abtars 0.1.0-alpha.23 → 0.1.0-alpha.24

package/bundle/abtars-cli.js

@@ -2,7 +2,7 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   install
-} from "./chunk-7CHLS36W.js";
+} from "./chunk-XMJ76XLE.js";
 import {
   RETENTION,
   acquireLock,
@@ -1676,7 +1676,7 @@ Update complete: ${staged.version}
       } catch {
       }
     }
-    const { loadManifest } = await import("./install-manifest-ZETY4AFS.js");
+    const { loadManifest } = await import("./install-manifest-QRWID3KZ.js");
     const sourceRoot = staged.stagedPath;
     const installManifest = loadManifest(sourceRoot);
     const repoScripts = join9(sourceRoot, "scripts");
@@ -1726,7 +1726,7 @@ Update complete: ${staged.version}
     }
     process.stdout.write(`\u2713 scripts refreshed (${scriptFiles.length} files)
 `);
-    const { writeWrapper } = await import("./install-24XR5FO5.js");
+    const { writeWrapper } = await import("./install-K67U3WLX.js");
     await mkdir4(paths.bin, { recursive: true });
     for (const name of installManifest.cliWrappers) {
       await writeWrapper(paths.bin, name, paths.current, false);
@@ -1783,7 +1783,7 @@ Update complete: ${staged.version}
       }
     }
     void hashFile;
-    const { ensureInstallInvariants } = await import("./ensure-invariants-KUXIW73S.js");
+    const { ensureInstallInvariants } = await import("./ensure-invariants-BJIEOSJ2.js");
     const invariantResults = await ensureInstallInvariants(process.cwd(), paths.home);
     if (invariantResults.length > 0) {
       process.stdout.write(`\u2713 invariants: ${invariantResults.join(", ")}

package/bundle/chunk-XMJ76XLE.js

@@ -0,0 +1,386 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  emptyManifest,
+  packagePaths,
+  readManifest,
+  resolveUserBinDir,
+  writeManifest
+} from "./chunk-HXJRZWKA.js";
+
+// src/cli/commands/install.ts
+import { mkdir, readFile, stat, symlink, writeFile } from "node:fs/promises";
+import { existsSync, readFileSync, readdirSync, copyFileSync, mkdirSync } from "node:fs";
+import { hostname, homedir } from "node:os";
+import { basename, dirname, join } from "node:path";
+async function exists(p) {
+  try {
+    await stat(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function existsAny(p) {
+  try {
+    const { lstat } = await import("node:fs/promises");
+    await lstat(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function isSymlink(p) {
+  try {
+    const { lstat } = await import("node:fs/promises");
+    const s = await lstat(p);
+    return s.isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+async function createSkeleton(home, dryRun) {
+  const { loadManifest } = await import("./install-manifest-QRWID3KZ.js");
+  const manifest = loadManifest();
+  const dirs = manifest.directories.map((d) => join(home, d.path));
+  if (dryRun) {
+    process.stdout.write(`[dry-run] mkdir -p:
+  ${dirs.join("\n  ")}
+`);
+    return;
+  }
+  for (const d of manifest.directories) {
+    await mkdir(join(home, d.path), { recursive: true, mode: d.mode ? parseInt(d.mode, 8) : void 0 });
+  }
+}
+async function seedConfig(repoRoot, _configDir, dryRun, home) {
+  const { loadManifest } = await import("./install-manifest-QRWID3KZ.js");
+  const manifest = loadManifest(repoRoot);
+  const seeded = [];
+  for (const seed of manifest.configSeeds) {
+    const src = join(repoRoot, seed.source);
+    const dst = join(home, seed.dest);
+    if (!await exists(src)) continue;
+    if (await exists(dst)) continue;
+    if (dryRun) {
+      seeded.push(`[dry-run] cp ${src} ${dst}`);
+      continue;
+    }
+    const content = await readFile(src, "utf-8");
+    await mkdir(dirname(dst), { recursive: true });
+    await writeFile(dst, content, { mode: seed.mode ? parseInt(seed.mode, 8) : 420 });
+    seeded.push(basename(dst));
+  }
+  return seeded;
+}
+async function reconcilePathLink(binDir, userBinDir, name, force, dryRun) {
+  const linkPath = join(userBinDir, name);
+  const targetPath = join(binDir, name);
+  const linkExists = await existsAny(linkPath);
+  if (!linkExists) {
+    if (dryRun) return { action: `[dry-run] ln -s ${targetPath} ${linkPath}` };
+    await symlink(targetPath, linkPath);
+    return { action: `created ${linkPath}` };
+  }
+  if (await isSymlink(linkPath)) {
+    const { readlink, unlink } = await import("node:fs/promises");
+    const current = await readlink(linkPath);
+    const ownsIt = current === targetPath;
+    if (ownsIt) {
+      if (dryRun) return { action: `[dry-run] overwrite ${linkPath} (we own it)` };
+      await unlink(linkPath);
+      await symlink(targetPath, linkPath);
+      return { action: `updated ${linkPath}` };
+    }
+    if (force) {
+      if (dryRun) return { action: `[dry-run] --force overwrite ${linkPath} (currently -> ${current})` };
+      await unlink(linkPath);
+      await symlink(targetPath, linkPath);
+      return { action: `forced overwrite ${linkPath} (was -> ${current})` };
+    }
+    return {
+      action: "refused",
+      message: `${linkPath} is a symlink to ${current} (not ours). Pass --force to overwrite.`
+    };
+  }
+  if (force) {
+    if (dryRun) return { action: `[dry-run] --force overwrite ${linkPath} (regular file)` };
+    const { unlink } = await import("node:fs/promises");
+    await unlink(linkPath);
+    await symlink(targetPath, linkPath);
+    return { action: `forced overwrite ${linkPath} (was regular file)` };
+  }
+  return {
+    action: "refused",
+    message: `${linkPath} exists as a regular file (not our symlink). Pass --force to overwrite.`
+  };
+}
+async function writeWrapper(binDir, name, currentLink, dryRun) {
+  const bundleFile = name === "abtars" ? "abtars-cli.js" : `${name}.js`;
+  const target = join(currentLink, "bundle", bundleFile);
+  const distFile = name === "abtars" ? "abtars.js" : `${name}.js`;
+  const fallback = join(currentLink, "dist", "cli", distFile);
+  const content = `#!/usr/bin/env bash
+if [ -f "${target}" ]; then
+  exec node "${target}" "$@"
+elif [ -f "${fallback}" ]; then
+  exec node "${fallback}" "$@"
+else
+  # No local release \u2014 fall through to npm global binary
+  GLOBAL_BIN="$(npm root -g 2>/dev/null)/abtars/bundle/${bundleFile}"
+  if [ -f "$GLOBAL_BIN" ]; then
+    exec node "$GLOBAL_BIN" "$@"
+  fi
+  echo "abtars: no release staged. Run 'abtars install' first." >&2
+  exit 1
+fi
+`;
+  const path = join(binDir, name);
+  if (dryRun) {
+    process.stdout.write(`[dry-run] write wrapper ${path} -> node ${target} (fallback: ${fallback})
+`);
+    return;
+  }
+  await writeFile(path, content, { mode: 493 });
+}
+function isPathOnPATH(userBinDir) {
+  const PATH = process.env["PATH"] ?? "";
+  return PATH.split(":").some((p) => p === userBinDir);
+}
+async function install(opts) {
+  const paths = packagePaths("abtars");
+  const home = paths.home;
+  const userBinDir = resolveUserBinDir();
+  const repoRoot = process.cwd();
+  const { initInstallLog, logInstall, logInstallHeader } = await import("./install-log-Q6RUHKWC.js");
+  initInstallLog(home);
+  logInstallHeader("install");
+  const _origWrite = process.stdout.write.bind(process.stdout);
+  process.stdout.write = (chunk, ...args) => {
+    if (typeof chunk === "string" && (chunk.startsWith("\u2713") || chunk.startsWith("\u26A0"))) logInstall(chunk.trimEnd());
+    return _origWrite(chunk, ...args);
+  };
+  const homeExists = await exists(home);
+  const manifest = homeExists ? await readManifest(paths.manifest) : null;
+  if (homeExists && manifest && !opts.force && !opts.restore) {
+    process.stderr.write(
+      `~/.abtars already installed at version ${manifest.version || "(unset)"}.
