@moorline/core 0.0.1

package/dist/core/system/backup/runtimeBackupService.js

@@ -0,0 +1,284 @@
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import * as path from 'node:path';
+import * as tar from 'tar';
+import { parseMoorlineConfig } from '../../../types/config.js';
+import { resolveSecretsPathForConfigPath } from '../config/configStore.js';
+const { dirname, join, resolve } = path;
+const BACKUP_SCHEMA_VERSION = 1;
+const MAX_BACKUP_ARCHIVE_BYTES = 1024 * 1024 * 1024;
+const MAX_BACKUP_ARCHIVE_FILES = 50_000;
+const MAX_BACKUP_EXTRACTED_BYTES = 5 * 1024 * 1024 * 1024;
+function ensureSafeDirectoryTarget(path) {
+    const resolved = resolve(path);
+    if (resolved === '/' || resolved === '' || resolved === '.' || resolved.length < 2) {
+        throw new Error(`Refusing to operate on unsafe directory target: ${path}`);
+    }
+}
+function ensureSafeFileTarget(path) {
+    const resolved = resolve(path);
+    const parent = dirname(resolved);
+    ensureSafeDirectoryTarget(parent);
+    if (resolved === parent) {
+        throw new Error(`Refusing to operate on unsafe file target: ${path}`);
+    }
+}
+function isDirectoryNonEmpty(path) {
+    if (!existsSync(path)) {
+        return false;
+    }
+    try {
+        return readdirSync(path).length > 0;
+    }
+    catch {
+        return true;
+    }
+}
+function ensureParent(path) {
+    mkdirSync(dirname(resolve(path)), { recursive: true });
+}
+function tempStage(prefix) {
+    return mkdtempSync(join(tmpdir(), prefix));
+}
+function copyRuntimeRoot(input) {
+    const resolvedRuntimeRoot = resolve(input.runtimeRoot);
+    const workspacesPath = resolve(resolvedRuntimeRoot, 'workspaces');
+    const backupsPath = resolve(resolvedRuntimeRoot, 'state', 'backups');
+    cpSync(resolvedRuntimeRoot, input.destination, {
+        recursive: true,
+        force: true,
+        filter: (source) => {
+            const resolvedSource = resolve(source);
+            if (resolvedSource === backupsPath || isPathWithinDirectory(backupsPath, resolvedSource)) {
+                return false;
+            }
+            if (input.includeWorkspaces) {
+                return true;
+            }
+            if (resolvedSource === workspacesPath) {
+                return false;
+            }
+            return !isPathWithinDirectory(workspacesPath, resolvedSource);
+        }
+    });
+}
+export function isPathWithinDirectory(rootPath, candidatePath, pathOps = path) {
+    const rel = pathOps.relative(pathOps.resolve(rootPath), pathOps.resolve(candidatePath));
+    return rel === '' || (!rel.startsWith('..') && !pathOps.isAbsolute(rel));
+}
+function normalizeTarEntryPath(path) {
+    return path.replaceAll('\\', '/');
+}
+function assertSafeTarEntryPath(path) {
+    const normalized = normalizeTarEntryPath(path);
+    if (!normalized || normalized.startsWith('/')) {
+        throw new Error(`Backup archive contains an invalid absolute entry path: ${path}`);
+    }
+    const segments = normalized.split('/').filter((segment) => segment.length > 0);
+    if (segments.some((segment) => segment === '..')) {
+        throw new Error(`Backup archive contains an invalid traversal entry path: ${path}`);
+    }
+}
+async function validateBackupArchiveBeforeExtract(archivePath) {
+    const stats = statSync(archivePath, { throwIfNoEntry: false });
+    if (!stats || !stats.isFile()) {
+        throw new Error(`Backup archive does not exist: ${archivePath}`);
+    }
+    if (stats.size > MAX_BACKUP_ARCHIVE_BYTES) {
+        throw new Error(`Backup archive exceeds ${MAX_BACKUP_ARCHIVE_BYTES} bytes.`);
+    }
+    let fileCount = 0;
+    let extractedBytes = 0;
+    await tar.list({
+        file: archivePath,
+        strict: true,
+        onReadEntry: (entry) => {
+            assertSafeTarEntryPath(entry.path);
+            fileCount += 1;
+            if (fileCount > MAX_BACKUP_ARCHIVE_FILES) {
+                throw new Error(`Backup archive contains too many files: ${fileCount} > ${MAX_BACKUP_ARCHIVE_FILES}`);
+            }
+            if (typeof entry.size === 'number' && Number.isFinite(entry.size) && entry.size > 0) {
+                extractedBytes += entry.size;
+                if (extractedBytes > MAX_BACKUP_EXTRACTED_BYTES) {
+                    throw new Error(`Backup archive expands beyond ${MAX_BACKUP_EXTRACTED_BYTES} bytes.`);
+                }
+            }
+        }
+    });
+}
+export async function createRuntimeBackup(input) {
+    const archivePath = resolve(input.outputPath);
+    ensureSafeFileTarget(archivePath);
+    ensureSafeDirectoryTarget(input.config.runtimeRoot);
+    ensureParent(archivePath);
+    const stageRoot = tempStage('moorline-backup-stage-');
