@strongkeep/watchdog 0.1.1

package/dist/cli/poll.js

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+/**
+ * strongkeep-poll CLI — the invocable the init-written guard hooks call: poll the signed feed
+ * (verify → parse, D2 fail-safe) and run the apply pipeline under the configured autonomy tier.
+ *
+ * Usage:
+ *   strongkeep-poll [--harness <dir>]
+ *   strongkeep-poll --help
+ *
+ * This is the "thin stable mechanism" runtime (D6): reading it end-to-end shows everything the
+ * watchdog can do to this machine — verify, then route closed-vocabulary actions to the
+ * allowlisted appliers, with undo records. No shell, no body execution, no telemetry.
+ */
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { realpathSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { pollFeed, lastGoodDir, DEFAULT_MAX_STALENESS_MS } from '../feed-client.js';
+import { runPipeline } from '../pipeline.js';
+import { loadLocalConfig, pinnedKeysFromConfig, strongkeepDir } from '../init.js';
+const HELP_TEXT = `strongkeep-poll — verify the signed feed and run the apply pipeline (tier-gated)
+
+Usage:
+  strongkeep-poll [--harness <dir>]
+
+Reads local config written by strongkeep-init. Fail-safe: if the feed is down or does not
+verify, the last-good verified snapshot stays in force and nothing new is applied.`;
+/** Parse argv → options. Total; never throws. */
+export function parsePollArgs(argv, cwd = process.cwd()) {
+    const opts = { harnessRoot: cwd, showHelp: false };
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === '--help' || arg === '-h')
+            opts.showHelp = true;
+        else if (arg === '--harness') {
+            const val = argv[++i];
+            if (val === undefined)
+                return { ...opts, showHelp: true, error: '--harness requires a dir' };
+            opts.harnessRoot = val;
+        }
+        else
+            return { ...opts, showHelp: true, error: `unknown argument "${arg}"` };
+    }
+    return opts;
+}
+async function main() {
+    const opts = parsePollArgs(process.argv.slice(2));
+    if (opts.error)
+        process.stderr.write(`strongkeep-poll: ${opts.error}\n\n`);
+    if (opts.showHelp) {
+        process.stdout.write(HELP_TEXT + '\n');
+        process.exit(opts.error ? 2 : 0);
+    }
+    try {
+        const harnessRoot = resolve(opts.harnessRoot);
+        const config = await loadLocalConfig(harnessRoot);
+        const poll = await pollFeed({
+            feedUrl: config.feedUrl,
+            token: config.token,
+            // The pinned key SET (legacy single-key configs yield a 1-element set).
+            pinnedKey: pinnedKeysFromConfig(config),
+            cacheDir: join(harnessRoot, config.cacheDir),
+            maxStalenessMs: DEFAULT_MAX_STALENESS_MS,
+        });
+        const summary = await runPipeline(poll.entries, {
+            consumerTier: config.tier,
+            applyCtx: {
+                harnessRoot,
+                dryRun: false,
+                // Payloads resolve from the verified last-good snapshot (hash-checked again at apply).
+                resolvePayload: async (ref) => new Uint8Array(await readFile(join(lastGoodDir(join(harnessRoot, config.cacheDir)), ref.path))),
+            },
+            logDir: join(harnessRoot, strongkeepDir(), 'undo'),
+        });
+        const badge = poll.freshness.state === 'fresh'
+            ? `feed fresh (verified ${poll.freshness.verifiedAt})`
+            : `FEED ${poll.freshness.state.toUpperCase()} since ${poll.freshness.lastGoodAt} — ${poll.freshness.reason}`;
+        process.stdout.write([badge, ...summary.messages, `reported ${summary.reported} | staged ${summary.staged} | applied ${summary.applied} | refused ${summary.refused}`].join('\n') + '\n');
+        // AUTH-REJECTED (HTTP 401/403): a billing/credentials condition, NOT a tamper event.
+        // Calm, actionable message + a distinct non-zero exit (3) so callers can tell it apart
+        // from success (0) and hard/tamper errors (2). Note: exit 2 would BLOCK the agent's tool
+        // call when run as a PreToolUse hook; a credentials lapse must not do that.
