@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/esm/cli/commands/audit-verify.js

@@ -0,0 +1,345 @@
+import * as path from 'path';
+import * as fs from 'fs';
+import { getSwAgentDir } from '../../config/paths';
+import { isHash64, readHead } from '../../audit/chain';
+import { readAuditLogChronological } from '../../audit/files';
+import { verifyAuditLog } from '../../audit/local-writer';
+import { isReplMode } from '../prompt';
+import { C, S, createSpinner } from '../ui';
+function exit_(code) {
+    if (isReplMode()) {
+        throw { __exitCode: code };
+    }
+    process.exit(code);
+}
+/**
+ * Parses the operator-supplied head anchor.
+ *
+ * This is the only verification input that a writer of the audit directory
+ * cannot reach. Without it, anyone who can write both the log and `head.json`
+ * produces a self-consistent chain that no local comparison can distinguish
+ * from the original, so the anchor must come from somewhere else — a ticket, a
+ * SIEM field, another host, a password manager.
+ */
+function parseAnchor(args) {
+    const inlineIdx = args.indexOf('--anchor');
+    const fileIdx = args.indexOf('--anchor-file');
+    const seqIdx = args.indexOf('--anchor-seq');
+    const hashIdx = args.indexOf('--anchor-hash');
+    if (inlineIdx !== -1) {
+        const raw = args[inlineIdx + 1];
+        if (!raw)
+            return { head: null, source: 'none', error: '--anchor requires <seq>:<hash>' };
+        const m = raw.match(/^(\d+):([0-9a-fA-F]{64})$/);
+        if (!m)
+            return {
+                head: null,
+                source: 'none',
+                error: `--anchor must be <seq>:<64-hex-hash>, got "${raw}"`,
+            };
+        return {
+            head: {
+                v: 1,
+                chain_id: '*',
+                seq: parseInt(m[1], 10),
+                last_hash: m[2].toLowerCase(),
+                written_at: '',
+            },
+            source: `--anchor ${raw}`,
+        };
+    }
+    if (seqIdx !== -1 || hashIdx !== -1) {
+        const seq = args[seqIdx + 1];
+        const lastHash = args[hashIdx + 1];
+        const parsedSeq = seq !== undefined ? Number.parseInt(seq, 10) : Number.NaN;
+        if (!Number.isInteger(parsedSeq) || parsedSeq < 0 || !lastHash) {
+            return {
+                head: null,
+                source: 'none',
+                error: '--anchor-seq and --anchor-hash must be given together',
+            };
+        }
+        if (!isHash64(lastHash.toLowerCase())) {
+            return {
+                head: null,
+                source: 'none',
+                error: '--anchor-hash must be a 64-character hex digest',
+            };
+        }
+        return {
+            head: {
+                v: 1,
+                chain_id: '*',
+                seq: parsedSeq,
+                last_hash: lastHash.toLowerCase(),
+                written_at: '',
+            },
+            source: `--anchor-seq ${parsedSeq}`,
+        };
+    }
+    if (fileIdx !== -1) {
+        const file = args[fileIdx + 1];
+        if (!file)
+            return { head: null, source: 'none', error: '--anchor-file requires a path' };
+        let parsed;
+        try {
+            parsed = JSON.parse(fs.readFileSync(file, 'utf8').replace(/^\uFEFF/, ''));
+        }
+        catch (err) {
+            return {
+                head: null,
+                source: 'none',
+                error: `--anchor-file unreadable: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        const rec = parsed;
+        const seq = typeof rec.seq === 'string' ? Number.parseInt(rec.seq, 10) : rec.seq;
+        const lastHash = typeof rec.last_hash === 'string' ? rec.last_hash.toLowerCase() : rec.last_hash;
+        if (typeof seq !== 'number' || !Number.isInteger(seq) || seq < 0) {
+            return {
+                head: null,
+                source: 'none',
+                error: '--anchor-file: "seq" must be a non-negative integer',
+            };
+        }
+        if (!isHash64(lastHash)) {
+            return {
+                head: null,
+                source: 'none',
+                error: '--anchor-file: "last_hash" must be a 64-character hex digest',
+            };
+        }
+        return {
+            head: {
+                v: 1,
+                chain_id: typeof rec.chain_id === 'string' && rec.chain_id.length > 0 ? rec.chain_id : '*',
+                seq,
+                last_hash: lastHash,
+                written_at: '',
+            },
+            source: `--anchor-file ${path.basename(file)}`,
+        };
+    }
+    return { head: null, source: 'none' };
+}
+/** Reads the first record so legacy (pre-keying) logs can be named as such. */
+async function peekFirstRecord(auditDir) {
+    try {
