@overlordai/cli 1.0.0

package/dist/installer/config-writer.js

@@ -0,0 +1,61 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+/**
+ * Writes and manages .env configuration files.
+ */
+export class ConfigWriter {
+    /**
+     * Write a complete .env file with the given key-value pairs.
+     * Creates parent directories if needed. Sets file permissions to 600.
+     */
+    write(config, envPath) {
+        const dir = path.dirname(envPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        const lines = [];
+        for (const [key, value] of Object.entries(config)) {
+            // Quote values that contain special characters
+            const needsQuoting = /[\s#"'\\$`!]/.test(value);
+            const escapedValue = needsQuoting ? `"${value.replace(/["\\$`]/g, '\\$&')}"` : value;
+            lines.push(`${key}=${escapedValue}`);
+        }
+        fs.writeFileSync(envPath, lines.join('\n') + '\n', { encoding: 'utf-8' });
+        fs.chmodSync(envPath, 0o600);
+    }
+    /**
+     * Append or update a single key in an existing .env file.
+     * If the key already exists, it will be updated in place.
+     */
+    appendToEnv(key, value, envPath) {
+        const needsQuoting = /[\s#"'\\$`!]/.test(value);
+        const escapedValue = needsQuoting ? `"${value.replace(/["\\$`]/g, '\\$&')}"` : value;
+        const newLine = `${key}=${escapedValue}`;
+        if (!fs.existsSync(envPath)) {
+            fs.writeFileSync(envPath, newLine + '\n', { encoding: 'utf-8' });
+            fs.chmodSync(envPath, 0o600);
+            return;
+        }
+        const content = fs.readFileSync(envPath, 'utf-8');
+        const lines = content.split('\n');
+        const regex = new RegExp(`^${key}=`);
+        let found = false;
+        const updatedLines = lines.map((line) => {
+            if (regex.test(line)) {
+                found = true;
+                return newLine;
+            }
+            return line;
+        });
+        if (!found) {
+            // Append to end, ensuring there's a trailing newline
+            const trimmed = content.trimEnd();
+            fs.writeFileSync(envPath, trimmed + '\n' + newLine + '\n', { encoding: 'utf-8' });
+        }
+        else {
+            fs.writeFileSync(envPath, updatedLines.join('\n') + '\n', { encoding: 'utf-8' });
+        }
+        fs.chmodSync(envPath, 0o600);
+    }
+}
+//# sourceMappingURL=config-writer.js.map

package/dist/installer/config-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-writer.js","sourceRoot":"","sources":["../../src/installer/config-writer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;GAEG;AACH,MAAM,OAAO,YAAY;IACvB;;;OAGG;IACH,KAAK,CAAC,MAA8B,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,+CAA+C;YAC/C,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YACrF,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe;QACrD,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACrF,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;QAEzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACjE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,GAAG,KAAK,CAAC;QAElB,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,qDAAqD;YACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/installer/db-initializer.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Initializes the SQLite database and runs migrations.
+ *
+ * Re-uses the same MigrationRunner logic from the server:
+ * creates a schema_version table and applies numbered .sql migration files.
+ */
+export declare class DbInitializer {
+    /**
+     * Open (or create) the SQLite database at the given path,
+     * apply recommended PRAGMAs, and run all pending migrations.
+     *
+     * @param dbPath - Absolute path to the SQLite database file.
+     * @param migrationsDir - Absolute path to the directory containing .sql migration files.
+     */
+    initialize(dbPath: string, migrationsDir: string): void;
+    private runMigrations;
+}
+//# sourceMappingURL=db-initializer.d.ts.map

package/dist/installer/db-initializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-initializer.d.ts","sourceRoot":"","sources":["../../src/installer/db-initializer.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,qBAAa,aAAa;IACxB;;;;;;OAMG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAwBvD,OAAO,CAAC,aAAa;CAsDtB"}