+        if (poll.authRejected === true) {
+            process.stderr.write('strongkeep-poll: your StrongKeep feed token was rejected (this is a subscription/credentials issue, not an attack). ' +
+                'Run strongkeep-login to re-enter your token, or check your subscription status. ' +
+                'Existing local protection keeps working until the cached feed goes stale.\n');
+            process.exit(3);
+        }
+        process.exit(0);
+    }
+    catch (err) {
+        process.stderr.write(`strongkeep-poll: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(2);
+    }
+}
+if (isMainModule()) {
+    void main();
+}
+function isMainModule() {
+    const entry = process.argv[1];
+    if (entry === undefined)
+        return false;
+    try {
+        return fileURLToPath(import.meta.url) === realpathSync(entry);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=poll.js.map

package/dist/cli/poll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll.js","sourceRoot":"","sources":["../../src/cli/poll.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAQlF,MAAM,SAAS,GAAG;;;;;;mFAMiE,CAAC;AAEpF,iDAAiD;AACjD,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IACvE,MAAM,IAAI,GAAmB,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;aACtD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;YAC7F,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACzB,CAAC;;YAAM,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,GAAG,GAAG,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,wEAAwE;YACxE,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC;YACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC5C,cAAc,EAAE,wBAAwB;SACzC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE;YAC9C,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,QAAQ,EAAE;gBACR,WAAW;gBACX,MAAM,EAAE,KAAK;gBACb,uFAAuF;gBACvF,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAC5B,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;aAClG;YACD,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,EAAE,MAAM,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,KAAK,GACT,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,OAAO;YAC9B,CAAC,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,UAAU,GAAG;YACtD,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,UAAU,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACjH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,OAAO,CAAC,QAAQ,aAAa,OAAO,CAAC,MAAM,cAAc,OAAO,CAAC,OAAO,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACpK,CAAC;QACF,qFAAqF;QACrF,uFAAuF;QACvF,yFAAyF;QACzF,4EAA4E;QAC5E,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sHAAsH;gBACpH,kFAAkF;gBAClF,6EAA6E,CAChF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cli/revert.d.ts

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+/**
+ * strongkeep-revert CLI — one-click self-serve undo (D3). The primary churn-prevention path.
+ *
+ * Usage:
+ *   strongkeep-revert [--harness <dir>]              List "recently applied" actions + ids.
+ *   strongkeep-revert <id> [--harness <dir>]         Revert one applied action by id.
+ *   strongkeep-revert --all-since <iso> [--harness <dir>]  Revert everything applied since a timestamp.
+ *   strongkeep-revert --help
+ *
+ * Reverting reads the UndoRecord's captured inverse and dispatches it back through the SAME
+ * applier that created it (applier.revert), then marks the record reverted (append-only log).
+ * No support ticket, no network needed — the undo log is local and is the audit trail.
+ *
+ * Design: arg-parse + orchestration + exit only. Work is in ../undo.ts + the appliers.
+ */
+export interface RevertCliOptions {
+    /** Specific application id to revert, if given. */
+    id?: string;
+    /** Revert all applications since this ISO timestamp, if given. */
+    allSince?: string;
+    /** List mode (no id, no --all-since) → show recently-applied list. */
+    list: boolean;
+    harnessRoot: string;
+    showHelp: boolean;
+    error?: string;
+}
+/** Parse argv → options. Total; never throws. */
+export declare function parseRevertArgs(argv: string[], cwd?: string): RevertCliOptions;
+/** Revert one record by id: applier.revert(inverse) then mark reverted. Exported for reuse/tests. */
+export declare function revertById(harnessRoot: string, logDir: string, id: string): Promise<string>;

package/dist/cli/revert.js

@@ -0,0 +1,129 @@
+#!/usr/bin/env node
+/**
+ * strongkeep-revert CLI — one-click self-serve undo (D3). The primary churn-prevention path.
+ *
+ * Usage:
+ *   strongkeep-revert [--harness <dir>]              List "recently applied" actions + ids.
+ *   strongkeep-revert <id> [--harness <dir>]         Revert one applied action by id.
