@tuskydp/cli 0.1.0

package/dist/src/commands/export.d.ts

@@ -0,0 +1,70 @@
+/**
+ * `tusky export` — Export file metadata for disaster recovery.
+ *
+ * Dumps all file records (including Walrus blob IDs, encryption keys,
+ * and epoch info) to a JSON file. This allows users to recover their
+ * data directly from Walrus if the Tusky service is unavailable.
+ *
+ * The export contains everything needed to:
+ *   1. Fetch files from Walrus aggregators using blobId
+ *   2. Decrypt private vault files using wrappedKey + iv + master key
+ *   3. Renew Walrus epochs using blobObjectId + a Sui wallet
+ */
+import type { Command } from 'commander';
+export interface ExportedFile {
+    fileId: string;
+    name: string;
+    mimeType: string;
+    sizeBytes: number;
+    vaultId: string;
+    vaultName: string;
+    vaultVisibility: string;
+    folderId: string | null;
+    status: string;
+    /** Walrus content-addressed blob ID — use to fetch from any Walrus aggregator */
+    walrusBlobId: string | null;
+    /** Sui object ID — required for epoch renewal via Walrus CLI */
+    walrusBlobObjectId: string | null;
+    /** Epoch when Walrus storage expires (renew before this) */
+    walrusEpochEnd: string | null;
+    /** Whether the file is client-side encrypted */
+    encrypted: boolean;
+    /** AES-256-GCM file key, wrapped with the master key (base64) */
+    wrappedKey: string | null;
+    /** AES-256-GCM initialization vector (base64) */
+    encryptionIv: string | null;
+    /** SHA-256 of the plaintext — for integrity verification after decryption */
+    plaintextChecksumSha256: string | null;
+    /** Original plaintext size in bytes (before encryption) */
+    plaintextSizeBytes: number | null;
+    createdAt: string;
+}
+export interface ExportManifest {
+    version: 1;
+    exportedAt: string;
+    account: {
+        id: string;
+        email: string;
+        plan: string;
+    };
+    /** Account encryption params — needed to derive master key from passphrase */
+    encryption: {
+        setupComplete: boolean;
+        /** PBKDF2 salt (base64) */
+        salt: string | null;
+        /** HMAC verifier for passphrase validation (base64) */
+        verifier: string | null;
+        /** Master key wrapped with passphrase-derived key (base64) */
+        encryptedMasterKey: string | null;
+    };
+    walrusNetwork: string;
+    walrusAggregatorUrl: string;
+    totalFiles: number;
+    totalVaults: number;
+    files: ExportedFile[];
+    recovery: {
+        instructions: string[];
+    };
+}
+export declare function registerExportCommand(program: Command): void;
+//# sourceMappingURL=export.d.ts.map

package/dist/src/commands/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/commands/export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gEAAgE;IAChE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,4DAA4D;IAC5D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iDAAiD;IACjD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6EAA6E;IAC7E,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,2DAA2D;IAC3D,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,8EAA8E;IAC9E,UAAU,EAAE;QACV,aAAa,EAAE,OAAO,CAAC;QACvB,2BAA2B;QAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,uDAAuD;QACvD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,8DAA8D;QAC9D,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,QA4KrD"}

package/dist/src/commands/export.js

@@ -0,0 +1,178 @@
+/**
+ * `tusky export` — Export file metadata for disaster recovery.
+ *
+ * Dumps all file records (including Walrus blob IDs, encryption keys,
+ * and epoch info) to a JSON file. This allows users to recover their
+ * data directly from Walrus if the Tusky service is unavailable.
