@synap-core/cli 1.11.0 → 1.12.2

package/dist/commands/proposals-await.js

@@ -0,0 +1,248 @@
+/**
+ * `synap proposals await <id>` — block until a proposal is decided.
+ *
+ * The dev-loop primitive: an agent files a proposal, then WAITS for the human
+ * to answer it before continuing. Without this the only shapes available were
+ * "fire and forget" (the agent never learns the outcome) or a hand-rolled sleep
+ * loop in every caller.
+ *
+ * Reuses `pollForApproval` — the ONE poll loop already shared by CP login and
+ * agent-key provisioning. This command adds no second poller; it supplies the
+ * predicates and a first immediate check so an already-decided proposal returns
+ * without paying one interval of latency.
+ *
+ * Status vocabulary comes from `PROPOSAL_STATUS_FILTERS` (data-extra.ts), which
+ * itself mirrors the pod's SSOT. It is NOT hand-mirrored here: the terminal
+ * classification below is asserted exhaustive against that list by a test, so a
+ * new pod status cannot silently fall through.
+ */
+import chalk from "chalk";
+import { log } from "../utils/logger.js";
+import { resolveHubConfig, hubGet, renderHubError, } from "../lib/hub-client.js";
+import { requireFullId } from "../lib/id.js";
+import { pollForApproval } from "../lib/approval-poll.js";
+import { PROPOSAL_STATUS_FILTERS, proposalStatusLabel } from "./data-extra.js";
+// ─── status classification ────────────────────────────────────────────────────
+/**
+ * Every value a proposal ROW can hold — the shared `--status` vocabulary minus
+ * the `all` filter sentinel, which no row ever carries. Derived, never retyped.
+ */
+export const PROPOSAL_ROW_STATUSES = PROPOSAL_STATUS_FILTERS.filter((s) => s !== "all");
+/** Decided, and the decision was YES. Exit 0. */
+const SUCCESS_STATUSES = new Set(["approved", "auto_approved"]);
+/**
+ * Decided, and the decision was NOT yes. Exit 1.
+ *
+ * NOTE ON `cancelled`: the pod has no such status. The equivalent row state is
+ * `withdrawn` (proposer retracted it). `reverted` and `approval_failed` are
+ * likewise terminal-not-approved: the write did not stand.
+ */
+const FAILURE_STATUSES = new Set([
+    "rejected",
+    "expired",
+    "withdrawn",
+    "reverted",
+    "approval_failed",
+]);
+/**
+ * Classify a proposal's status.
+ *
+ * `unknown` is deliberately NON-terminal: a status this CLI has never heard of
+ * may well be transient on a newer pod, and calling it "rejected" would be the
+ * client inventing a decision the pod never made. An unknown status therefore
+ * keeps polling and, failing that, times out (exit 2) — an honest "I could not
+ * determine the outcome" rather than a fabricated one.
+ */
+export function classifyProposalStatus(status) {
+    if (!status)
+        return "unknown";
+    const s = status.trim().toLowerCase();
+    if (SUCCESS_STATUSES.has(s))
+        return "approved";
+    if (FAILURE_STATUSES.has(s))
+        return "rejected";
+    if (s === "pending")
+        return "pending";
+    return "unknown";
+}
+/** Process exit code for a finished await. */
+export function exitCodeForOutcome(outcome) {
+    if (outcome === "approved")
+        return 0;
+    if (outcome === "rejected")
+        return 1;
+    return 2; // pending at deadline, or an outcome we could not classify
+}
+/** Read `status` off a `GET /proposals/:id` body, tolerating an envelope. */
+export function statusOf(data) {
+    if (!data || typeof data !== "object")
+        return undefined;
+    const row = data;
+    const nested = row.proposal;
+    const source = nested && typeof nested === "object" ? nested : row;
+    const status = source.status;
+    return typeof status === "string" ? status : undefined;
+}
+// ─── duration parsing ─────────────────────────────────────────────────────────
+/**
+ * Parse `30m` / `10s` / `2h` / a bare number of seconds into milliseconds.
+ * Returns null for anything unparseable so the caller can name the accepted
+ * shapes instead of silently defaulting.
