@kodrunhq/claudefy 0.1.0

package/dist/commands/pull.js

@@ -0,0 +1,220 @@
+import { cp, mkdir, readdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { existsSync } from "node:fs";
+import { ConfigManager } from "../config/config-manager.js";
+import { GitAdapter } from "../git-adapter/git-adapter.js";
+import { PathMapper } from "../path-mapper/path-mapper.js";
+import { MachineRegistry } from "../machine-registry/machine-registry.js";
+import { Encryptor } from "../encryptor/encryptor.js";
+import { Merger } from "../merger/merger.js";
+import { BackupManager } from "../backup-manager/backup-manager.js";
+import { output } from "../output.js";
+export class PullCommand {
+    homeDir;
+    claudeDir;
+    configManager;
+    constructor(homeDir) {
+        this.homeDir = homeDir;
+        this.claudeDir = join(homeDir, ".claude");
+        this.configManager = new ConfigManager(homeDir);
+    }
+    async execute(options) {
+        const config = await this.configManager.load();
+        const result = { overrideDetected: false, filesUpdated: 0 };
+        // 1. Initialize git adapter and pull
+        const claudefyDir = join(this.homeDir, ".claudefy");
+        const gitAdapter = new GitAdapter(claudefyDir);
+        await gitAdapter.initStore(config.backend.url);
+        try {
+            await gitAdapter.pull();
+        }
+        catch {
+            // Fresh store with no remote history yet
+        }
+        const storePath = gitAdapter.getStorePath();
+        const configDir = join(storePath, "config");
+        const unknownDir = join(storePath, "unknown");
+        const resolvedClaudeDir = resolve(this.claudeDir);
+        // 2. Check for override marker
+        const override = await gitAdapter.checkOverrideMarker();
+        if (override) {
+            result.overrideDetected = true;
+            if (!options.quiet) {
+                output.warn(`Override detected from machine: ${override.machine} at ${override.timestamp}`);
+            }
+            // Create backup before applying override (skip if .claude doesn't exist yet)
+            if (existsSync(this.claudeDir)) {
+                const backupManager = new BackupManager(claudefyDir);
+                result.backupPath = await backupManager.createBackup(this.claudeDir, "pre-override");
+            }
+            if (!options.quiet && result.backupPath) {
+                output.info(`Backup created at: ${result.backupPath}`);
+            }
+            // Remove override marker
+            await gitAdapter.removeOverrideMarker();
+            await gitAdapter.commitAndPush("pull: acknowledge override");
+        }
+        // 3. Decrypt .age files if encryption is enabled
+        if (config.encryption.enabled && !options.skipEncryption) {
+            if (!options.passphrase) {
+                throw new Error("Encryption is enabled but CLAUDEFY_PASSPHRASE env var is not set.");
+            }
+            const encryptor = new Encryptor(options.passphrase);
+            // Decrypt sensitive config files
+            const filesToDecrypt = ["settings.json.age", "history.jsonl.age"];
+            for (const fileName of filesToDecrypt) {
+                const filePath = join(configDir, fileName);
+                if (existsSync(filePath)) {
+                    const outputPath = filePath.replace(/\.age$/, "");
+                    await encryptor.decryptFile(filePath, outputPath);
+                    await rm(filePath);
+                }
+            }
+            // Decrypt all .age files in unknown/
+            if (existsSync(unknownDir)) {
+                await encryptor.decryptDirectory(unknownDir);
+            }
+        }
+        // 4. Remap paths (canonical → local)
+        const links = await this.configManager.getLinks();
+        const pathMapper = new PathMapper(links);
+        // settings.json
+        const remoteSettingsPath = join(configDir, "settings.json");
+        if (existsSync(remoteSettingsPath)) {
+            const settings = JSON.parse(await readFile(remoteSettingsPath, "utf-8"));
+            const remapped = pathMapper.remapSettingsPaths(settings, this.claudeDir);
+            await writeFile(remoteSettingsPath, JSON.stringify(remapped, null, 2));
+        }
+        // installed_plugins.json
+        const pluginsJsonPath = join(configDir, "plugins", "installed_plugins.json");
+        if (existsSync(pluginsJsonPath)) {
+            const plugins = JSON.parse(await readFile(pluginsJsonPath, "utf-8"));
+            const remapped = pathMapper.remapPluginPaths(plugins, this.claudeDir);
+            await writeFile(pluginsJsonPath, JSON.stringify(remapped, null, 2));
+        }
+        // known_marketplaces.json
+        const marketplacesPath = join(configDir, "plugins", "known_marketplaces.json");
+        if (existsSync(marketplacesPath)) {
+            const mp = JSON.parse(await readFile(marketplacesPath, "utf-8"));
+            const remapped = pathMapper.remapPluginPaths(mp, this.claudeDir);
+            await writeFile(marketplacesPath, JSON.stringify(remapped, null, 2));
+        }
+        // history.jsonl
+        const historyPath = join(configDir, "history.jsonl");
+        if (existsSync(historyPath)) {
+            const content = await readFile(historyPath, "utf-8");
+            const remapped = content
+                .split("\n")
+                .filter(Boolean)
+                .map((line) => pathMapper.remapJsonlLine(line))
+                .join("\n") + "\n";
+            await writeFile(historyPath, remapped);
+        }
+        // projects/ directory renaming (canonical → local)
