@osva-ai/cli 1.1.0 → 1.1.2

package/dist/setup/distribution.d.ts

@@ -0,0 +1,13 @@
+export interface ComposeDistributionManifest {
+    readonly distributionSchemaVersion: number;
+    readonly platformVersion: string;
+    readonly imageRef: string;
+}
+export interface ComposeDistribution {
+    readonly manifest: ComposeDistributionManifest;
+    readonly composeYaml: string;
+    readonly templateRoot: string;
+}
+export declare function loadComposeDistribution(): Promise<ComposeDistribution>;
+export declare function assertPinnedImageRef(imageRef: string): void;
+//# sourceMappingURL=distribution.d.ts.map

package/dist/setup/distribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../src/setup/distribution.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAY5E;AAwBD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAoB3D"}

package/dist/setup/distribution.js

@@ -0,0 +1,55 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { resolveComposeInstallTemplateRoot } from "./compose-template-root.js";
+export async function loadComposeDistribution() {
+    const templateRoot = resolveComposeInstallTemplateRoot();
+    const manifestPath = path.join(templateRoot, "distribution.json");
+    const composePath = path.join(templateRoot, "compose.yml");
+    const [manifestRaw, composeYaml] = await Promise.all([
+        readFile(manifestPath, "utf8"),
+        readFile(composePath, "utf8"),
+    ]);
+    const manifest = JSON.parse(manifestRaw);
+    assertDistributionManifest(manifest);
+    assertRegistryOnlyCompose(composeYaml);
+    return { manifest, composeYaml, templateRoot };
+}
+function assertDistributionManifest(manifest) {
+    if (manifest.distributionSchemaVersion !== 1) {
+        throw new Error(`Unsupported compose distribution schema version ${String(manifest.distributionSchemaVersion)}.`);
+    }
+    if (typeof manifest.platformVersion !== "string" ||
+        manifest.platformVersion.length === 0) {
+        throw new Error("Compose distribution manifest is missing platformVersion.");
+    }
+    if (typeof manifest.imageRef !== "string" || manifest.imageRef.length === 0) {
+        throw new Error("Compose distribution manifest is missing imageRef.");
+    }
+    assertPinnedImageRef(manifest.imageRef);
+}
+export function assertPinnedImageRef(imageRef) {
+    const trimmed = imageRef.trim();
+    if (trimmed.length === 0) {
+        throw new Error("OSVA image reference must not be empty.");
+    }
+    if (trimmed === "latest" || trimmed.endsWith(":latest")) {
+        throw new Error("Refusing unversioned OSVA image tag for installation.");
+    }
+    const lastSegment = trimmed.split("/").at(-1) ?? trimmed;
+    if (!lastSegment.includes(":")) {
+        throw new Error("Refusing OSVA image reference without an explicit version tag.");
+    }
+    const tag = lastSegment.split(":").at(-1) ?? "";
+    if (tag.length === 0) {
+        throw new Error("Refusing OSVA image reference without an explicit version tag.");
+    }
+}
+function assertRegistryOnlyCompose(composeYaml) {
+    if (/\n\s*build\s*:/.test(composeYaml)) {
+        throw new Error("Bundled installation compose must not contain image build contexts.");
+    }
+    if (!composeYaml.includes("OSVA_IMAGE:?OSVA_IMAGE is required")) {
+        throw new Error("Bundled installation compose must require an explicit OSVA_IMAGE.");
+    }
+}
+//# sourceMappingURL=distribution.js.map

package/dist/setup/distribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distribution.js","sourceRoot":"","sources":["../../src/setup/distribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAc/E,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,YAAY,GAAG,iCAAiC,EAAE,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IAC3D,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAgC,CAAC;IACxE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,0BAA0B,CACjC,QAAqC;IAErC,IAAI,QAAQ,CAAC,yBAAyB,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CACjG,CAAC;IACJ,CAAC;IACD,IACE,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ;QAC5C,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB;IACpD,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/setup/env-file.d.ts

