@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/types/cli/commands/db-logs.d.ts

@@ -0,0 +1,3 @@
+import { LogsOptions } from './logs';
+export declare function runDbLogs(args: string[], opts?: LogsOptions): Promise<void>;
+//# sourceMappingURL=db-logs.d.ts.map

package/dist/types/cli/commands/db-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-logs.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-logs.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,WAAW,EAAE,MAAM,QAAQ,CAAC;AAW9C,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+DrF"}

package/dist/types/cli/commands/db-ls.d.ts

@@ -0,0 +1,2 @@
+export declare function runDbLs(args: string[]): Promise<void>;
+//# sourceMappingURL=db-ls.d.ts.map

package/dist/types/cli/commands/db-ls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-ls.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-ls.ts"],"names":[],"mappings":"AAYA,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsH3D"}

package/dist/types/cli/commands/db-query.d.ts

@@ -0,0 +1,121 @@
+import { Pool } from 'pg';
+import { DbEntry } from '../../config/db-config';
+import { PermissionChecker } from '../../permissions/checker';
+import type { PermissionLevel } from '../../permissions/types';
+import type { Role } from '../../protocol/envelope';
+/**
+ * Identity recorded for SQL submitted from the local CLI or the `db connect`
+ * REPL. There is no cloud user in this path: the request comes from a process
+ * that already holds the database credentials, so it is recorded under a
+ * distinct actor id rather than being folded into a browser role.
+ */
+export declare const LOCAL_OPERATOR_ID = "local-operator";
+/**
+ * Role the local operator is recorded as.
+ *
+ * The capability matrix is not the control here — the entry's effective
+ * permission level is. A local operator holds the credentials and can always
+ * use `psql` instead; pretending a shell is a lesser role would be theatre. The
+ * audit record keeps the level (`permission_level`) and the actor
+ * (`user_id: 'local-operator'`) so the distinction stays visible.
+ */
+export declare const LOCAL_OPERATOR_ROLE: Role;
+/** Statement timeout applied to every local query. Bounded, never caller-settable. */
+export declare const LOCAL_STATEMENT_TIMEOUT_MS: 30000;
+/** Hard cap on rows returned to the terminal, enforced while rows are fetched. */
+export declare const LOCAL_MAX_ROWS: 10000;
+export declare class LocalPermissionDeniedError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+export declare class LocalAuditUnavailableError extends Error {
+    constructor(message: string);
+}
+export declare class LocalRowCapError extends Error {
+    constructor(message: string);
+}
+export interface LocalQueryResult {
+    rows: LocalRow[];
+    fields: Array<{
+        name: string;
+    }>;
+    rowCount: number | null;
+    command: string;
+}
+/** A result row as produced by node-postgres. */
+export type LocalRow = Record<string, unknown>;
+export interface LocalClient {
+    query(config: string | {
+        text: string;
+        values?: unknown[];
+    }): Promise<LocalQueryResult>;
+    release(): void;
+}
+export interface LocalPool {
+    connect(): Promise<LocalClient>;
+    end(): Promise<void>;
+}
+export type LocalPoolFactory = (entry: DbEntry) => LocalPool | Promise<LocalPool>;
+/** The subset of `AuditSink` the local path depends on. */
+export interface LocalAuditRecorder {
+    logSync(event: Record<string, unknown>): Promise<void>;
+    flush(): Promise<void>;
+}
+export interface LocalSqlDeps {
+    poolFactory: LocalPoolFactory;
+    audit: LocalAuditRecorder;
+    checker: PermissionChecker;
+    /** Effective permission level for this database entry. */
+    permissionLevel: PermissionLevel;
+    /** Advisory cap; defaults to {@link LOCAL_MAX_ROWS}. */
+    maxRows?: number;
+    /** Advisory statement timeout in ms; defaults to {@link LOCAL_STATEMENT_TIMEOUT_MS}. */
+    timeoutMs?: number;
+    /** `true` when the resolved level is `read_only`. */
+    readOnlySession: boolean;
+}
+export interface LocalSqlRequest {
+    entry: DbEntry;
+    sql: string;
+    /** Audit action label. */
+    action: 'query' | 'introspect';
+}
+/**
+ * Classify, authorise, audit, and run a single local statement.
+ *
+ * Order is deliberate and fail-closed:
+ *   1. classify with the PostgreSQL parser
+ *   2. authorise through `PermissionChecker` at the entry's resolved level
+ *   3. append the audit record — mandatory; a failed append refuses execution
+ *   4. apply `statement_timeout`, `lock_timeout` and the read_only posture
+ *   5. execute with a row ceiling that binds during fetch
+ *   6. append the outcome record
+ */
+export declare function executeLocalSql(req: LocalSqlRequest, deps: LocalSqlDeps): Promise<LocalQueryResult>;
+/**
+ * Audit sink for local CLI activity.
+ *
+ * Writes to the same `~/.sw-agent/audit/` chain the daemon uses, so a local
+ * statement and a cloud statement land in one ordered log. The cloud writer is
+ * disabled: nothing in this path transmits anything.
+ */
+export declare function createLocalAuditRecorder(): LocalAuditRecorder;
+export declare function createLocalPermissionChecker(audit: LocalAuditRecorder): PermissionChecker;
+/**
+ * Effective permission level for a database entry: the entry's override if it
+ * has one, otherwise the machine default, otherwise `read_only`.
+ */
+export declare function resolveLocalPermissionLevel(entry: DbEntry): PermissionLevel;
+/**
+ * Build the default dependency set for a database entry.
+ *
+ * `manual` is resolved to `read_only` before the checker runs: the approval flow
+ * requires the browser relay, and a local shell has no way to answer it.
+ */
+export declare function createLocalSqlDeps(entry: DbEntry): LocalSqlDeps;
+/** Narrow a resolved level to what the local path can actually enforce. */
+export declare function localPermissionLevelFor(entry: DbEntry): PermissionLevel;
+export declare function createDbPool(entry: DbEntry): Pool;
+export declare function runDbQuery(args: string[]): Promise<void>;
+export declare function runDbConnect(args: string[]): Promise<void>;
+//# sourceMappingURL=db-query.d.ts.map

