURL=path.js.map