+Use 'abtars update' to upgrade, or --force to re-seed missing config.
+`
+    );
+    return 2;
+  }
+  await createSkeleton(home, opts.dryRun);
+  process.stdout.write(`\u2713 skeleton at ${home}
+`);
+  const kiroAgentsDir = join(homedir(), ".kiro", "agents");
+  const professorJson = join(kiroAgentsDir, "professor.json");
+  if (!opts.dryRun) {
+    await mkdir(kiroAgentsDir, { recursive: true });
+    if (!await exists(professorJson)) {
+      await writeFile(professorJson, JSON.stringify({
+        name: "professor",
+        description: "Abtars bridge agent",
+        tools: ["*"],
+        allowedTools: ["@builtin"],
+        toolsSettings: { shell: { autoAllowReadonly: true } },
+        includeMcpJson: true
+      }, null, 2) + "\n");
+      process.stdout.write(`\u2713 kiro agent: ${professorJson}
+`);
+    }
+  } else {
+    process.stdout.write(`[dry-run] create ${professorJson}
+`);
+  }
+  const identityKey = join(paths.config, "identity.key");
+  const identityPub = join(paths.config, "identity.pub");
+  if (!opts.dryRun && !await exists(identityKey)) {
+    const { generateKeyPairSync } = await import("node:crypto");
+    const { privateKey, publicKey } = generateKeyPairSync("ed25519");
+    await writeFile(identityKey, privateKey.export({ format: "der", type: "pkcs8" }).toString("base64"));
+    await writeFile(identityPub, publicKey.export({ format: "der", type: "spki" }).toString("base64"));
+    const { chmodSync } = await import("node:fs");
+    chmodSync(identityKey, 384);
+    process.stdout.write(`\u2713 identity keypair generated
+`);
+  }
+  const identityCrt = join(paths.config, "identity.crt");
+  const identityTlsKey = join(paths.config, "identity.tls.key");
+  if (!opts.dryRun && !await exists(identityCrt)) {
+    const { execSync } = await import("node:child_process");
+    const { chmodSync } = await import("node:fs");
+    const agentName = hostname();
+    try {
+      execSync(`openssl req -x509 -newkey ed25519 -keyout identity.tls.key -out identity.crt -days 3650 -nodes -subj "/CN=${agentName}"`, { cwd: paths.config, stdio: "ignore" });
+      chmodSync(identityTlsKey, 384);
+      process.stdout.write(`\u2713 TLS certificate generated (Ed25519, 10yr)
+`);
+    } catch (err) {
+      process.stderr.write(`\u26A0 TLS cert generation failed (openssl not found?). Agent-api will start without TLS.
+`);
+    }
+  }
+  const seeded = await seedConfig(repoRoot, paths.config, opts.dryRun, home);
+  if (seeded.length > 0) {
+    process.stdout.write(`\u2713 seeded config: ${seeded.join(", ")}
+`);
+  }
+  const { loadManifest: loadInstallManifest } = await import("./install-manifest-QRWID3KZ.js");
+  const installManifest = loadInstallManifest(repoRoot);
+  if (!opts.dryRun) {
+    await mkdir(paths.bin, { recursive: true });
+  }
+  for (const name of installManifest.cliWrappers) {
+    await writeWrapper(paths.bin, name, paths.current, opts.dryRun);
+  }
+  process.stdout.write(`\u2713 wrappers in ${paths.bin}
+`);
+  if (!opts.dryRun) await mkdir(userBinDir, { recursive: true });
+  const refused = [];
+  for (const name of installManifest.cliWrappers) {
+    const r = await reconcilePathLink(paths.bin, userBinDir, name, opts.force, opts.dryRun);
+    if (r.action === "refused") {
+      refused.push(r.message ?? name);
+    }
+  }
+  if (refused.length > 0) {
+    process.stderr.write(`
+PATH symlink conflicts:
+  ${refused.join("\n  ")}
+`);
+    return 4;
+  }
+  process.stdout.write(`\u2713 PATH symlinks in ${userBinDir}
+`);
+  if (!isPathOnPATH(userBinDir)) {
+    process.stderr.write(
+      `
+Warning: ${userBinDir} is not on $PATH. Add to your shell config:
+  export PATH="${userBinDir}:$PATH"
+`
+    );
+  }
+  const manifestAfter = await readManifest(paths.manifest);
+  if (manifestAfter === null && !opts.dryRun) {
+    await writeManifest(paths.manifest, {
+      ...emptyManifest("abtars", hostname()),
+      version: "",
+      preMigrationBackup: null
+    });
+    process.stdout.write(`\u2713 manifest initialized at ${paths.manifest}
+`);
+  }
+  const manifestForMode = await readManifest(paths.manifest);
+  const existingMode = manifestForMode?.installMode;
+  const mode = opts.mode ?? existingMode ?? "supervised";
+  if (manifestForMode) {
+    await writeManifest(paths.manifest, { ...manifestForMode, installMode: mode });
+  }
+  process.stdout.write(`\u2713 install mode: ${mode}
+`);
+  if (opts.restore) {
+    const { spawnSync } = await import("node:child_process");
+    const { existsSync: fileExists } = await import("node:fs");
+    const zipPath = opts.restore;
+    if (!fileExists(zipPath)) {
+      process.stderr.write(`error: backup file not found: ${zipPath}
+`);
+      return 1;
+    }
+    const tmpDir = join(process.env["TMPDIR"] ?? "/tmp", `abtars-restore-${Date.now()}`);
+    const unzip = spawnSync("unzip", ["-o", zipPath, "-d", tmpDir], { encoding: "utf-8" });
+    if (unzip.status !== 0) {
+      process.stderr.write(`error: unzip failed: ${unzip.stderr}
+`);
+      return 1;
+    }
+    const abSrc = join(tmpDir, "abtars");
+    if (fileExists(abSrc)) {
+      spawnSync("cp", ["-r", ...readdirSync(abSrc).map((f) => join(abSrc, f)), home], { stdio: "inherit" });
+      process.stdout.write(`\u2713 restored abtars config
+`);
+    }
+    const abmindHome = process.env["ABMIND_HOME"] ?? join(dirname(home), ".abmind");
+    const abmindSrc = join(tmpDir, "abmind");
+    if (fileExists(abmindSrc)) {
+      spawnSync("cp", ["-r", ...readdirSync(abmindSrc).map((f) => join(abmindSrc, f)), abmindHome], { stdio: "inherit" });
+      process.stdout.write(`\u2713 restored abmind data
+`);
+    }
+    spawnSync("rm", ["-rf", tmpDir]);
+    process.stdout.write(`
+Restore complete.