+        const projectsDir = join(configDir, "projects");
+        if (existsSync(projectsDir)) {
+            const projectDirs = await readdir(projectsDir);
+            for (const dirName of projectDirs) {
+                const localName = pathMapper.remapDirName(dirName);
+                if (localName) {
+                    const destPath = resolve(join(projectsDir, localName));
+                    // Path containment: ensure renamed dir stays within projects/
+                    if (!destPath.startsWith(resolve(projectsDir) + "/")) {
+                        console.warn(`Skipping directory rename "${dirName}" → "${localName}": path escapes projects directory`);
+                        continue;
+                    }
+                    await rename(join(projectsDir, dirName), destPath);
+                }
+            }
+        }
+        // 5. Merge and copy to ~/.claude
+        const merger = new Merger();
+        await mkdir(this.claudeDir, { recursive: true });
+        // 5a. Deep merge settings.json
+        if (existsSync(remoteSettingsPath)) {
+            const localSettingsPath = join(this.claudeDir, "settings.json");
+            const remoteSettings = JSON.parse(await readFile(remoteSettingsPath, "utf-8"));
+            // Security: strip hooks from remote settings to prevent remote hook injection.
+            // Local hooks should never be overwritten by remote data, as an attacker with
+            // store access could inject arbitrary shell commands via SessionStart/SessionEnd hooks.
+            delete remoteSettings.hooks;
+            if (existsSync(localSettingsPath) && !result.overrideDetected) {
+                const localSettings = JSON.parse(await readFile(localSettingsPath, "utf-8"));
+                const merged = merger.deepMergeJson(localSettings, remoteSettings);
+                await writeFile(localSettingsPath, JSON.stringify(merged, null, 2));
+            }
+            else {
+                await writeFile(localSettingsPath, JSON.stringify(remoteSettings, null, 2));
+            }
+            result.filesUpdated++;
+        }
+        // 5b. Copy remaining config items (remote overwrites local)
+        if (existsSync(configDir)) {
+            const entries = await readdir(configDir, { withFileTypes: true });
+            for (const entry of entries) {
+                if (entry.name === "settings.json")
+                    continue; // Already handled
+                // Security: skip symlinks to prevent path traversal attacks
+                if (entry.isSymbolicLink()) {
+                    console.warn(`Skipping symlink in config store: ${entry.name}`);
+                    continue;
+                }
+                const src = join(configDir, entry.name);
+                const dest = resolve(join(this.claudeDir, entry.name));
+                // Path containment: ensure destination stays within ~/.claude/
+                if (!dest.startsWith(resolvedClaudeDir + "/") && dest !== resolvedClaudeDir) {
+                    console.warn(`Skipping "${entry.name}": resolved path escapes ~/.claude/`);
+                    continue;
+                }
+                await cp(src, dest, { recursive: true, force: true });
+                result.filesUpdated++;
+            }
+        }
+        // 5c. Copy unknown items back
+        if (existsSync(unknownDir)) {
+            const entries = await readdir(unknownDir, { withFileTypes: true });
+            for (const entry of entries) {
+                // Security: skip symlinks to prevent path traversal attacks
+                if (entry.isSymbolicLink()) {
+                    console.warn(`Skipping symlink in unknown store: ${entry.name}`);
+                    continue;
+                }
+                const src = join(unknownDir, entry.name);
+                const dest = resolve(join(this.claudeDir, entry.name));
+                // Path containment: ensure destination stays within ~/.claude/
+                if (!dest.startsWith(resolvedClaudeDir + "/") && dest !== resolvedClaudeDir) {
+                    console.warn(`Skipping "${entry.name}": resolved path escapes ~/.claude/`);
+                    continue;
+                }
+                await cp(src, dest, { recursive: true, force: true });
+                result.filesUpdated++;
+            }
+        }
+        // 6. Re-encrypt decrypted files in the store before committing,
+        //    so plaintext is never committed to git history.
+        if (config.encryption.enabled && !options.skipEncryption) {
+            const encryptor = new Encryptor(options.passphrase);
+            const filesToReencrypt = ["settings.json", "history.jsonl"];
+            for (const fileName of filesToReencrypt) {
+                const filePath = join(configDir, fileName);
+                if (existsSync(filePath)) {
+                    await encryptor.encryptFile(filePath, filePath + ".age");
+                    await rm(filePath);
+                }
+            }
+            // Re-encrypt all plaintext files in unknown/
+            if (existsSync(unknownDir)) {
+                await encryptor.encryptDirectory(unknownDir);
+            }
+        }
+        // 7. Update machine registry last sync time and commit
+        const registry = new MachineRegistry(join(storePath, "manifest.json"));
+        await registry.updateLastSync(config.machineId);
+        await gitAdapter.commitAndPush(`sync: pull on ${config.machineId}`);
+        if (!options.quiet) {
+            output.success(`Pull complete. ${result.filesUpdated} items updated.`);
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=pull.js.map

