@opencodehub/cli 0.1.0

package/dist/commands/scan.js

@@ -0,0 +1,407 @@
+/**
+ * `codehub scan [path]` — run P1 + profile-gated P2 scanners, emit merged
+ * SARIF, ingest findings into the graph.
+ *
+ * Flow:
+ *   1. Resolve the target repo (optionally from the registry).
+ *   2. Read the ProjectProfile row (if any) so we can gate scanners by
+ *      detected languages / iacTypes / apiContracts.
+ *   3. Filter the catalog by --scanners, --with, and the profile:
+ *      - P1 scanners are gated by language overlap (polyglot always in).
+ *      - P2 scanners (trivy, checkov, hadolint, tflint, spectral) are
+ *        opt-in via ProjectProfile fields. `--with trivy,checkov`
+ *        force-adds them regardless of profile.
+ *   4. Build per-scanner context (checkov frameworks, hadolint Dockerfile
+ *      list, spectral contract files, pip-audit requirements path) from
+ *      the profile + filesystem probe.
+ *   5. Run the selected scanners in parallel via `runScanners`.
+ *   6. Merge SARIF and write to `.codehub/scan.sarif`.
+ *   7. Ingest findings into the graph via `runIngestSarif`.
+ *   8. Exit with 0 when no HIGH+CRIT findings, 1 when any, 2 when a
+ *      scanner returned non-zero or crashed.
+ *
+ * The --severity filter gates the exit code only; every finding is
+ * still written to SARIF and the graph.
+ */
+import { readFileSync } from "node:fs";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { applyBaselineState, applySuppressions, enrichWithFingerprints, loadSuppressions, SarifLogSchema, } from "@opencodehub/sarif";
+import { ALL_SPECS, CHECKOV_SPEC, createDefaultWrappers, filterSpecsByProfile, HADOLINT_SPEC, P1_SPECS, PIP_AUDIT_SPEC, runScanners, SPECTRAL_SPEC, } from "@opencodehub/scanners";
+import { openStore, resolveDbPath, resolveRepoMetaDir } from "@opencodehub/storage";
+import { readRegistry } from "../registry.js";
+import { runIngestSarif } from "./ingest-sarif.js";
+const DEFAULT_SEVERITY_THRESHOLD = new Set(["HIGH", "CRITICAL", "error"]);
+export async function runScan(path, opts = {}) {
+    const repoPath = await resolveRepoPath(path, opts);
+    const outputPath = resolve(opts.output ?? `${resolveRepoMetaDir(repoPath)}/scan.sarif`);
+    const profile = await readProjectProfile(repoPath);
+    const specs = selectScanners(profile, opts);
+    if (specs.length === 0) {
+        console.warn("codehub scan: no scanners selected — nothing to do.");
+        return {
+            repoPath,
+            outputPath,
+            runs: [],
+            totalFindings: 0,
+            bySeverity: {},
+            exitCode: 0,
+        };
+    }
+    console.warn(`codehub scan: running ${specs.length} scanner(s): ${specs.map((s) => s.id).join(", ")}`);
+    const wrapperContext = await buildWrapperContext(repoPath, profile, specs);
+    const wrappers = createDefaultWrappers(specs, undefined, wrapperContext);
+    const runnerOpts = {
+        ...(opts.concurrency !== undefined ? { concurrency: opts.concurrency } : {}),
+        ...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),
+        onProgress: (spec, status, note) => {
+            if (status === "error") {
+                console.warn(`codehub scan: ${spec.id} errored: ${note ?? ""}`);
+            }
+            else if (status === "skipped" && note) {
+                console.warn(`codehub scan: ${spec.id} skipped: ${note}`);
+            }
+            else {
+                console.warn(`codehub scan: ${spec.id} ${status}`);
+            }
+        },
+    };
+    const result = await runScanners(repoPath, wrappers, runnerOpts);
+    // Stamp `opencodehub/v1` + `primaryLocationLineHash` fingerprints on
+    // every result before anything else touches the log so downstream
+    // consumers (baseline diff, ingest-sarif, `list_findings_delta`) all
+    // read the same match keys.
+    const enriched = enrichWithFingerprints(result.sarif);
+    // Optional baseline diff: tag every result with
+    // `baselineState` so downstream consumers (scan output, ingest-sarif,
+    // verdict) can distinguish pre-existing debt from newly introduced
+    // findings. Results with baselineState === "unchanged" are suppressed
+    // from the severity-gate exit code below.