+`);
+    process.stdout.write(`Next: 'abtars update' to build and activate.
+`);
+    return 0;
+  }
+  if (mode === "supervised") {
+    const { execSync } = await import("node:child_process");
+    if (process.platform === "darwin") {
+      const plistSrc = join(home, "scripts", "com.abtars.watchdog.plist");
+      const plistDst = join(homedir(), "Library", "LaunchAgents", "com.abtars.watchdog.plist");
+      if (existsSync(plistSrc)) {
+        const content = readFileSync(plistSrc, "utf-8").replaceAll("{{HOME}}", homedir());
+        const { writeFileSync } = await import("node:fs");
+        writeFileSync(plistDst, content);
+        try {
+          execSync(`launchctl load "${plistDst}"`, { stdio: "ignore" });
+        } catch {
+        }
+        process.stdout.write(`\u2713 watchdog LaunchAgent loaded
+`);
+      }
+    } else if (process.platform === "linux") {
+      const unitSrc = join(home, "scripts", "abtars-watchdog.service");
+      const unitDir = join(homedir(), ".config", "systemd", "user");
+      if (existsSync(unitSrc)) {
+        mkdirSync(unitDir, { recursive: true });
+        copyFileSync(unitSrc, join(unitDir, "abtars-watchdog.service"));
+        try {
+          execSync("systemctl --user daemon-reload && systemctl --user enable --now abtars-watchdog", { stdio: "ignore" });
+        } catch {
+        }
+        process.stdout.write(`\u2713 watchdog systemd user service enabled
+`);
+      }
+    }
+  }
+  process.stdout.write(`
+Install complete.
+`);
+  if (!manifestAfter || manifestAfter.version === "") {
+    process.stdout.write(`Next: 'abtars update' to build and activate the first release.
+`);
+  } else {
+    process.stdout.write(`
+\u2500\u2500 Next steps \u2500\u2500
+`);
+    process.stdout.write(`  1. Run 'abtars onboard' to configure Telegram token + model provider
+`);
+    process.stdout.write(`  2. (Optional) Install Ollama for memory embeddings: curl -fsSL https://ollama.com/install.sh | sh
+`);
+    process.stdout.write(`  3. Start the bridge: 'abtars restart' or use the watchdog
+
+`);
+  }
+  const { printHealthSummary } = await import("./health-check-RJ2SUJYL.js");
+  printHealthSummary(paths.home);
+  if (!opts.dryRun && opts.restore) {
+    const { validateMinimumViability, formatValidationError } = await import("./install-validate-H74LUCE2.js");
+    const validation = validateMinimumViability(paths.config);
+    if (!validation.ok) {
+      const invocation = `abtars install --restore ${opts.restore}`;
+      process.stderr.write("\n" + formatValidationError(validation, invocation) + "\n");
+      return 1;
+    }
+  }
+  return 0;
+}
+
+export {
+  writeWrapper,
+  install
+};
+//# sourceMappingURL=chunk-XMJ76XLE.js.map

package/bundle/chunk-XMJ76XLE.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/commands/install.ts"],
+  "sourcesContent": ["/**\n * `abtars install [--upgrade]` \u2014 first-time setup.\n *\n * Phase 1 behavior:\n *   - No existing ~/.abtars: create dirs, seed config/ from .env.example,\n *     create PATH symlinks. Does NOT run onboard (Phase 3).\n *   - Existing ~/.abtars with flat layout (pre-158): refuse unless\n *     --upgrade, then run migration 003-flat-to-releases (Phase 1c).\n *   - Existing ~/.abtars with new layout: refuse unless --force (which\n *     re-seeds missing config and reconciles symlinks, no code changes).\n */\n\nimport { mkdir, readFile, stat, symlink, writeFile } from 'node:fs/promises';\nimport { existsSync, readFileSync, readdirSync, copyFileSync, mkdirSync } from 'node:fs';\nimport { hostname, homedir } from 'node:os';\nimport { basename, dirname, join } from 'node:path';\nimport { emptyManifest, packagePaths, readManifest, resolveUserBinDir, writeManifest } from '../deploy-lib-import.js';\n\nexport interface InstallOptions {\n  readonly restore?: string;\n  readonly force: boolean;\n  readonly dryRun: boolean;\n  readonly mode?: \"simple\" | \"supervised\";\n}\n\n// CLI wrappers are read from install-manifest.json at runtime.\n// Each is a thin wrapper that invokes `node current/dist/cli/<name>.js \"$@\"`.\n// Regenerated on every install / flat-to-releases migration.\n\nasync function exists(p: string): Promise<boolean> {\n  try {\n    await stat(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * True if `p` exists as any filesystem entry \u2014 regular file, directory,\n * symlink (including dangling). Use this for collision checks in\n * reconcilePathLink, where a dangling symlink still occupies the inode\n * and would cause EEXIST on symlink(). `exists()` above uses stat() which\n * follows symlinks and returns false on dangling ones; that's wrong for\n * collision detection.