package/dist/commands/pull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.js","sourceRoot":"","sources":["../../src/commands/pull.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AActC,MAAM,OAAO,WAAW;IACd,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,aAAa,CAAgB;IAErC,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAoB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAe,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAExE,qCAAqC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAElD,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,mBAAmB,EAAE,CAAC;QACxD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,mCAAmC,QAAQ,CAAC,OAAO,OAAO,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9F,CAAC;YAED,6EAA6E;YAC7E,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;gBACrD,MAAM,CAAC,UAAU,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACvF,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,yBAAyB;YACzB,MAAM,UAAU,CAAC,oBAAoB,EAAE,CAAC;YACxC,MAAM,UAAU,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAC/D,CAAC;QAED,iDAAiD;QACjD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAEpD,iCAAiC;YACjC,MAAM,cAAc,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;YAClE,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAClD,MAAM,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;oBAClD,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,qCAAqC;YACrC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAEzC,gBAAgB;QAChB,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzE,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QAED,yBAAyB;QACzB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAC7E,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACtE,MAAM,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC/E,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,gBAAgB;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,QAAQ,GACZ,OAAO;iBACJ,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;iBAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACvB,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,mDAAmD;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;oBACvD,8DAA8D;oBAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;wBACrD,OAAO,CAAC,IAAI,CACV,8BAA8B,OAAO,QAAQ,SAAS,oCAAoC,CAC3F,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,+BAA+B;QAC/B,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;YAE/E,+EAA+E;YAC/E,8EAA8E;YAC9E,wFAAwF;YACxF,OAAO,cAAc,CAAC,KAAK,CAAC;YAE5B,IAAI,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;gBACnE,MAAM,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,CAAC;QAED,4DAA4D;QAC5D,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;oBAAE,SAAS,CAAC,kBAAkB;gBAEhE,4DAA4D;gBAC5D,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,qCAAqC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBAChE,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAEvD,+DAA+D;gBAC/D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC5E,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,qCAAqC,CAAC,CAAC;oBAC3E,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,4DAA4D;gBAC5D,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,sCAAsC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACjE,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAEvD,+DAA+D;gBAC/D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC5E,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,qCAAqC,CAAC,CAAC;oBAC3E,SAAS;gBACX,CAAC;gBAED,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,qDAAqD;QACrD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,UAAW,CAAC,CAAC;YAErD,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;YAC5D,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,MAAM,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC;oBACzD,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,6CAA6C;YAC7C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,aAAa,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,CAAC,kBAAkB,MAAM,CAAC,YAAY,iBAAiB,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/commands/push.d.ts