+    try {
+        const runtimeStage = join(stageRoot, 'runtime');
+        const configStage = join(stageRoot, 'config.json');
+        const secretsStage = join(stageRoot, 'config.secrets.json');
+        const manifestStage = join(stageRoot, 'manifest.json');
+        const sourceConfigPath = resolve(input.configPath);
+        const sourceSecretsPath = resolveSecretsPathForConfigPath(sourceConfigPath);
+        if (!existsSync(sourceConfigPath)) {
+            throw new Error(`Config path does not exist: ${sourceConfigPath}`);
+        }
+        if (!existsSync(input.config.runtimeRoot)) {
+            throw new Error(`Runtime root does not exist: ${input.config.runtimeRoot}`);
+        }
+        writeFileSync(configStage, readFileSync(sourceConfigPath));
+        if (existsSync(sourceSecretsPath)) {
+            writeFileSync(secretsStage, readFileSync(sourceSecretsPath));
+        }
+        copyRuntimeRoot({
+            runtimeRoot: input.config.runtimeRoot,
+            destination: runtimeStage,
+            includeWorkspaces: input.includeWorkspaces
+        });
+        const nowIso = input.nowIso ?? new Date().toISOString();
+        const manifest = {
+            schemaVersion: BACKUP_SCHEMA_VERSION,
+            createdAt: nowIso,
+            includeWorkspaces: input.includeWorkspaces,
+            source: {
+                configPath: sourceConfigPath,
+                runtimeRoot: resolve(input.config.runtimeRoot)
+            }
+        };
+        writeFileSync(manifestStage, `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+        await tar.create({
+            gzip: true,
+            file: archivePath,
+            cwd: stageRoot,
+            portable: true
+        }, ['manifest.json', 'config.json', ...(existsSync(secretsStage) ? ['config.secrets.json'] : []), 'runtime']);
+        return {
+            archivePath,
+            includeWorkspaces: input.includeWorkspaces
+        };
+    }
+    finally {
+        rmSync(stageRoot, { recursive: true, force: true });
+    }
+}
+function readBackupManifest(stageRoot) {
+    const manifestPath = join(stageRoot, 'manifest.json');
+    if (!existsSync(manifestPath)) {
+        throw new Error('Backup archive is missing manifest.json.');
+    }
+    const raw = JSON.parse(readFileSync(manifestPath, 'utf8'));
+    if (typeof raw !== 'object' || raw === null) {
+        throw new Error('Backup manifest must be a JSON object.');
+    }
+    const manifest = raw;
+    if (manifest.schemaVersion !== BACKUP_SCHEMA_VERSION) {
+        throw new Error(`Unsupported backup manifest schema version: ${String(manifest.schemaVersion)}.`);
+    }
+    if (typeof manifest.createdAt !== 'string' || !manifest.createdAt.trim()) {
+        throw new Error('Backup manifest is missing createdAt.');
+    }
+    if (typeof manifest.includeWorkspaces !== 'boolean') {
+        throw new Error('Backup manifest includeWorkspaces must be a boolean.');
+    }
+    if (typeof manifest.source !== 'object' || manifest.source === null) {
+        throw new Error('Backup manifest source must be an object.');
+    }
+    if (typeof manifest.source.configPath !== 'string' || !manifest.source.configPath.trim()) {
+        throw new Error('Backup manifest source.configPath must be a non-empty string.');
+    }
+    if (typeof manifest.source.runtimeRoot !== 'string' || !manifest.source.runtimeRoot.trim()) {
+        throw new Error('Backup manifest source.runtimeRoot must be a non-empty string.');
+    }
+    return {
+        schemaVersion: manifest.schemaVersion,
+        createdAt: manifest.createdAt,
+        includeWorkspaces: manifest.includeWorkspaces,
+        source: {
+            configPath: manifest.source.configPath,
+            runtimeRoot: manifest.source.runtimeRoot
+        }
+    };
+}
+function readBackupConfig(stageRoot) {
+    const configPath = join(stageRoot, 'config.json');
+    if (!existsSync(configPath)) {
+        throw new Error('Backup archive is missing config.json.');
+    }
+    const parsed = parseMoorlineConfig(JSON.parse(readFileSync(configPath, 'utf8')));
+    ensureSafeDirectoryTarget(parsed.runtimeRoot);
+    return {
+        config: parsed
+    };
+}
+function hasNonEmptyTargetState(input) {
+    return existsSync(input.configPath) || existsSync(input.secretsPath) || isDirectoryNonEmpty(input.runtimeRoot);
+}
+export async function importRuntimeBackup(input) {
+    const archivePath = resolve(input.archivePath);
+    if (!existsSync(archivePath)) {
+        throw new Error(`Backup archive does not exist: ${archivePath}`);
+    }
+    await validateBackupArchiveBeforeExtract(archivePath);
+    const stageRoot = tempStage('moorline-import-stage-');
+    try {