+ *   strongkeep-revert --all-since <iso> [--harness <dir>]  Revert everything applied since a timestamp.
+ *   strongkeep-revert --help
+ *
+ * Reverting reads the UndoRecord's captured inverse and dispatches it back through the SAME
+ * applier that created it (applier.revert), then marks the record reverted (append-only log).
+ * No support ticket, no network needed — the undo log is local and is the audit trail.
+ *
+ * Design: arg-parse + orchestration + exit only. Work is in ../undo.ts + the appliers.
+ */
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { realpathSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { listApplied, markReverted } from '../undo.js';
+import { revertInverse } from '../appliers/applier.js';
+import { strongkeepDir } from '../init.js';
+const HELP_TEXT = `strongkeep-revert — one-command local undo of any StrongKeep-applied change
+
+Usage:
+  strongkeep-revert [--harness <dir>]              list recently applied changes + ids
+  strongkeep-revert <id> [--harness <dir>]         revert one change exactly
+  strongkeep-revert --all-since <iso-timestamp>    revert everything applied since then`;
+/** Parse argv → options. Total; never throws. */
+export function parseRevertArgs(argv, cwd = process.cwd()) {
+    const opts = { list: true, harnessRoot: cwd, showHelp: false };
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === '--help' || arg === '-h')
+            opts.showHelp = true;
+        else if (arg === '--all-since') {
+            const val = argv[++i];
+            if (val === undefined || Number.isNaN(Date.parse(val))) {
+                return { ...opts, showHelp: true, error: '--all-since requires an ISO timestamp' };
+            }
+            opts.allSince = val;
+            opts.list = false;
+        }
+        else if (arg === '--harness') {
+            const val = argv[++i];
+            if (val === undefined)
+                return { ...opts, showHelp: true, error: '--harness requires a dir' };
+            opts.harnessRoot = val;
+        }
+        else if (!arg.startsWith('-') && opts.id === undefined) {
+            opts.id = arg;
+            opts.list = false;
+        }
+        else {
+            return { ...opts, showHelp: true, error: `unknown argument "${arg}"` };
+        }
+    }
+    return opts;
+}
+/** Revert one record by id: applier.revert(inverse) then mark reverted. Exported for reuse/tests. */
+export async function revertById(harnessRoot, logDir, id) {
+    const records = await listApplied(logDir);
+    const record = records.find((r) => r.id === id);
+    if (record === undefined)
+        throw new Error(`no undo record with id "${id}"`);
+    if (record.status === 'reverted')
+        return `${id}: already reverted`;
+    if (record.status === 'staged') {
+        await markReverted(logDir, id); // a staged change never touched the system; just retire it
+        return `${id}: staged change discarded (nothing was applied)`;
+    }
+    const { summary } = await revertInverse(record.inverse, { harnessRoot, dryRun: false });
+    await markReverted(logDir, id);
+    return `${id}: ${summary}`;
+}
+async function main() {
+    const opts = parseRevertArgs(process.argv.slice(2));
+    if (opts.error)
+        process.stderr.write(`strongkeep-revert: ${opts.error}\n\n`);
+    if (opts.showHelp) {
+        process.stdout.write(HELP_TEXT + '\n');
+        process.exit(opts.error ? 2 : 0);
+    }
+    const harnessRoot = resolve(opts.harnessRoot);
+    const logDir = join(harnessRoot, strongkeepDir(), 'undo');
+    try {
+        if (opts.list) {
+            const records = await listApplied(logDir);
+            if (records.length === 0) {
+                process.stdout.write('nothing applied yet — no StrongKeep change has touched this machine.\n');
+                process.exit(0);
+            }
+            for (const r of records) {
+                process.stdout.write(`${r.id}  [${r.status}]  ${r.appliedAt}  ${r.action.type}  — ${r.why}\n`);
+            }
+            process.exit(0);
+        }
+        if (opts.allSince !== undefined) {
+            const since = Date.parse(opts.allSince);
+            const records = (await listApplied(logDir)).filter((r) => r.status === 'applied' && Date.parse(r.appliedAt) >= since);
+            for (const r of records)
+                process.stdout.write((await revertById(harnessRoot, logDir, r.id)) + '\n');
+            process.stdout.write(`reverted ${records.length} change(s) since ${opts.allSince}\n`);