@@ -0,0 +1,14 @@
+export interface PushOptions {
+    quiet: boolean;
+    skipEncryption?: boolean;
+    skipSecretScan?: boolean;
+    passphrase?: string;
+}
+export declare class PushCommand {
+    private homeDir;
+    private claudeDir;
+    private configManager;
+    constructor(homeDir: string);
+    execute(options: PushOptions): Promise<void>;
+    private collectFiles;
+}

package/dist/commands/push.js

@@ -0,0 +1,175 @@
+import { cp, mkdir, readdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { existsSync } from "node:fs";
+import { hostname, platform } from "node:os";
+import { ConfigManager } from "../config/config-manager.js";
+import { SyncFilter } from "../sync-filter/sync-filter.js";
+import { GitAdapter } from "../git-adapter/git-adapter.js";
+import { PathMapper } from "../path-mapper/path-mapper.js";
+import { MachineRegistry } from "../machine-registry/machine-registry.js";
+import { Encryptor } from "../encryptor/encryptor.js";
+import { SecretScanner } from "../secret-scanner/scanner.js";
+import { output } from "../output.js";
+export class PushCommand {
+    homeDir;
+    claudeDir;
+    configManager;
+    constructor(homeDir) {
+        this.homeDir = homeDir;
+        this.claudeDir = join(homeDir, ".claude");
+        this.configManager = new ConfigManager(homeDir);
+    }
+    async execute(options) {
+        const config = await this.configManager.load();
+        const syncFilterConfig = await this.configManager.getSyncFilter();
+        const syncFilter = new SyncFilter(syncFilterConfig);
+        // 1. Classify ~/.claude contents
+        if (!existsSync(this.claudeDir)) {
+            throw new Error(`No ${this.claudeDir} directory found. Nothing to push.`);
+        }
+        const classification = await syncFilter.classify(this.claudeDir);
+        const willEncrypt = config.encryption.enabled && !options.skipEncryption;
+        if (!options.quiet) {
+            const unknownLabel = willEncrypt ? "unknown (encrypted)" : "unknown";
+            output.info(`Syncing: ${classification.allowlist.length} allowed, ` +
+                `${classification.unknown.length} ${unknownLabel}, ` +
+                `${classification.denylist.length} denied`);
+        }
+        // 2. Initialize git adapter
+        const gitAdapter = new GitAdapter(join(this.homeDir, ".claudefy"));
+        await gitAdapter.initStore(config.backend.url);
+        try {
+            await gitAdapter.pull();
+        }
+        catch {
+            // Fresh store with no remote history yet — safe to continue
+        }
+        const storePath = gitAdapter.getStorePath();
+        const configDir = join(storePath, "config");
+        const unknownDir = join(storePath, "unknown");
+        // 3. Clean existing config and unknown dirs in store
+        if (existsSync(configDir)) {
+            await rm(configDir, { recursive: true });
+        }
+        if (existsSync(unknownDir)) {
+            await rm(unknownDir, { recursive: true });
+        }
+        await mkdir(configDir, { recursive: true });
+        await mkdir(unknownDir, { recursive: true });
+        // 4. Copy allowlisted items
+        for (const item of classification.allowlist) {
+            const src = join(this.claudeDir, item.name);
+            const dest = join(configDir, item.name);
+            await cp(src, dest, { recursive: true });
+        }
+        // 5. Copy unknown items
+        for (const item of classification.unknown) {
+            const src = join(this.claudeDir, item.name);
+            const dest = join(unknownDir, item.name);
+            await cp(src, dest, { recursive: true });
+        }
+        // 6. Normalize paths in known files
+        const links = await this.configManager.getLinks();
+        const pathMapper = new PathMapper(links);
+        // settings.json
+        const settingsPath = join(configDir, "settings.json");
+        if (existsSync(settingsPath)) {
+            const settings = JSON.parse(await readFile(settingsPath, "utf-8"));
+            const normalized = pathMapper.normalizeSettingsPaths(settings, this.claudeDir);
+            await writeFile(settingsPath, JSON.stringify(normalized, null, 2));
+        }
+        // installed_plugins.json
+        const pluginsJsonPath = join(configDir, "plugins", "installed_plugins.json");