+        const read = await readAuditLogChronological(auditDir);
+        return read.events[0] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * A pre-upgrade record: written before records were MAC'd and sequenced, so it
+ * carries no `chain_id`, no `seq` and only an unkeyed SHA-256 `hash`.
+ *
+ * Such a log is *classified*, never verified: an unkeyed chain over public data
+ * proves only internal consistency, and anyone holding the file can reproduce
+ * it. Reporting it as "tampered" would be wrong; reporting it as verified would
+ * be worse.
+ */
+function isLegacyRecord(rec) {
+    if (!rec)
+        return false;
+    return typeof rec.chain_id !== 'string' || typeof rec.seq !== 'number';
+}
+export async function runAuditVerify(args, opts = {}) {
+    const verbose = opts.verbose || args.includes('--verbose') || args.includes('-v');
+    const json = args.includes('--json');
+    const allowLegacy = args.includes('--allow-legacy');
+    const spec = parseAnchor(args);
+    const swAgentDir = getSwAgentDir();
+    const auditDir = path.join(swAgentDir, 'audit');
+    console.log();
+    console.log(C.bold(C.brand('  Audit Log Verification')));
+    console.log();
+    if (spec.error) {
+        console.log(`  ${C.red(S.cross)} ${C.brightRed('Invalid anchor:')} ${spec.error}`);
+        console.log();
+        exit_(2);
+    }
+    const first = await peekFirstRecord(auditDir);
+    const legacy = isLegacyRecord(first);
+    // `chain_id` identifies the signing key, not the anchor: fill it in from the
+    // local head or the first record when the operator supplied only seq+hash.
+    const localHead = readHead(auditDir);
+    const expectedHead = spec.head
+        ? {
+            ...spec.head,
+            chain_id: spec.head.chain_id !== '*'
+                ? spec.head.chain_id
+                : (localHead?.chain_id ?? (typeof first?.chain_id === 'string' ? first.chain_id : '*')),
+        }
+        : undefined;
+    let result;
+    try {
+        // Deliberately the UNCACHED verifier. `doctor` and `start` may reuse the
+        // per-file verification cache (see `verifyAuditDirCached`), because they
+        // re-ask the same question about the same bytes; this command must not.
+        //
+        // An operator runs `audit verify` precisely when they suspect the log was
+        // touched, and its contract is "verify the log as it is on disk right now".
+        // A cached verdict is a statement about bytes this process verified
+        // earlier, and it rests on stat metadata (inode, size, mtime, ctime) that a
+        // writer of the audit directory can restore. On a filesystem with coarse
+        // timestamps, a same-size rewrite with the timestamps put back would
+        // otherwise be reported here as "integrity verified" — the worst possible
+        // answer to this question. Verification is already O(1) in memory and
+        // early-exits on the first bad record, so the only thing given up is the
+        // time to re-read a log that has not changed.
+        result = await verifyAuditLog(auditDir, {
+            head: expectedHead,
+            keyDir: swAgentDir,
+        });
+    }
+    catch (err) {
+        console.log(`  ${C.red(S.cross)} ${C.brightRed('Verification failed to run:')} ${err instanceof Error ? err.message : String(err)}`);
+        console.log();
+        exit_(1);
+    }
+    const headPresent = result.head_present;
+    // Every anchor that was consulted is named, not only the one that decided the
+    // verdict: an operator has to be able to see that a rollback was caught by the
+    // second anchor, or they cannot tell which file to restore from.
+    const consulted = result.anchor_sources.length > 0 ? result.anchor_sources.join(' + ') : 'none';
+    const anchorSource = spec.source === 'none'
+        ? headPresent
+            ? `${consulted} (local)`
+            : 'none'
+        : `${spec.source} + ${consulted}`;
+    const anchored = spec.source !== 'none' || headPresent;
+    if (json) {
+        console.log(JSON.stringify({
+            ...result,
+            legacy,
+            anchor_source: anchorSource,
+            anchor_present: anchored,
+            allowed_legacy: allowLegacy,
+        }, null, 2));
+        exit_(verdictExitCode(result, legacy, allowLegacy));
+    }
+    const spinner = createSpinner();
+    spinner.start('Verifying audit log integrity...');
+    await new Promise((resolve) => setTimeout(resolve, 300));
+    spinner.stop();
+    console.log();
+    console.log(`  ${C.bold('Results:')}`);
+    console.log(`    Log files:   ${C.white(String(result.files.length))}`);
+    console.log(`    Records:     ${C.white(String(result.events))}`);
+    if (result.malformed_lines > 0) {
+        console.log(`    Parse errors: ${C.red(String(result.malformed_lines))}`);