+            process.exit(0);
+        }
+        process.stdout.write((await revertById(harnessRoot, logDir, opts.id)) + '\n');
+        process.exit(0);
+    }
+    catch (err) {
+        process.stderr.write(`strongkeep-revert: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(2);
+    }
+}
+if (isMainModule()) {
+    void main();
+}
+function isMainModule() {
+    const entry = process.argv[1];
+    if (entry === undefined)
+        return false;
+    try {
+        return fileURLToPath(import.meta.url) === realpathSync(entry);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=revert.js.map

package/dist/cli/revert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revert.js","sourceRoot":"","sources":["../../src/cli/revert.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAc3C,MAAM,SAAS,GAAG;;;;;wFAKsE,CAAC;AAEzF,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IACzE,MAAM,IAAI,GAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;aACtD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;YACpB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;YAC7F,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,GAAG,GAAG,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAmB,EAAE,MAAc,EAAE,EAAU;IAC9E,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,GAAG,EAAE,oBAAoB,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,2DAA2D;QAC3F,OAAO,GAAG,EAAE,iDAAiD,CAAC;IAChE,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE,KAAK,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAClE,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,MAAM,oBAAoB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/feed-client.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Feed client (consumer side) — poll the signed feed, verify it, and hand VERIFIED,
+ * parsed entries to the apply pipeline. This is the top of the trust flow.
+ *
+ * Trust flow (BUILD-PLAN "trust mechanics" — order is fixed and total):
+ *   1. Fetch index.json with the per-tenant token.
+ *   2. core.verifyManifestSignature against the PINNED public key. Fail → do NOT proceed.
+ *   3. For each entry, fetch its file, core.verifyEntryHash against the manifest. Fail → whole
+ *      poll fails (a partially-authentic feed is not authentic).
+ *   4. core.parseEntry (frontmatter only; body stays opaque).
+ *   5. Hand parsed entries to the pipeline behind the autonomy tier.
+ *
+ * FAIL-SAFE (D2 — REQUIRED): on fetch failure OR verification failure, DO NOT drop existing
+ * guards. Fall back to the last-good cached feed and enforce it; fetch/apply nothing new;
+ * mark the feed stale. Fail CLOSED on new/unsigned actions only. Never fail open. A
+ * max-staleness threshold (default 72h) escalates to stale-critical (dashboard alert).
+ *
+ * SECURITY:
+ *  - The pinned public key ships with the watchdog and is authoritative over the manifest's
+ *    self-declared key.
+ *  - The per-tenant token is read from the local config the init step wrote; it is NEVER
+ *    committed and never logged (no code path here writes it anywhere).
+ *  - The last-good cache only ever holds a FULLY-verified snapshot, and is re-verified on
+ *    load (so cache tampering is also caught).
+ *  - No entry BODY is ever executed; only parsed actions flow onward.
+ */
+import type { PinnedPublicKey, ParsedEntry, SignedManifest } from '@strongkeep/core';
+/** Default max staleness before escalation: 72 hours (D2, confirmed default). */
+export declare const DEFAULT_MAX_STALENESS_MS: number;
+/** Where the client reads its config + last-good cache from (written by strongkeep-init). */
+export interface FeedClientConfig {
+    /** Signed feed base URL (index.json + entries under it). https://… or file://… (tests/local). */
+    feedUrl: string;
+    /**
+     * Per-tenant token. Read from local config; never logged, never committed. Optional: a
+     * public-read feed (e.g. the beta) needs no token, and authenticity comes from signature
+     * verification against the pinned key, not from transport auth. Explicit undefined is
+     * allowed so callers can pass a possibly-absent config field straight through.
+     */
+    token?: string | undefined;
+    /**
+     * The pinned public key(s) the manifest must verify against. A set (key rotation): the
+     * manifest is accepted iff it verifies against ANY key in the set; an EMPTY set rejects
+     * everything (fail closed). A bare key is treated as a 1-element set (backward compatible).