+        if (existsSync(pluginsJsonPath)) {
+            const plugins = JSON.parse(await readFile(pluginsJsonPath, "utf-8"));
+            const normalized = pathMapper.normalizePluginPaths(plugins, this.claudeDir);
+            await writeFile(pluginsJsonPath, JSON.stringify(normalized, null, 2));
+        }
+        // known_marketplaces.json
+        const marketplacesPath = join(configDir, "plugins", "known_marketplaces.json");
+        if (existsSync(marketplacesPath)) {
+            const mp = JSON.parse(await readFile(marketplacesPath, "utf-8"));
+            const normalized = pathMapper.normalizePluginPaths(mp, this.claudeDir);
+            await writeFile(marketplacesPath, JSON.stringify(normalized, null, 2));
+        }
+        // history.jsonl
+        const historyPath = join(configDir, "history.jsonl");
+        if (existsSync(historyPath)) {
+            const content = await readFile(historyPath, "utf-8");
+            const normalized = content
+                .split("\n")
+                .filter(Boolean)
+                .map((line) => pathMapper.normalizeJsonlLine(line))
+                .join("\n") + "\n";
+            await writeFile(historyPath, normalized);
+        }
+        // projects/ directory renaming
+        const projectsDir = join(configDir, "projects");
+        if (existsSync(projectsDir)) {
+            const projectDirs = await readdir(projectsDir);
+            for (const dirName of projectDirs) {
+                const canonicalId = pathMapper.normalizeDirName(dirName);
+                if (canonicalId) {
+                    await rename(join(projectsDir, dirName), join(projectsDir, canonicalId));
+                }
+            }
+        }
+        // 7. Scan for secrets before committing
+        if (!options.skipSecretScan) {
+            const scanner = new SecretScanner();
+            const filesToScan = await this.collectFiles(configDir);
+            const unknownFiles = await this.collectFiles(unknownDir);
+            filesToScan.push(...unknownFiles);
+            const findings = await scanner.scanFiles(filesToScan);
+            if (findings.length > 0) {
+                const details = findings.map((f) => `  ${f.file}:${f.line} [${f.pattern}]`).join("\n");
+                throw new Error(`Secret scan detected ${findings.length} potential secret(s):\n${details}\n\nAborting push. Use --skip-secret-scan to bypass scanning.`);
+            }
+        }
+        // 8. Encrypt files if encryption is enabled
+        if (config.encryption.enabled && !options.skipEncryption) {
+            if (!options.passphrase) {
+                throw new Error("Encryption is enabled but CLAUDEFY_PASSPHRASE env var is not set.");
+            }
+            const encryptor = new Encryptor(options.passphrase);
+            // Encrypt sensitive config files
+            const filesToEncrypt = ["settings.json", "history.jsonl"];
+            for (const fileName of filesToEncrypt) {
+                const filePath = join(configDir, fileName);
+                if (existsSync(filePath)) {
+                    await encryptor.encryptFile(filePath, filePath + ".age");
+                    await rm(filePath);
+                }
+            }
+            // Encrypt all files in unknown/
+            if (existsSync(unknownDir)) {
+                await encryptor.encryptDirectory(unknownDir);
+            }
+        }
+        // 9. Update machine registry
+        const registry = new MachineRegistry(join(storePath, "manifest.json"));
+        await registry.register(config.machineId, hostname(), platform());
+        // 10. Commit and push
+        await gitAdapter.commitAndPush(`sync: push from ${config.machineId}`);
+        if (!options.quiet) {
+            output.success("Push complete.");
+        }
+    }
+    async collectFiles(dirPath) {
+        if (!existsSync(dirPath))
+            return [];
+        const results = [];
+        const entries = await readdir(dirPath, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = join(dirPath, entry.name);
+            if (entry.isDirectory()) {
+                results.push(...(await this.collectFiles(fullPath)));
+            }
+            else {
+                results.push(fullPath);
+            }
+        }
+        return results;
+    }
+}
+//# sourceMappingURL=push.js.map