@@ -0,0 +1,23 @@
+/** Keys written to the installation `.env` and checked for host-shell conflicts. */
+export declare const INSTALL_ENV_KEYS: readonly ["COMPOSE_PROJECT_NAME", "OSVA_IMAGE", "POSTGRES_PASSWORD", "OSVA_AUTH_SECRET", "OSVA_PUBLISH_WEB_PORT", "OSVA_PUBLISH_MCP_PORT", "OSVA_PUBLISH_CONSOLE_PORT", "OSVA_AUTH_BASE_URL", "OSVA_AUTH_TRUSTED_ORIGINS", "OSVA_VALKEY_URL"];
+export type InstallEnvKey = (typeof INSTALL_ENV_KEYS)[number];
+export type InstallEnvValues = Record<InstallEnvKey, string>;
+export interface EnvConflict {
+    readonly key: InstallEnvKey;
+    readonly shellValue: string;
+    readonly fileValue: string;
+}
+export declare function parseDotEnv(contents: string): Map<string, string>;
+export declare function readInstallEnvFile(envPath: string): Promise<Map<string, string> | undefined>;
+export declare function detectShellEnvConflicts(fileValues: InstallEnvValues, shellEnv: NodeJS.ProcessEnv): readonly EnvConflict[];
+export declare function renderInstallEnvFile(values: InstallEnvValues): string;
+export declare function buildInstallEnvValues(input: {
+    readonly imageRef: string;
+    readonly composeProjectName: string;
+    readonly webPort: number;
+    readonly mcpPort: number;
+    readonly consolePort: number;
+    readonly existing?: Map<string, string>;
+    readonly generateSecret: () => string;
+}): InstallEnvValues;
+//# sourceMappingURL=env-file.d.ts.map

package/dist/setup/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../src/setup/env-file.ts"],"names":[],"mappings":"AAEA,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,+OAWnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAyBjE;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAc1C;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE,MAAM,CAAC,UAAU,GAC1B,SAAS,WAAW,EAAE,CAgBxB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CA0BrE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,MAAM,CAAC;CACvC,GAAG,gBAAgB,CA+BnB"}