package/dist/installer/db-initializer.js

@@ -0,0 +1,81 @@
+import Database from 'better-sqlite3';
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+/**
+ * Initializes the SQLite database and runs migrations.
+ *
+ * Re-uses the same MigrationRunner logic from the server:
+ * creates a schema_version table and applies numbered .sql migration files.
+ */
+export class DbInitializer {
+    /**
+     * Open (or create) the SQLite database at the given path,
+     * apply recommended PRAGMAs, and run all pending migrations.
+     *
+     * @param dbPath - Absolute path to the SQLite database file.
+     * @param migrationsDir - Absolute path to the directory containing .sql migration files.
+     */
+    initialize(dbPath, migrationsDir) {
+        // Ensure the parent directory exists
+        const dir = path.dirname(dbPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        const db = new Database(dbPath);
+        try {
+            // Apply recommended PRAGMAs for performance and safety
+            db.pragma('journal_mode = WAL');
+            db.pragma('busy_timeout = 5000');
+            db.pragma('synchronous = NORMAL');
+            db.pragma('cache_size = -64000'); // 64MB
+            db.pragma('foreign_keys = ON');
+            // Run migrations using the same pattern as server's MigrationRunner
+            this.runMigrations(db, migrationsDir);
+        }
+        finally {
+            db.close();
+        }
+    }
+    runMigrations(db, migrationsDir) {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS schema_version (
+        version INTEGER PRIMARY KEY,
+        filename TEXT NOT NULL,
+        applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+        if (!fs.existsSync(migrationsDir)) {
+            throw new Error(`Migrations directory not found: ${migrationsDir}`);
+        }
+        const files = fs
+            .readdirSync(migrationsDir)
+            .filter((f) => f.endsWith('.sql'))
+            .sort((a, b) => {
+            const numA = parseInt(a.split('-')[0], 10);
+            const numB = parseInt(b.split('-')[0], 10);
+            return numA - numB;
+        });
+        const applied = new Set(db
+            .prepare('SELECT version FROM schema_version')
+            .all()
+            .map((row) => row.version));
+        for (const file of files) {
+            const version = parseInt(file.split('-')[0], 10);
+            if (applied.has(version)) {
+                continue;
+            }
+            const sql = fs.readFileSync(path.join(migrationsDir, file), 'utf-8');
+            const runMigration = db.transaction(() => {
+                db.exec(sql);
+                db.prepare('INSERT INTO schema_version (version, filename) VALUES (?, ?)').run(version, file);
+            });
+            try {
+                runMigration();
+            }
+            catch (err) {
+                throw new Error(`Migration ${file} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=db-initializer.js.map

package/dist/installer/db-initializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-initializer.js","sourceRoot":"","sources":["../../src/installer/db-initializer.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACxB;;;;;;OAMG;IACH,UAAU,CAAC,MAAc,EAAE,aAAqB;QAC9C,qCAAqC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,uDAAuD;YACvD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAChC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACjC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAClC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO;YACzC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAE/B,oEAAoE;YACpE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,EAAqB,EAAE,aAAqB;QAChE,EAAE,CAAC,IAAI,CAAC;;;;;;KAMP,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,KAAK,GAAG,EAAE;aACb,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC;QAEL,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE;aACC,OAAO,CAAC,oCAAoC,CAAC;aAC7C,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAiB,CAAC,CAC5C,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEjD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAErE,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACvC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,EAAE,CAAC,OAAO,CACR,8DAA8D,CAC/D,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/installer/env-checker.d.ts

@@ -0,0 +1,44 @@
+export interface CheckResult {
+    ok: boolean;
+    detail?: string;
+    optional?: boolean;
+}
+/**
+ * Checks system prerequisites for Overlord installation.
+ */
+export declare class EnvChecker {
+    /**
+     * Check Git is installed and version >= 2.20.
+     */
+    checkGit(): CheckResult;
+    /**
+     * Check Node.js version >= 20.
+     */
+    checkNode(): CheckResult;
+    /**
+     * Check Redis is reachable and version >= 6.2.
+     */
+    checkRedis(url: string): Promise<CheckResult>;
+    /**
+     * Check claude CLI is available (optional).
+     */
+    checkClaudeCli(): CheckResult;
+    /**
+     * Check Cursor agent CLI is available (optional).
+     */
+    checkCursorCli(): CheckResult;
+    /**
+     * Check VS Code CLI is available (optional).
+     */
+    checkCodeCli(): CheckResult;
+    /**
+     * Check available disk space at a given path (warn if < 1 GB).
+     */
+    checkDiskSpace(dirPath: string): CheckResult;
+    /**
+     * Check if a TCP port is available.
+     */
+    checkPort(port: number): Promise<CheckResult>;
+    private checkOptionalBinary;
+}
+//# sourceMappingURL=env-checker.d.ts.map

package/dist/installer/env-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-checker.d.ts","sourceRoot":"","sources":["../../src/installer/env-checker.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB;;OAEG;IACH,QAAQ,IAAI,WAAW;IAqBvB;;OAEG;IACH,SAAS,IAAI,WAAW;IAcxB;;OAEG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA0BnD;;OAEG;IACH,cAAc,IAAI,WAAW;IAI7B;;OAEG;IACH,cAAc,IAAI,WAAW;IAI7B;;OAEG;IACH,YAAY,IAAI,WAAW;IAI3B;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW;IAgB5C;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAsB7C,OAAO,CAAC,mBAAmB;CAQ5B"}