+     */
+    pinnedKey: PinnedPublicKey | readonly PinnedPublicKey[];
+    /** Local directory holding the last-good cache + state. */
+    cacheDir: string;
+    /** Max staleness before escalation, ms. Default 72h. */
+    maxStalenessMs: number;
+    /** Clock, injectable for staleness tests. Defaults to Date.now. */
+    now?: () => number;
+}
+/** Freshness state surfaced to the UI/badge (D2). */
+export type FeedFreshness = {
+    state: 'fresh';
+    verifiedAt: string;
+} | {
+    state: 'stale';
+    lastGoodAt: string;
+    reason: string;
+} | {
+    state: 'stale-critical';
+    lastGoodAt: string;
+    reason: string;
+};
+/** Result of a poll: the verified entries currently in force + the freshness state. */
+export interface PollResult {
+    /** Entries from the newly-verified feed, OR the last-good cache under fail-safe. */
+    entries: ParsedEntry[];
+    freshness: FeedFreshness;
+    /** True when these entries came from the last-good cache (a fail-safe fallback happened). */
+    usedLastGood: boolean;
+    /**
+     * True when the poll failed because the feed REJECTED our token (HTTP 401/403). This is a
+     * billing/credentials condition, NOT a tamper/security event — surface it as its own,
+     * non-alarming message. The fail-safe still applied: last-good protection stays in force.
+     */
+    authRejected?: boolean;
+}
+/**
+ * The feed rejected our per-tenant token (HTTP 401/403). Distinct from tamper/verification
+ * failures so callers can show a calm "fix your credentials/subscription" message instead of
+ * a security alarm. Never carries the token value.
+ */
+export declare class FeedAuthError extends Error {
+    readonly status: number;
+    readonly code: "auth-rejected";
+    constructor(status: number);
+}
+/**
+ * Poll the feed once: fetch → verify signature → verify per-entry hashes → parse. On ANY
+ * verification/fetch failure, fall back to the last-good cache (D2 fail-safe) rather than
+ * dropping protection. Returns the entries currently in force + freshness.
+ */
+export declare function pollFeed(config: FeedClientConfig): Promise<PollResult>;
+/**
+ * Persist a freshly-verified snapshot (manifest + entry files + timestamp) as the new
+ * last-good cache. ONLY pollFeed calls this, and only after full verification succeeds, so the
+ * cache never holds unauthentic content — and it is re-verified again on load regardless.
+ */
+export declare function saveLastGood(config: FeedClientConfig, manifestBytes: Uint8Array, entryBytes: Map<string, Uint8Array>, manifest: SignedManifest, verifiedAt: string): Promise<void>;
+/** Path of the last-good snapshot dir (feed-shaped: index.json + entries/) for the local MCP server. */
+export declare function lastGoodDir(cacheDir: string): string;
+/**
+ * Load the last-good cache during an outage. The snapshot is RE-VERIFIED against the pinned
+ * key on load (cache tampering fails closed too). Freshness is computed from the snapshot
+ * timestamp against maxStalenessMs; the cache is never reported fresh.
+ */
+export declare function loadLastGood(config: FeedClientConfig, reason?: string): Promise<PollResult>;

package/dist/feed-client.js

@@ -0,0 +1,178 @@
+/**
+ * Feed client (consumer side) — poll the signed feed, verify it, and hand VERIFIED,
+ * parsed entries to the apply pipeline. This is the top of the trust flow.
+ *
+ * Trust flow (BUILD-PLAN "trust mechanics" — order is fixed and total):
+ *   1. Fetch index.json with the per-tenant token.
+ *   2. core.verifyManifestSignature against the PINNED public key. Fail → do NOT proceed.
+ *   3. For each entry, fetch its file, core.verifyEntryHash against the manifest. Fail → whole
+ *      poll fails (a partially-authentic feed is not authentic).
+ *   4. core.parseEntry (frontmatter only; body stays opaque).
+ *   5. Hand parsed entries to the pipeline behind the autonomy tier.
+ *
+ * FAIL-SAFE (D2 — REQUIRED): on fetch failure OR verification failure, DO NOT drop existing
+ * guards. Fall back to the last-good cached feed and enforce it; fetch/apply nothing new;
+ * mark the feed stale. Fail CLOSED on new/unsigned actions only. Never fail open. A
+ * max-staleness threshold (default 72h) escalates to stale-critical (dashboard alert).