package/dist/types/cli/commands/db-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-query.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-query.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AACtC,OAAO,EAAe,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAQ9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAI9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAcpD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,IAAc,CAAC;AAEjD,sFAAsF;AACtF,eAAO,MAAM,0BAA0B,OAA4B,CAAC;AAEpE,kFAAkF;AAClF,eAAO,MAAM,cAAc,OAA0B,CAAC;AAQtD,qBAAa,0BAA2B,SAAQ,KAAK;aAGjC,IAAI,EAAE,MAAM;gBAD5B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM;CAK/B;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iDAAiD;AACjD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAU/C,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxF,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAChC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAElF,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,0DAA0D;IAC1D,eAAe,EAAE,eAAe,CAAC;IACjC,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,0BAA0B;IAC1B,MAAM,EAAE,OAAO,GAAG,YAAY,CAAC;CAChC;AA2QD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAqG3B;AAUD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,kBAAkB,CAkB7D;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,CAgBzF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAU3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAc/D;AAED,2EAA2E;AAC3E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAGvE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CA+BjD;AAMD,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwH9D;AAUD,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsHhE"}

package/dist/types/cli/commands/db-remove.d.ts

@@ -0,0 +1,2 @@
+export declare function runDbRemove(args: string[]): Promise<void>;
+//# sourceMappingURL=db-remove.d.ts.map

package/dist/types/cli/commands/db-remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-remove.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-remove.ts"],"names":[],"mappings":"AAYA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC/D"}

package/dist/types/cli/commands/db-show.d.ts

@@ -0,0 +1,2 @@
+export declare function runDbShow(args: string[]): Promise<void>;
+//# sourceMappingURL=db-show.d.ts.map

