@kya-os/cli 1.5.9 → 1.6.0

package/dist/utils/dco/paths.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Slugs come from .mcpi/agent.json, AGENT_SLUG, or an interactive prompt.
+ * The file-based sources are attacker-influenceable in a cloned repo, and the
+ * slug becomes a filename under the keys directory, so every source must pass
+ * the same shape check the interactive prompt enforces.
+ */
+export declare const SLUG_PATTERN: RegExp;
+export declare function isValidSlug(slug: string): boolean;
+/** Directory holding converted SSH signing keys, always absolute. */
+export declare function keysDir(): string;
+/**
+ * Path for a slug's private key. Throws on slugs that fail validation so a
+ * crafted slug can never traverse outside the keys directory.
+ */
+export declare function signingKeyPath(slug: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/utils/dco/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/paths.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,YAAY,QAAyB,CAAC;AAEnD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,qEAAqE;AACrE,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnD"}

package/dist/utils/dco/paths.js

@@ -0,0 +1,27 @@
+import { homedir } from "os";
+import { join, resolve } from "path";
+/**
+ * Slugs come from .mcpi/agent.json, AGENT_SLUG, or an interactive prompt.
+ * The file-based sources are attacker-influenceable in a cloned repo, and the
+ * slug becomes a filename under the keys directory, so every source must pass
+ * the same shape check the interactive prompt enforces.
+ */
+export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+export function isValidSlug(slug) {
+    return SLUG_PATTERN.test(slug);
+}
+/** Directory holding converted SSH signing keys, always absolute. */
+export function keysDir() {
+    return resolve(process.env.MCPI_KEYS_DIR || join(homedir(), ".mcpi", "keys"));
+}
+/**
+ * Path for a slug's private key. Throws on slugs that fail validation so a
+ * crafted slug can never traverse outside the keys directory.
+ */
+export function signingKeyPath(slug) {
+    if (!isValidSlug(slug)) {
+        throw new Error(`Invalid agent slug "${slug}": must match ${SLUG_PATTERN} (lowercase letters, numbers, dashes)`);
+    }
+    return join(keysDir(), slug);
+}
+//# sourceMappingURL=paths.js.map

package/dist/utils/dco/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/utils/dco/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAEnD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,iBAAiB,YAAY,uCAAuC,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/utils/dco/render.d.ts

@@ -0,0 +1,4 @@
+import type { DcoSetupResult } from "./setup.js";
+/** Human-readable summary of a setup run, shared by `mcpi dco setup` and the register/init funnel. */
+export declare function renderSetupResult(result: DcoSetupResult): void;
+//# sourceMappingURL=render.d.ts.map

package/dist/utils/dco/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/render.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAiB7D,sGAAsG;AACtG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAkD9D"}

package/dist/utils/dco/render.js

@@ -0,0 +1,52 @@
+import chalk from "chalk";
+function statusLabel(status) {
+    switch (status) {
+        case "done":
+            return chalk.green("done");
+        case "skipped":
+            return chalk.gray("skipped");
+        case "would-change":
+            return chalk.cyan("would change");
+        case "action-required":
+            return chalk.yellow("action required");
+        case "failed":
+            return chalk.red("failed");
+    }
+}
+/** Human-readable summary of a setup run, shared by `mcpi dco setup` and the register/init funnel. */
+export function renderSetupResult(result) {
+    console.log("");
+    if (result.agent) {
+        console.log(`  ${chalk.bold("Agent:")} ${result.agent.name} ${chalk.gray(`(${result.agent.did})`)}`);
+    }
+    if (result.human) {
+        console.log(`  ${chalk.bold("Human:")} ${result.human.name} ${chalk.gray(`<${result.human.email}>`)}`);
+    }
+    console.log("");
+    const width = Math.max(...result.steps.map((s) => s.title.length));
+    for (const step of result.steps) {
+        console.log(`  ${step.title.padEnd(width)}  ${statusLabel(step.status)}`);
+        if (step.detail && step.status !== "done" && step.status !== "skipped") {
+            console.log(`  ${" ".repeat(width)}  ${chalk.gray(step.detail)}`);
+        }
+    }
+    console.log("");
+    if (result.metadataPersistWarning) {
+        console.log(chalk.yellow(`  Note: could not cache agent metadata to .mcpi/agent.json (${result.metadataPersistWarning}); a later non-interactive run may prompt again.`));
+    }
+    const dryRun = result.steps.some((s) => s.status === "would-change");
+    if (!result.ok) {
+        console.log(chalk.red("  Setup finished with failures. See details above."));
+    }
+    else if (dryRun) {
+        console.log(chalk.cyan("  Dry run: nothing was written. Re-run without --dry-run to apply."));
+    }
+    else if (result.actionRequired) {
+        console.log(chalk.yellow("  Setup finished, but some steps need your action. See details above."));
+    }
+    else if (result.agent) {
+        console.log(chalk.green(`  Commits are now signed with your agent's identity key and attributed to ${result.agent.name}.`));
+    }
+    console.log("");
+}
+//# sourceMappingURL=render.js.map

package/dist/utils/dco/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../../src/utils/dco/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,SAAS,WAAW,CAAC,MAA4B;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzC,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,+DAA+D,MAAM,CAAC,sBAAsB,kDAAkD,CAC/I,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CACjF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,uEAAuE,CAAC,CACtF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,6EAA6E,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAClG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/utils/dco/setup.d.ts

@@ -0,0 +1,47 @@
+import { type GitIdentity } from "./git-config.js";
+export type StepStatus = "done" | "skipped" | "failed" | "action-required" | "would-change";
+export interface StepResult {
+    id: string;
+    title: string;
+    status: StepStatus;
+    detail?: string;
+}
+export interface DcoAgentInfo {
+    did: string;
+    name: string;
+    slug: string;
+    url: string;
+    email: string;
+}
+export interface DcoSetupOptions {
+    cwd?: string;
+    /** Write git config globally instead of repo-local. */
+    global?: boolean;
+    /** Report every change without writing anything. */
+    dryRun?: boolean;
+    skipGithub?: boolean;
+    skipClaude?: boolean;
+    /** Overwrite conflicting pre-existing signing configuration. */
+    force?: boolean;
+    /** Allow interactive prompts (agent name fallback, scope refresh). */
+    interactive?: boolean;
+}
+export interface DcoSetupResult {
+    ok: boolean;
+    actionRequired: boolean;
+    steps: StepResult[];
+    agent?: DcoAgentInfo;
+    human?: GitIdentity;
+    privateKeyPath?: string;
+    fingerprint?: string;
+    /** Set when persisting resolved metadata to .mcpi/agent.json failed (non-fatal). */
+    metadataPersistWarning?: string;
+}
+/**
+ * Orchestrates the full DCO/attribution setup. Steps run in order; the three
+ * foundation steps (preflight, identities, key material) abort the run when
+ * they fail, everything after degrades independently so one broken layer
+ * never blocks the others.
+ */
+export declare function runDcoSetup(options?: DcoSetupOptions): Promise<DcoSetupResult>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/utils/dco/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/setup.ts"],"names":[],"mappings":"AAmBA,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAC;AAmBzB,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,SAAS,GACT,QAAQ,GACR,iBAAiB,GACjB,cAAc,CAAC;AAEnB,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AA2HD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,cAAc,CAAC,CA8oBzB"}