+ *
+ * SECURITY:
+ *  - The pinned public key ships with the watchdog and is authoritative over the manifest's
+ *    self-declared key.
+ *  - The per-tenant token is read from the local config the init step wrote; it is NEVER
+ *    committed and never logged (no code path here writes it anywhere).
+ *  - The last-good cache only ever holds a FULLY-verified snapshot, and is re-verified on
+ *    load (so cache tampering is also caught).
+ *  - No entry BODY is ever executed; only parsed actions flow onward.
+ */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { validateManifestShape, verifyManifestSignatureAny, verifyEntryHash, parseEntry } from '@strongkeep/core';
+/** Default max staleness before escalation: 72 hours (D2, confirmed default). */
+export const DEFAULT_MAX_STALENESS_MS = 72 * 60 * 60 * 1000;
+/** Name of the last-good snapshot directory inside cacheDir. */
+const LAST_GOOD_DIR = 'last-good';
+/** Timestamp marker file inside the last-good snapshot. */
+const VERIFIED_AT_FILE = 'verified-at.txt';
+/**
+ * The feed rejected our per-tenant token (HTTP 401/403). Distinct from tamper/verification
+ * failures so callers can show a calm "fix your credentials/subscription" message instead of
+ * a security alarm. Never carries the token value.
+ */
+export class FeedAuthError extends Error {
+    status;
+    code = 'auth-rejected';
+    constructor(status) {
+        super(`StrongKeep could not authenticate to the feed (HTTP ${status}). Your access token was ` +
+            'rejected: your subscription may be inactive, or the token is wrong. Run strongkeep-login ' +
+            'to re-enter it, or check your subscription. Existing local protection keeps working ' +
+            'until the cached feed goes stale.');
+        this.status = status;
+        this.name = 'FeedAuthError';
+    }
+}
+/** Fetch bytes from the feed. file:// reads disk (local/test feeds); http(s) uses global fetch. */
+async function fetchBytes(url, token) {
+    if (url.startsWith('file://')) {
+        return new Uint8Array(await readFile(fileURLToPath(url)));
+    }
+    // Only send an authorization header when we actually hold a token; a tokenless client
+    // (public-read feed) sends none rather than a bogus "Bearer undefined".
+    const headers = typeof token === 'string' && token !== '' ? { authorization: `Bearer ${token}` } : {};
+    const response = await fetch(url, { headers });
+    // 401/403 = the TOKEN was rejected (billing/credentials), not a broken feed — distinct error.
+    if (response.status === 401 || response.status === 403)
+        throw new FeedAuthError(response.status);
+    if (!response.ok)
+        throw new Error(`fetch failed: HTTP ${response.status} for feed resource`);
+    return new Uint8Array(await response.arrayBuffer());
+}
+/**
+ * Run the full verify flow over a manifest + entry-byte source. Shared by the remote poll and
+ * the cache load so the cache is held to the SAME verification bar as the live feed.
+ */
+async function verifyAndParse(manifestBytes, getEntryBytes, pinnedKey) {
+    const manifest = validateManifestShape(JSON.parse(new TextDecoder().decode(manifestBytes)));
+    const pinnedSet = Array.isArray(pinnedKey) ? pinnedKey : [pinnedKey];
+    const sig = verifyManifestSignatureAny(manifest, pinnedSet);
+    if (!sig.ok)
+        throw new Error(`verification failed: ${sig.code}: ${sig.reason}`);
+    const entries = [];
+    const entryBytes = new Map();
+    for (const record of manifest.entries) {
+        const bytes = await getEntryBytes(record.file);
+        const hash = verifyEntryHash(bytes, record);
+        if (!hash.ok)
+            throw new Error(`verification failed: ${hash.code}: ${hash.reason}`);
+        entries.push(parseEntry(bytes));
+        entryBytes.set(record.file, bytes);
+    }
+    return { manifest, entries, entryBytes };
+}
+/**
+ * Poll the feed once: fetch → verify signature → verify per-entry hashes → parse. On ANY
+ * verification/fetch failure, fall back to the last-good cache (D2 fail-safe) rather than
+ * dropping protection. Returns the entries currently in force + freshness.