+    const baselineLog = await loadBaselineLog(opts.baseline);
+    const afterBaseline = baselineLog !== undefined ? applyBaselineState(enriched, baselineLog) : enriched;
+    // : tag suppressed findings from `.codehub/suppressions.yaml` +
+    // inline `codehub-suppress: <ruleId> <reason>` comments. Suppressed
+    // results still travel through SARIF and the graph; `codehub verdict`
+    // and the severity gate below treat them as non-blocking.
+    const finalSarif = applySuppressionsForRepo(repoPath, afterBaseline);
+    // Write merged SARIF to disk.
+    await mkdir(resolveRepoMetaDir(repoPath), { recursive: true });
+    await writeFile(outputPath, `${JSON.stringify(finalSarif, null, 2)}\n`, "utf8");
+    // Ingest into the graph (best effort — missing graph is non-fatal).
+    // Forward the already-resolved `repoPath` so the SARIF lands in the
+    // SCANNED repo's graph, not the operator's CWD. `runIngestSarif`
+    // accepts an absolute path in `opts.repo` as a registry-name fallback
+    // (`ingest-sarif.ts:351-352`), so this works for both `--repo NAME`
+    // and positional `<path>` invocations.
+    try {
+        const ingestOpts = { repo: opts.repo ?? repoPath };
+        if (opts.home !== undefined)
+            ingestOpts.home = opts.home;
+        await runIngestSarif(outputPath, ingestOpts);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn(`codehub scan: ingest-sarif skipped: ${msg}`);
+    }
+    // Summarize. Suppressed findings AND baseline-unchanged
+    // findings are excluded from the severity-gate exit code but still
+    // counted in `totalFindings` so operators see the full footprint.
+    const bySeverity = {};
+    const bySeverityGated = {};
+    let totalFindings = 0;
+    let suppressedCount = 0;
+    let unchangedCount = 0;
+    for (const run of finalSarif.runs) {
+        const results = run.results ?? [];
+        for (const r of results) {
+            const level = r.level ?? "note";
+            bySeverity[level] = (bySeverity[level] ?? 0) + 1;
+            totalFindings += 1;
+            const suppArr = r.suppressions;
+            const suppressed = Array.isArray(suppArr) && suppArr.length > 0;
+            const state = r.baselineState;
+            const unchangedVsBaseline = state === "unchanged";
+            if (suppressed)
+                suppressedCount += 1;
+            if (unchangedVsBaseline)
+                unchangedCount += 1;
+            if (!suppressed && !unchangedVsBaseline) {
+                bySeverityGated[level] = (bySeverityGated[level] ?? 0) + 1;
+            }
+        }
+    }
+    const severityThreshold = resolveSeverityThreshold(opts.severity);
+    let exitCode = 0;
+    if (result.errored.length > 0) {
+        exitCode = 2;
+    }
+    else {
+        for (const [level, count] of Object.entries(bySeverityGated)) {
+            if (count > 0 && severityThreshold.has(level)) {
+                exitCode = 1;
+                break;
+            }
+        }
+    }
+    const runs = result.runs.map((r) => {
+        const findings = (r.sarif.runs[0]?.results ?? []).length;
+        return r.skipped !== undefined
+            ? { scanner: r.spec.id, findings, skipped: r.skipped }
+            : { scanner: r.spec.id, findings };
+    });
+    const suppressedNote = suppressedCount > 0 ? ` (${suppressedCount} suppressed)` : "";
+    const baselineNote = baselineLog !== undefined ? ` (${unchangedCount} unchanged vs baseline)` : "";
+    console.warn(`codehub scan: wrote ${outputPath} — ${totalFindings} findings${baselineNote}${suppressedNote} across ${runs.length} scanner(s), exit=${exitCode}`);
+    return { repoPath, outputPath, runs, totalFindings, bySeverity, exitCode };
+}
+/**
+ * Load `.codehub/suppressions.yaml` (if present) and apply both YAML rules
+ * and inline `codehub-suppress:` markers to the merged SARIF log. Missing
+ * files resolve silently; malformed files emit a warning through
+ * loadSuppressions but never abort the scan. Source files are read lazily
+ * through a memoized reader so the same file isn't slurped for every
+ * finding.