package/dist/commands/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/commands/push.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAStC,MAAM,OAAO,WAAW;IACd,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,aAAa,CAAgB;IAErC,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAoB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAEpD,iCAAiC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,oCAAoC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,MAAM,CAAC,IAAI,CACT,YAAY,cAAc,CAAC,SAAS,CAAC,MAAM,YAAY;gBACrD,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,IAAI;gBACpD,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,SAAS,CAC7C,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QACnE,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAE9C,qDAAqD;QACrD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,4BAA4B;QAC5B,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,oCAAoC;QACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAEzC,gBAAgB;QAChB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,UAAU,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/E,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,yBAAyB;QACzB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAC7E,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5E,MAAM,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC/E,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACvE,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;QAED,gBAAgB;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,UAAU,GACd,OAAO;iBACJ,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;iBAClD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACvB,MAAM,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACzD,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvF,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,MAAM,0BAA0B,OAAO,+DAA+D,CACxI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAEpD,iCAAiC;YACjC,MAAM,cAAc,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;YAC1D,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,MAAM,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC;oBACzD,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElE,sBAAsB;QACtB,MAAM,UAAU,CAAC,aAAa,CAAC,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAEtE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAe;QACxC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/commands/status.d.ts

@@ -0,0 +1,14 @@
+export interface StatusResult {
+    initialized: boolean;
+    machineId?: string;
+    backendUrl?: string;
+    localFiles: string[];
+    syncedFiles: string[];
+    deniedFiles: string[];
+    unknownFiles: string[];
+}
+export declare class StatusCommand {
+    private homeDir;
+    constructor(homeDir: string);
+    execute(): Promise<StatusResult>;
+}

package/dist/commands/status.js

@@ -0,0 +1,50 @@
+import { readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { existsSync } from "node:fs";
+import { ConfigManager } from "../config/config-manager.js";
+import { SyncFilter } from "../sync-filter/sync-filter.js";
+export class StatusCommand {
+    homeDir;
+    constructor(homeDir) {
+        this.homeDir = homeDir;
+    }
+    async execute() {
+        const configManager = new ConfigManager(this.homeDir);
+        if (!configManager.isInitialized()) {
+            return {
+                initialized: false,
+                localFiles: [],
+                syncedFiles: [],
+                deniedFiles: [],
+                unknownFiles: [],
+            };
+        }
+        const config = await configManager.load();
+        const claudeDir = join(this.homeDir, ".claude");
+        if (!existsSync(claudeDir)) {
+            return {
+                initialized: true,
+                machineId: config.machineId,
+                backendUrl: config.backend.url,
+                localFiles: [],
+                syncedFiles: [],
+                deniedFiles: [],
+                unknownFiles: [],
+            };
+        }
+        const syncFilterConfig = await configManager.getSyncFilter();
+        const syncFilter = new SyncFilter(syncFilterConfig);
+        const localFiles = await readdir(claudeDir);
+        const classification = await syncFilter.classify(claudeDir);
+        return {
+            initialized: true,
+            machineId: config.machineId,
+            backendUrl: config.backend.url,
+            localFiles,
+            syncedFiles: classification.allowlist.map((i) => i.name),
+            deniedFiles: classification.denylist.map((i) => i.name),
+            unknownFiles: classification.unknown.map((i) => i.name),
+        };
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAY3D,MAAM,OAAO,aAAa;IAChB,OAAO,CAAS;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC;YACnC,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,EAAE;gBACf,YAAY,EAAE,EAAE;aACjB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEhD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;gBAC9B,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,EAAE;gBACf,WAAW,EAAE,EAAE;gBACf,YAAY,EAAE,EAAE;aACjB,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE5D,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;YAC9B,UAAU;YACV,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACxD,CAAC;IACJ,CAAC;CACF"}

package/dist/config/config-manager.d.ts

@@ -0,0 +1,22 @@
+import type { ClaudefyConfig, LinksConfig, SyncFilterConfig } from "./types.js";
+export declare class ConfigManager {
+    private baseDir;
+    private configDir;
+    constructor(homeDir: string);
+    initialize(backendUrl: string): Promise<ClaudefyConfig>;
+    load(): Promise<ClaudefyConfig>;
+    set(key: string, value: unknown): Promise<void>;
+    addLink(alias: string, localPath: string, meta: {
+        canonicalId: string;
+        gitRemote: string | null;
+    }): Promise<void>;
+    removeLink(alias: string): Promise<void>;
+    getLinks(): Promise<LinksConfig>;
+    getSyncFilter(): Promise<SyncFilterConfig>;
+    setFilterOverride(name: string, tier: "allow" | "deny"): Promise<void>;
+    isInitialized(): boolean;
+    getConfigDir(): string;
+    private saveConfig;
+    private saveLinks;
+    private saveSyncFilter;
+}