+ */
+export async function pollFeed(config) {
+    const base = config.feedUrl.endsWith('/') ? config.feedUrl : `${config.feedUrl}/`;
+    try {
+        const manifestBytes = await fetchBytes(`${base}index.json`, config.token);
+        const verified = await verifyAndParse(manifestBytes, (file) => fetchBytes(`${base}${file}`, config.token), config.pinnedKey);
+        const verifiedAt = new Date((config.now ?? Date.now)()).toISOString();
+        await saveLastGood(config, manifestBytes, verified.entryBytes, verified.manifest, verifiedAt);
+        return { entries: verified.entries, freshness: { state: 'fresh', verifiedAt }, usedLastGood: false };
+    }
+    catch (err) {
+        // FAIL-SAFE: never fail open. Enforce the last-good verified snapshot; apply nothing new.
+        const reason = err instanceof Error ? err.message : String(err);
+        const result = await loadLastGood(config, reason);
+        // Tag the credentials case so the CLI can show a calm billing/token message, not an alarm.
+        return err instanceof FeedAuthError ? { ...result, authRejected: true } : result;
+    }
+}
+/**
+ * Persist a freshly-verified snapshot (manifest + entry files + timestamp) as the new
+ * last-good cache. ONLY pollFeed calls this, and only after full verification succeeds, so the
+ * cache never holds unauthentic content — and it is re-verified again on load regardless.
+ */
+export async function saveLastGood(config, manifestBytes, entryBytes, manifest, verifiedAt) {
+    const dir = join(config.cacheDir, LAST_GOOD_DIR);
+    for (const record of manifest.entries) {
+        const path = join(dir, record.file);
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, entryBytes.get(record.file));
+    }
+    // Index written LAST: a crash mid-persist leaves the previous index (or none) pointing only
+    // at fully-written entries. ponytail: full temp-dir + rename swap is the upgrade path.
+    await writeFile(join(dir, 'index.json'), manifestBytes);
+    await writeFile(join(dir, VERIFIED_AT_FILE), verifiedAt + '\n', 'utf8');
+}
+/** Path of the last-good snapshot dir (feed-shaped: index.json + entries/) for the local MCP server. */
+export function lastGoodDir(cacheDir) {
+    return join(cacheDir, LAST_GOOD_DIR);
+}
+/**
+ * Load the last-good cache during an outage. The snapshot is RE-VERIFIED against the pinned
+ * key on load (cache tampering fails closed too). Freshness is computed from the snapshot
+ * timestamp against maxStalenessMs; the cache is never reported fresh.
+ */
+export async function loadLastGood(config, reason = 'feed unavailable') {
+    const dir = join(config.cacheDir, LAST_GOOD_DIR);
+    let verifiedAtText;
+    let manifestBytes;
+    try {
+        verifiedAtText = (await readFile(join(dir, VERIFIED_AT_FILE), 'utf8')).trim();
+        manifestBytes = new Uint8Array(await readFile(join(dir, 'index.json')));
+    }
+    catch {
+        // No last-good cache at all: fail CLOSED with zero new entries. Guards installed by prior
+        // applies remain in place on disk — nothing here removes protection.
