@schema-weaver/pg-connector 0.0.0-stage → 2.0.0

package/dist/esm/cli/commands/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/project.ts"],"names":[],"mappings":"AAWA,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BnE;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBlE"}

package/dist/esm/cli/commands/project.js

@@ -0,0 +1,60 @@
+import { loadDbConfig, findDbByProject } from '../../config/db-config';
+import { C, S, renderTable } from '../ui';
+import { isReplMode } from '../prompt';
+function exit_(code) {
+    if (isReplMode()) {
+        throw { __exitCode: code };
+    }
+    process.exit(code);
+}
+export async function runProjectList(_args) {
+    const config = loadDbConfig();
+    if (config.length === 0) {
+        console.log(`  ${C.yellow(S.warning)} No projects yet. Run ${C.cyan('db add')} to add one.`);
+        exit_(0);
+    }
+    console.log();
+    console.log(C.bold('  Projects'));
+    console.log();
+    const rows = config.map((e) => ({
+        project: e.project_name,
+        alias: e.db_alias,
+        host: `${e.host}:${e.port}`,
+        database: e.database,
+    }));
+    console.log(renderTable(rows, {
+        columns: [
+            { key: 'project', header: 'PROJECT', minWidth: 10, maxWidth: 20, priority: 0 },
+            { key: 'alias', header: 'ALIAS', minWidth: 10, maxWidth: 18, priority: 1 },
+            { key: 'host', header: 'HOST', minWidth: 14, maxWidth: 30, priority: 2 },
+            { key: 'database', header: 'DATABASE', minWidth: 10, maxWidth: 20, priority: 3 },
+        ],
+    }));
+    console.log();
+    exit_(0);
+}
+export async function runProjectShow(args) {
+    const projectName = args[0];
+    if (!projectName) {
+        console.log(`  ${C.yellow('Usage:')} ${C.white('project show <name>')}`);
+        exit_(1);
+    }
+    const entry = findDbByProject(projectName) || loadDbConfig().find((db) => db.db_alias === projectName) || null;
+    if (!entry) {
+        console.log(`  ${C.red(S.cross)} Project "${C.white(projectName)}" not found.`);
+        exit_(1);
+    }
+    console.log();
+    console.log(C.bold(`  Project: ${C.white(projectName)}`));
+    console.log();
+    console.log(`    ${C.bold('Alias:')}      ${C.white(entry.db_alias)}`);
+    console.log(`    ${C.bold('Host:')}       ${C.white(`${entry.host}:${entry.port}`)}`);
+    console.log(`    ${C.bold('Database:')}   ${C.white(entry.database)}`);
+    console.log(`    ${C.bold('User:')}       ${C.white(entry.user)}`);
+    console.log(`    ${C.bold('SSL:')}        ${C.white(entry.ssl_mode)}`);
+    console.log(`    ${C.bold('Permission:')} ${C.yellow(entry.permission_override || 'default')}`);
+    console.log(`    ${C.bold('Created:')}    ${C.dim(entry.created_at)}`);
+    console.log();
+    exit_(0);
+}
+//# sourceMappingURL=project.js.map