package/dist/types/cli/commands/db-show.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-show.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-show.ts"],"names":[],"mappings":"AAaA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA2I7D"}

package/dist/types/cli/commands/db-test.d.ts

@@ -0,0 +1,3 @@
+export declare function runDbTest(args: string[]): Promise<void>;
+export declare function runDbPing(args: string[]): Promise<void>;
+//# sourceMappingURL=db-test.d.ts.map

package/dist/types/cli/commands/db-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-test.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db-test.ts"],"names":[],"mappings":"AAuRA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyJ7D;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7D"}

package/dist/types/cli/commands/db.d.ts

@@ -0,0 +1,11 @@
+import { runDbAdd } from './db-add';
+import { runDbLs, runDbLs as runDbList } from './db-ls';
+import { runDbTest, runDbPing } from './db-test';
+import { runDbRemove } from './db-remove';
+import { runDbEdit } from './db-edit';
+import { runDbQuery, runDbConnect } from './db-query';
+import { runDbLogs } from './db-logs';
+import { runDbShow } from './db-show';
+export { runDbAdd, runDbLs, runDbList, runDbTest, runDbPing, runDbRemove, runDbEdit, runDbQuery, runDbConnect, runDbLogs, runDbShow, };
+export declare function runDb(args?: string[]): Promise<void>;
+//# sourceMappingURL=db.d.ts.map

package/dist/types/cli/commands/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,SAAS,EACT,SAAS,GACV,CAAC;AASF,wBAAsB,KAAK,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAsE9D"}

package/dist/types/cli/commands/debug.d.ts

@@ -0,0 +1,2 @@
+export declare function runDebug(args?: string[]): Promise<void>;
+//# sourceMappingURL=debug.d.ts.map

package/dist/types/cli/commands/debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/debug.ts"],"names":[],"mappings":"AAkCA,wBAAsB,QAAQ,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA8MjE"}

package/dist/types/cli/commands/doctor.d.ts

@@ -0,0 +1,5 @@
+export interface DoctorOptions {
+    json?: boolean;
+}
+export declare function runDoctor(args: string[], opts?: DoctorOptions): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/types/cli/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8EvF"}

package/dist/types/cli/commands/index.d.ts

@@ -0,0 +1,10 @@
+export { runInit } from './init';
+export { runDbAdd, runDbList, runDbTest, runDbRemove, runDbEdit } from './db';
+export { runProjectList, runProjectShow } from './project';
+export { runStart, runStop, runStatus, runRestart } from './agent';
+export { runDoctor } from './doctor';
+export { runLogs } from './logs';
+export { runAuditVerify } from './audit-verify';
+export { runConfigShow } from './config-show';
+export { runLink } from './link';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/cli/commands/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC"}

package/dist/types/cli/commands/init.d.ts

@@ -0,0 +1,2 @@
+export declare function runInit(_args: string[]): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/types/cli/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAyBA,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0L5D"}

package/dist/types/cli/commands/link.d.ts

@@ -0,0 +1,5 @@
+export interface LinkOptions {
+    project?: string;
+}
+export declare function runLink(args: string[], opts?: LinkOptions): Promise<void>;
+//# sourceMappingURL=link.d.ts.map

package/dist/types/cli/commands/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/link.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAUD,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BnF"}

package/dist/types/cli/commands/logs.d.ts

@@ -0,0 +1,17 @@
+export interface LogsOptions {
+    limit?: number;
+    project?: string;
+    user?: string;
+    action?: string;
+    decision?: string;
+    outcome?: string;
+    search?: string;
+    since?: string;
+    until?: string;
+    order?: 'asc' | 'desc';
+    follow?: boolean;
+    json?: boolean;
+    interactive?: boolean;
+}
+export declare function runLogs(args: string[], opts?: LogsOptions): Promise<void>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/types/cli/commands/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/logs.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFnF"}