+        return {
+            entries: [],
+            freshness: { state: 'stale-critical', lastGoodAt: 'never', reason: `${reason}; no last-good cache exists` },
+            usedLastGood: true,
+        };
+    }
+    try {
+        const verified = await verifyAndParse(manifestBytes, async (file) => new Uint8Array(await readFile(join(dir, file))), config.pinnedKey);
+        const age = (config.now ?? Date.now)() - Date.parse(verifiedAtText);
+        const freshness = age > config.maxStalenessMs
+            ? { state: 'stale-critical', lastGoodAt: verifiedAtText, reason }
+            : { state: 'stale', lastGoodAt: verifiedAtText, reason };
+        return { entries: verified.entries, freshness, usedLastGood: true };
+    }
+    catch (cacheErr) {
+        const cacheReason = cacheErr instanceof Error ? cacheErr.message : String(cacheErr);
+        return {
+            entries: [],
+            freshness: {
+                state: 'stale-critical',
+                lastGoodAt: verifiedAtText,
+                reason: `${reason}; last-good cache failed re-verification (${cacheReason})`,
+            },
+            usedLastGood: true,
+        };
+    }
+}
+//# sourceMappingURL=feed-client.js.map

package/dist/feed-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-client.js","sourceRoot":"","sources":["../src/feed-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAElH,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5D,gEAAgE;AAChE,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAgD3C;;;;GAIG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEjB;IADZ,IAAI,GAAG,eAAwB,CAAC;IACzC,YAAqB,MAAc;QACjC,KAAK,CACH,uDAAuD,MAAM,2BAA2B;YACtF,2FAA2F;YAC3F,sFAAsF;YACtF,mCAAmC,CACtC,CAAC;QANiB,WAAM,GAAN,MAAM,CAAQ;QAOjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,mGAAmG;AACnG,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,KAAyB;IAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,sFAAsF;IACtF,wEAAwE;IACxE,MAAM,OAAO,GACX,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,8FAA8F;IAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,oBAAoB,CAAC,CAAC;IAC7F,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,aAAyB,EACzB,aAAoD,EACpD,SAAuD;IAEvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,SAAwC,CAAC,CAAC,CAAC,CAAC,SAA4B,CAAC,CAAC;IACxH,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAwB;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,GAAG,IAAI,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7H,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,MAAM,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9F,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0FAA0F;QAC1F,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,2FAA2F;QAC3F,OAAO,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAwB,EACxB,aAAyB,EACzB,UAAmC,EACnC,QAAwB,EACxB,UAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC;IACtD,CAAC;IACD,4FAA4F;IAC5F,uFAAuF;IACvF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,UAAU,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAwB,EAAE,MAAM,GAAG,kBAAkB;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,cAAsB,CAAC;IAC3B,IAAI,aAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,cAAc,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,aAAa,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;QAC1F,qEAAqE;QACrE,OAAO;YACL,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,6BAA6B,EAAE;YAC3G,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,aAAa,EACb,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAC/D,MAAM,CAAC,SAAS,CACjB,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpE,MAAM,SAAS,GACb,GAAG,GAAG,MAAM,CAAC,cAAc;YACzB,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE;YACjE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpF,OAAO;YACL,OAAO,EAAE,EAAE;YACX,SAAS,EAAE;gBACT,KAAK,EAAE,gBAAgB;gBACvB,UAAU,EAAE,cAAc;gBAC1B,MAAM,EAAE,GAAG,MAAM,6CAA6C,WAAW,GAAG;aAC7E;YACD,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/fires.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Guardrail-fire log — the activity-lite source the Phase 3 health check reads.
+ *
+ * Phase 2 shipped the applied-actions undo log but nothing recorded guardrail FIRES. This
+ * module is that record: one append-only NDJSON line per fire, carrying ONLY
+ * { firedAt, ruleId } — never the matched command, never any content. The health check
+ * counts these per rule since the last report (@strongkeep/healthcheck activity-lite).
+ *
+ * SECURITY: the matched text / command is deliberately NOT written. A fire says "rule X
+ * triggered at time T" and nothing more — enough for a count, insufficient to leak what
+ * the user was doing. Append-only; a corrupt line is a reader's problem to skip, never a
+ * writer's to repair.
+ *
+ * ponytail: single NDJSON file, append = atomicity unit — mirrors the undo log's design.
+ */
+/** Basename of the fire log inside `.claude/strongkeep`. */
+export declare const FIRES_FILE = "fires.ndjson";
+/** One recorded guardrail fire. Rule id + timestamp ONLY — no matched content. */
+export interface FireRecord {
+    firedAt: string;
+    ruleId: string;
+}
+/**
+ * Append a fire to the log at `<strongkeepDir>/fires.ndjson`. Best-effort and non-throwing
+ * on a write failure (a guardrail must never crash the agent's tool call just because its
+ * telemetry line could not be written) — but it DOES create the directory if missing.
+ */
+export declare function recordFire(strongkeepDir: string, ruleId: string, at?: Date): Promise<void>;