+        await tar.extract({
+            file: archivePath,
+            cwd: stageRoot,
+            strict: true
+        });
+        const manifest = readBackupManifest(stageRoot);
+        const backupInfo = readBackupConfig(stageRoot);
+        const runtimeStage = join(stageRoot, 'runtime');
+        if (!existsSync(runtimeStage)) {
+            throw new Error('Backup archive is missing runtime state.');
+        }
+        if (resolve(manifest.source.runtimeRoot) !== resolve(backupInfo.config.runtimeRoot)) {
+            throw new Error('Backup manifest runtimeRoot does not match backup config runtimeRoot.');
+        }
+        const targetConfigPath = resolve(input.targetConfigPath);
+        const targetSecretsPath = resolveSecretsPathForConfigPath(targetConfigPath);
+        const targetRuntimeRoot = resolve(input.targetRuntimeRoot);
+        ensureSafeFileTarget(targetConfigPath);
+        ensureSafeDirectoryTarget(targetRuntimeRoot);
+        const targetNonEmpty = hasNonEmptyTargetState({
+            configPath: targetConfigPath,
+            secretsPath: targetSecretsPath,
+            runtimeRoot: targetRuntimeRoot
+        });
+        if (targetNonEmpty && !input.force) {
+            throw new Error('Import target already contains state. Re-run with --force after confirming you want to delete existing local state.');
+        }
+        if (targetNonEmpty && input.force) {
+            rmSync(targetRuntimeRoot, { recursive: true, force: true });
+            rmSync(targetConfigPath, { force: true });
+            rmSync(targetSecretsPath, { force: true });
+        }
+        ensureParent(targetConfigPath);
+        ensureParent(targetSecretsPath);
+        mkdirSync(targetRuntimeRoot, { recursive: true });
+        const restoredConfig = {
+            ...backupInfo.config,
+            runtimeRoot: targetRuntimeRoot
+        };
+        writeFileSync(targetConfigPath, `${JSON.stringify(restoredConfig, null, 2)}\n`, 'utf8');
+        const stagedSecretsPath = join(stageRoot, 'config.secrets.json');
+        if (existsSync(stagedSecretsPath)) {
+            writeFileSync(targetSecretsPath, readFileSync(stagedSecretsPath));
+        }
+        cpSync(runtimeStage, targetRuntimeRoot, { recursive: true, force: true });
+        const parsedConfig = parseMoorlineConfig(JSON.parse(readFileSync(targetConfigPath, 'utf8')));
+        const parsedRuntimeRoot = resolve(parsedConfig.runtimeRoot);
+        if (parsedRuntimeRoot !== targetRuntimeRoot) {
+            throw new Error(`Imported config runtimeRoot (${parsedRuntimeRoot}) does not match restored runtime root (${targetRuntimeRoot}).`);
+        }
+        return {
+            configPath: targetConfigPath,
+            runtimeRoot: targetRuntimeRoot,
+            replacedExistingState: targetNonEmpty
+        };
+    }
+    finally {
+        rmSync(stageRoot, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=runtimeBackupService.js.map

package/dist/core/system/backup/runtimeBackupService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeBackupService.js","sourceRoot":"","sources":["../../../../../../../src/core/system/backup/runtimeBackupService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjI,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAuB,MAAM,0BAA0B,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,0BAA0B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAsC1D,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,KAIxB;IACC,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,WAAW,EAAE;QAC7C,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YACjB,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,cAAc,KAAK,WAAW,IAAI,qBAAqB,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC;gBACzF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAChE,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,aAAqB,EACrB,UAAoE,IAAI;IAExE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACxF,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kCAAkC,CAAC,WAAmB;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,wBAAwB,SAAS,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,GAAG,CAAC,IAAI,CAAC;QACb,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;YACrB,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,SAAS,GAAG,wBAAwB,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,MAAM,wBAAwB,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACpF,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC;gBAC7B,IAAI,cAAc,GAAG,0BAA0B,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,0BAA0B,SAAS,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACvE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpD,YAAY,CAAC,WAAW,CAAC,CAAC;IAE1B,MAAM