package/dist/setup/env-file.js

@@ -0,0 +1,141 @@
+import { readFile } from "node:fs/promises";
+/** Keys written to the installation `.env` and checked for host-shell conflicts. */
+export const INSTALL_ENV_KEYS = [
+    "COMPOSE_PROJECT_NAME",
+    "OSVA_IMAGE",
+    "POSTGRES_PASSWORD",
+    "OSVA_AUTH_SECRET",
+    "OSVA_PUBLISH_WEB_PORT",
+    "OSVA_PUBLISH_MCP_PORT",
+    "OSVA_PUBLISH_CONSOLE_PORT",
+    "OSVA_AUTH_BASE_URL",
+    "OSVA_AUTH_TRUSTED_ORIGINS",
+    "OSVA_VALKEY_URL",
+];
+export function parseDotEnv(contents) {
+    const values = new Map();
+    for (const line of contents.split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (trimmed.length === 0 || trimmed.startsWith("#")) {
+            continue;
+        }
+        const withoutExport = trimmed.startsWith("export ")
+            ? trimmed.slice("export ".length).trim()
+            : trimmed;
+        const eq = withoutExport.indexOf("=");
+        if (eq <= 0) {
+            continue;
+        }
+        const key = withoutExport.slice(0, eq).trim();
+        let value = withoutExport.slice(eq + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        values.set(key, value);
+    }
+    return values;
+}
+export async function readInstallEnvFile(envPath) {
+    try {
+        const contents = await readFile(envPath, "utf8");
+        return parseDotEnv(contents);
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    }
+}
+export function detectShellEnvConflicts(fileValues, shellEnv) {
+    const conflicts = [];
+    for (const key of INSTALL_ENV_KEYS) {
+        const shellRaw = key === "COMPOSE_PROJECT_NAME"
+            ? shellEnv.COMPOSE_PROJECT_NAME?.trim()
+            : shellEnv[key]?.trim();
+        if (shellRaw === undefined || shellRaw.length === 0) {
+            continue;
+        }
+        const fileValue = fileValues[key];
+        if (shellRaw !== fileValue) {
+            conflicts.push({ key, shellValue: shellRaw, fileValue });
+        }
+    }
+    return conflicts;
+}
+export function renderInstallEnvFile(values) {
+    const lines = [
+        "# Generated by `osva setup`. Do not commit this file.",
+        "# Host shell exports override these values during `docker compose` interpolation.",
+        "",
+        `COMPOSE_PROJECT_NAME=${values.COMPOSE_PROJECT_NAME}`,
+        "",
+        `OSVA_IMAGE=${values.OSVA_IMAGE}`,
+        `POSTGRES_PASSWORD=${values.POSTGRES_PASSWORD}`,
+        "",
+        "OSVA_VALKEY_URL=redis://valkey:6379",
+        "",
+        `OSVA_PUBLISH_WEB_PORT=${values.OSVA_PUBLISH_WEB_PORT}`,
+        `OSVA_PUBLISH_MCP_PORT=${values.OSVA_PUBLISH_MCP_PORT}`,
+        `OSVA_PUBLISH_CONSOLE_PORT=${values.OSVA_PUBLISH_CONSOLE_PORT}`,
+        "",
+        `OSVA_AUTH_SECRET=${values.OSVA_AUTH_SECRET}`,
+        `OSVA_AUTH_BASE_URL=${values.OSVA_AUTH_BASE_URL}`,
+        `OSVA_AUTH_TRUSTED_ORIGINS=${values.OSVA_AUTH_TRUSTED_ORIGINS}`,
+        "",
+        "OSVA_KNOWLEDGE_EMBEDDING_PROVIDER=DETERMINISTIC",
+        "OSVA_KNOWLEDGE_EMBEDDING_MODEL=deterministic-v1",
+        "OSVA_KNOWLEDGE_EMBEDDING_DIMENSIONS=384",
+        "",
+    ];
+    return `${lines.join("\n")}\n`;
+}
+export function buildInstallEnvValues(input) {
+    const webOrigin = `http://127.0.0.1:${String(input.webPort)}`;
+    const consoleOrigin = `http://127.0.0.1:${String(input.consolePort)}`;
+    const existing = input.existing;
+    const postgresPassword = existing?.get("POSTGRES_PASSWORD")?.trim() || input.generateSecret();
+    const authSecret = existing?.get("OSVA_AUTH_SECRET")?.trim() || input.generateSecret();
+    const imageRef = existing?.get("OSVA_IMAGE")?.trim() || input.imageRef;
+    assertRequiredSecret("POSTGRES_PASSWORD", postgresPassword);
+    assertRequiredSecret("OSVA_AUTH_SECRET", authSecret);
+    const composeProjectName = existing?.get("COMPOSE_PROJECT_NAME")?.trim() || input.composeProjectName;
+    return {
+        COMPOSE_PROJECT_NAME: composeProjectName,
+        OSVA_IMAGE: imageRef,
+        POSTGRES_PASSWORD: postgresPassword,
+        OSVA_AUTH_SECRET: authSecret,
+        OSVA_PUBLISH_WEB_PORT: String(input.webPort),
+        OSVA_PUBLISH_MCP_PORT: String(input.mcpPort),
+        OSVA_PUBLISH_CONSOLE_PORT: String(input.consolePort),
+        OSVA_AUTH_BASE_URL: existing?.get("OSVA_AUTH_BASE_URL")?.trim() || webOrigin,
+        OSVA_AUTH_TRUSTED_ORIGINS: mergeInstallTrustedOrigins(existing?.get("OSVA_AUTH_TRUSTED_ORIGINS"), webOrigin, consoleOrigin),
+        OSVA_VALKEY_URL: existing?.get("OSVA_VALKEY_URL")?.trim() || "redis://valkey:6379",
+    };
+}
+function mergeInstallTrustedOrigins(existing, webOrigin, consoleOrigin) {
+    const required = [webOrigin, consoleOrigin];
+    const merged = new Set();
+    for (const origin of required) {
+        merged.add(origin);
+    }
+    const raw = existing?.trim();
+    if (raw !== undefined && raw.length > 0) {
+        for (const segment of raw.split(",")) {
+            const origin = segment.trim();
+            if (origin.length > 0) {
+                merged.add(origin);
+            }
+        }
+    }
+    return [...merged].join(",");
+}
+function assertRequiredSecret(name, value) {
+    if (value.length < 32) {
+        throw new Error(`${name} must be at least 32 characters for installation.`);
+    }
+}
+//# sourceMappingURL=env-file.js.map