+ */
+function applySuppressionsForRepo(repoPath, log) {
+    const yamlPath = join(repoPath, ".codehub", "suppressions.yaml");
+    const loaded = loadSuppressions(yamlPath);
+    for (const w of loaded.warnings) {
+        console.warn(`codehub scan: ${w}`);
+    }
+    const sourceCache = new Map();
+    const readSource = (uri) => {
+        if (sourceCache.has(uri))
+            return sourceCache.get(uri);
+        let content;
+        try {
+            content = readFileSync(resolve(repoPath, uri), "utf8");
+        }
+        catch {
+            content = undefined;
+        }
+        sourceCache.set(uri, content);
+        return content;
+    };
+    return applySuppressions(log, loaded.rules, readSource);
+}
+/**
+ * Read the ProjectProfile node (if present) so we can gate scanners by
+ * detected languages, IaC types, and API contracts. If the graph is
+ * absent, every field is returned empty — falls back to the polyglot P1
+ * subset.
+ */
+export async function readProjectProfile(repoPath) {
+    const dbPath = resolveDbPath(repoPath);
+    try {
+        const composed = await openStore({ path: dbPath, backend: "auto", readOnly: true });
+        try {
+            await composed.graph.open();
+            // The single-row ProjectProfile lookup. `listNodesByKind` materializes
+            // a typed `ProjectProfileNode`, which already carries the typed
+            // `languages` / `iacTypes` / `apiContracts` arrays — no JSON parsing
+            // needed. The legacy SQL went through the wide-column `*_json`
+            // shape because the column encoder serialised them; the storage
+            // layer now hands back the rehydrated TS shape directly.
+            const rows = await composed.graph.listNodesByKind("ProjectProfile", { limit: 1 });
+            const row = rows[0];
+            if (!row)
+                return {};
+            return {
+                languages: row.languages,
+                iacTypes: row.iacTypes,
+                apiContracts: row.apiContracts,
+            };
+        }
+        finally {
+            await composed.close();
+        }
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Exported for tests: apply --scanners / --with / profile gating to
+ * produce the final scanner list.
+ */
+export function selectScanners(profile, opts) {
+    const requested = opts.scanners;
+    const withList = opts.withScanners ?? [];
+    // --scanners=... overrides profile gating entirely. `--with` is
+    // additive either way.
+    if (requested !== undefined) {
+        const merged = new Set([...requested, ...withList]);
+        return ALL_SPECS.filter((s) => merged.has(s.id));
+    }
+    const gated = filterSpecsByProfile(ALL_SPECS, profile);
+    if (withList.length === 0)
+        return gated;
+    // --with adds scanners on top of profile gating (useful for forcing a
+    // P2 scanner to run even when the profile didn't flag the relevant
+    // IaC type, e.g. `--with trivy` on a repo with no Dockerfiles).
+    const byId = new Map(gated.map((s) => [s.id, s]));
+    for (const id of withList) {
+        const spec = ALL_SPECS.find((s) => s.id === id);
+        if (spec)
+            byId.set(id, spec);
+    }
+    return [...byId.values()];
+}
+/**
+ * Build the per-scanner context passed to `createDefaultWrappers`. Only
+ * populates fields for scanners that are actually in `specs` — avoids
+ * wasted filesystem work.
+ */
+async function buildWrapperContext(repoPath, profile, specs) {
+    const ids = new Set(specs.map((s) => s.id));
+    const ctx = {};
+    if (ids.has(CHECKOV_SPEC.id)) {
+        ctx.checkov = { frameworks: profile.iacTypes ?? [] };
+    }
+    if (ids.has(HADOLINT_SPEC.id)) {
+        ctx.hadolint = { dockerfiles: await findDockerfiles(repoPath) };
+    }
+    if (ids.has(SPECTRAL_SPEC.id)) {
+        ctx.spectral = { contractFiles: await findOpenApiFiles(repoPath) };
+    }
+    if (ids.has(PIP_AUDIT_SPEC.id)) {
+        ctx.pipAudit = { requirementsPath: "requirements.txt" };
+    }
+    return ctx;
+}
+/**
+ * Walk the repo for Dockerfile* files. Bounded to one breadth-first pass
+ * with a per-directory file cap so huge repos don't explode; the typical
+ * case has ≤5 Dockerfiles.