\n */\nasync function existsAny(p: string): Promise<boolean> {\n  try {\n    const { lstat } = await import('node:fs/promises');\n    await lstat(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function isSymlink(p: string): Promise<boolean> {\n  try {\n    const { lstat } = await import('node:fs/promises');\n    const s = await lstat(p);\n    return s.isSymbolicLink();\n  } catch {\n    return false;\n  }\n}\n\nasync function createSkeleton(home: string, dryRun: boolean): Promise<void> {\n  const { loadManifest } = await import('../install-manifest.js');\n  const manifest = loadManifest();\n  const dirs = manifest.directories.map(d => join(home, d.path));\n  if (dryRun) {\n    process.stdout.write(`[dry-run] mkdir -p:\\n  ${dirs.join('\\n  ')}\\n`);\n    return;\n  }\n  for (const d of manifest.directories) {\n    await mkdir(join(home, d.path), { recursive: true, mode: d.mode ? parseInt(d.mode, 8) : undefined });\n  }\n}\n\nasync function seedConfig(repoRoot: string, _configDir: string, dryRun: boolean, home: string): Promise<readonly string[]> {\n  const { loadManifest } = await import('../install-manifest.js');\n  const manifest = loadManifest(repoRoot);\n  const seeded: string[] = [];\n  for (const seed of manifest.configSeeds) {\n    const src = join(repoRoot, seed.source);\n    const dst = join(home, seed.dest);\n    if (!(await exists(src))) continue;\n    if (await exists(dst)) continue;\n    if (dryRun) {\n      seeded.push(`[dry-run] cp ${src} ${dst}`);\n      continue;\n    }\n    const content = await readFile(src, 'utf-8');\n    await mkdir(dirname(dst), { recursive: true });\n    await writeFile(dst, content, { mode: seed.mode ? parseInt(seed.mode, 8) : 0o644 });\n    seeded.push(basename(dst));\n  }\n  return seeded;\n}\n\n/**\n * Reconcile a single PATH symlink at ~/.local/bin/<name>.\n * Policy (plan \u00A7\"PATH symlink collision\"):\n *   - Missing  \u2192 create\n *   - Symlink pointing into our own ~/.abtars/bin/ \u2192 overwrite\n *   - Anything else \u2192 refuse with message, unless force\n */\nasync function reconcilePathLink(\n  binDir: string,\n  userBinDir: string,\n  name: string,\n  force: boolean,\n  dryRun: boolean,\n): Promise<{ action: string; message?: string }> {\n  const linkPath = join(userBinDir, name);\n  const targetPath = join(binDir, name);\n  const linkExists = await existsAny(linkPath);\n  if (!linkExists) {\n    if (dryRun) return { action: `[dry-run] ln -s ${targetPath} ${linkPath}` };\n    await symlink(targetPath, linkPath);\n    return { action: `created ${linkPath}` };\n  }\n  if (await isSymlink(linkPath)) {\n    const { readlink, unlink } = await import('node:fs/promises');\n    const current = await readlink(linkPath);\n    // \"We own it\" means: points at THIS install's bin dir, not a fuzzy match\n    // on any path containing /.abtars/bin/. A smoke-test install at\n    // ABTARS_HOME=~/.cache/ab-smoke-.../ must not clobber the real\n    // ~/.abtars symlinks. Compare absolute paths directly.\n    const ownsIt = current === targetPath;\n    if (ownsIt) {\n      if (dryRun) return { action: `[dry-run] overwrite ${linkPath} (we own it)` };\n      await unlink(linkPath);\n      await symlink(targetPath, linkPath);\n      return { action: `updated ${linkPath}` };\n    }\n    if (force) {\n      if (dryRun) return { action: `[dry-run] --force overwrite ${linkPath} (currently -> ${current})` };\n      await unlink(linkPath);\n      await symlink(targetPath, linkPath);\n      return { action: `forced overwrite ${linkPath} (was -> ${current})` };\n    }\n    return {\n      action: 'refused',\n      message: `${linkPath} is a symlink to ${current} (not ours). Pass --force to overwrite.`,\n    };\n  }\n  if (force) {\n    if (dryRun) return { action: `[dry-run] --force overwrite ${linkPath} (regular file)` };\n    const { unlink } = await import('node:fs/promises');\n    await unlink(linkPath);\n    await symlink(targetPath, linkPath);\n    return { action: `forced overwrite ${linkPath} (was regular file)` };\n  }\n  return {\n    action: 'refused',\n    message: `${linkPath} exists as a regular file (not our symlink). Pass --force to overwrite.`,\n  };\n}\n\nexport async function writeWrapper(binDir: string, name: string, currentLink: string, dryRun: boolean): Promise<void> {\n  const bundleFile = name === 'abtars' ? 'abtars-cli.js' : `${name}.js`;\n  const target = join(currentLink, 'bundle', bundleFile);\n  // Fallback: pre-bundle dist/ layout (tsc build) for installs that haven't migrated yet.\n  const distFile = name === 'abtars' ? 'abtars.js' : `${name}.js`;\n  const fallback = join(currentLink, 'dist', 'cli', distFile);\n  const content = `#!/usr/bin/env bash\nif [ -f \"${target}\" ]; then\n  exec node \"${target}\" \"$@\"\nelif [ -f \"${fallback}\" ]; then\n  exec node \"${fallback}\" \"$@\"\nelse\n  # No local release \u2014 fall through to npm global binary\n  GLOBAL_BIN=\"$(npm root -g 2>/dev/null)/abtars/bundle/${bundleFile}\"\n  if [ -f \"$GLOBAL_BIN\" ]; then\n    exec node \"$GLOBAL_BIN\" \"$@\"\n  fi\n  echo \"abtars: no release staged. Run 'abtars install' first.