package/dist/types/cli/commands/project-show.d.ts

@@ -0,0 +1,2 @@
+export declare function runProjectShow(args: string[]): Promise<void>;
+//# sourceMappingURL=project-show.d.ts.map

package/dist/types/cli/commands/project-show.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-show.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/project-show.ts"],"names":[],"mappings":"AAqBA,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDlE"}

package/dist/types/cli/commands/project.d.ts

@@ -0,0 +1,3 @@
+export declare function runProjectList(_args: string[]): Promise<void>;
+export declare function runProjectShow(args: string[]): Promise<void>;
+//# sourceMappingURL=project.d.ts.map

package/dist/types/cli/commands/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/project.ts"],"names":[],"mappings":"AAWA,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BnE;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBlE"}

package/dist/types/cli/commands/service.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Runs a service manager. Always receives an argument array and never a shell
+ * string: `execSync(\`launchctl load ${path}\`)` runs the interpolated path
+ * through /bin/sh, and the path is derived from $HOME, so a $HOME containing
+ * `;` is arbitrary command execution as the invoking user.
+ */
+export type ServiceCommandExecutor = (file: string, args: readonly string[]) => string;
+/** Test seam: replaces the process spawner. Pass null to restore the real one. */
+export declare function setServiceCommandExecutor(executor: ServiceCommandExecutor | null): void;
+/** Throws unless `target` resolves strictly under `home`. */
+export declare function assertPathUnderHome(target: string, home: string): void;
+/**
+ * The LaunchAgent plist path, validated to be inside the home directory.
+ * Returns null instead of throwing so callers can report the refusal.
+ */
+export declare function resolveLaunchAgentPath(home?: string): string | null;
+export declare function buildLaunchctlInvocation(action: 'load' | 'unload', plistPath: string): {
+    file: string;
+    args: string[];
+};
+export interface SystemdUnitInputs {
+    /** Absolute path to the node binary the unit runs. */
+    nodePath: string;
+    /** Absolute path to the compiled CLI entry point. */
+    cliPath: string;
+    /**
+     * The operator's real home directory.
+     *
+     * Emitted as `Environment=HOME=` because the daemon does not only read the
+     * agent home from the environment: `getCredentialKeyPath()` is
+     * `path.join(os.homedir(), '.sw-agent-credential.key')`, so the key that
+     * decrypts every stored database password is derived from HOME and NOT from
+     * the agent home. Without this line a systemd user manager that resolved HOME
+     * differently from the operator's shell would leave the 24/7 service unable
+     * to decrypt anything the CLI had stored — the same class of split-brain as
+     * the `PG_CONNECTOR_HOME` pin it replaces.
+     */
+    userHome: string;
+    /**
+     * The already-resolved, ABSOLUTE agent home this service must run against.
+     *
+     * Emitted as `SW_AGENT_HOME`, which is the variable `getAgentHome()` reads and
+     * the one `buildDaemonChildEnv()` pins for a detached child. It must never be
+     * `PG_CONNECTOR_HOME`: that variable is in `UNRECOGNISED_SECURITY_ENV` and is
+     * DELETED from `process.env` by `stripUnrecognisedSecurityEnv()` at daemon
+     * startup, so a unit that pinned it ran the operator's configured home in the
+     * foreground and `~/.sw-agent` for the whole of its unattended life — a
+     * different config, a different `allowed_databases`, a different audit
+     * directory and a different audit key.
+     */
+    agentHome: string;
+}
+/**
+ * Every path the daemon must be able to WRITE while the unit's filesystem
+ * namespace is active.
+ *
+ * `ProtectSystem=strict` makes the ENTIRE filesystem read-only except `/dev`,
+ * `/proc`, `/sys` and whatever `ReadWritePaths=` re-opens; `ProtectHome=read-only`
+ * separately makes `$HOME`, `/root` and `/run/user/<uid>` read-only. So this is
+ * not "the agent home plus whatever is convenient" — every writable path the
+ * daemon touches has to be listed or the daemon fails at runtime, and it fails
+ * at the worst possible moment (mid-write to the audit chain).
+ *