+ */
+async function findDockerfiles(repoPath) {
+    const { readdir } = await import("node:fs/promises");
+    const { join, relative } = await import("node:path");
+    const MAX_FILES = 256;
+    const out = [];
+    const queue = [repoPath];
+    while (queue.length > 0 && out.length < MAX_FILES) {
+        const dir = queue.shift();
+        if (dir === undefined)
+            break;
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            if (e.name === "node_modules" || e.name === ".git" || e.name.startsWith(".codehub")) {
+                continue;
+            }
+            const abs = join(dir, e.name);
+            if (e.isDirectory()) {
+                queue.push(abs);
+            }
+            else if (e.isFile() && /^Dockerfile(\..+)?$/.test(e.name)) {
+                out.push(relative(repoPath, abs));
+            }
+        }
+    }
+    return out;
+}
+/**
+ * Locate OpenAPI / Swagger / AsyncAPI / Arazzo contracts. Mirrors the
+ * ProjectProfile API-contract detector's matching rules but just pulls
+ * the paths (no content sniff — good enough for Spectral invocation).
+ */
+async function findOpenApiFiles(repoPath) {
+    const { readdir } = await import("node:fs/promises");
+    const { join, relative } = await import("node:path");
+    const MAX_FILES = 64;
+    const RE = /^(openapi|swagger|asyncapi|arazzo)\.(ya?ml|json)$/i;
+    const out = [];
+    const queue = [repoPath];
+    while (queue.length > 0 && out.length < MAX_FILES) {
+        const dir = queue.shift();
+        if (dir === undefined)
+            break;
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const e of entries) {
+            if (e.name === "node_modules" || e.name === ".git" || e.name.startsWith(".codehub")) {
+                continue;
+            }
+            const abs = join(dir, e.name);
+            if (e.isDirectory()) {
+                queue.push(abs);
+            }
+            else if (e.isFile() && RE.test(e.name)) {
+                out.push(relative(repoPath, abs));
+            }
+        }
+    }
+    return out;
+}
+function resolveSeverityThreshold(input) {
+    if (input === undefined || input.length === 0)
+        return DEFAULT_SEVERITY_THRESHOLD;
+    const out = new Set();
+    for (const s of input) {
+        const trimmed = s.trim();
+        if (trimmed.length === 0)
+            continue;
+        out.add(trimmed);
+        // Translate common aliases so users can write either SARIF levels or
+        // severity words.
+        if (trimmed === "HIGH")
+            out.add("error");
+        if (trimmed === "CRITICAL")
+            out.add("error");
+        if (trimmed === "MEDIUM")
+            out.add("warning");
+        if (trimmed === "LOW")
+            out.add("note");
+    }
+    return out;
+}
+async function resolveRepoPath(path, opts) {
+    if (opts.repo !== undefined) {
+        const registryOpts = opts.home !== undefined ? { home: opts.home } : {};
+        const registry = await readRegistry(registryOpts);
+        const hit = registry[opts.repo];
+        if (hit)
+            return resolve(hit.path);
+        return resolve(opts.repo);
+    }
+    return resolve(path);
+}
+/** Helper exposed for tests: parse a SARIF file from disk. */
+export async function readSarifFile(path) {
+    const raw = await readFile(path, "utf8");
+    return JSON.parse(raw);
+}
+/**
+ * Read + validate a baseline SARIF log. Returns undefined when no
+ * baseline was requested. Throws when the path was given but the file
+ * is missing or corrupt — a bad baseline should fail loudly, not silently
+ * skip the diff.
+ */
+async function loadBaselineLog(path) {
+    if (path === undefined)
+        return undefined;
+    const resolved = resolve(path);
+    const raw = await readFile(resolved, "utf8");
+    const parsed = JSON.parse(raw);
+    const result = SarifLogSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new Error(`codehub scan: baseline ${resolved} is not a valid SARIF 2.1.0 log: ${result.error.message}`);
+    }
+    return result.data;
+}
+// `P1_SPECS` re-export preserves the import shape for any existing consumers
+// that have been reading it via the CLI barrel. New callers should import
+// from `@opencodehub/scanners` directly.