+ */
+export function parseDuration(value, fallbackMs) {
+    if (value === undefined || value === null || String(value).trim() === "")
+        return fallbackMs;
+    const m = String(value).trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(ms|s|m|h)?$/);
+    if (!m)
+        return null;
+    const n = Number(m[1]);
+    if (!Number.isFinite(n) || n <= 0)
+        return null;
+    const unit = m[2] ?? "s";
+    const factor = unit === "ms" ? 1 : unit === "s" ? 1000 : unit === "m" ? 60_000 : 3_600_000;
+    return Math.round(n * factor);
+}
+/**
+ * Poll until the proposal is terminal or the deadline elapses. Never throws for
+ * a decision — a rejection is a RESULT, not an error. Only a genuinely broken
+ * call (bad id, 403) propagates, via the first immediate check.
+ */
+export async function awaitProposal(id, cfg, opts) {
+    const startedAt = Date.now();
+    // First check is IMMEDIATE — an already-decided proposal must not pay a full
+    // interval of latency, and a 404/403 must surface as an error now rather than
+    // being swallowed as a retryable blip by the poll loop.
+    const first = (await hubGet(`/proposals/${id}`, {}, cfg));
+    const firstStatus = statusOf(first);
+    const firstOutcome = classifyProposalStatus(firstStatus);
+    if (firstOutcome === "approved" || firstOutcome === "rejected") {
+        return {
+            id,
+            status: firstStatus,
+            outcome: firstOutcome,
+            elapsedMs: Date.now() - startedAt,
+            proposal: first,
+        };
+    }
+    let lastStatus = firstStatus;
+    let decided = null;
+    try {
+        const approved = await pollForApproval({
+            url: `${cfg.podUrl.replace(/\/+$/, "")}/api/hub/proposals/${id}`,
+            headers: { Authorization: `Bearer ${cfg.apiKey}` },
+            intervalMs: opts.intervalMs,
+            timeoutMs: opts.timeoutMs,
+            isApproved: (d) => classifyProposalStatus(statusOf(d)) === "approved",
+            isRejected: (d) => {
+                const status = statusOf(d);
+                if (status)
+                    lastStatus = status;
+                if (classifyProposalStatus(status) !== "rejected")
+                    return false;
+                decided = { data: d, outcome: "rejected" };
+                return true;
+            },
+            onApproved: (d) => {
+                const status = statusOf(d);
+                if (status)
+                    lastStatus = status;
+                return d;
+            },
+            // Track the last status seen even on ticks that are neither terminal.
+            onTick: ({ data }) => {
+                const status = statusOf(data);
+                if (status)
+                    lastStatus = status;
+            },
+        });
+        return {
+            id,
+            status: statusOf(approved) ?? lastStatus,
+            outcome: "approved",
+            elapsedMs: Date.now() - startedAt,
+            proposal: approved,
+        };
+    }
+    catch {
+        // `pollForApproval` throws for exactly two reasons: isRejected fired, or the
+        // deadline elapsed. `decided` disambiguates without string-matching a message.
+        if (decided) {
+            const settled = decided;
+            return {
+                id,
+                status: statusOf(settled.data) ?? lastStatus,
+                outcome: "rejected",
+                elapsedMs: Date.now() - startedAt,
+                proposal: settled.data,
+            };
+        }
+        return {
+            id,
+            status: lastStatus,
+            outcome: lastStatus && classifyProposalStatus(lastStatus) === "pending" ? "pending" : "unknown",
+            elapsedMs: Date.now() - startedAt,
+        };
+    }
+}
+/**
+ * Human wording for a status. Goes through the SAME helper the listing uses
+ * (`proposalStatusLabel`) so the two surfaces can never render one status two
+ * ways — the fork that put "Refused" in one governance surface and "Rejected"
+ * in another. An unrecognised value falls back to "undecided" rather than
+ * leaking a raw token.