+ * What the daemon writes:
+ *
+ *  - The agent home: `sw-agent.pid`, `sw-agent.status`, `daemon.log`,
+ *    `errors.jsonl` and the whole `audit/` directory (log, archives, chain head,
+ *    floor, and the `.write_test` preflight probe). All under one path.
+ *  - `~/.sw-agent-credential.key`, the at-rest encryption key for database
+ *    passwords. It lives OUTSIDE the agent home on purpose, so a backup or
+ *    snapshot of the agent home cannot carry the key that decrypts the file
+ *    sitting next to it — which means `ProtectHome=read-only` covers it and it
+ *    MUST be listed, or the daemon can neither read an existing key nor create
+ *    one on first run.
+ *
+ * What it deliberately does NOT list: `$HOME` itself. Listing the home directory
+ * would re-open everything `ProtectHome=read-only` just closed and turn the
+ * directive into decoration, so the credential key is listed as the FILE, not
+ * as its parent directory.
+ *
+ * `PrivateTmp=true` supplies a writable private `/tmp` and `/var/tmp`, which is
+ * why no other path needs to appear here.
+ */
+export declare function systemdReadWritePaths(agentHome: string, credentialKeyPath: string): string[];
+/**
+ * Renders the systemd user unit.
+ *
+ * Pure: no filesystem, no environment, no clock. Everything the operator's
+ * security posture depends on — the pinned agent home, the pinned HOME, and the
+ * hardening directives — is therefore assertable without installing anything,
+ * which is the only way a regression here can be caught by a test.
+ *
+ * The hardening set is the UNION of what this generator and
+ * `scripts/generate-systemd-service.mjs` each emitted, so the two produce an
+ * equivalent unit and neither loses a directive: `NoNewPrivileges`,
+ * `ProtectSystem=strict`, `ProtectHome=read-only`, `ReadWritePaths` and
+ * `PrivateTmp`, plus the start-limit, journal-routing and graceful-shutdown
+ * directives. `User=`/`Group=` are intentionally absent: those belong to a
+ * system unit, and a user unit runs as the invoking user by definition.
+ */
+export declare function renderSystemdUnitFile(inputs: SystemdUnitInputs): string;
+/** Path of the generated systemd user unit, validated to be inside `$HOME`. */
+export declare function resolveSystemdServicePath(home?: string): string;
+/**
+ * The `Environment=` assignments in a rendered unit, as name to value.
+ *
+ * Parsed from the TEXT rather than from the inputs, so a test can prove what
+ * systemd will actually apply — including that `PG_CONNECTOR_HOME` is absent.
+ */
+export declare function parseUnitEnvironment(unit: string): Record<string, string>;
+export declare function runService(args?: string[]): Promise<void>;
+/**
+ * Installs the OS autostart service.
+ *
+ * Exported (rather than module-private) so a test can drive the exact write
+ * path with an explicit platform instead of only through `process.platform`.
+ */
+export declare function installService(platform: NodeJS.Platform): Promise<void>;
+export declare function uninstallService(platform: NodeJS.Platform): Promise<void>;
+export declare function statusService(platform: NodeJS.Platform): Promise<void>;
+export declare function startService(platform: NodeJS.Platform): Promise<void>;
+export declare function stopService(platform: NodeJS.Platform): Promise<void>;
+//# sourceMappingURL=service.d.ts.map

package/dist/types/cli/commands/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/service.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAC;AAgBvF,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAEvF;AAED,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQtE;AAKD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,GAAG,IAAI,CAQjF;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,SAAS,EAAE,MAAM,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAElC;AAyBD,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;OAWG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA6DvE;AAED,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOzE;AAED,wBAAsB,UAAU,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BnE;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA0H7E;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C/E;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B5E;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B3E;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB1E"}