+export { P1_SPECS };
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAEhB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,SAAS,EACT,YAAY,EACZ,qBAAqB,EAErB,oBAAoB,EACpB,aAAa,EACb,QAAQ,EACR,cAAc,EAEd,WAAW,EAGX,aAAa,GACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA0CnD,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,OAAoB,EAAE;IAChE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAExF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACpE,OAAO;YACL,QAAQ;YACR,UAAU;YACV,IAAI,EAAE,EAAE;YACR,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAI,CACV,yBAAyB,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG;QACjB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,UAAU,EAAE,CAAC,IAAiB,EAAE,MAAqB,EAAE,IAAa,EAAE,EAAE;YACtE,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,EAAE,aAAa,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,EAAE,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEjE,qEAAqE;IACrE,kEAAkE;IAClE,qEAAqE;IACrE,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtD,gDAAgD;IAChD,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,0CAA0C;IAC1C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,aAAa,GACjB,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEnF,gEAAgE;IAChE,oEAAoE;IACpE,sEAAsE;IACtE,0DAA0D;IAC1D,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAErE,8BAA8B;IAC9B,MAAM,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEhF,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,sEAAsE;IACtE,oEAAoE;IACpE,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,UAAU,GAAqC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACzD,MAAM,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,wDAAwD;IACxD,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;YAChC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,aAAa,IAAI,CAAC,CAAC;YACnB,MAAM,OAAO,GAAI,CAAsD,CAAC,YAAY,CAAC;YACrF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAChE,MAAM,KAAK,GAAI,CAA2C,CAAC,aAAa,CAAC;YACzE,MAAM,mBAAmB,GAAG,KAAK,KAAK,WAAW,CAAC;YAClD,IAAI,UAAU;gBAAE,eAAe,IAAI,CAAC,CAAC;YACrC,IAAI,mBAAmB;gBAAE,cAAc,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACxC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,QAAQ,GAAc,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7D,IAAI,KAAK,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,QAAQ,GAAG,CAAC,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACzD,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACtD,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,eAAe,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,YAAY,GAChB,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,cAAc,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO,CAAC,IAAI,CACV,uBAAuB,UAAU,MAAM,aAAa,YAAY,YAAY,GAAG,cAAc,WAAW,IAAI,CAAC,MAAM,qBAAqB,QAAQ,EAAE,CACnJ,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,QAAgB,EAAE,GAAa;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,MAAM,UAAU,GAAG,CAAC,GAAW,EAAsB,EAAE;QACrD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC5B,uEAAuE;YACvE,gEAAgE;YAChE,qEAAqE;YACrE,+DAA+D;YAC/D,gEAAgE;YAChE,yDAAyD;YACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,GAAG,CAAC,YAAY;aAC/B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAEzC,gEAAgE;IAChE,uBAAuB;IACvB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,sEAAsE;IACtE,mEAAmE;IACnE,gEAAgE;IAChE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,QAAgB,EAChB,OAA2B,EAC3B,KAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,GAAG,GAEL,EAAE,CAAC;IACP,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,QAAQ,GAAG,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,QAAQ,GAAG,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,GAAG,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM;QAC7B,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpF,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,EAAE,GAAG,oDAAoD,CAAC;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM;QAC7B,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpF,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAoC;IACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjB,qEAAqE;QACrE,kBAAkB;QAClB,IAAI,OAAO,KAAK,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAiB;IAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAAC,IAAwB;IACrD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,6EAA6E;AAC7E,0EAA0E;AAC1E,yCAAyC;AACzC,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/commands/setup.d.ts

@@ -0,0 +1,178 @@
+/**
+ * `codehub setup` — detects installed editors and writes an MCP server entry
+ * for `codehub` into each one's config file.
+ *
+ * We deliberately do *not* probe each editor to confirm it is "installed" —
+ * writing to a config path is idempotent and safe, and a user can run setup
+ * before installing an editor. Instead we:
+ *   1. Determine the invocation (`codehub mcp`) with optional Windows wrap.
+ *   2. For each selected editor, read the existing config, back it up, and
+ *      atomically write the merged version that adds or replaces the
+ *      `codehub` entry.
+ *
+ * Filesystem access goes through the `FsApi` seam so tests can run against an
+ * in-memory implementation.