+ *
+ * The export contains everything needed to:
+ *   1. Fetch files from Walrus aggregators using blobId
+ *   2. Decrypt private vault files using wrappedKey + iv + master key
+ *   3. Renew Walrus epochs using blobObjectId + a Sui wallet
+ */
+import { writeFileSync } from 'fs';
+import { resolve } from 'path';
+import chalk from 'chalk';
+import { getApiUrl, getApiKey } from '../config.js';
+import { createSDKClient } from '../sdk.js';
+import { createSpinner } from '../lib/progress.js';
+export function registerExportCommand(program) {
+    program
+        .command('export')
+        .description('Export file metadata for disaster recovery (Walrus blob IDs, encryption keys)')
+        .option('-o, --output <path>', 'Output file path', 'tusky-export.json')
+        .option('--vault <vaultId>', 'Export only files from a specific vault')
+        .action(async (options) => {
+        const apiUrl = getApiUrl(program.opts().apiUrl);
+        const apiKey = getApiKey(program.opts().apiKey);
+        const sdk = createSDKClient(apiUrl, apiKey);
+        const spinner = createSpinner('Fetching account info...');
+        spinner.start();
+        try {
+            // Fetch account + encryption params
+            const account = await sdk.account.get();
+            const encryptionParams = await sdk.account.getEncryptionParams();
+            // Fetch all vaults
+            spinner.text = 'Fetching vaults...';
+            const allVaults = await sdk.vaults.list();
+            const vaults = options.vault
+                ? allVaults.filter((v) => v.id === options.vault)
+                : allVaults;
+            if (vaults.length === 0) {
+                spinner.fail(options.vault ? `Vault ${options.vault} not found.` : 'No vaults found.');
+                return;
+            }
+            // Build vault lookup
+            const vaultMap = new Map(allVaults.map((v) => [v.id, v]));
+            // Fetch all files with pagination
+            spinner.text = 'Fetching files...';
+            const exportedFiles = [];
+            for (const vault of vaults) {
+                let cursor;
+                do {
+                    const result = await sdk.files.list({
+                        vaultId: vault.id,
+                        limit: 100,
+                        cursor,
+                    });
+                    for (const file of result.files) {
+                        const v = vaultMap.get(file.vaultId);
+                        exportedFiles.push({
+                            fileId: file.id,
+                            name: file.name,
+                            mimeType: file.mimeType,
+                            sizeBytes: file.sizeBytes,
+                            vaultId: file.vaultId,
+                            vaultName: v?.name ?? 'unknown',
+                            vaultVisibility: v?.visibility ?? 'unknown',
+                            folderId: file.folderId,
+                            status: file.status,
+                            walrusBlobId: file.walrusBlobId,
+                            walrusBlobObjectId: file.walrusBlobObjectId,
+                            walrusEpochEnd: file.walrusEpochEnd,
+                            encrypted: file.encrypted,
+                            wrappedKey: file.wrappedKey,
+                            encryptionIv: file.encryptionIv,
+                            plaintextChecksumSha256: file.plaintextChecksumSha256,
+                            plaintextSizeBytes: file.plaintextSizeBytes,
+                            createdAt: file.createdAt,
+                        });
+                    }
+                    cursor = result.nextCursor ?? undefined;
+                    spinner.text = `Fetching files... (${exportedFiles.length} so far)`;
+                } while (cursor);
+            }
+            // Determine Walrus network info
+            const tuskyEnv = process.env.TUSKY_ENV || 'production';
+            const isMainnet = tuskyEnv === 'production';
+            const walrusAggregatorUrl = isMainnet
+                ? 'https://aggregator.walrus.space'
+                : 'https://aggregator.walrus-testnet.walrus.space';
+            // Build manifest
+            const manifest = {
+                version: 1,
+                exportedAt: new Date().toISOString(),
+                account: {
+                    id: account.id,
+                    email: account.email,
+                    plan: account.planName,
+                },
+                encryption: {
+                    setupComplete: encryptionParams.setupComplete,
+                    salt: encryptionParams.salt ?? null,
+                    verifier: encryptionParams.verifier ?? null,