\" >&2\n  exit 1\nfi\n`;\n  const path = join(binDir, name);\n  if (dryRun) {\n    process.stdout.write(`[dry-run] write wrapper ${path} -> node ${target} (fallback: ${fallback})\\n`);\n    return;\n  }\n  await writeFile(path, content, { mode: 0o755 });\n}\n\nfunction isPathOnPATH(userBinDir: string): boolean {\n  const PATH = process.env['PATH'] ?? '';\n  return PATH.split(':').some((p) => p === userBinDir);\n}\n\nexport async function install(opts: InstallOptions): Promise<number> {\n  const paths = packagePaths('abtars');\n  const home = paths.home;\n  const userBinDir = resolveUserBinDir();\n  const repoRoot = process.cwd();\n\n  // Install log (#718)\n  const { initInstallLog, logInstall, logInstallHeader } = await import(\"../install-log.js\");\n  initInstallLog(home);\n  logInstallHeader(\"install\");\n  const _origWrite = process.stdout.write.bind(process.stdout);\n  process.stdout.write = ((chunk: any, ...args: any[]) => {\n    if (typeof chunk === \"string\" && (chunk.startsWith(\"\u2713\") || chunk.startsWith(\"\u26A0\"))) logInstall(chunk.trimEnd());\n    return _origWrite(chunk, ...args);\n  }) as typeof process.stdout.write;\n\n  const homeExists = await exists(home);\n  const manifest = homeExists ? await readManifest(paths.manifest) : null;\n\n  if (homeExists && manifest && !opts.force && !opts.restore) {\n    process.stderr.write(\n      `~/.abtars already installed at version ${manifest.version || '(unset)'}.\\nUse 'abtars update' to upgrade, or --force to re-seed missing config.\\n`,\n    );\n    return 2;\n  }\n\n  // Create skeleton (idempotent)\n  await createSkeleton(home, opts.dryRun);\n  process.stdout.write(`\u2713 skeleton at ${home}\\n`);\n\n  // Core templates: abmind seeds its own on first boot (#427 ensureInitialized).\n  // No longer seeded by abtars install.\n\n  // Create kiro-cli agent config \u2014 ACP transport needs ~/.kiro/agents/professor.json\n  const kiroAgentsDir = join(homedir(), '.kiro', 'agents');\n  const professorJson = join(kiroAgentsDir, 'professor.json');\n  if (!opts.dryRun) {\n    await mkdir(kiroAgentsDir, { recursive: true });\n    if (!(await exists(professorJson))) {\n      await writeFile(professorJson, JSON.stringify({\n        name: \"professor\",\n        description: \"Abtars bridge agent\",\n        tools: [\"*\"],\n        allowedTools: [\"@builtin\"],\n        toolsSettings: { shell: { autoAllowReadonly: true } },\n        includeMcpJson: true,\n      }, null, 2) + '\\n');\n      process.stdout.write(`\u2713 kiro agent: ${professorJson}\\n`);\n    }\n  } else {\n    process.stdout.write(`[dry-run] create ${professorJson}\\n`);\n  }\n\n  // Generate Ed25519 identity keypair (skip if already exists)\n  const identityKey = join(paths.config, 'identity.key');\n  const identityPub = join(paths.config, 'identity.pub');\n  if (!opts.dryRun && !(await exists(identityKey))) {\n    const { generateKeyPairSync } = await import('node:crypto');\n    const { privateKey, publicKey } = generateKeyPairSync('ed25519');\n    await writeFile(identityKey, privateKey.export({ format: 'der', type: 'pkcs8' }).toString('base64'));\n    await writeFile(identityPub, publicKey.export({ format: 'der', type: 'spki' }).toString('base64'));\n    const { chmodSync } = await import('node:fs');\n    chmodSync(identityKey, 0o600);\n    process.stdout.write(`\u2713 identity keypair generated\\n`);\n  }\n\n  // Generate self-signed Ed25519 TLS certificate (skip if already exists)\n  const identityCrt = join(paths.config, 'identity.crt');\n  const identityTlsKey = join(paths.config, 'identity.tls.key');\n  if (!opts.dryRun && !(await exists(identityCrt))) {\n    const { execSync } = await import('node:child_process');\n    const { chmodSync } = await import('node:fs');\n    const agentName = hostname();\n    try {\n      execSync(`openssl req -x509 -newkey ed25519 -keyout identity.tls.key -out identity.crt -days 3650 -nodes -subj \"/CN=${agentName}\"`, { cwd: paths.config, stdio: 'ignore' });\n      chmodSync(identityTlsKey, 0o600);\n      process.stdout.write(`\u2713 TLS certificate generated (Ed25519, 10yr)\\n`);\n    } catch (err) {\n      process.stderr.write(`\u26A0 TLS cert generation failed (openssl not found?). Agent-api will start without TLS.