package/dist/installer/env-checker.js

@@ -0,0 +1,135 @@
+import { execFileSync } from 'node:child_process';
+import * as net from 'node:net';
+import * as fs from 'node:fs';
+/**
+ * Checks system prerequisites for Overlord installation.
+ */
+export class EnvChecker {
+    /**
+     * Check Git is installed and version >= 2.20.
+     */
+    checkGit() {
+        try {
+            const output = execFileSync('git', ['--version'], { encoding: 'utf-8' }).trim();
+            const match = output.match(/git version (\d+)\.(\d+)/);
+            if (!match) {
+                return { ok: false, detail: 'Could not parse Git version' };
+            }
+            const major = parseInt(match[1], 10);
+            const minor = parseInt(match[2], 10);
+            if (major < 2 || (major === 2 && minor < 20)) {
+                return { ok: false, detail: `Git ${major}.${minor} found, requires >= 2.20` };
+            }
+            return { ok: true, detail: `Git ${major}.${minor}` };
+        }
+        catch {
+            return { ok: false, detail: 'Git not found' };
+        }
+    }
+    /**
+     * Check Node.js version >= 20.
+     */
+    checkNode() {
+        const match = process.version.match(/v(\d+)/);
+        if (!match) {
+            return { ok: false, detail: 'Could not parse Node.js version' };
+        }
+        const major = parseInt(match[1], 10);
+        if (major < 20) {
+            return { ok: false, detail: `Node.js ${process.version} found, requires >= 20` };
+        }
+        return { ok: true, detail: `Node.js ${process.version}` };
+    }
+    /**
+     * Check Redis is reachable and version >= 6.2.
+     */
+    async checkRedis(url) {
+        try {
+            const output = execFileSync('redis-cli', ['-u', url, 'INFO', 'server'], {
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+                timeout: 5000,
+            });
+            const versionMatch = output.match(/redis_version:(\d+)\.(\d+)/);
+            if (!versionMatch) {
+                return { ok: false, detail: 'Could not parse Redis version' };
+            }
+            const major = parseInt(versionMatch[1], 10);
+            const minor = parseInt(versionMatch[2], 10);
+            if (major < 6 || (major === 6 && minor < 2)) {
+                return { ok: false, detail: `Redis ${major}.${minor} found, requires >= 6.2` };
+            }
+            return { ok: true, detail: `Redis ${major}.${minor}` };
+        }
+        catch {
+            return { ok: false, detail: 'Redis not reachable' };
+        }
+    }
+    /**
+     * Check claude CLI is available (optional).
+     */
+    checkClaudeCli() {
+        return this.checkOptionalBinary('claude', 'claude');
+    }
+    /**
+     * Check Cursor agent CLI is available (optional).
+     */
+    checkCursorCli() {
+        return this.checkOptionalBinary('agent', 'agent');
+    }
+    /**
+     * Check VS Code CLI is available (optional).
+     */
+    checkCodeCli() {
+        return this.checkOptionalBinary('code', 'code');
+    }
+    /**
+     * Check available disk space at a given path (warn if < 1 GB).
+     */
+    checkDiskSpace(dirPath) {
+        try {
+            const stat = fs.statfsSync(dirPath);
+            const availableBytes = stat.bavail * stat.bsize;
+            const availableGB = availableBytes / (1024 * 1024 * 1024);
+            if (availableGB < 1) {
+                return { ok: false, detail: `Only ${availableGB.toFixed(1)} GB available, requires >= 1 GB` };
+            }
+            return { ok: true, detail: `${availableGB.toFixed(1)} GB available` };
+        }
+        catch {
+            return { ok: false, detail: 'Could not check disk space' };
+        }
+    }
+    /**
+     * Check if a TCP port is available.
+     */
+    checkPort(port) {
+        return new Promise((resolve) => {
+            const server = net.createServer();
+            server.once('error', (err) => {
+                if (err.code === 'EADDRINUSE') {
+                    resolve({ ok: false, detail: `Port ${port} is in use` });
+                }
+                else {
+                    resolve({ ok: false, detail: `Port ${port} check failed: ${err.message}` });
+                }
+            });
+            server.once('listening', () => {
+                server.close(() => {
+                    resolve({ ok: true, detail: `Port ${port} available` });
+                });
+            });
+            server.listen(port, '127.0.0.1');
+        });
+    }
+    checkOptionalBinary(command, label) {
+        try {
+            execFileSync('which', [command], { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+            return { ok: true, detail: `${label} found`, optional: true };
+        }
+        catch {
+            return { ok: false, detail: `${label} not found`, optional: true };
+        }
+    }
+}
+//# sourceMappingURL=env-checker.js.map