+                    encryptedMasterKey: encryptionParams.encryptedMasterKey ?? null,
+                },
+                walrusNetwork: isMainnet ? 'mainnet' : 'testnet',
+                walrusAggregatorUrl,
+                totalFiles: exportedFiles.length,
+                totalVaults: vaults.length,
+                files: exportedFiles,
+                recovery: {
+                    instructions: [
+                        '=== TUSKY DISASTER RECOVERY ===',
+                        '',
+                        'This file contains everything needed to recover your data independently of Tusky.',
+                        '',
+                        '--- DOWNLOAD FILES FROM WALRUS ---',
+                        'For each file with a walrusBlobId, fetch directly from any Walrus aggregator:',
+                        `  curl -o <filename> ${walrusAggregatorUrl}/v1/blobs/<walrusBlobId>`,
+                        '  OR: walrus read <walrusBlobId> -o <filename>',
+                        '  OR: tusky rehydrate <walrusBlobId> -o <filename>',
+                        '',
+                        '--- DECRYPT PRIVATE VAULT FILES ---',
+                        'Files with encrypted=true are AES-256-GCM encrypted.',
+                        '',
+                        'Option A — Using the Tusky CLI decrypt command (easiest):',
+                        '  tusky decrypt <encrypted-file> --export <this-file.json> -o <output>',
+                        '  This reads the wrappedKey/iv from this manifest and prompts for your passphrase.',
+                        '  You can also pass --passphrase <passphrase> or set TUSKYDP_PASSWORD env var.',
+                        '  If the Tusky API is still reachable, you can skip the export and use:',
+                        '  tusky decrypt <encrypted-file> --file-id <fileId> -o <output>',
+                        '',
+                        'Option B — Using the standalone script (zero dependencies, fully offline):',
+                        '  node tusky-decrypt.mjs <encrypted-file> <output> <passphrase> <salt> <wrappedKey> <iv> [encryptedMasterKey]',
+                        '  The salt and encryptedMasterKey come from your account encryption params.',
+                        '',
+                        'Option C — Manual decryption (any language with AES-256-GCM + PBKDF2):',
+                        '  1. Derive wrapping key: PBKDF2(passphrase, salt, 600000 iterations, SHA-256, 32 bytes)',
+                        '  2. If your account has an encryptedMasterKey, unwrap it: AES-256-GCM-decrypt(encryptedMasterKey, wrappingKey)',
+                        '     Otherwise the wrapping key IS the master key (legacy accounts)',
+                        '  3. Unwrap the file key: AES-256-GCM-decrypt(wrappedKey, masterKey)',
+                        '     wrappedKey format: [12-byte IV | ciphertext | 16-byte auth tag]',
+                        '  4. Decrypt the file: AES-256-GCM-decrypt(fileData, fileKey, encryptionIv)',
+                        '     File data format: [ciphertext | 16-byte auth tag]',
+                        '  5. Verify integrity: SHA-256(plaintext) should match plaintextChecksumSha256',
+                        '',
+                        '--- RENEW WALRUS EPOCHS ---',
+                        'Files with a walrusBlobObjectId can have their storage extended:',
+                        '  walrus extend <walrusBlobObjectId> --epochs 5',
+                        'This requires a Sui wallet with WAL tokens. Check walrusEpochEnd to see when renewal is needed.',
+                    ],
+                },
+            };
+            // Write to disk
+            const outputPath = resolve(options.output);
+            writeFileSync(outputPath, JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
+            spinner.succeed(`Exported ${exportedFiles.length} files from ${vaults.length} vault(s)`);
+            console.log(chalk.dim(`  Output: ${outputPath}`));
+            console.log('');
+            // Summary stats
+            const withBlob = exportedFiles.filter((f) => f.walrusBlobId).length;
+            const encrypted = exportedFiles.filter((f) => f.encrypted).length;
+            const hotOnly = exportedFiles.filter((f) => !f.walrusBlobId && f.status === 'hot').length;
+            console.log(`  On Walrus:     ${withBlob} files (recoverable from Walrus network)`);
+            console.log(`  Encrypted:     ${encrypted} files (require passphrase to decrypt)`);
+            if (hotOnly > 0) {
+                console.log(chalk.yellow(`  Hot only:      ${hotOnly} files (NOT yet on Walrus — only in Tusky hot cache)`));
+            }
+            console.log('');