+    }
+    if (result.unreadable_files.length > 0) {
+        console.log(`    Unreadable:   ${C.red(result.unreadable_files.join(', '))}`);
+    }
+    if (result.observed) {
+        console.log(`    Head found:  ${C.white(`seq ${result.observed.seq}`)} ${C.dim(`chain ${result.observed.chain_id}`)}`);
+    }
+    console.log(`    Anchor:      ${anchored ? C.white(anchorSource) : C.yellow('none available')}`);
+    if (!anchored) {
+        console.log(`      ${C.dim('Without an anchor, truncation, deletion and rollback cannot be detected.')}`);
+    }
+    console.log(result.reason === 'key_unavailable'
+        ? `    Chain key:   ${C.yellow('unavailable — the log was NOT cryptographically checked')}`
+        : `    Chain key:   ${C.white('HMAC-SHA256 (per-installation key)')}`);
+    console.log();
+    if (legacy) {
+        console.log(`  ${C.yellow(S.warning)} ${C.bold('LEGACY LOG')} — records predate keyed chaining (plain SHA-256).`);
+        console.log(`      ${C.dim('An unkeyed chain over public data can be recomputed by anyone holding the file,')}`);
+        console.log(`      ${C.dim('so these records are reported as UNVERIFIED rather than checked.')}`);
+        if (allowLegacy) {
+            console.log(`      ${C.dim('Accepted because --allow-legacy was given.')}`);
+        }
+        else {
+            console.log(`      ${C.dim('Re-run with --allow-legacy to accept a legacy log, or archive it and start a new log.')}`);
+        }
+        console.log();
+    }
+    if (result.intact && !legacy) {
+        console.log(`  ${C.green(S.check)} ${C.brightGreen('Audit log integrity verified.')}`);
+        console.log(`      ${C.dim('Proves: no record was modified, inserted, removed or reordered without the chain key,')}`);
+        console.log(`      ${C.dim(`        and the log ends exactly at the anchored head (seq ${result.observed?.seq ?? 0}).`)}`);
+        console.log(`      ${C.dim('Does NOT prove: who performed the actions, or completeness past rotation retention.')}`);
+    }
+    else if (result.intact && legacy && allowLegacy) {
+        console.log(`  ${C.yellow(S.warning)} ${C.bold('Accepted as a legacy log (--allow-legacy). Records were NOT cryptographically verified.')}`);
+    }
+    else if (legacy) {
+        console.log(`  ${C.red(S.cross)} ${C.brightRed('Legacy log: records cannot be cryptographically verified.')}`);
+    }
+    else {
+        console.log(`  ${C.red(S.cross)} ${C.brightRed('Audit log integrity check FAILED.')}`);
+        if (result.reason) {
+            console.log(`      Reason: ${C.yellow(result.reason)}`);
+        }
+        if (result.detail) {
+            console.log(`      ${C.dim(result.detail)}`);
+        }
+        if (result.brokenAt !== undefined) {
+            console.log(`      First bad record index: ${C.red(String(result.brokenAt))}`);
+        }
+    }
+    if (verbose) {
+        console.log();
+        console.log(`  ${C.dim(`audit dir: ${auditDir}`)}`);
+    }
+    console.log();
+    exit_(verdictExitCode(result, legacy, allowLegacy));
+}
+/**
+ * Exit policy, strict by default:
+ *   - a log that fails verification never exits 0
+ *   - a log that cannot be verified at all — legacy, or no key — never exits 0
+ *     unless the operator passes --allow-legacy, which downgrades the verdict to
+ *     "accepted, unverified" and is visible in the output
+ *   - "nothing to verify" is a failure, never a pass
+ */
+function verdictExitCode(result, legacy, allowLegacy) {
+    if (result.reason === 'empty')
+        return 1;
+    if (!result.intact)
+        return 1;
+    if (legacy && !allowLegacy)
+        return 1;
+    return 0;
+}
+/**
+ * Per-file diagnostic view retained for callers that report on individual
+ * rotated files. It reports parse integrity only; chain verdicts come from
+ * `verifyAuditLog`, which verifies the whole log as one sequence.
+ */
+export async function verifyFile(file, _verbose) {
+    const result = {
+        file: path.basename(file),
+        totalEvents: 0,
+        validEvents: 0,
+        hashErrors: 0,
+        parseErrors: 0,
+    };
+    let content;
+    try {
+        content = await fs.promises.readFile(file, 'utf8');
+    }
+    catch {
+        return result;
+    }
+    const lines = content.split('\n').filter(Boolean);
+    result.totalEvents = lines.length;
+    for (let i = 0; i < lines.length; i++) {
+        try {
+            JSON.parse(i === 0 ? stripBom(lines[i]) : lines[i]);
+            result.validEvents++;
+        }
+        catch {
+            result.parseErrors++;
+        }
+    }
+    return result;
+}
+function stripBom(content) {
+    return content.charCodeAt(0) === 0xfeff ? content.slice(1) : content;
+}
+//# sourceMappingURL=audit-verify.js.map