package/dist/config/config-manager.js

@@ -0,0 +1,118 @@
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import { existsSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { hostname } from "node:os";
+import { CLAUDEFY_DIR, CONFIG_FILE, LINKS_FILE, SYNC_FILTER_FILE, MACHINE_ID_FILE, DEFAULT_SYNC_FILTER, } from "./defaults.js";
+export class ConfigManager {
+    baseDir;
+    configDir;
+    constructor(homeDir) {
+        this.baseDir = homeDir;
+        this.configDir = join(homeDir, CLAUDEFY_DIR);
+    }
+    async initialize(backendUrl) {
+        if (this.isInitialized()) {
+            throw new Error("claudefy is already initialized. Use 'load()' to read existing config.");
+        }
+        await mkdir(this.configDir, { recursive: true });
+        await mkdir(join(this.configDir, "backups"), { recursive: true });
+        const machineId = `${hostname()}-${randomUUID().slice(0, 8)}`.toLowerCase();
+        await writeFile(join(this.configDir, MACHINE_ID_FILE), machineId);
+        const config = {
+            version: 1,
+            backend: { type: "git", url: backendUrl },
+            encryption: {
+                enabled: true,
+                useKeychain: false,
+                cacheDuration: "0",
+            },
+            machineId,
+        };
+        await this.saveConfig(config);
+        await this.saveLinks({});
+        await this.saveSyncFilter({ ...DEFAULT_SYNC_FILTER });
+        return config;
+    }
+    async load() {
+        const raw = await readFile(join(this.configDir, CONFIG_FILE), "utf-8");
+        return JSON.parse(raw);
+    }
+    async set(key, value) {
+        const FORBIDDEN_KEYS = ["__proto__", "prototype", "constructor"];
+        const parts = key.split(".");
+        for (const part of parts) {
+            if (FORBIDDEN_KEYS.includes(part)) {
+                throw new Error(`Forbidden config key segment: "${part}"`);
+            }
+        }
+        const config = await this.load();
+        let obj = config;
+        for (let i = 0; i < parts.length - 1; i++) {
+            const next = obj[parts[i]];
+            if (next === undefined || next === null || typeof next !== "object") {
+                throw new Error(`Invalid config key: "${key}" — "${parts[i]}" is not an object`);
+            }
+            obj = next;
+        }
+        obj[parts[parts.length - 1]] = value;
+        await this.saveConfig(config);
+    }
+    async addLink(alias, localPath, meta) {
+        const links = await this.getLinks();
+        links[alias] = {
+            localPath,
+            canonicalId: meta.canonicalId,
+            gitRemote: meta.gitRemote,
+            detectedAt: new Date().toISOString(),
+        };
+        await this.saveLinks(links);
+    }
+    async removeLink(alias) {
+        const links = await this.getLinks();
+        delete links[alias];
+        await this.saveLinks(links);
+    }
+    async getLinks() {
+        const path = join(this.configDir, LINKS_FILE);
+        if (!existsSync(path))
+            return {};
+        const raw = await readFile(path, "utf-8");
+        return JSON.parse(raw);
+    }
+    async getSyncFilter() {
+        const path = join(this.configDir, SYNC_FILTER_FILE);
+        if (!existsSync(path))
+            return { ...DEFAULT_SYNC_FILTER };
+        const raw = await readFile(path, "utf-8");
+        return JSON.parse(raw);
+    }
+    async setFilterOverride(name, tier) {
+        const filter = await this.getSyncFilter();
+        filter.denylist = filter.denylist.filter((d) => d !== name);
+        filter.allowlist = filter.allowlist.filter((a) => a !== name);
+        if (tier === "allow") {
+            filter.allowlist.push(name);
+        }
+        else {
+            filter.denylist.push(name);
+        }
+        await this.saveSyncFilter(filter);
+    }
+    isInitialized() {
+        return existsSync(join(this.configDir, CONFIG_FILE));
+    }
+    getConfigDir() {
+        return this.configDir;
+    }
+    async saveConfig(config) {
+        await writeFile(join(this.configDir, CONFIG_FILE), JSON.stringify(config, null, 2));
+    }
+    async saveLinks(links) {
+        await writeFile(join(this.configDir, LINKS_FILE), JSON.stringify(links, null, 2));
+    }
+    async saveSyncFilter(filter) {
+        await writeFile(join(this.configDir, SYNC_FILTER_FILE), JSON.stringify(filter, null, 2));
+    }
+}
+//# sourceMappingURL=config-manager.js.map