package/dist/esm/cli/commands/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../../../src/cli/commands/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAe;IAClD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC7F,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,YAAY;QACvB,KAAK,EAAE,CAAC,CAAC,QAAQ;QACjB,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;IAEJ,OAAO,CAAC,GAAG,CACT,WAAW,CAAC,IAAI,EAAE;QAChB,OAAO,EAAE;YACP,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC9E,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC1E,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YACxE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;SACjF;KACF,CAAC,CACH,CAAC;IAEF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACzE,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC;IAC/G,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChF,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/esm/cli/commands/service.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Runs a service manager. Always receives an argument array and never a shell
+ * string: `execSync(\`launchctl load ${path}\`)` runs the interpolated path
+ * through /bin/sh, and the path is derived from $HOME, so a $HOME containing
+ * `;` is arbitrary command execution as the invoking user.
+ */
+export type ServiceCommandExecutor = (file: string, args: readonly string[]) => string;
+/** Test seam: replaces the process spawner. Pass null to restore the real one. */
+export declare function setServiceCommandExecutor(executor: ServiceCommandExecutor | null): void;
+/** Throws unless `target` resolves strictly under `home`. */
+export declare function assertPathUnderHome(target: string, home: string): void;
+/**
+ * The LaunchAgent plist path, validated to be inside the home directory.
+ * Returns null instead of throwing so callers can report the refusal.
+ */
+export declare function resolveLaunchAgentPath(home?: string): string | null;
+export declare function buildLaunchctlInvocation(action: 'load' | 'unload', plistPath: string): {
+    file: string;
+    args: string[];
+};
+export interface SystemdUnitInputs {
+    /** Absolute path to the node binary the unit runs. */
+    nodePath: string;
+    /** Absolute path to the compiled CLI entry point. */
+    cliPath: string;
+    /**
+     * The operator's real home directory.
+     *
+     * Emitted as `Environment=HOME=` because the daemon does not only read the
+     * agent home from the environment: `getCredentialKeyPath()` is
+     * `path.join(os.homedir(), '.sw-agent-credential.key')`, so the key that
+     * decrypts every stored database password is derived from HOME and NOT from
+     * the agent home. Without this line a systemd user manager that resolved HOME
+     * differently from the operator's shell would leave the 24/7 service unable
+     * to decrypt anything the CLI had stored — the same class of split-brain as
+     * the `PG_CONNECTOR_HOME` pin it replaces.
+     */
+    userHome: string;
+    /**
+     * The already-resolved, ABSOLUTE agent home this service must run against.
+     *
+     * Emitted as `SW_AGENT_HOME`, which is the variable `getAgentHome()` reads and
+     * the one `buildDaemonChildEnv()` pins for a detached child. It must never be
+     * `PG_CONNECTOR_HOME`: that variable is in `UNRECOGNISED_SECURITY_ENV` and is
+     * DELETED from `process.env` by `stripUnrecognisedSecurityEnv()` at daemon
+     * startup, so a unit that pinned it ran the operator's configured home in the
+     * foreground and `~/.sw-agent` for the whole of its unattended life — a
+     * different config, a different `allowed_databases`, a different audit
+     * directory and a different audit key.
+     */
+    agentHome: string;
+}
+/**
+ * Every path the daemon must be able to WRITE while the unit's filesystem
+ * namespace is active.
+ *
+ * `ProtectSystem=strict` makes the ENTIRE filesystem read-only except `/dev`,
+ * `/proc`, `/sys` and whatever `ReadWritePaths=` re-opens; `ProtectHome=read-only`
+ * separately makes `$HOME`, `/root` and `/run/user/<uid>` read-only. So this is
+ * not "the agent home plus whatever is convenient" — every writable path the
+ * daemon touches has to be listed or the daemon fails at runtime, and it fails
+ * at the worst possible moment (mid-write to the audit chain).
+ *
+ * What the daemon writes:
+ *
+ *  - The agent home: `sw-agent.pid`, `sw-agent.status`, `daemon.log`,
+ *    `errors.jsonl` and the whole `audit/` directory (log, archives, chain head,
+ *    floor, and the `.write_test` preflight probe). All under one path.
+ *  - `~/.sw-agent-credential.key`, the at-rest encryption key for database
+ *    passwords. It lives OUTSIDE the agent home on purpose, so a backup or
+ *    snapshot of the agent home cannot carry the key that decrypts the file
+ *    sitting next to it — which means `ProtectHome=read-only` covers it and it
+ *    MUST be listed, or the daemon can neither read an existing key nor create
+ *    one on first run.
+ *
+ * What it deliberately does NOT list: `$HOME` itself. Listing the home directory
+ * would re-open everything `ProtectHome=read-only` just closed and turn the
+ * directive into decoration, so the credential key is listed as the FILE, not
+ * as its parent directory.
+ *
+ * `PrivateTmp=true` supplies a writable private `/tmp` and `/var/tmp`, which is
+ * why no other path needs to appear here.
+ */
+export declare function systemdReadWritePaths(agentHome: string, credentialKeyPath: string): string[];
+/**
+ * Renders the systemd user unit.
+ *
+ * Pure: no filesystem, no environment, no clock. Everything the operator's
+ * security posture depends on — the pinned agent home, the pinned HOME, and the
+ * hardening directives — is therefore assertable without installing anything,
+ * which is the only way a regression here can be caught by a test.
+ *
+ * The hardening set is the UNION of what this generator and
+ * `scripts/generate-systemd-service.mjs` each emitted, so the two produce an
+ * equivalent unit and neither loses a directive: `NoNewPrivileges`,
+ * `ProtectSystem=strict`, `ProtectHome=read-only`, `ReadWritePaths` and
+ * `PrivateTmp`, plus the start-limit, journal-routing and graceful-shutdown
+ * directives. `User=`/`Group=` are intentionally absent: those belong to a
+ * system unit, and a user unit runs as the invoking user by definition.
+ */
+export declare function renderSystemdUnitFile(inputs: SystemdUnitInputs): string;
+/** Path of the generated systemd user unit, validated to be inside `$HOME`. */
+export declare function resolveSystemdServicePath(home?: string): string;
+/**
+ * The `Environment=` assignments in a rendered unit, as name to value.
+ *
+ * Parsed from the TEXT rather than from the inputs, so a test can prove what
+ * systemd will actually apply — including that `PG_CONNECTOR_HOME` is absent.
+ */
+export declare function parseUnitEnvironment(unit: string): Record<string, string>;
+export declare function runService(args?: string[]): Promise<void>;
+/**
+ * Installs the OS autostart service.
+ *
+ * Exported (rather than module-private) so a test can drive the exact write
+ * path with an explicit platform instead of only through `process.platform`.
+ */
+export declare function installService(platform: NodeJS.Platform): Promise<void>;
+export declare function uninstallService(platform: NodeJS.Platform): Promise<void>;
+export declare function statusService(platform: NodeJS.Platform): Promise<void>;
+export declare function startService(platform: NodeJS.Platform): Promise<void>;
+export declare function stopService(platform: NodeJS.Platform): Promise<void>;
+//# sourceMappingURL=service.d.ts.map

package/dist/esm/cli/commands/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/service.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAgBvF,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAEvF;AAED,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQtE;AAKD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,GAAG,IAAI,CAQjF;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,SAAS,EAAE,MAAM,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAElC;AAyBD,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;OAWG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA6DvE;AAED,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOzE;AAED,wBAAsB,UAAU,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BnE;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA0H7E;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C/E;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B5E;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B3E;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB1E"}