+ */
+function describeStatus(status) {
+    if (!status)
+        return "undecided";
+    const known = PROPOSAL_STATUS_FILTERS.includes(status);
+    return known
+        ? proposalStatusLabel(status)
+        : "undecided";
+}
+// ─── command ──────────────────────────────────────────────────────────────────
+const DEFAULT_TIMEOUT_MS = 30 * 60_000;
+const DEFAULT_INTERVAL_MS = 10_000;
+export async function awaitProposalCommand(id, opts) {
+    requireFullId(id, "proposal", chalk, log);
+    const timeoutMs = parseDuration(opts.timeout, DEFAULT_TIMEOUT_MS);
+    const intervalMs = parseDuration(opts.interval, DEFAULT_INTERVAL_MS);
+    if (timeoutMs === null || intervalMs === null) {
+        console.error(chalk.red(`Unparseable duration. Use a number with a unit: 500ms, 30s, 15m, 2h (bare number = seconds).`));
+        process.exit(2);
+        return;
+    }
+    let cfg;
+    let result;
+    try {
+        cfg = await resolveHubConfig(opts);
+        if (!opts.json) {
+            log.dim(`Waiting for proposal ${id.slice(0, 8)} — checking every ${Math.round(intervalMs / 1000)}s, up to ${Math.round(timeoutMs / 60_000)}m.`);
+        }
+        result = await awaitProposal(id, cfg, { timeoutMs, intervalMs });
+    }
+    catch (e) {
+        renderHubError(e);
+        process.exit(2);
+        return;
+    }
+    if (opts.json) {
+        console.log(JSON.stringify({
+            id: result.id,
+            status: result.status ?? null,
+            outcome: result.outcome,
+            elapsedMs: result.elapsedMs,
+        }, null, 2));
+    }
+    else if (result.outcome === "approved") {
+        log.success(`Proposal ${describeStatus(result.status)}  ${chalk.dim(id.slice(0, 8))}`);
+    }
+    else if (result.outcome === "rejected") {
+        log.error(`Proposal ${describeStatus(result.status)}  ${chalk.dim(id.slice(0, 8))}`);
+    }
+    else {
+        log.error(`Timed out after ${Math.round(result.elapsedMs / 1000)}s — still ${describeStatus(result.status)}.`);
+        log.dim(`  Review  →  synap open proposal ${id}`);
+    }
+    process.exit(exitCodeForOutcome(result.outcome));
+}
+//# sourceMappingURL=proposals-await.js.map

package/dist/commands/proposals-await.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals-await.js","sourceRoot":"","sources":["../../src/commands/proposals-await.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,MAAM,EACN,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG/E,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,MAAM,CACjE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CACE,CAAC;AAEvB,iDAAiD;AACjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,UAAU;IACV,SAAS;IACT,WAAW;IACX,UAAU;IACV,iBAAiB;CAClB,CAAC,CAAC;AAIH;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,CAAC,2DAA2D;AACvE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,IAAa;IACpC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC5B,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB,EAAE,UAAkB;IACzE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC;IAC5F,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;AAChC,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU,EACV,GAAc,EACd,IAA0B;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,6EAA6E;IAC7E,8EAA8E;IAC9E,wDAAwD;IACxD,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAA4B,CAAC;IACrF,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,YAAY,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,YAAY,KAAK,UAAU,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE;YACF,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,WAAW,CAAC;IAC7B,IAAI,OAAO,GAAuE,IAAI,CAAC;IAEvF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAA0B;YAC9D,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,EAAE,EAAE;YAChE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE;YAClD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU;YACrE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,MAAM;oBAAE,UAAU,GAAG,MAAM,CAAC;gBAChC,IAAI,sBAAsB,CAAC,MAAM,CAAC,KAAK,UAAU;oBAAE,OAAO,KAAK,CAAC;gBAChE,OAAO,GAAG,EAAE,IAAI,EAAE,CAA4B,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,MAAM;oBAAE,UAAU,GAAG,MAAM,CAAC;gBAChC,OAAO,CAA4B,CAAC;YACtC,CAAC;YACD,sEAAsE;YACtE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,MAAM;oBAAE,UAAU,GAAG,MAAM,CAAC;YAClC,CAAC;SACF,CAAC,CAAC;QACH,OAAO;YACL,EAAE;YACF,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU;YACxC,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,QAAQ,EAAE,QAAQ;SACnB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,+EAA+E;QAC/E,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,OAAsE,CAAC;YACvF,OAAO;gBACL,EAAE;gBACF,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU;gBAC5C,OAAO,EAAE,UAAU;gBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,QAAQ,EAAE,OAAO,CAAC,IAAI;aACvB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE;YACF,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,UAAU,IAAI,sBAAsB,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/F,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SAClC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,MAA0B;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC;IAChC,MAAM,KAAK,GAAI,uBAA6C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9E,OAAO,KAAK;QACV,CAAC,CAAC,mBAAmB,CAAC,MAAkD,CAAC;QACzE,CAAC,CAAC,WAAW,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AACvC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,IAAwD;IAExD,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACrE,IAAI,SAAS,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,8FAA8F,CAC/F,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,GAAc,CAAC;IACnB,IAAI,MAA2B,CAAC;IAChC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,GAAG,CAAC,GAAG,CACL,wBAAwB,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CACvI,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,YAAY,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,YAAY,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,CACP,mBAAmB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CACpG,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/commands/proton-setup.d.ts

@@ -0,0 +1,73 @@
+/**
+ * synap proton-setup  (HIDDEN)
+ *
+ * One-shot provisioning for the Proton Mail ↔ Synap bridge — a fork of
+ * `bridge-setup` (the Discord bridge) for the SOVEREIGN self-host Proton path:
+ * a locally-run, headless Proton Bridge decrypts Proton's end-to-end-encrypted
+ * mail and exposes it as plain IMAP/SMTP on localhost; this command wires that
+ * bridge up to a Synap pod. See the catalog's `synap-app/packages/
+ * workspace-templates/capabilities/proton.capability.json` for the template
+ * (vault ref `proton-account`, tool `proton`) and its documented
+ * MUTUAL-EXCLUSIVITY rule against the `mailgun` template's Proton-forward path
+ * — do not run both for the same mailbox (double-ingest).