+            console.log(chalk.yellow('  Store this file securely — it contains encryption keys.'));
+            console.log(chalk.dim('  See the "recovery.instructions" field inside for full recovery steps.'));
+        }
+        catch (err) {
+            spinner.fail(`Export failed: ${err.message}`);
+        }
+    });
+}
+//# sourceMappingURL=export.js.map

package/dist/src/commands/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/commands/export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA2DnD,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+EAA+E,CAAC;SAC5F,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;SACtE,MAAM,CAAC,mBAAmB,EAAE,yCAAyC,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,OAA2C,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,0BAA0B,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAEjE,mBAAmB;YACnB,OAAO,CAAC,IAAI,GAAG,oBAAoB,CAAC;YACpC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK;gBAC1B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC;gBACjD,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1D,kCAAkC;YAClC,OAAO,CAAC,IAAI,GAAG,mBAAmB,CAAC;YACnC,MAAM,aAAa,GAAmB,EAAE,CAAC;YAEzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,MAA0B,CAAC;gBAC/B,GAAG,CAAC;oBACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;wBAClC,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,KAAK,EAAE,GAAG;wBACV,MAAM;qBACP,CAAC,CAAC;oBAEH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrC,aAAa,CAAC,IAAI,CAAC;4BACjB,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,SAAS,EAAE,CAAC,EAAE,IAAI,IAAI,SAAS;4BAC/B,eAAe,EAAE,CAAC,EAAE,UAAU,IAAI,SAAS;4BAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,YAAY,EAAE,IAAI,CAAC,YAAY;4BAC/B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;4BAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;4BACnC,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;4BAC/B,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;4BACrD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;4BAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;yBAC1B,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC;oBACxC,OAAO,CAAC,IAAI,GAAG,sBAAsB,aAAa,CAAC,MAAM,UAAU,CAAC;gBACtE,CAAC,QAAQ,MAAM,EAAE;YACnB,CAAC;YAED,gCAAgC;YAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,YAAY,CAAC;YACvD,MAAM,SAAS,GAAG,QAAQ,KAAK,YAAY,CAAC;YAC5C,MAAM,mBAAmB,GAAG,SAAS;gBACnC,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,gDAAgD,CAAC;YAErD,iBAAiB;YACjB,MAAM,QAAQ,GAAmB;gBAC/B,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,OAAO,EAAE;oBACP,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;iBACvB;gBACD,UAAU,EAAE;oBACV,aAAa,EAAE,gBAAgB,CAAC,aAAa;oBAC7C,IAAI,EAAE,gBAAgB,CAAC,IAAI,IAAI,IAAI;oBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,IAAI,IAAI;oBAC3C,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB,IAAI,IAAI;iBAChE;gBACD,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAChD,mBAAmB;gBACnB,UAAU,EAAE,aAAa,CAAC,MAAM;gBAChC,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE;oBACR,YAAY,EAAE;wBACZ,iCAAiC;wBACjC,EAAE;wBACF,mFAAmF;wBACnF,EAAE;wBACF,oCAAoC;wBACpC,+EAA+E;wBAC/E,wBAAwB,mBAAmB,0BAA0B;wBACrE,gDAAgD;wBAChD,oDAAoD;wBACpD,EAAE;wBACF,qCAAqC;wBACrC,sDAAsD;wBACtD,EAAE;wBACF,2DAA2D;wBAC3D,wEAAwE;wBACxE,oFAAoF;wBACpF,gFAAgF;wBAChF,yEAAyE;wBACzE,iEAAiE;wBACjE,EAAE;wBACF,4EAA4E;wBAC5E,+GAA+G;wBAC/G,6EAA6E;wBAC7E,EAAE;wBACF,wEAAwE;wBACxE,0FAA0F;wBAC1F,iHAAiH;wBACjH,qEAAqE;wBACrE,sEAAsE;wBACtE,sEAAsE;wBACtE,6EAA6E;wBAC7E,wDAAwD;wBACxD,gFAAgF;wBAChF,EAAE;wBACF,6BAA6B;wBAC7B,kEAAkE;wBAClE,iDAAiD;wBACjD,iGAAiG;qBAClG;iBACF;aACF,CAAC;YAEF,gBAAgB;YAChB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAE7E,OAAO,CAAC,OAAO,CAAC,YAAY,aAAa,CAAC,MAAM,eAAe,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,gBAAgB;YAChB,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YACpE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAClE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;YAE1F,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,0CAA0C,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,wCAAwC,CAAC,CAAC;YACnF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,OAAO,sDAAsD,CAAC,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,2DAA2D,CAAC,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/commands/files.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerFileCommands(program: Command): void;
+//# sourceMappingURL=files.d.ts.map

package/dist/src/commands/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/commands/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAoLpD"}

package/dist/src/commands/files.js

@@ -0,0 +1,179 @@
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+import { cliConfig } from '../config.js';