package/dist/setup/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../src/setup/env-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,oFAAoF;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,sBAAsB;IACtB,YAAY;IACZ,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,uBAAuB;IACvB,2BAA2B;IAC3B,oBAAoB;IACpB,2BAA2B;IAC3B,iBAAiB;CACT,CAAC;AAYX,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;YACjD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YACxC,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAA4B,EAC5B,QAA2B;IAE3B,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,QAAQ,GACZ,GAAG,KAAK,sBAAsB;YAC5B,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,IAAI,EAAE;YACvC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAwB;IAC3D,MAAM,KAAK,GAAG;QACZ,uDAAuD;QACvD,mFAAmF;QACnF,EAAE;QACF,wBAAwB,MAAM,CAAC,oBAAoB,EAAE;QACrD,EAAE;QACF,cAAc,MAAM,CAAC,UAAU,EAAE;QACjC,qBAAqB,MAAM,CAAC,iBAAiB,EAAE;QAC/C,EAAE;QACF,qCAAqC;QACrC,EAAE;QACF,yBAAyB,MAAM,CAAC,qBAAqB,EAAE;QACvD,yBAAyB,MAAM,CAAC,qBAAqB,EAAE;QACvD,6BAA6B,MAAM,CAAC,yBAAyB,EAAE;QAC/D,EAAE;QACF,oBAAoB,MAAM,CAAC,gBAAgB,EAAE;QAC7C,sBAAsB,MAAM,CAAC,kBAAkB,EAAE;QACjD,6BAA6B,MAAM,CAAC,yBAAyB,EAAE;QAC/D,EAAE;QACF,iDAAiD;QACjD,iDAAiD;QACjD,yCAAyC;QACzC,EAAE;KACH,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAQrC;IACC,MAAM,SAAS,GAAG,oBAAoB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,MAAM,aAAa,GAAG,oBAAoB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,gBAAgB,GACpB,QAAQ,EAAE,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;IACvE,MAAM,UAAU,GACd,QAAQ,EAAE,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC;IACvE,oBAAoB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC5D,oBAAoB,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,kBAAkB,GACtB,QAAQ,EAAE,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,kBAAkB,CAAC;IAC5E,OAAO;QACL,oBAAoB,EAAE,kBAAkB;QACxC,UAAU,EAAE,QAAQ;QACpB,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,UAAU;QAC5B,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5C,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5C,yBAAyB,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QACpD,kBAAkB,EAChB,QAAQ,EAAE,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS;QAC1D,yBAAyB,EAAE,0BAA0B,CACnD,QAAQ,EAAE,GAAG,CAAC,2BAA2B,CAAC,EAC1C,SAAS,EACT,aAAa,CACd;QACD,eAAe,EACb,QAAQ,EAAE,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,qBAAqB;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,QAA4B,EAC5B,SAAiB,EACjB,aAAqB;IAErB,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mDAAmD,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/setup/format.d.ts

@@ -0,0 +1,4 @@
+import type { SetupReport } from "./setup-report.js";
+export declare function formatSetupHuman(report: SetupReport): string;
+export declare function formatSetupJson(report: SetupReport): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/setup/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/setup/format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqD5D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAK3D"}