package/dist/esm/cli/commands/audit-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-verify.js","sourceRoot":"","sources":["../../../../src/cli/commands/audit-verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAA6B,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE5C,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAqBD;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QACzF,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC;YACJ,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,8CAA8C,GAAG,GAAG;aAC5D,CAAC;QACJ,OAAO;YACL,IAAI,EAAE;gBACJ,CAAC,EAAE,CAAC;gBACJ,QAAQ,EAAE,GAAG;gBACb,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACvB,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBAC7B,UAAU,EAAE,EAAE;aACf;YACD,MAAM,EAAE,YAAY,GAAG,EAAE;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/D,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,uDAAuD;aAC/D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,iDAAiD;aACzD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,CAAC,EAAE,CAAC;gBACJ,QAAQ,EAAE,GAAG;gBACb,GAAG,EAAE,SAAS;gBACd,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE;gBACjC,UAAU,EAAE,EAAE;aACf;YACD,MAAM,EAAE,gBAAgB,SAAS,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QACzF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACvF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACjF,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAClF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,qDAAqD;aAC7D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE;gBACJ,CAAC,EAAE,CAAC;gBACJ,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;gBAC1F,GAAG;gBACH,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,EAAE;aACf;YACD,MAAM,EAAE,iBAAiB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;SAC/C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAwC,IAAI,IAAI,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,GAAmC;IACzD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc,EAAE,OAA2B,EAAE;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAE/B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEhD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAErC,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI;QAC5B,CAAC,CAAC;YACE,GAAG,IAAI,CAAC,IAAI;YACZ,QAAQ,EACN,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG;gBACxB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;gBACpB,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,IAAI,CAAC,OAAO,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC5F;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,oEAAoE;QACpE,4EAA4E;QAC5E,yEAAyE;QACzE,qEAAqE;QACrE,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE;YACtC,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxH,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,CAAC,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACxC,8EAA8E;IAC9E,+EAA+E;IAC/E,iEAAiE;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChG,MAAM,YAAY,GAChB,IAAI,CAAC,MAAM,KAAK,MAAM;QACpB,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,GAAG,SAAS,UAAU;YACxB,CAAC,CAAC,MAAM;QACV,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,WAAW,CAAC;IAEvD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,GAAG,MAAM;YACT,MAAM;YACN,aAAa,EAAE,YAAY;YAC3B,cAAc,EAAE,QAAQ;YACxB,cAAc,EAAE,WAAW;SAC5B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,EAAE,CAAC;IAEf,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,oBAAoB,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,0EAA0E,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,MAAM,KAAK,iBAAiB;QACjC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,yDAAyD,CAAC,EAAE;QAC3F,CAAC,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC,EAAE,CACxE,CAAC;IAEF,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,oDAAoD,CACrG,CAAC;QACF,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,iFAAiF,CAAC,EAAE,CACpG,CAAC;QACF,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,kEAAkE,CAAC,EAAE,CACrF,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,uFAAuF,CAAC,EAAE,CAC1G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,uFAAuF,CAAC,EAAE,CAC1G,CAAC;QACF,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,8DAA8D,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9G,CAAC;QACF,OAAO,CAAC,GAAG,CACT,SAAS,CAAC,CAAC,GAAG,CAAC,qFAAqF,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,yFAAyF,CAAC,EAAE,CAChI,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2DAA2D,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,MAA4B,EAC5B,MAAe,EACf,WAAoB;IAEpB,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAC7B,IAAI,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,QAAiB;IAC9D,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzB,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,CAAC;KACf,CAAC;IAEF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC"}