+import { getSDKClient } from '../sdk.js';
+import { createTable, formatBytes, formatDate } from '../lib/output.js';
+import { resolveVault } from '../lib/resolve.js';
+export function registerFileCommands(program) {
+    // ls command (top-level shortcut)
+    program.command('ls [vault]')
+        .description('List files')
+        .option('--sort <field>', 'Sort by: name, size, date', 'date')
+        .option('--status <status>', 'Filter by status')
+        .option('--limit <n>', 'Max results', '50')
+        .option('-f, --follow', 'Watch mode: refresh every 3 seconds')
+        .action(async (vaultRef, options) => {
+        const sdk = getSDKClient(program);
+        const format = program.opts().format || cliConfig.get('outputFormat');
+        let vaultId;
+        if (vaultRef) {
+            vaultId = await resolveVault(sdk, vaultRef);
+        }
+        const sortMap = { name: 'name', size: 'sizeBytes', date: 'createdAt' };
+        const fetchAndRender = async () => {
+            const { files } = await sdk.files.list({
+                vaultId,
+                limit: parseInt(options.limit),
+                sortBy: sortMap[options.sort],
+                order: 'desc',
+            });
+            if (format === 'json') {
+                console.log(JSON.stringify({ files }, null, 2));
+                return;
+            }
+            if (files.length === 0) {
+                console.log(chalk.dim('No files found.'));
+                return;
+            }
+            const table = createTable(['Name', 'Size', 'Status', 'Uploaded', 'ID']);
+            for (const f of files) {
+                const statusColors = {
+                    hot: chalk.green,
+                    synced: chalk.blue,
+                    cold: chalk.yellow,
+                    error: chalk.red,
+                    uploading: chalk.dim,
+                };
+                const statusColor = statusColors[f.status] || chalk.white;
+                table.push([
+                    f.name,
+                    formatBytes(f.plaintextSizeBytes || f.sizeBytes),
+                    statusColor(f.status),
+                    formatDate(f.createdAt),
+                    chalk.dim(f.id),
+                ]);
+            }
+            console.log(table.toString());
+        };
+        if (options.follow) {
+            const clear = () => process.stdout.write('\x1B[2J\x1B[H');
+            const render = async () => {
+                clear();
+                console.log(chalk.dim(`Watching files — refreshing every 3s (Ctrl+C to stop)\n`));
+                try {
+                    await fetchAndRender();
+                }
+                catch (err) {
+                    console.error(chalk.red(`Error: ${err.message}`));
+                }
+            };
+            await render();
+            const interval = setInterval(render, 3000);
+            process.on('SIGINT', () => {
+                clearInterval(interval);
+                process.exit(0);
+            });
+            // Keep process alive
+            await new Promise(() => { });
+        }
+        else {
+            await fetchAndRender();
+        }
+    });
+    // info command
+    program.command('info <file-id>')
+        .description('Show file details')
+        .action(async (fileId) => {
+        const sdk = getSDKClient(program);
+        const format = program.opts().format || cliConfig.get('outputFormat');
+        const file = await sdk.files.getStatus(fileId);
+        if (format === 'json') {
+            console.log(JSON.stringify(file, null, 2));
+            return;
+        }
+        console.log(`Name:        ${file.name}`);
+        console.log(`Size:        ${formatBytes(file.sizeBytes)}`);
+        console.log(`MIME:        ${file.mimeType}`);
+        console.log(`Status:      ${file.status}`);
+        if (file.walrusBlobId)
+            console.log(`Walrus Blob: ${file.walrusBlobId}`);
+        console.log(`Uploaded:    ${new Date(file.createdAt).toISOString()}`);
+        console.log(`ID:          ${file.fileId}`);
+    });
+    // status command
+    program.command('status <file-id>')
+        .description('Show sync status')
+        .action(async (fileId) => {
+        const sdk = getSDKClient(program);
+        const file = await sdk.files.getStatus(fileId);
+        console.log(`File:        ${file.name}`);
+        console.log(`Status:      ${file.status}`);
+        if (file.walrusBlobId) {
+            console.log(`Walrus Blob: ${file.walrusBlobId}`);
+        }
+        else {
+            console.log(`Walrus:      ${chalk.dim('Not synced yet')}`);
+        }
+    });
+    // retry command
+    program.command('retry [file-ids...]')