package/dist/types/cli/commands/start.d.ts

@@ -0,0 +1,6 @@
+export interface StartOptions {
+    daemon?: boolean;
+    relayUrl?: string;
+}
+export declare function runStart(args: string[], opts?: StartOptions): Promise<void>;
+//# sourceMappingURL=start.d.ts.map

package/dist/types/cli/commands/start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/start.ts"],"names":[],"mappings":"AAwCA,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA6ED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4IrF"}

package/dist/types/cli/commands/status.d.ts

@@ -0,0 +1,2 @@
+export declare function runStatus(args: string[]): Promise<void>;
+//# sourceMappingURL=status.d.ts.map

package/dist/types/cli/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAqGA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC7D"}

package/dist/types/cli/commands/stop.d.ts

@@ -0,0 +1,6 @@
+export interface StopOptions {
+    force?: boolean;
+    timeoutMs?: number;
+}
+export declare function runStop(args: string[], opts?: StopOptions): Promise<void>;
+//# sourceMappingURL=stop.d.ts.map

package/dist/types/cli/commands/stop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/stop.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6FnF"}

package/dist/types/cli/daemon/error-tracker.d.ts

@@ -0,0 +1,119 @@
+import { type FaultShutdownController, type FaultShutdownDeps } from './fault-shutdown';
+export interface ErrorRecord {
+    ts: string;
+    level: 'error' | 'warn' | 'fatal';
+    op?: string;
+    code?: string;
+    message: string;
+    stack?: string;
+    agent_id?: string;
+    pid: number;
+}
+/** Rotate at 2 MiB. A daemon that logs an error per query must not fill a disk. */
+export declare const MAX_ERROR_LOG_BYTES: number;
+/** Keep the active file plus this many rotated archives. */
+export declare const MAX_ERROR_ARCHIVES = 3;
+/**
+ * Strip SQL text and absolute filesystem paths out of free-form text.
+ *
+ * `pg` error messages embed the offending statement and stack frames embed the
+ * absolute path of the agent home directory and of `node_modules`. Neither
+ * belongs in an error log that no operator is looking at.
+ */
+export declare function redactErrorText(input: string): string;
+/**
+ * Roll `errors.jsonl` to `errors-1.jsonl`, shifting older archives down and
+ * dropping anything past the retention window. Mirrors the rotation the audit
+ * writer performs for `audit.jsonl`.
+ */
+export declare function rotateErrorLog(): void;
+/**
+ * Track an error to the local, size-capped, rotated `errors.jsonl` log.
+ * Structured, one JSON object per line. Never throws: losing the error record
+ * must not turn a recoverable failure into a crash.
+ *
+ * The record is redacted before it is written — SQL fragments and absolute
+ * filesystem paths (the agent home directory, `node_modules`) are stripped from
+ * both `message` and `stack`. The file stays local; nothing in this module
+ * transmits it anywhere.
+ */
+export declare function trackError(err: unknown, opts?: {
+    op?: string;
+    level?: 'error' | 'warn' | 'fatal';
+}): void;
+/** Path to the active local error log file. */
+export declare function getErrorsPath(): string;
+/** Paths to every file that makes up the error log, oldest archive first. */
+export declare function getErrorLogFiles(): string[];
+export interface ErrorLogStats {
+    path: string;
+    /** Bytes across the active file and every retained archive. */
+    size_bytes: number;
+    /** Records in the active file. */
+    records: number;
+    /** Retained archive files that currently exist. */
+    archives: number;
+    /** ISO timestamp of the most recent record, if any. */
+    last_error_ts: string | null;
+}
+/**
+ * Summarise the on-disk error log for `sw-agent status` and `sw-agent debug`.
+ * A missing log is a valid state, not an error.
+ */
+export declare function getErrorLogStats(): ErrorLogStats;
+/**
+ * fsync the active error log so the record that describes a fatal fault is on
+ * the disk before the process exits.
+ *
+ * `appendLine` uses `appendFileSync`, which hands the data to the kernel and
+ * returns — it does not wait for the storage. A process that exits
+ * milliseconds later can therefore lose the one record that explains why. Best