package/dist/setup/format.js

@@ -0,0 +1,58 @@
+export function formatSetupHuman(report) {
+    const lines = [
+        "OSVA Setup",
+        "",
+        "Preflight checks and local Compose provisioning for self-hosted OSVA.",
+        report.installDir !== undefined
+            ? `Installation directory: ${report.installDir}`
+            : undefined,
+        "",
+    ].filter((line) => line !== undefined);
+    for (const check of report.checks) {
+        const status = check.status.padEnd(4, " ");
+        const id = check.id.padEnd(26, " ");
+        lines.push(`${status} ${id} ${check.message}`);
+        if (check.remediation !== undefined) {
+            lines.push(`      → ${check.remediation}`);
+        }
+    }
+    lines.push("");
+    lines.push(`Result: ${report.result.toUpperCase()}`);
+    if (report.platformReady === true) {
+        lines.push("Platform services: READY");
+    }
+    else if (report.phase === "provision") {
+        lines.push("Platform services: NOT READY");
+    }
+    if (report.consoleReady === true) {
+        lines.push("Console: READY");
+    }
+    else if (report.phase === "provision") {
+        lines.push("Console: NOT READY");
+    }
+    if (report.administratorBootstrapped === true) {
+        lines.push("Administrator bootstrap: DONE");
+    }
+    else if (report.phase === "provision") {
+        lines.push("Administrator bootstrap: PENDING");
+    }
+    if (report.installationComplete === true) {
+        lines.push("Installation: COMPLETE");
+    }
+    else {
+        lines.push("Installation: NOT COMPLETE (complete Console sign-in and Agent Studio onboarding).");
+    }
+    if (report.setupTokenForOperator !== undefined) {
+        lines.push("");
+        lines.push("One-time administrator password setup token (single use):");
+        lines.push(report.setupTokenForOperator);
+        lines.push("");
+        lines.push("Enter this token at the Console /setup page. It is not stored in installation files or JSON output.");
+    }
+    return `${lines.join("\n")}\n`;
+}
+export function formatSetupJson(report) {
+    const safeReport = Object.fromEntries(Object.entries(report).filter(([key]) => key !== "setupTokenForOperator"));
+    return `${JSON.stringify(safeReport, null, 2)}\n`;
+}
+//# sourceMappingURL=format.js.map

package/dist/setup/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/setup/format.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,MAAM,KAAK,GAAa;QACtB,YAAY;QACZ,EAAE;QACF,uEAAuE;QACvE,MAAM,CAAC,UAAU,KAAK,SAAS;YAC7B,CAAC,CAAC,2BAA2B,MAAM,CAAC,UAAU,EAAE;YAChD,CAAC,CAAC,SAAS;QACb,EAAE;KACH,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAEvD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAC5B,CAAC;IAChD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/setup/index.d.ts

@@ -0,0 +1,17 @@
+import { type SetupProbeDependencies } from "./run-setup.js";
+export type { SetupOptions } from "./read-options.js";
+export type { SetupProbeDependencies } from "./run-setup.js";
+export type { SetupReport } from "./setup-report.js";
+export { DEFAULT_SETUP_SUBPROCESS_TIMEOUT_MS, runSetupPipeline, setupExitCode, } from "./run-setup.js";
+export { parsePortNumber, readSetupOptions } from "./read-options.js";
+export { runSetupProvision } from "./run-provision.js";
+export { buildInstallEnvValues, detectShellEnvConflicts, parseDotEnv, renderInstallEnvFile, } from "./env-file.js";
+export { materializeInstallation } from "./materialize-install.js";
+export { composeBaseArgs, composeCommandIncludesDestructiveVolumeRemoval, } from "./compose-exec.js";
+export { assertPinnedImageRef, loadComposeDistribution, } from "./distribution.js";
+export { defaultInstallDir, resolveInstallDir } from "./install-path.js";
+export interface SetupCommandDependencies extends SetupProbeDependencies {
+    readonly processEnv?: NodeJS.ProcessEnv;
+}
+export declare function runSetupCommand(flags: Readonly<Record<string, string | boolean>>, processEnv?: NodeJS.ProcessEnv, deps?: SetupCommandDependencies): Promise<number>;
+//# sourceMappingURL=index.d.ts.map

package/dist/setup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,mCAAmC,EACnC,gBAAgB,EAChB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,WAAW,EACX,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,eAAe,EACf,8CAA8C,GAC/C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzC;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EACjD,UAAU,GAAE,MAAM,CAAC,UAAwB,EAC3C,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,MAAM,CAAC,CAiCjB"}