\\n`);\n    }\n  }\n\n  // Seed config from examples (only missing ones)\n  const seeded = await seedConfig(repoRoot, paths.config, opts.dryRun, home);\n  if (seeded.length > 0) {\n    process.stdout.write(`\u2713 seeded config: ${seeded.join(', ')}\\n`);\n  }\n\n  // Write wrappers (always overwrite \u2014 they're regenerable thin shims)\n  const { loadManifest: loadInstallManifest } = await import('../install-manifest.js');\n  const installManifest = loadInstallManifest(repoRoot);\n  if (!opts.dryRun) {\n    await mkdir(paths.bin, { recursive: true });\n  }\n  for (const name of installManifest.cliWrappers) {\n    await writeWrapper(paths.bin, name, paths.current, opts.dryRun);\n  }\n  process.stdout.write(`\u2713 wrappers in ${paths.bin}\\n`);\n\n  // Reconcile PATH symlinks\n  if (!opts.dryRun) await mkdir(userBinDir, { recursive: true });\n  const refused: string[] = [];\n  for (const name of installManifest.cliWrappers) {\n    const r = await reconcilePathLink(paths.bin, userBinDir, name, opts.force, opts.dryRun);\n    if (r.action === 'refused') {\n      refused.push(r.message ?? name);\n    }\n  }\n  if (refused.length > 0) {\n    process.stderr.write(`\\nPATH symlink conflicts:\\n  ${refused.join('\\n  ')}\\n`);\n    return 4;\n  }\n  process.stdout.write(`\u2713 PATH symlinks in ${userBinDir}\\n`);\n\n  // Warn if ~/.local/bin not on PATH\n  if (!isPathOnPATH(userBinDir)) {\n    process.stderr.write(\n      `\\nWarning: ${userBinDir} is not on $PATH. Add to your shell config:\\n  export PATH=\"${userBinDir}:$PATH\"\\n`,\n    );\n  }\n\n  // Initialize manifest if brand-new install AND migration didn't write one.\n  // (Migration 003 writes a manifest mid-flow with version + migration record;\n  // we must not clobber it here.)\n  const manifestAfter = await readManifest(paths.manifest);\n  if (manifestAfter === null && !opts.dryRun) {\n    await writeManifest(paths.manifest, {\n      ...emptyManifest('abtars', hostname()),\n      version: '',\n      preMigrationBackup: null,\n    });\n    process.stdout.write(`\u2713 manifest initialized at ${paths.manifest}\\n`);\n  }\n\n  // Write install mode to manifest. Priority:\n  //   1. --mode flag (explicit) \u2014 always wins\n  //   2. existing manifest installMode \u2014 preserved (don't clobber on --force)\n  //   3. default: supervised\n  const manifestForMode = await readManifest(paths.manifest);\n  const existingMode = manifestForMode?.installMode;\n  const mode = opts.mode ?? existingMode ?? \"supervised\";\n  if (manifestForMode) {\n    await writeManifest(paths.manifest, { ...manifestForMode, installMode: mode });\n  }\n  process.stdout.write(`\u2713 install mode: ${mode}\\n`);\n\n  // Release staging is handled by `abtars update` (auto-detects npm vs git source)\n\n  // Restore from backup zip\n  if (opts.restore) {\n    const { spawnSync } = await import('node:child_process');\n    const { existsSync: fileExists } = await import('node:fs');\n    const zipPath = opts.restore;\n    if (!fileExists(zipPath)) {\n      process.stderr.write(`error: backup file not found: ${zipPath}\\n`);\n      return 1;\n    }\n    // Extract to temp dir\n    const tmpDir = join(process.env['TMPDIR'] ?? '/tmp', `abtars-restore-${Date.now()}`);\n    const unzip = spawnSync('unzip', ['-o', zipPath, '-d', tmpDir], { encoding: 'utf-8' });\n    if (unzip.status !== 0) {\n      process.stderr.write(`error: unzip failed: ${unzip.stderr}\\n`);\n      return 1;\n    }\n    // Copy abtars files\n    const abSrc = join(tmpDir, 'abtars');\n    if (fileExists(abSrc)) {\n      spawnSync('cp', ['-r', ...readdirSync(abSrc).map(f => join(abSrc, f)), home], { stdio: 'inherit' });\n      process.stdout.write(`\u2713 restored abtars config\\n`);\n    }\n    // Copy abmind files\n    const abmindHome = process.env['ABMIND_HOME'] ?? join(dirname(home), '.abmind');\n    const abmindSrc = join(tmpDir, 'abmind');\n    if (fileExists(abmindSrc)) {\n      spawnSync('cp', ['-r', ...readdirSync(abmindSrc).map(f => join(abmindSrc, f)), abmindHome], { stdio: 'inherit' });\n      process.stdout.write(`\u2713 restored abmind data\\n`);\n    }\n    // Cleanup\n    spawnSync('rm', ['-rf', tmpDir]);\n    process.stdout.write(`\\nRestore complete.\\n`);\n    process.stdout.write(`Next: 'abtars update' to build and activate.\\n`);\n    return 0;\n  }\n\n  // --- supervised: load user-scope watchdog (LaunchAgent / systemd user) ---\n  if (mode === 'supervised') {\n    const { execSync } = await import('node:child_process');\n    if (process.platform === 'darwin') {\n      const plistSrc = join(home, 'scripts', 'com.abtars.watchdog.plist');\n      const plistDst = join(homedir(), 'Library', 'LaunchAgents', 'com.abtars.watchdog.plist');\n      if (existsSync(plistSrc)) {\n        const content = readFileSync(plistSrc, 'utf-8').replaceAll('{{HOME}}', homedir());\n        const { writeFileSync } = await import('node:fs');\n        writeFileSync(plistDst, content);\n        try { execSync(`launchctl load \"${plistDst}\"`, { stdio: 'ignore' }); } catch { /* already loaded */ }\n        process.stdout.write(`\u2713 watchdog LaunchAgent loaded\\n`);\n      }\n    } else if (process.platform === 'linux') {\n      const unitSrc = join(home, 'scripts', 'abtars-watchdog.service');\n      const unitDir = join(homedir(), '.config', 'systemd', 'user');\n      if (existsSync(unitSrc)) {\n        mkdirSync(unitDir, { recursive: true });\n        copyFileSync(unitSrc, join(unitDir, 'abtars-watchdog.service'));\n        try { execSync('systemctl --user daemon-reload && systemctl --user enable --now abtars-watchdog', { stdio: 'ignore' }); } catch { /* may fail in chroot */ }\n        process.stdout.write(`\u2713 watchdog systemd user service enabled\\n`);\n      }\n    }\n  }\n\n  process.stdout.write(`\\nInstall complete.