+ */
+import { runSetupCobolProleap, type SetupCobolProleapOptions, type SetupCobolProleapResult } from "../cobol-proleap-setup.js";
+import { type EditorId, type McpInvocation } from "../editors/index.js";
+import { type DownloadEmbedderOptions, type DownloadEmbedderResult } from "../embedder-downloader.js";
+import { type InstallScipResult, type FetchFn as ScipFetchFn, type ScipTool } from "../scip-downloader.js";
+export type { SetupCobolProleapOptions, SetupCobolProleapResult };
+export { runSetupCobolProleap };
+/**
+ * Filesystem seam. Tests supply an in-memory implementation.
+ * Every operation is async to keep the seam uniform.
+ */
+export interface FsApi {
+    readFile(path: string): Promise<string>;
+    writeFileAtomic(path: string, contents: string): Promise<void>;
+    copyFile(src: string, dest: string): Promise<void>;
+    mkdir(path: string): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    readdir?(path: string): Promise<readonly string[]>;
+    rename?(src: string, dest: string): Promise<void>;
+    rm?(path: string, opts?: {
+        recursive?: boolean;
+        force?: boolean;
+    }): Promise<void>;
+    statIsDirectory?(path: string): Promise<boolean>;
+}
+/** Default implementation that calls through to real `fs`. */
+export declare const DEFAULT_FS: FsApi;
+export interface SetupOptions {
+    /** Which editors to write. Defaults to all 5. */
+    readonly editors?: readonly EditorId[];
+    /** Overwrite an existing `codehub` entry without prompting. Always true for MVP. */
+    readonly force?: boolean;
+    /** Restore the `.bak` file onto the config, if present. */
+    readonly undo?: boolean;
+    /** Absolute path to the project. Used by per-project writers. */
+    readonly projectRoot?: string;
+    /** Override the user's home dir. Used by global writers. */
+    readonly home?: string;
+    /** Explicit MCP invocation override. Default: `codehub mcp`. */
+    readonly invocation?: McpInvocation;
+    /** FS seam. Defaults to real filesystem. */
+    readonly fs?: FsApi;
+    /** Override `process.platform`. Tests use this to force Windows paths. */
+    readonly platform?: NodeJS.Platform;
+    /** Structured logger. Defaults to `console.log`/`console.error`. */
+    readonly log?: (message: string) => void;
+    readonly warn?: (message: string) => void;
+}
+export interface SetupResult {
+    readonly editor: EditorId;
+    readonly configPath: string;
+    readonly action: "wrote" | "restored" | "skipped" | "unchanged";
+    readonly backupPath?: string;
+}
+/** Public entry point. Returns per-editor results for programmatic callers. */
+export declare function runSetup(opts?: SetupOptions): Promise<readonly SetupResult[]>;
+/**
+ * Options for `codehub setup --embeddings`. Mirrors the downloader API but
+ * allows the CLI `log`/`warn` sinks to be overridden for tests.
+ */
+export interface SetupEmbeddingsOptions {
+    /** Variant to install. Defaults to `fp32` (~596 MB). */
+    readonly variant?: "fp32" | "int8";
+    /** Custom model directory. Defaults to `~/.codehub/models/gte-modernbert-base/<variant>/`. */
+    readonly modelDir?: string;
+    /** Re-download even if files already match their SHA256 pin. */
+    readonly force?: boolean;
+    /** Dependency-inject fetch for tests. */
+    readonly fetchImpl?: DownloadEmbedderOptions["fetchImpl"];
+    /** Progress sink. Defaults to no-op. */
+    readonly onProgress?: DownloadEmbedderOptions["onProgress"];
+    /** Structured logger. Defaults to `console.warn`. */
+    readonly log?: (message: string) => void;
+    readonly warn?: (message: string) => void;
+}
+/**
+ * Public entry point for `codehub setup --embeddings`.
+ *
+ * Downloads the five pinned gte-modernbert-base files into the target dir with
+ * streaming SHA256 verification and atomic rename. Returns the downloader
+ * summary so programmatic callers can assert on byte counts and locations.
+ */
+export declare function runSetupEmbeddings(opts?: SetupEmbeddingsOptions): Promise<DownloadEmbedderResult>;
+/**
+ * Options for `codehub setup --scip=<tool>` and `--scip=all`.
+ *
+ * Each call installs one or more SCIP adapter binaries (clang, ruby, dotnet,
+ * kotlin) into `~/.codehub/bin/` via the SHA256-pinned `scip-downloader`.
+ * scip-dotnet defers to `dotnet tool install --global scip-dotnet` and
+ * requires a .NET SDK 8+ on PATH.