+        .description('Retry failed Walrus sync (all errored files if no IDs given)')
+        .action(async (fileIds) => {
+        const sdk = getSDKClient(program);
+        const format = program.opts().format || cliConfig.get('outputFormat');
+        if (fileIds.length === 0) {
+            const result = await sdk.files.retryAll();
+            if (format === 'json') {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else if (result.retriedCount === 0) {
+                console.log(chalk.dim('No files in error status.'));
+            }
+            else {
+                console.log(chalk.green(`Re-queued ${result.retriedCount} file(s) for Walrus sync.`));
+            }
+            return;
+        }
+        for (const fileId of fileIds) {
+            try {
+                const result = await sdk.files.retry(fileId);
+                if (format === 'json') {
+                    console.log(JSON.stringify(result, null, 2));
+                }
+                else {
+                    console.log(chalk.green(`Retried: ${fileId}`));
+                }
+            }
+            catch (err) {
+                console.error(chalk.red(`Failed to retry ${fileId}: ${err.message}`));
+            }
+        }
+    });
+    // rm command
+    program.command('rm <file-ids...>')
+        .description('Delete one or more files')
+        .option('--force', 'Skip confirmation prompt')
+        .action(async (fileIds, options) => {
+        const sdk = getSDKClient(program);
+        if (!options.force) {
+            const answers = await inquirer.prompt([{
+                    type: 'confirm',
+                    name: 'confirm',
+                    message: `Delete ${fileIds.length} file(s)? This cannot be undone.`,
+                    default: false,
+                }]);
+            if (!answers.confirm)
+                return;
+        }
+        for (const fileId of fileIds) {
+            try {
+                await sdk.files.delete(fileId);
+                console.log(chalk.green(`Deleted: ${fileId}`));
+            }
+            catch (err) {
+                console.error(chalk.red(`Failed to delete ${fileId}: ${err.message}`));
+            }
+        }
+    });
+}
+//# sourceMappingURL=files.js.map

package/dist/src/commands/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/commands/files.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,kCAAkC;IAClC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SAC1B,WAAW,CAAC,YAAY,CAAC;SACzB,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,CAAC;SAC7D,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;SAC/C,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC;SAC1C,MAAM,CAAC,cAAc,EAAE,qCAAqC,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,QAA4B,EAAE,OAAO,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEtE,IAAI,OAA2B,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAE/F,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;YAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrC,OAAO;gBACP,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC9B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAuC;gBACnE,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YAEH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACxE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAuC;oBACvD,GAAG,EAAE,KAAK,CAAC,KAAK;oBAChB,MAAM,EAAE,KAAK,CAAC,IAAI;oBAClB,IAAI,EAAE,KAAK,CAAC,MAAM;oBAClB,KAAK,EAAE,KAAK,CAAC,GAAG;oBAChB,SAAS,EAAE,KAAK,CAAC,GAAG;iBACrB,CAAC;gBACF,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC;gBAE1D,KAAK,CAAC,IAAI,CAAC;oBACT,CAAC,CAAC,IAAI;oBACN,WAAW,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,SAAS,CAAC;oBAChD,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;oBACrB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;gBACxB,KAAK,EAAE,CAAC;gBACR,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC;gBAClF,IAAI,CAAC;oBACH,MAAM,cAAc,EAAE,CAAC;gBACzB,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC,CAAC;YACF,MAAM,MAAM,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACxB,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,qBAAqB;YACrB,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,eAAe;IACf,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9B,WAAW,CAAC,mBAAmB,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,iBAAiB;IACjB,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChC,WAAW,CAAC,kBAAkB,CAAC;SAC/B,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,gBAAgB;IAChB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC;SACnC,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,KAAK,EAAE,OAAiB,EAAE,EAAE;QAClC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,YAAY,2BAA2B,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,aAAa;IACb,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChC,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,OAAiB,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACrC,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,UAAU,OAAO,CAAC,MAAM,kCAAkC;oBACnE,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO;QAC/B,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/commands/mcp.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Commander registration for `tusky mcp` subcommands:
+ *   - tusky mcp serve          — Start the MCP server (stdio transport)
+ *   - tusky mcp install-config — Write MCP config for Claude Code / Cursor
+ */
+import type { Command } from 'commander';
+export declare function registerMcpCommands(program: Command): void;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/src/commands/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiIzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,QAoFnD"}

package/dist/src/commands/mcp.js

@@ -0,0 +1,178 @@
+/**
+ * Commander registration for `tusky mcp` subcommands:
+ *   - tusky mcp serve          — Start the MCP server (stdio transport)
+ *   - tusky mcp install-config — Write MCP config for Claude Code / Cursor
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join, dirname, resolve } from 'path';
+import { homedir } from 'os';
+import chalk from 'chalk';
+import { getApiUrl, getApiKey, cliConfig } from '../config.js';
+import { startMcpServer } from '../mcp/server.js';
+function getTargets() {
+    const home = homedir();
+    return [
+        {
+            name: 'claude-code',
+            configPath: join(process.cwd(), '.mcp.json'),
+            description: 'Claude Code (project-level .mcp.json in current directory)',
+        },
+        {
+            name: 'claude-desktop',
+            configPath: process.platform === 'win32'
+                ? join(home, 'AppData', 'Roaming', 'Claude', 'claude_desktop_config.json')
+                : join(home, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json'),
+            description: 'Claude Desktop',
+        },
+        {
+            name: 'cursor',
+            configPath: join(home, '.cursor', 'mcp.json'),
+            description: 'Cursor editor',
+        },
+    ];
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function getTuskyBinaryCommand() {
+    // Strategy: use absolute paths to avoid PATH resolution failures.
+    // Agent hosts (Claude Code, Cursor, Desktop) spawn processes with a
+    // minimal PATH that won't include nvm shims, pnpm globals, etc.
+    //
+    // Priority:
+    //   1. If `tusky` exists in a well-known PATH dir → use it directly
+    //      (standard npm -g install lands in /usr/local/bin or /opt/homebrew/bin)
+    //   2. Resolve absolute path to node + our entry script
+    //      (works for pnpm link, local dev, non-standard installs)
+    //   3. Fallback to npx
+    // Check if `tusky` is available in the standard agent-visible PATH dirs
+    const agentPathDirs = ['/usr/local/bin', '/opt/homebrew/bin', '/usr/bin'];
+    for (const dir of agentPathDirs) {
+        const tuskyBin = join(dir, 'tusky');
+        if (existsSync(tuskyBin)) {
+            return { command: tuskyBin, args: ['mcp', 'serve'] };
+        }
+    }
+    // Not in standard PATH — resolve absolute node + entry script paths
+    // (handles pnpm link --global, local dev, monorepo installs)
+    const nodeExe = process.execPath;
+    const thisDir = dirname(new URL(import.meta.url).pathname);
+    // Try: <thisDir>/../../bin/tuskydp.js  (running from dist/commands/)
+    const entryPoint = resolve(join(thisDir, '..', '..', 'bin', 'tuskydp.js'));
+    if (existsSync(entryPoint)) {
+        return { command: nodeExe, args: [entryPoint, 'mcp', 'serve'] };
+    }
+    // Try: <thisDir>/../../../dist/bin/tuskydp.js  (running from src/commands/ in dev)
+    const distEntry = resolve(join(thisDir, '..', '..', '..', 'dist', 'bin', 'tuskydp.js'));
+    if (existsSync(distEntry)) {
+        return { command: nodeExe, args: [distEntry, 'mcp', 'serve'] };
+    }
+    // Last resort: npx (works if npm/npx is in the agent's PATH)
+    return { command: 'npx', args: ['-y', '@tuskydp/cli', 'mcp', 'serve'] };
+}
+function buildMcpServerEntry(apiKey, apiUrl) {
+    const { command, args } = getTuskyBinaryCommand();
+    const env = {};
+    if (apiKey)
+        env.TUSKYDP_API_KEY = apiKey;