package/dist/esm/cli/commands/clean.d.ts

@@ -0,0 +1,23 @@
+export interface CleanOptions {
+    force?: boolean;
+    logs?: boolean;
+    all?: boolean;
+    audit?: boolean;
+}
+/**
+ * Removes an audit directory together with the monotonic floor anchor that sits
+ * *beside* it.
+ *
+ * The anchor is a sibling of the audit directory, not a file inside it, so
+ * deleting the directory alone leaves a floor behind that then refuses every
+ * later append with a "log was deleted" verdict — a reset that cannot be used.
+ * The operator would have to find and delete a hidden file by hand to recover.
+ *
+ * The `audit.key` HMAC key is deliberately left alone: it lives outside the
+ * audit directory and a new chain re-derives its identity from it.
+ *
+ * @returns the paths that were actually removed, in the order they were tried.
+ */
+export declare function purgeAuditTrail(auditDir: string): string[];
+export declare function runClean(args?: string[], opts?: CleanOptions): Promise<void>;
+//# sourceMappingURL=clean.d.ts.map

package/dist/esm/cli/commands/clean.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clean.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/clean.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAY1D;AA0BD,wBAAsB,QAAQ,CAAC,IAAI,GAAE,MAAM,EAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqL1F"}

package/dist/esm/cli/commands/clean.js

@@ -0,0 +1,235 @@
+import * as fs from 'fs';
+import { spawnSync } from 'child_process';
+import { getPidFilePath, getStatusFilePath, getDaemonLogPath, getErrorsPath, getAuditDirPath, } from '../../config/paths';
+import { floorPathFor } from '../../audit/chain';
+import { readPidFile, deletePidFile, isProcessAlive } from '../daemon/pid-file';
+import { getErrorLogFiles, resetErrorLogCache } from '../daemon/error-tracker';
+import { isReplMode } from '../prompt';
+import { C, S, createSpinner } from '../ui';
+function exit_(code) {
+    if (isReplMode()) {
+        throw { __exitCode: code };
+    }
+    process.exit(code);
+}
+function errText(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/**
+ * Removes an audit directory together with the monotonic floor anchor that sits
+ * *beside* it.
+ *
+ * The anchor is a sibling of the audit directory, not a file inside it, so
+ * deleting the directory alone leaves a floor behind that then refuses every
+ * later append with a "log was deleted" verdict — a reset that cannot be used.
+ * The operator would have to find and delete a hidden file by hand to recover.
+ *
+ * The `audit.key` HMAC key is deliberately left alone: it lives outside the
+ * audit directory and a new chain re-derives its identity from it.
+ *
+ * @returns the paths that were actually removed, in the order they were tried.
+ */
+export function purgeAuditTrail(auditDir) {
+    const removed = [];
+    if (fs.existsSync(auditDir)) {
+        fs.rmSync(auditDir, { recursive: true, force: true });
+        removed.push(auditDir);
+    }
+    const floorPath = floorPathFor(auditDir);
+    if (fs.existsSync(floorPath)) {
+        fs.rmSync(floorPath, { force: true });
+        removed.push(floorPath);
+    }
+    return removed;
+}
+function terminatePid(pid, force = false) {
+    if (pid <= 0)
+        return false;
+    if (process.platform === 'win32') {
+        try {
+            const res = spawnSync('taskkill', ['/pid', String(pid), '/t', '/f'], {
+                stdio: 'ignore',
+                windowsHide: true,
+            });
+            if (res.status === 0)
+                return true;
+        }
+        catch {
+            // fallback
+        }
+    }
+    try {
+        process.kill(pid, force ? 'SIGKILL' : 'SIGTERM');
+    }
+    catch {
+        // Process might already be terminating
+    }
+    return true;
+}
+export async function runClean(args = [], opts = {}) {
+    const force = opts.force || args.includes('--force') || args.includes('-f');
+    const cleanLogs = opts.logs ||
+        opts.all ||
+        args.includes('--logs') ||
+        args.includes('--all') ||
+        args.includes('-l');
+    // Deliberately NOT implied by --all: the audit trail is the forensic record,
+    // not a log, so deleting it is its own opt-in and it needs --force.
+    const cleanAudit = opts.audit || args.includes('--audit');
+    const pidFilePath = getPidFilePath();
+    const statusFilePath = getStatusFilePath();
+    const daemonLogPath = getDaemonLogPath();
+    const errorsPath = getErrorsPath();
+    console.log();
+    console.log(`  ${C.bold(C.brand('Cleaning Agent Daemon & State'))}`);
+    console.log();
+    let cleanedSomething = false;
+    const killedPids = new Set();
+    // 1. Check PID file
+    const pidInfo = await readPidFile({ path: pidFilePath });
+    if (pidInfo) {
+        const pid = pidInfo.pid;
+        if (isProcessAlive(pid)) {
+            const spinner = createSpinner();
+            spinner.start(`Terminating running daemon process (pid ${C.white(String(pid))})...`);
+            terminatePid(pid, force);
+            // Give it up to 3 seconds to fully exit
+            const deadline = Date.now() + 3000;
+            while (isProcessAlive(pid) && Date.now() < deadline) {
+                await new Promise((r) => setTimeout(r, 200));
+            }
+            if (isProcessAlive(pid)) {
+                terminatePid(pid, true);
+            }
+            spinner.stop();
+            if (!isProcessAlive(pid)) {