package/dist/setup/index.js

@@ -0,0 +1,45 @@
+import { writeStdout } from "../stdout.js";
+import { formatSetupHuman, formatSetupJson } from "./format.js";
+import { readSetupOptions } from "./read-options.js";
+import { runSetupProvision } from "./run-provision.js";
+import { runSetupPipeline, setupExitCode, } from "./run-setup.js";
+import { mergeSetupReport } from "./setup-report.js";
+export { DEFAULT_SETUP_SUBPROCESS_TIMEOUT_MS, runSetupPipeline, setupExitCode, } from "./run-setup.js";
+export { parsePortNumber, readSetupOptions } from "./read-options.js";
+export { runSetupProvision } from "./run-provision.js";
+export { buildInstallEnvValues, detectShellEnvConflicts, parseDotEnv, renderInstallEnvFile, } from "./env-file.js";
+export { materializeInstallation } from "./materialize-install.js";
+export { composeBaseArgs, composeCommandIncludesDestructiveVolumeRemoval, } from "./compose-exec.js";
+export { assertPinnedImageRef, loadComposeDistribution, } from "./distribution.js";
+export { defaultInstallDir, resolveInstallDir } from "./install-path.js";
+export async function runSetupCommand(flags, processEnv = process.env, deps = {}) {
+    const options = readSetupOptions(flags, processEnv, deps.platform);
+    const preflight = await runSetupPipeline(options, {
+        ...deps,
+        cwdForDisk: options.installDir,
+    });
+    const json = flags.json === true;
+    if (preflight.result === "fail" || options.preflightOnly) {
+        const report = mergeSetupReport({
+            preflight,
+            installDir: options.installDir,
+            phase: "preflight",
+        });
+        await writeStdout(json ? formatSetupJson(report) : formatSetupHuman(report));
+        return setupExitCode(report);
+    }
+    const provision = await runSetupProvision(options, {
+        spawn: deps.spawn,
+        processEnv,
+    });
+    const report = mergeSetupReport({
+        preflight,
+        provisionChecks: provision.checks,
+        installDir: options.installDir,
+        phase: "provision",
+        setupTokenForOperator: provision.setupTokenForOperator,
+    });
+    await writeStdout(json ? formatSetupJson(report) : formatSetupHuman(report));
+    return setupExitCode(report);
+}
+//# sourceMappingURL=index.js.map

package/dist/setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,aAAa,GAEd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAKrD,OAAO,EACL,mCAAmC,EACnC,gBAAgB,EAChB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,WAAW,EACX,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,eAAe,EACf,8CAA8C,GAC/C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAMzE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAiD,EACjD,aAAgC,OAAO,CAAC,GAAG,EAC3C,OAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE;QAChD,GAAG,IAAI;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;IAEjC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,gBAAgB,CAAC;YAC9B,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;QACH,MAAM,WAAW,CACf,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC1D,CAAC;QACF,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE;QACjD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU;KACX,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,SAAS;QACT,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,WAAW;QAClB,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;KACvD,CAAC,CAAC;IACH,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/setup/install-path.d.ts

@@ -0,0 +1,3 @@
+export declare function defaultInstallDir(platform?: NodeJS.Platform): string;
+export declare function resolveInstallDir(flags: Readonly<Record<string, string | boolean>>, env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
+//# sourceMappingURL=install-path.d.ts.map

package/dist/setup/install-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-path.d.ts","sourceRoot":"","sources":["../../src/setup/install-path.ts"],"names":[],"mappings":"AAGA,wBAAgB,iBAAiB,CAC/B,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CASR;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EACjD,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,CAaR"}

package/dist/setup/install-path.js

@@ -0,0 +1,26 @@
+import os from "node:os";
+import path from "node:path";
+export function defaultInstallDir(platform = process.platform) {
+    if (platform === "win32") {
+        const localAppData = process.env.LOCALAPPDATA?.trim();
+        if (localAppData !== undefined && localAppData.length > 0) {
+            return path.join(localAppData, "OSVA", "install");
+        }
+        return path.join(os.homedir(), "AppData", "Local", "OSVA", "install");
+    }
+    return path.join(os.homedir(), ".osva", "install");
+}
+export function resolveInstallDir(flags, env = process.env, platform = process.platform) {
+    const flagValue = flags["install-dir"];
+    if (typeof flagValue === "boolean") {
+        throw new Error("--install-dir requires a directory path.");
+    }
+    const raw = typeof flagValue === "string" && flagValue.trim().length > 0
+        ? flagValue.trim()
+        : env.OSVA_INSTALL_DIR?.trim();
+    if (raw === undefined || raw.length === 0) {
+        return path.resolve(defaultInstallDir(platform));
+    }
+    return path.resolve(raw);
+}
+//# sourceMappingURL=install-path.js.map