+    if (apiUrl)
+        env.TUSKYDP_API_URL = apiUrl;
+    // Placeholder for password — user fills in
+    env.TUSKYDP_PASSWORD = '';
+    const entry = {
+        command,
+        args,
+    };
+    if (Object.keys(env).length > 0) {
+        entry.env = env;
+    }
+    return entry;
+}
+function readJsonFile(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    try {
+        return JSON.parse(readFileSync(filePath, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+function writeJsonFile(filePath, data) {
+    mkdirSync(dirname(filePath), { recursive: true });
+    writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+}
+// ---------------------------------------------------------------------------
+// Command registration
+// ---------------------------------------------------------------------------
+export function registerMcpCommands(program) {
+    const mcp = program
+        .command('mcp')
+        .description('MCP server for AI agents (Claude Code, Cursor, etc.)');
+    // ── tusky mcp serve ──────────────────────────────────────────────────
+    mcp
+        .command('serve')
+        .description('Start the MCP server (stdio transport for AI agent integration)')
+        .action(async () => {
+        // Resolve API credentials from the same priority chain as all CLI commands
+        const root = mcp.parent || mcp;
+        const apiUrl = getApiUrl(root.opts().apiUrl);
+        const apiKey = getApiKey(root.opts().apiKey);
+        await startMcpServer({ apiKey, apiUrl });
+    });
+    // ── tusky mcp install-config ─────────────────────────────────────────
+    mcp
+        .command('install-config')
+        .description('Add Tusky MCP server config to Claude Code, Claude Desktop, or Cursor')
+        .option('--target <target>', 'Target client: claude-code, claude-desktop, cursor', 'claude-code')
+        .option('--api-key <key>', 'API key to embed (defaults to stored key)')
+        .option('--api-url <url>', 'API URL override')
+        .action(async (options) => {
+        const targets = getTargets();
+        const target = targets.find((t) => t.name === options.target);
+        if (!target) {
+            console.error(chalk.red(`Unknown target "${options.target}". Valid targets: ${targets.map((t) => t.name).join(', ')}`));
+            process.exit(1);
+        }
+        // Resolve API key (flag > stored > error)
+        const root = mcp.parent || mcp;
+        const apiKey = options.apiKey ?? root.opts().apiKey ?? process.env.TUSKYDP_API_KEY ?? cliConfig.get('apiKey');
+        const apiUrl = options.apiUrl ?? root.opts().apiUrl ?? process.env.TUSKYDP_API_URL;
+        // Only include non-default values
+        const resolvedApiUrl = apiUrl && apiUrl !== 'https://api.tusky.dev' ? apiUrl : undefined;
+        // Build the server entry
+        const serverEntry = buildMcpServerEntry(apiKey, resolvedApiUrl);
+        // Read existing config
+        const config = readJsonFile(target.configPath);
+        // Merge into mcpServers
+        if (!config.mcpServers || typeof config.mcpServers !== 'object') {
+            config.mcpServers = {};
+        }
+        const mcpServers = config.mcpServers;
+        const existed = 'tusky' in mcpServers;
+        mcpServers.tusky = serverEntry;
+        // Write back
+        writeJsonFile(target.configPath, config);
+        console.log(chalk.green(`${existed ? 'Updated' : 'Added'} Tusky MCP server config for ${target.description}`));
+        console.log(chalk.dim(`  Config file: ${target.configPath}`));
+        console.log('');
+        if (!apiKey) {
+            console.log(chalk.yellow('  Note: No API key found. Add your API key to the config:'));
+            console.log(chalk.dim(`  Set TUSKYDP_API_KEY in the env block of ${target.configPath}`));
+            console.log('');
+        }
+        console.log(chalk.yellow('  Remember to set TUSKYDP_PASSWORD in the config for private vault encryption:'));
+        console.log(chalk.dim(`  Edit the env block in ${target.configPath}`));
+        console.log('');
+        if (options.target === 'claude-desktop') {
+            console.log(chalk.dim('  Restart Claude Desktop to pick up the changes.'));
+        }
+        else if (options.target === 'claude-code') {
+            console.log(chalk.dim('  Claude Code will automatically detect the .mcp.json file.'));
+        }
+        else if (options.target === 'cursor') {
+            console.log(chalk.dim('  Restart Cursor to pick up the changes.'));
+        }
+    });
+}
+//# sourceMappingURL=mcp.js.map