+ */
+export interface SetupScipOptions {
+    /** Tool name (`"clang" | "ruby" | "dotnet" | "kotlin"`) or `"all"`. Required. */
+    readonly tool: ScipTool | "all";
+    /** Override the install dir. Defaults to `~/.codehub/bin/`. */
+    readonly destDir?: string;
+    /** Re-download even if the on-disk binary already matches the pin. */
+    readonly force?: boolean;
+    /** Dependency-inject fetch (tests). */
+    readonly fetchImpl?: ScipFetchFn;
+    /** Bypass the placeholder-hash refusal (for adapter first-install smoke tests). */
+    readonly allowPlaceholder?: boolean;
+    /** Structured logger. Defaults to `console.warn`. */
+    readonly log?: (message: string) => void;
+    readonly warn?: (message: string) => void;
+}
+export interface SetupScipResult {
+    readonly installed: readonly InstallScipResult[];
+    readonly failed: readonly {
+        tool: ScipTool;
+        error: Error;
+    }[];
+}
+/**
+ * Public entry point for `codehub setup --scip=<tool>` / `--scip=all`.
+ *
+ * Dispatches to {@link installScipTool} for one tool, or
+ * {@link installAllScipTools} for the full set. Never throws — every error is
+ * surfaced on `stderr` via `warn` and collected into the `failed` array so
+ * `--scip=all` completes the surviving tools instead of short-circuiting on
+ * the first missing .NET SDK.
+ */
+export declare function runSetupScip(opts: SetupScipOptions): Promise<SetupScipResult>;
+/**
+ * Parse the CLI `--scip=<value>` flag. Accepts a tool name or the literal
+ * `"all"`. Throws on anything else so typos surface instead of silently
+ * defaulting.
+ */
+export declare function parseScipFlag(raw: string): ScipTool | "all";
+/**
+ * Options for `codehub setup --plugin`. Copies the static `plugins/opencodehub/`
+ * tree shipped with this repo into `<home>/.claude/plugins/opencodehub/` so
+ * Claude Code picks up the five slash commands, the `code-analyst` subagent,
+ * and the PostToolUse auto-reindex hook.
+ *
+ * Atomic: files are copied into a sibling `<target>.tmp-<pid>` dir first, then
+ * the final `<target>` is removed and the temp dir renamed into place. A
+ * partial crash leaves the previous install intact.
+ */
+export interface SetupPluginOptions {
+    /** Override the user's home dir. Defaults to `os.homedir()`. */
+    readonly home?: string;
+    /** Override the plugin source directory. Defaults to the in-repo `plugins/opencodehub/`. */
+    readonly sourceDir?: string;
+    /** FS seam. Defaults to real filesystem. */
+    readonly fs?: FsApi;
+    /** Structured logger. Defaults to `console.warn`. */
+    readonly log?: (message: string) => void;
+    readonly warn?: (message: string) => void;
+}
+export interface SetupPluginResult {
+    readonly sourceDir: string;
+    readonly targetDir: string;
+    readonly filesCopied: number;
+}
+/**
+ * Public entry point for `codehub setup --plugin`.
+ *
+ * Walks `sourceDir` and mirrors it into `<home>/.claude/plugins/opencodehub/`.
+ * Both the temp dir and the final rename go through `FsApi` so tests can run
+ * against an in-memory implementation.
+ */
+export declare function runSetupPlugin(opts?: SetupPluginOptions): Promise<SetupPluginResult>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/commands/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAeH,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAOL,KAAK,QAAQ,EAEb,KAAK,aAAa,EAEnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,KAAK,iBAAiB,EAKtB,KAAK,OAAO,IAAI,WAAW,EAC3B,KAAK,QAAQ,EACd,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAEhC;;;GAGG;AACH,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,eAAe,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD;AAED,8DAA8D;AAC9D,eAAO,MAAM,UAAU,EAAE,KAmCxB,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACvC,oFAAoF;IACpF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,oEAAoE;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,+EAA+E;AAC/E,wBAAsB,QAAQ,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CA+BvF;AA+DD;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAC1D,wCAAwC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAC5D,qDAAqD;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAgCjC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,uCAAuC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,qDAAqD;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,CAAC;CAC9D;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmDnF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAO3D;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;IACpB,qDAAqD;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2C9F"}