,SAAS,GAAG,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;QAE5E,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,gBAAgB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,eAAe,CAAC;YACd,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;YACrC,WAAW,EAAE,YAAY;YACzB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,QAAQ,GAA0B;YACtC,aAAa,EAAE,qBAAqB;YACpC,SAAS,EAAE,MAAM;YACjB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,MAAM,EAAE;gBACN,UAAU,EAAE,gBAAgB;gBAC5B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;aAC/C;SACF,CAAC;QACF,aAAa,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE/E,MAAM,GAAG,CAAC,MAAM,CACd;YACE,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,IAAI;SACf,EACD,CAAC,eAAe,EAAE,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAC1G,CAAC;QACF,OAAO;YACL,WAAW;YACX,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,GAAqC,CAAC;IACvD,IAAI,QAAQ,CAAC,aAAa,KAAK,qBAAqB,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,MAAM,EAAE;YACN,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;YACtC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;SACzC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IAGzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAY,CAAC,CAAC;IAC5F,yBAAyB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,OAAO;QACL,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAI/B;IACC,OAAO,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACvE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,kCAAkC,CAAC,WAAW,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;QAC5E,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3D,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACvC,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QAE7C,MAAM,cAAc,GAAG,sBAAsB,CAAC;YAC5C,UAAU,EAAE,gBAAgB;YAC5B,WAAW,EAAE,iBAAiB;YAC9B,WAAW,EAAE,iBAAiB;SAC/B,CAAC,CAAC;QACH,IAAI,cAAc,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;QACJ,CAAC;QACD,IAAI,cAAc,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC/B,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAChC,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,cAAc,GAAmB;YACrC,GAAG,UAAU,CAAC,MAAM;YACpB,WAAW,EAAE,iBAAiB;SAC/B,CAAC;QACF,aAAa,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxF,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,aAAa,CAAC,iBAAiB,EAAE,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,CAAC,YAAY,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1E,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAY,CAAC,CAAC;QACxG,MAAM,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,iBAAiB,2CAA2C,iBAAiB,IAAI,CAClH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,gBAAgB;YAC5B,WAAW,EAAE,iBAAiB;YAC9B,qBAAqB,EAAE,cAAc;SACtC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/core/system/config/configStore.d.ts

@@ -0,0 +1,38 @@
+import { type MoorlineConfig, type ManagedNamespaceState, type ProviderConfig, type TransportConfig } from '../../../types/config.js';
+interface RuntimePaths {
+    runtimeRoot: string;
+    stateDir: string;
+    workspacesDir: string;
+    logsDir: string;
+    sqlitePath: string;
+    installationPath: string;
+    packageInventoryPath: string;
+    packageLoadReportPath: string;
+}
+interface ConfigMigrationWarning {
+    type: 'secret_history_reset';
+    createdAt: string;
+    backupGitDir: string | null;
+    detail: string;
+}
+export declare function resolveSecretsPathForConfigPath(configPath: string): string;
+export declare function resolveConfigPath(customPath?: string): string;
+export declare function buildRequiredAppliedSurfaceConfigs(config: MoorlineConfig): {
+    transport?: TransportConfig;
+    provider?: ProviderConfig;
+};
+export declare function buildAppliedSurfaceConfigs(config: MoorlineConfig): {
+    transport?: TransportConfig;
+    provider?: ProviderConfig;
+};
+export declare function buildShareableMoorlineConfig(config: MoorlineConfig): MoorlineConfig;
+export declare function readMoorlineConfig(path?: string): MoorlineConfig;
+export declare function loadMoorlineConfig(path?: string): MoorlineConfig;
+export declare function saveMoorlineConfig(config: MoorlineConfig, path?: string): void;
+export declare function runtimePaths(runtimeRoot: string): RuntimePaths;
+export declare function ensureRuntimePaths(runtimeRoot: string): RuntimePaths;
+export declare function loadInstallationState(path: string): ManagedNamespaceState | null;
+export declare function saveInstallationState(path: string, state: ManagedNamespaceState): void;
+export declare function readConfigMigrationWarning(runtimeRoot: string): ConfigMigrationWarning | null;
+export declare function acknowledgeConfigMigrationWarning(runtimeRoot: string): void;
+export {};