+                console.log(`  ${C.green(S.check)} Terminated daemon process ${C.white(`(PID ${pid})`)}`);
+                killedPids.add(pid);
+                cleanedSomething = true;
+            }
+            else {
+                console.log(`  ${C.yellow(S.warning)} Process ${pid} could not be completely terminated.`);
+            }
+        }
+        else {
+            console.log(`  ${C.dim(`${S.dot} Process ${pid} was not running.`)}`);
+        }
+        try {
+            await deletePidFile({ path: pidFilePath });
+            console.log(`  ${C.green(S.check)} Removed stale PID file: ${C.dim(pidFilePath)}`);
+            cleanedSomething = true;
+        }
+        catch (err) {
+            console.log(`  ${C.red(S.cross)} Failed to delete PID file: ${errText(err)}`);
+        }
+    }
+    else if (fs.existsSync(pidFilePath)) {
+        try {
+            fs.unlinkSync(pidFilePath);
+            console.log(`  ${C.green(S.check)} Removed stale PID file: ${C.dim(pidFilePath)}`);
+            cleanedSomething = true;
+        }
+        catch {
+            // ignore
+        }
+    }
+    // 2. Check Status file
+    if (fs.existsSync(statusFilePath)) {
+        try {
+            const raw = JSON.parse(fs.readFileSync(statusFilePath, 'utf8'));
+            if (raw && typeof raw.pid === 'number' && !killedPids.has(raw.pid)) {
+                if (isProcessAlive(raw.pid)) {
+                    terminatePid(raw.pid, force);
+                    console.log(`  ${C.green(S.check)} Terminated lingering process from status file ${C.white(`(PID ${raw.pid})`)}`);
+                    killedPids.add(raw.pid);
+                    cleanedSomething = true;
+                }
+            }
+        }
+        catch {
+            // Invalid status JSON
+        }
+        try {
+            fs.unlinkSync(statusFilePath);
+            console.log(`  ${C.green(S.check)} Removed daemon status file: ${C.dim(statusFilePath)}`);
+            cleanedSomething = true;
+        }
+        catch (err) {
+            console.log(`  ${C.red(S.cross)} Failed to delete status file: ${errText(err)}`);
+        }
+    }
+    // 3. Clean daemon logs if requested
+    if (cleanLogs && fs.existsSync(daemonLogPath)) {
+        try {
+            fs.truncateSync(daemonLogPath, 0);
+            console.log(`  ${C.green(S.check)} Truncated daemon log: ${C.dim(daemonLogPath)}`);
+            cleanedSomething = true;
+        }
+        catch (err) {
+            console.log(`  ${C.red(S.cross)} Failed to truncate daemon log: ${errText(err)}`);
+        }
+    }
+    // 4. Clean the rotated error log. The audit trail is deliberately NOT
+    //    touched here: it is the forensic record, not a log. Archives are removed
+    //    outright — truncating the active file alone would leave every rotated
+    //    copy, up to 3 x the active cap, on disk.
+    if (cleanLogs) {
+        for (const file of getErrorLogFiles()) {
+            if (!fs.existsSync(file))
+                continue;
+            try {
+                fs.truncateSync(file, 0);
+                cleanedSomething = true;
+            }
+            catch (err) {
+                console.log(`  ${C.red(S.cross)} Failed to truncate error log ${C.dim(file)}: ${errText(err)}`);
+            }
+        }
+        if (fs.existsSync(errorsPath)) {
+            console.log(`  ${C.green(S.check)} Truncated error log: ${C.dim(errorsPath)}`);
+        }
+        resetErrorLogCache();
+    }
+    // 5. Reset the audit trail (C-05). Opt-in only: the trail is the forensic
+    //    record, so this never happens as a side effect of --logs or --all, and it
+    //    is refused outright without --force. The chain's monotonic floor anchor
+    //    is a *sibling* of the audit directory, so it has to be removed with it —
+    //    left behind, it refuses every later append with "log was deleted" and the
+    //    reset is unusable.
+    if (cleanAudit) {
+        const auditDir = getAuditDirPath();
+        if (!force) {
+            console.log(`  ${C.yellow(S.warning)} ${C.yellow('Refusing to delete the audit trail without')} ${C.white('--force')}${C.yellow('.')}`);
+            console.log(`  ${C.dim('The trail is the forensic record: after deletion it cannot be verified or recovered.')}`);
+        }
+        else {
+            console.log();
+            console.log(`  ${C.yellow(S.warning)} ${C.yellow('Destroying the audit trail and its chain anchor.')}`);
+            try {
+                const removed = purgeAuditTrail(auditDir);
+                if (removed.length === 0) {
+                    console.log(`  ${C.dim(`${S.dot} No audit trail found to remove.`)}`);
+                }
+                else {
+                    for (const p of removed) {
+                        console.log(`  ${C.green(S.check)} Removed: ${C.dim(p)}`);
+                    }
+                    cleanedSomething = true;
+                }
+            }
+            catch (err) {
+                console.log(`  ${C.red(S.cross)} Failed to remove audit trail: ${errText(err)}`);
+            }
+        }
+    }
+    console.log();
+    if (cleanedSomething) {
+        console.log(`  ${C.green(S.check)} ${C.bold('Agent daemon operation cleaned successfully.')}`);
+    }
+    else {
+        console.log(`  ${C.cyan(S.info)} ${C.dim('Agent daemon is stopped and no stale PID/status files found. Already clean.')}`);
+    }
+    console.log();
+    exit_(0);
+}
+//# sourceMappingURL=clean.js.map