package/dist/installer/env-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-checker.js","sourceRoot":"","sources":["../../src/installer/env-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAS9B;;GAEG;AACH,MAAM,OAAO,UAAU;IACrB;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;YAC9D,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAErC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;gBAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,KAAK,0BAA0B,EAAE,CAAC;YAChF,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,KAAK,EAAE,EAAE,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,OAAO,CAAC,OAAO,wBAAwB,EAAE,CAAC;QACnF,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACtE,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAChE,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE5C,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,KAAK,IAAI,KAAK,yBAAyB,EAAE,CAAC;YACjF,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,KAAK,IAAI,KAAK,EAAE,EAAE,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,OAAe;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YAChD,MAAM,WAAW,GAAG,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;YAE1D,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,EAAE,CAAC;YAChG,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;YAElC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAClD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC;gBAC3D,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,kBAAkB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;gBAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;oBAChB,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC;gBAC1D,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,OAAe,EAAE,KAAa;QACxD,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;CACF"}

package/dist/installer/secret-gen.d.ts

@@ -0,0 +1,27 @@
+export interface GeneratedSecrets {
+    jwtSecret: string;
+    workerJwtSecret: string;
+    encryptionKey: string;
+}
+/**
+ * Generates cryptographically secure secrets for Overlord configuration.
+ */
+export declare class SecretGenerator {
+    /**
+     * Generate a 64-byte hex JWT secret for user authentication.
+     */
+    generateJwtSecret(): string;
+    /**
+     * Generate a 64-byte hex JWT secret for worker authentication and channel tokens.
+     */
+    generateWorkerJwtSecret(): string;
+    /**
+     * Generate a 32-byte hex encryption key for AES-256-GCM.
+     */
+    generateEncryptionKey(): string;
+    /**
+     * Generate all three secrets at once.
+     */
+    generateAll(): GeneratedSecrets;
+}
+//# sourceMappingURL=secret-gen.d.ts.map

package/dist/installer/secret-gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-gen.d.ts","sourceRoot":"","sources":["../../src/installer/secret-gen.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,uBAAuB,IAAI,MAAM;IAIjC;;OAEG;IACH,qBAAqB,IAAI,MAAM;IAI/B;;OAEG;IACH,WAAW,IAAI,gBAAgB;CAOhC"}

package/dist/installer/secret-gen.js

@@ -0,0 +1,35 @@
+import * as crypto from 'node:crypto';
+/**
+ * Generates cryptographically secure secrets for Overlord configuration.
+ */
+export class SecretGenerator {
+    /**
+     * Generate a 64-byte hex JWT secret for user authentication.
+     */
+    generateJwtSecret() {
+        return crypto.randomBytes(64).toString('hex');
+    }
+    /**
+     * Generate a 64-byte hex JWT secret for worker authentication and channel tokens.
+     */
+    generateWorkerJwtSecret() {
+        return crypto.randomBytes(64).toString('hex');
+    }
+    /**
+     * Generate a 32-byte hex encryption key for AES-256-GCM.
+     */
+    generateEncryptionKey() {
+        return crypto.randomBytes(32).toString('hex');
+    }
+    /**
+     * Generate all three secrets at once.
+     */
+    generateAll() {
+        return {
+            jwtSecret: this.generateJwtSecret(),
+            workerJwtSecret: this.generateWorkerJwtSecret(),
+            encryptionKey: this.generateEncryptionKey(),
+        };
+    }
+}
+//# sourceMappingURL=secret-gen.js.map

package/dist/installer/secret-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-gen.js","sourceRoot":"","sources":["../../src/installer/secret-gen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAQtC;;GAEG;AACH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,iBAAiB;QACf,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE;YACnC,eAAe,EAAE,IAAI,CAAC,uBAAuB,EAAE;YAC/C,aAAa,EAAE,IAAI,CAAC,qBAAqB,EAAE;SAC5C,CAAC;IACJ,CAAC;CACF"}

package/dist/installer/wizard.d.ts

@@ -0,0 +1,12 @@
+/**
+ * 10-step interactive installation wizard using @clack/prompts.
+ */
+export declare class InstallWizard {
+    private checker;
+    private secretGen;
+    private configWriter;
+    private dbInit;
+    private adminCreator;
+    run(): Promise<void>;
+}
+//# sourceMappingURL=wizard.d.ts.map

package/dist/installer/wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.d.ts","sourceRoot":"","sources":["../../src/installer/wizard.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,YAAY,CAAsB;IAEpC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgN3B"}