+ *
+ * CREDENTIAL MODEL: the operator enters their Proton ACCOUNT credentials
+ * (email + password + optional TOTP seed + optional mailbox password for
+ * two-password-mode accounts) ONCE, here — NOT a Bridge-generated password.
+ * They are assembled into one JSON secret
+ * (`{"email","password","totpSeed","mailboxPassword"}`, last two optional) and
+ * stored in the pod vault under ref `proton-account`. The headless bridge redeems
+ * that secret and auto-logs-in with it on boot (implemented in the
+ * synap-proton-bridge repo); no manual `protonmail-bridge login` step remains. If
+ * Proton throws a one-time human-verification challenge (more likely on
+ * datacenter/VPS IPs), a URL appears in the bridge logs to click once — see
+ * `printNextSteps`.
+ *
+ * Automates everything that CAN be automated:
+ *
+ *   1. lets you CHOOSE which saved pod the bridge connects to (kept separate
+ *      from your global CLI pod via the "proton" surface override), then
+ *      resolves a durable hub key + workspace from it
+ *   2. sanity-checks pod reachability + key scope (GET /capabilities)
+ *   3. applies the bridge's OWN capability definition (POST /capabilities/apply)
+ *      — read from the bridge repo so there is ONE source of truth
+ *   4. writes the bridge .env (pod creds + vault ref), preserving any other
+ *      existing keys, and purges any raw Proton env credentials once vaulted
+ *   5. prints the one-time human-verification note (only a human can click it)
+ *
+ * Hidden on purpose: this is a dogfood/dev convenience, not a first-class
+ * surface. Not shown in `synap --help`.
+ *
+ * The bridge lands data POD-WIDE by default. An OPTIONAL project scope can be
+ * picked interactively (or via --project-id); --workspace-id remains an
+ * advanced/legacy escape hatch to pin a single workspace, never prompted.
+ *
+ * Usage:
+ *   synap proton-setup [--bridge-dir <path>] [--pod <profile-name>]
+ *     [--workspace-id <uuid>] [--project-id <uuid>] [--pod-url <url>] [--api-key <key>]
+ *     [--proton-email <email>] [--proton-password <password>]
+ *     [--proton-totp-seed <seed>] [--proton-mailbox-password <password>]
+ */
+import { type GovernancePreset } from "../lib/targets.js";
+export interface ProtonSetupOpts {
+    /** Saved pod profile to connect the bridge to (separate from the global CLI pod). */
+    pod?: string;
+    /** Governance preset for the agent — skips the interactive prompt when set. */
+    governance?: GovernancePreset;
+    podUrl?: string;
+    apiKey?: string;
+    bridgeDir?: string;
+    /** Advanced/legacy escape hatch — pins the bridge to one workspace instead of pod-wide. */
+    workspaceId?: string;
+    /** Scopes the bridge to one project (peer lens to workspace). Skips the project prompt. */
+    projectId?: string;
+    /** Proton ACCOUNT email — the account the bridge auto-logs-in as. */
+    protonEmail?: string;
+    /** Proton ACCOUNT password (not a bridge-generated value) — provisioned into the pod vault. */
+    protonPassword?: string;
+    /** Proton ACCOUNT 2FA/TOTP seed (base32), optional — provisioned into the pod vault. */
+    protonTotpSeed?: string;
+    /** Proton mailbox password (two-password-mode accounts only), optional — provisioned into the pod vault. */
+    protonMailboxPassword?: string;
+}
+export declare function protonSetup(opts: ProtonSetupOpts): Promise<void>;