package/dist/setup/install-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-path.js","sourceRoot":"","sources":["../../src/setup/install-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,iBAAiB,CAC/B,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QACtD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAiD,EACjD,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,OAAO,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GACP,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE;QAClB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/setup/installation-state.d.ts

@@ -0,0 +1,29 @@
+export declare const INSTALLATION_MARKER_RELATIVE: string;
+export interface InstallationMarker {
+    readonly schemaVersion: 1;
+    readonly platformVersion: string;
+    readonly imageRef: string;
+    readonly cliVersion: string;
+    readonly installDir: string;
+    readonly composeProjectName: string;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+export type InstallDirectoryKind = "missing" | "empty" | "osva_installation" | "foreign";
+export interface InstallDirectoryAssessment {
+    readonly kind: InstallDirectoryKind;
+    readonly marker: InstallationMarker | undefined;
+    readonly foreignEntries: readonly string[];
+}
+export declare function assessInstallDirectory(installDir: string): Promise<InstallDirectoryAssessment>;
+export declare function readInstallationMarker(markerPath: string): Promise<InstallationMarker | undefined>;
+export declare function renderInstallationMarker(input: {
+    readonly platformVersion: string;
+    readonly imageRef: string;
+    readonly cliVersion: string;
+    readonly installDir: string;
+    readonly composeProjectName: string;
+    readonly existing?: InstallationMarker;
+}): InstallationMarker;
+export declare function pathIsDirectory(targetPath: string): Promise<boolean>;
+//# sourceMappingURL=installation-state.d.ts.map

package/dist/setup/installation-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-state.d.ts","sourceRoot":"","sources":["../../src/setup/installation-state.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,4BAA4B,QAGxC,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC9B,SAAS,GAAG,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC;AAExD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC,CAyCrC;AAED,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAkBzC;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC,GAAG,kBAAkB,CAYrB;AAED,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1E"}

package/dist/setup/installation-state.js

@@ -0,0 +1,83 @@
+import { readdir, readFile, stat } from "node:fs/promises";
+import path from "node:path";
+export const INSTALLATION_MARKER_RELATIVE = path.join(".osva", "installation.json");
+export async function assessInstallDirectory(installDir) {
+    let entries;
+    try {
+        entries = await readdir(installDir);
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return { kind: "missing", marker: undefined, foreignEntries: [] };
+        }
+        throw error;
+    }
+    if (entries.length === 0) {
+        return { kind: "empty", marker: undefined, foreignEntries: [] };
+    }
+    const markerPath = path.join(installDir, INSTALLATION_MARKER_RELATIVE);
+    const marker = await readInstallationMarker(markerPath);
+    const recognized = new Set([
+        ".osva",
+        "compose.yml",
+        ".env",
+        ".env.example",
+        "README.md",
+        ".acceptance-bootstrap-key",
+        ".acceptance-setup-token",
+    ]);
+    const foreignEntries = entries.filter((entry) => !recognized.has(entry));
+    if (marker !== undefined) {
+        return { kind: "osva_installation", marker, foreignEntries };
+    }
+    if (foreignEntries.length > 0) {
+        return { kind: "foreign", marker: undefined, foreignEntries };
+    }
+    if (entries.every((entry) => recognized.has(entry))) {
+        return { kind: "empty", marker: undefined, foreignEntries: [] };
+    }
+    return { kind: "foreign", marker: undefined, foreignEntries: entries };
+}
+export async function readInstallationMarker(markerPath) {
+    try {
+        const raw = await readFile(markerPath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed.schemaVersion !== 1) {
+            return undefined;
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return undefined;
+        }
+        return undefined;
+    }
+}
+export function renderInstallationMarker(input) {
+    const now = new Date().toISOString();
+    return {
+        schemaVersion: 1,
+        platformVersion: input.platformVersion,
+        imageRef: input.imageRef,
+        cliVersion: input.cliVersion,
+        installDir: input.installDir,
+        composeProjectName: input.composeProjectName,
+        createdAt: input.existing?.createdAt ?? now,
+        updatedAt: now,
+    };
+}
+export async function pathIsDirectory(targetPath) {
+    try {
+        const info = await stat(targetPath);
+        return info.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=installation-state.js.map