+ * effort: a missing `errors.jsonl`, a rotated-away active file, or a filesystem
+ * that rejects `fsync` must not stop the exit, because the exit is the part that
+ * matters.
+ */
+export declare function fsyncErrorLog(): boolean;
+/** The live fault controller, or null before the handlers are installed. */
+export declare function getFaultShutdownController(): FaultShutdownController | null;
+/**
+ * Register the audit-sink and pool handles the fault path must drain before it
+ * exits. Safe to call before or after {@link installGlobalHandlers}.
+ *
+ * Without this, a fault still exits non-zero and still fsyncs `errors.jsonl`, but
+ * the audit sink is left unflushed, so the final record of the action that
+ * caused the fault may never reach the chain. See the report's
+ * OTHER-FILE CHANGE REQUESTED for the one-line call site in `runtime.ts`.
+ */
+export declare function registerFaultShutdownHooks(hooks: Pick<FaultShutdownDeps, 'flushAudit' | 'closePools'>): void;
+/**
+ * Install process-level handlers for an uncaught exception or an unhandled
+ * promise rejection.
+ *
+ * Both are FAIL-CLOSED: the fault is recorded and redacted, the audit
+ * sink and the pools are drained on a bounded timer, and the process then exits
+ * non-zero so `Restart=on-failure` brings up a clean one. The previous version
+ * only recorded the fault, which OVERRODE Node's terminate-by-default behaviour
+ * and left a daemon serving database traffic in an undefined state.
+ *
+ * `unhandledRejection` is the one place that continues — and only for a reason
+ * a call site explicitly tagged with `markNonFatalRejection`. See
+ * `fault-shutdown.ts` for why the tag is a non-enumerable symbol.
+ *
+ * Also emits the startup posture lines. This is the daemon-startup hook the
+ * runtime already owns (`runAgent()` calls it right after
+ * `stripUnrecognisedSecurityEnv()`), and the resolved agent home has to be
+ * logged from somewhere that runs exactly once per daemon start. An
+ * `AgentHomeMismatchError` thrown from here propagates out of `runAgent()` and
+ * is reported by the CLI with a non-zero exit, which is the intended
+ * fail-closed outcome: a daemon running against a home nobody configured would
+ * apply a different permission default, a different database scope and a
+ * different audit key.
+ */
+export declare function installGlobalHandlers(currentAgentId?: string, hooks?: Pick<FaultShutdownDeps, 'flushAudit' | 'closePools'>): void;
+/** Reset the install latch. Test helper; a second install in one process is a no-op. */
+export declare function resetGlobalHandlersForTests(): void;
+/** Read recent error records from the local log, newest last. */
+export declare function readRecentErrors(limit: number): Promise<ErrorRecord[]>;
+/** Reset the cached active-file size and directory memo. Test and lifecycle helper. */
+export declare function resetErrorLogCache(): void;
+//# sourceMappingURL=error-tracker.d.ts.map

package/dist/types/cli/daemon/error-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracker.d.ts","sourceRoot":"","sources":["../../../../src/cli/daemon/error-tracker.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,QAAkB,CAAC;AAEnD,4DAA4D;AAC5D,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAsEpC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOrD;AAsBD;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAyBrC;AA2BD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,OAAO,EACZ,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;CAAO,GAC7D,IAAI,CAkBN;AAED,+CAA+C;AAC/C,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAQ3C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAuChD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAkBvC;AAeD,4EAA4E;AAC5E,wBAAgB,0BAA0B,IAAI,uBAAuB,GAAG,IAAI,CAE3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,YAAY,CAAC,GAC1D,IAAI,CAGN;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,CAAC,EAAE,MAAM,EACvB,KAAK,GAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,YAAY,CAAM,GAC/D,IAAI,CAmEN;AAED,wFAAwF;AACxF,wBAAgB,2BAA2B,IAAI,IAAI,CAKlD;AAED,iEAAiE;AACjE,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAuB5E;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC"}