package/dist/esm/cli/commands/clean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clean.js","sourceRoot":"","sources":["../../../../src/cli/commands/clean.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE5C,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AASD,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,KAAK,GAAG,KAAK;IAC9C,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;gBACnE,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAiB,EAAE,EAAE,OAAqB,EAAE;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,SAAS,GACb,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtB,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IAEnC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,oBAAoB;IACpB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACzD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YAErF,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEzB,wCAAwC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACnC,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1F,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,sCAAsC,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACnF,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACnF,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnE,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC7B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,CACrG,CAAC;oBACF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACxB,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC1F,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACnF,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,mCAAmC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,8EAA8E;IAC9E,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzB,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,kBAAkB,EAAE,CAAC;IACvB,CAAC;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,wBAAwB;IACxB,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,4CAA4C,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3H,CAAC;YACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,CAAC,sFAAsF,CAAC,EAAE,CACrG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,kDAAkD,CAAC,EAAE,CAC3F,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,kCAAkC,CAAC,EAAE,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;wBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5D,CAAC;oBACD,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,6EAA6E,CAAC,EAAE,CAC9G,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,KAAK,CAAC,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/esm/cli/commands/config-show.d.ts

@@ -0,0 +1,2 @@
+export { runConfigShow, runConfigGet, runConfigSet, runConfigPath, runConfig } from './config';
+//# sourceMappingURL=config-show.d.ts.map

package/dist/esm/cli/commands/config-show.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-show.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/config-show.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC"}

package/dist/esm/cli/commands/config-show.js

@@ -0,0 +1,2 @@
+export { runConfigShow, runConfigGet, runConfigSet, runConfigPath, runConfig } from './config';
+//# sourceMappingURL=config-show.js.map

package/dist/esm/cli/commands/config-show.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-show.js","sourceRoot":"","sources":["../../../../src/cli/commands/config-show.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC"}