package/dist/setup/installation-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-state.js","sourceRoot":"","sources":["../../src/setup/installation-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC,IAAI,CACnD,OAAO,EACP,mBAAmB,CACpB,CAAC;AAsBF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB;IAElB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,OAAO;QACP,aAAa;QACb,MAAM;QACN,cAAc;QACd,WAAW;QACX,2BAA2B;QAC3B,yBAAyB;KAC1B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAEzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAClD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAOxC;IACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,GAAG;QAC3C,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/setup/installation-status.d.ts

@@ -0,0 +1,14 @@
+import type { WorkspaceId } from "@osva-ai/contracts";
+export interface InstallationStatusSnapshot {
+    readonly schemaVersion: 1;
+    readonly workspaceCount: number;
+    readonly apiKeyCount: number;
+    readonly organizationCount: number;
+    readonly humanUserCount: number;
+    readonly pendingSetupUserCount: number;
+    readonly unlinkedWorkspaceIds: readonly WorkspaceId[];
+}
+export type AdministratorBootstrapPhase = "fresh_installation" | "workspace_without_human_administrator" | "administrator_pending_password_setup" | "administrator_ready" | "multiple_unlinked_workspaces" | "ambiguous_workspace_state";
+export declare function parseInstallationStatusJson(stdout: string): InstallationStatusSnapshot;
+export declare function classifyAdministratorBootstrapPhase(status: InstallationStatusSnapshot): AdministratorBootstrapPhase;
+//# sourceMappingURL=installation-status.d.ts.map

package/dist/setup/installation-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-status.d.ts","sourceRoot":"","sources":["../../src/setup/installation-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,WAAW,EAAE,CAAC;CACvD;AAED,MAAM,MAAM,2BAA2B,GACnC,oBAAoB,GACpB,uCAAuC,GACvC,sCAAsC,GACtC,qBAAqB,GACrB,8BAA8B,GAC9B,2BAA2B,CAAC;AAEhC,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,GACb,0BAA0B,CAc5B;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,0BAA0B,GACjC,2BAA2B,CA2B7B"}

package/dist/setup/installation-status.js

@@ -0,0 +1,36 @@
+export function parseInstallationStatusJson(stdout) {
+    const trimmed = stdout.trim();
+    const jsonLine = trimmed
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .find((line) => line.startsWith("{")) ?? trimmed;
+    const parsed = JSON.parse(jsonLine);
+    if (parsed.schemaVersion !== 1) {
+        throw new Error(`Unsupported installation status schema version ${String(parsed.schemaVersion)}.`);
+    }
+    return parsed;
+}
+export function classifyAdministratorBootstrapPhase(status) {
+    if (status.organizationCount > 0) {
+        if (status.pendingSetupUserCount > 0) {
+            return "administrator_pending_password_setup";
+        }
+        if (status.humanUserCount > 0) {
+            return "administrator_ready";
+        }
+    }
+    if (status.unlinkedWorkspaceIds.length === 0 && status.workspaceCount > 0) {
+        return "administrator_ready";
+    }
+    if (status.unlinkedWorkspaceIds.length > 1) {
+        return "multiple_unlinked_workspaces";
+    }
+    if (status.unlinkedWorkspaceIds.length === 1) {
+        return "workspace_without_human_administrator";
+    }
+    if (status.workspaceCount === 0 && status.apiKeyCount === 0) {
+        return "fresh_installation";
+    }
+    return "ambiguous_workspace_state";
+}
+//# sourceMappingURL=installation-status.js.map