\\n`);\n  if (!manifestAfter || manifestAfter.version === '') {\n    process.stdout.write(`Next: 'abtars update' to build and activate the first release.\\n`);\n  } else {\n    process.stdout.write(`\\n\u2500\u2500 Next steps \u2500\u2500\\n`);\n    process.stdout.write(`  1. Run 'abtars onboard' to configure Telegram token + model provider\\n`);\n    process.stdout.write(`  2. (Optional) Install Ollama for memory embeddings: curl -fsSL https://ollama.com/install.sh | sh\\n`);\n    process.stdout.write(`  3. Start the bridge: 'abtars restart' or use the watchdog\\n\\n`);\n  }\n\n  const { printHealthSummary } = await import('./health-check.js');\n  printHealthSummary(paths.home);\n\n  // #334: Post-install healthcheck \u2014 validate operator channel exists (only on --restore)\n  if (!opts.dryRun && opts.restore) {\n    const { validateMinimumViability, formatValidationError } = await import('./install-validate.js');\n    const validation = validateMinimumViability(paths.config);\n    if (!validation.ok) {\n      const invocation = `abtars install --restore ${opts.restore}`;\n      process.stderr.write(\"\\n\" + formatValidationError(validation, invocation) + \"\\n\");\n      return 1;\n    }\n  }\n\n  return 0;\n}\n"],
+  "mappings": ";;;;;;;;;;;AAYA,SAAS,OAAO,UAAU,MAAM,SAAS,iBAAiB;AAC1D,SAAS,YAAY,cAAc,aAAa,cAAc,iBAAiB;AAC/E,SAAS,UAAU,eAAe;AAClC,SAAS,UAAU,SAAS,YAAY;AAcxC,eAAe,OAAO,GAA6B;AACjD,MAAI;AACF,UAAM,KAAK,CAAC;AACZ,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUA,eAAe,UAAU,GAA6B;AACpD,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,kBAAkB;AACjD,UAAM,MAAM,CAAC;AACb,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,UAAU,GAA6B;AACpD,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,kBAAkB;AACjD,UAAM,IAAI,MAAM,MAAM,CAAC;AACvB,WAAO,EAAE,eAAe;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,eAAe,MAAc,QAAgC;AAC1E,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,gCAAwB;AAC9D,QAAM,WAAW,aAAa;AAC9B,QAAM,OAAO,SAAS,YAAY,IAAI,OAAK,KAAK,MAAM,EAAE,IAAI,CAAC;AAC7D,MAAI,QAAQ;AACV,YAAQ,OAAO,MAAM;AAAA,IAA0B,KAAK,KAAK,MAAM,CAAC;AAAA,CAAI;AACpE;AAAA,EACF;AACA,aAAW,KAAK,SAAS,aAAa;AACpC,UAAM,MAAM,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,EAAE,OAAO,SAAS,EAAE,MAAM,CAAC,IAAI,OAAU,CAAC;AAAA,EACrG;AACF;AAEA,eAAe,WAAW,UAAkB,YAAoB,QAAiB,MAA0C;AACzH,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,gCAAwB;AAC9D,QAAM,WAAW,aAAa,QAAQ;AACtC,QAAM,SAAmB,CAAC;AAC1B,aAAW,QAAQ,SAAS,aAAa;AACvC,UAAM,MAAM,KAAK,UAAU,KAAK,MAAM;AACtC,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI;AAChC,QAAI,CAAE,MAAM,OAAO,GAAG,EAAI;AAC1B,QAAI,MAAM,OAAO,GAAG,EAAG;AACvB,QAAI,QAAQ;AACV,aAAO,KAAK,gBAAgB,GAAG,IAAI,GAAG,EAAE;AACxC;AAAA,IACF;AACA,UAAM,UAAU,MAAM,SAAS,KAAK,OAAO;AAC3C,UAAM,MAAM,QAAQ,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;AAC7C,UAAM,UAAU,KAAK,SAAS,EAAE,MAAM,KAAK,OAAO,SAAS,KAAK,MAAM,CAAC,IAAI,IAAM,CAAC;AAClF,WAAO,KAAK,SAAS,GAAG,CAAC;AAAA,EAC3B;AACA,SAAO;AACT;AASA,eAAe,kBACb,QACA,YACA,MACA,OACA,QAC+C;AAC/C,QAAM,WAAW,KAAK,YAAY,IAAI;AACtC,QAAM,aAAa,KAAK,QAAQ,IAAI;AACpC,QAAM,aAAa,MAAM,UAAU,QAAQ;AAC3C,MAAI,CAAC,YAAY;AACf,QAAI,OAAQ,QAAO,EAAE,QAAQ,mBAAmB,UAAU,IAAI,QAAQ,GAAG;AACzE,UAAM,QAAQ,YAAY,QAAQ;AAClC,WAAO,EAAE,QAAQ,WAAW,QAAQ,GAAG;AAAA,EACzC;AACA,MAAI,MAAM,UAAU,QAAQ,GAAG;AAC7B,UAAM,EAAE,UAAU,OAAO,IAAI,MAAM,OAAO,kBAAkB;AAC5D,UAAM,UAAU,MAAM,SAAS,QAAQ;AAKvC,UAAM,SAAS,YAAY;AAC3B,QAAI,QAAQ;AACV,UAAI,OAAQ,QAAO,EAAE,QAAQ,uBAAuB,QAAQ,eAAe;AAC3E,YAAM,OAAO,QAAQ;AACrB,YAAM,QAAQ,YAAY,QAAQ;AAClC,aAAO,EAAE,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACzC;AACA,QAAI,OAAO;AACT,UAAI,OAAQ,QAAO,EAAE,QAAQ,+BAA+B,QAAQ,kBAAkB,OAAO,IAAI;AACjG,YAAM,OAAO,QAAQ;AACrB,YAAM,QAAQ,YAAY,QAAQ;AAClC,aAAO,EAAE,QAAQ,oBAAoB,QAAQ,YAAY,OAAO,IAAI;AAAA,IACtE;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,GAAG,QAAQ,oBAAoB,OAAO;AAAA,IACjD;AAAA,EACF;AACA,MAAI,OAAO;AACT,QAAI,OAAQ,QAAO,EAAE,QAAQ,+BAA+B,QAAQ,kBAAkB;AACtF,UAAM,EAAE,OAAO,IAAI,MAAM,OAAO,kBAAkB;AAClD,UAAM,OAAO,QAAQ;AACrB,UAAM,QAAQ,YAAY,QAAQ;AAClC,WAAO,EAAE,QAAQ,oBAAoB,QAAQ,sBAAsB;AAAA,EACrE;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,SAAS,GAAG,QAAQ;AAAA,EACtB;AACF;AAEA,eAAsB,aAAa,QAAgB,MAAc,aAAqB,QAAgC;AACpH,QAAM,aAAa,SAAS,WAAW,kBAAkB,GAAG,IAAI;AAChE,QAAM,SAAS,KAAK,aAAa,UAAU,UAAU;AAErD,QAAM,WAAW,SAAS,WAAW,cAAc,GAAG,IAAI;AAC1D,QAAM,WAAW,KAAK,aAAa,QAAQ,OAAO,QAAQ;AAC1D,QAAM,UAAU;AAAA,WACP,MAAM;AAAA,eACF,MAAM;AAAA,aACR,QAAQ;AAAA,eACN,QAAQ;AAAA;AAAA;AAAA,yDAGkC,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQjE,QAAM,OAAO,KAAK,QAAQ,IAAI;AAC9B,MAAI,QAAQ;AACV,YAAQ,OAAO,MAAM,2BAA2B,IAAI,YAAY,MAAM,eAAe,QAAQ;AAAA,CAAK;AAClG;AAAA,EACF;AACA,QAAM,UAAU,MAAM,SAAS,EAAE,MAAM,IAAM,CAAC;AAChD;AAEA,SAAS,aAAa,YAA6B;AACjD,QAAM,OAAO,QAAQ,IAAI,MAAM,KAAK;AACpC,SAAO,KAAK,MAAM,GAAG,EAAE,KAAK,CAAC,MAAM,MAAM,UAAU;AACrD;AAEA,eAAsB,QAAQ,MAAuC;AACnE,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,OAAO,MAAM;AACnB,QAAM,aAAa,kBAAkB;AACrC,QAAM,WAAW,QAAQ,IAAI;AAG7B,QAAM,EAAE,gBAAgB,YAAY,iBAAiB,IAAI,MAAM,OAAO,2BAAmB;AACzF,iBAAe,IAAI;AACnB,mBAAiB,SAAS;AAC1B,QAAM,aAAa,QAAQ,OAAO,MAAM,KAAK,QAAQ,MAAM;AAC3D,UAAQ,OAAO,QAAS,CAAC,UAAe,SAAgB;AACtD,QAAI,OAAO,UAAU,aAAa,MAAM,WAAW,QAAG,KAAK,MAAM,WAAW,QAAG,GAAI,YAAW,MAAM,QAAQ,CAAC;AAC7G,WAAO,WAAW,OAAO,GAAG,IAAI;AAAA,EAClC;AAEA,QAAM,aAAa,MAAM,OAAO,IAAI;AACpC,QAAM,WAAW,aAAa,MAAM,aAAa,MAAM,QAAQ,IAAI;AAEnE,MAAI,cAAc,YAAY,CAAC,KAAK,SAAS,CAAC,KAAK,SAAS;AAC1D,YAAQ,OAAO;AAAA,MACb,0CAA0C,SAAS,WAAW,SAAS;AAAA;AAAA;AAAA,IACzE;AACA,WAAO;AAAA,EACT;AAGA,QAAM,eAAe,MAAM,KAAK,MAAM;AACtC,UAAQ,OAAO,MAAM,sBAAiB,IAAI;AAAA,CAAI;AAM9C,QAAM,gBAAgB,KAAK,QAAQ,GAAG,SAAS,QAAQ;AACvD,QAAM,gBAAgB,KAAK,eAAe,gBAAgB;AAC1D,MAAI,CAAC,KAAK,QAAQ;AAChB,UAAM,MAAM,eAAe,EAAE,WAAW,KAAK,CAAC;AAC9C,QAAI,CAAE,MAAM,OAAO,aAAa,GAAI;AAClC,YAAM,UAAU,eAAe,KAAK,UAAU;AAAA,QAC5C,MAAM;AAAA,QACN,aAAa;AAAA,QACb,OAAO,CAAC,GAAG;AAAA,QACX,cAAc,CAAC,UAAU;AAAA,QACzB,eAAe,EAAE,OAAO,EAAE,mBAAmB,KAAK,EAAE;AAAA,QACpD,gBAAgB;AAAA,MAClB,GAAG,MAAM,CAAC,IAAI,IAAI;AAClB,cAAQ,OAAO,MAAM,sBAAiB,aAAa;AAAA,CAAI;AAAA,IACzD;AAAA,EACF,OAAO;AACL,YAAQ,OAAO,MAAM,oBAAoB,aAAa;AAAA,CAAI;AAAA,EAC5D;AAGA,QAAM,cAAc,KAAK,MAAM,QAAQ,cAAc;AACrD,QAAM,cAAc,KAAK,MAAM,QAAQ,cAAc;AACrD,MAAI,CAAC,KAAK,UAAU,CAAE,MAAM,OAAO,WAAW,GAAI;AAChD,UAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,aAAa;AAC1D,UAAM,EAAE,YAAY,UAAU,IAAI,oBAAoB,SAAS;AAC/D,UAAM,UAAU,aAAa,WAAW,OAAO,EAAE,QAAQ,OAAO,MAAM,QAAQ,CAAC,EAAE,SAAS,QAAQ,CAAC;AACnG,UAAM,UAAU,aAAa,UAAU,OAAO,EAAE,QAAQ,OAAO,MAAM,OAAO,CAAC,EAAE,SAAS,QAAQ,CAAC;AACjG,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,SAAS;AAC5C,cAAU,aAAa,GAAK;AAC5B,YAAQ,OAAO,MAAM;AAAA,CAAgC;AAAA,EACvD;AAGA,QAAM,cAAc,KAAK,MAAM,QAAQ,cAAc;AACrD,QAAM,iBAAiB,KAAK,MAAM,QAAQ,kBAAkB;AAC5D,MAAI,CAAC,KAAK,UAAU,CAAE,MAAM,OAAO,WAAW,GAAI;AAChD,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,oBAAoB;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,SAAS;AAC5C,UAAM,YAAY,SAAS;AAC3B,QAAI;AACF,eAAS,6GAA6G,SAAS,KAAK,EAAE,KAAK,MAAM,QAAQ,OAAO,SAAS,CAAC;AAC1K,gBAAU,gBAAgB,GAAK;AAC/B,cAAQ,OAAO,MAAM;AAAA,CAA+C;AAAA,IACtE,SAAS,KAAK;AACZ,cAAQ,OAAO,MAAM;AAAA,CAAwF;AAAA,IAC/G;AAAA,EACF;AAGA,QAAM,SAAS,MAAM,WAAW,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AACzE,MAAI,OAAO,SAAS,GAAG;AACrB,YAAQ,OAAO,MAAM,yBAAoB,OAAO,KAAK,IAAI,CAAC;AAAA,CAAI;AAAA,EAChE;AAGA,QAAM,EAAE,cAAc,oBAAoB,IAAI,MAAM,OAAO,gCAAwB;AACnF,QAAM,kBAAkB,oBAAoB,QAAQ;AACpD,MAAI,CAAC,KAAK,QAAQ;AAChB,UAAM,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C;AACA,aAAW,QAAQ,gBAAgB,aAAa;AAC9C,UAAM,aAAa,MAAM,KAAK,MAAM,MAAM,SAAS,KAAK,MAAM;AAAA,EAChE;AACA,UAAQ,OAAO,MAAM,sBAAiB,MAAM,GAAG;AAAA,CAAI;AAGnD,MAAI,CAAC,KAAK,OAAQ,OAAM,MAAM,YAAY,EAAE,WAAW,KAAK,CAAC;AAC7D,QAAM,UAAoB,CAAC;AAC3B,aAAW,QAAQ,gBAAgB,aAAa;AAC9C,UAAM,IAAI,MAAM,kBAAkB,MAAM,KAAK,YAAY,MAAM,KAAK,OAAO,KAAK,MAAM;AACtF,QAAI,EAAE,WAAW,WAAW;AAC1B,cAAQ,KAAK,EAAE,WAAW,IAAI;AAAA,IAChC;AAAA,EACF;AACA,MAAI,QAAQ,SAAS,GAAG;AACtB,YAAQ,OAAO,MAAM;AAAA;AAAA,IAAgC,QAAQ,KAAK,MAAM,CAAC;AAAA,CAAI;AAC7E,WAAO;AAAA,EACT;AACA,UAAQ,OAAO,MAAM,2BAAsB,UAAU;AAAA,CAAI;AAGzD,MAAI,CAAC,aAAa,UAAU,GAAG;AAC7B,YAAQ,OAAO;AAAA,MACb;AAAA,WAAc,UAAU;AAAA,iBAA+D,UAAU;AAAA;AAAA,IACnG;AAAA,EACF;AAKA,QAAM,gBAAgB,MAAM,aAAa,MAAM,QAAQ;AACvD,MAAI,kBAAkB,QAAQ,CAAC,KAAK,QAAQ;AAC1C,UAAM,cAAc,MAAM,UAAU;AAAA,MAClC,GAAG,cAAc,UAAU,SAAS,CAAC;AAAA,MACrC,SAAS;AAAA,MACT,oBAAoB;AAAA,IACtB,CAAC;AACD,YAAQ,OAAO,MAAM,kCAA6B,MAAM,QAAQ;AAAA,CAAI;AAAA,EACtE;AAMA,QAAM,kBAAkB,MAAM,aAAa,MAAM,QAAQ;AACzD,QAAM,eAAe,iBAAiB;AACtC,QAAM,OAAO,KAAK,QAAQ,gBAAgB;AAC1C,MAAI,iBAAiB;AACnB,UAAM,cAAc,MAAM,UAAU,EAAE,GAAG,iBAAiB,aAAa,KAAK,CAAC;AAAA,EAC/E;AACA,UAAQ,OAAO,MAAM,wBAAmB,IAAI;AAAA,CAAI;AAKhD,MAAI,KAAK,SAAS;AAChB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,oBAAoB;AACvD,UAAM,EAAE,YAAY,WAAW,IAAI,MAAM,OAAO,SAAS;AACzD,UAAM,UAAU,KAAK;AACrB,QAAI,CAAC,WAAW,OAAO,GAAG;AACxB,cAAQ,OAAO,MAAM,iCAAiC,OAAO;AAAA,CAAI;AACjE,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,kBAAkB,KAAK,IAAI,CAAC,EAAE;AACnF,UAAM,QAAQ,UAAU,SAAS,CAAC,MAAM,SAAS,MAAM,MAAM,GAAG,EAAE,UAAU,QAAQ,CAAC;AACrF,QAAI,MAAM,WAAW,GAAG;AACtB,cAAQ,OAAO,MAAM,wBAAwB,MAAM,MAAM;AAAA,CAAI;AAC7D,aAAO;AAAA,IACT;AAEA,UAAM,QAAQ,KAAK,QAAQ,QAAQ;AACnC,QAAI,WAAW,KAAK,GAAG;AACrB,gBAAU,MAAM,CAAC,MAAM,GAAG,YAAY,KAAK,EAAE,IAAI,OAAK,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,UAAU,CAAC;AAClG,cAAQ,OAAO,MAAM;AAAA,CAA4B;AAAA,IACnD;AAEA,UAAM,aAAa,QAAQ,IAAI,aAAa,KAAK,KAAK,QAAQ,IAAI,GAAG,SAAS;AAC9E,UAAM,YAAY,KAAK,QAAQ,QAAQ;AACvC,QAAI,WAAW,SAAS,GAAG;AACzB,gBAAU,MAAM,CAAC,MAAM,GAAG,YAAY,SAAS,EAAE,IAAI,OAAK,KAAK,WAAW,CAAC,CAAC,GAAG,UAAU,GAAG,EAAE,OAAO,UAAU,CAAC;AAChH,cAAQ,OAAO,MAAM;AAAA,CAA0B;AAAA,IACjD;AAEA,cAAU,MAAM,CAAC,OAAO,MAAM,CAAC;AAC/B,YAAQ,OAAO,MAAM;AAAA;AAAA,CAAuB;AAC5C,YAAQ,OAAO,MAAM;AAAA,CAAgD;AACrE,WAAO;AAAA,EACT;AAGA,MAAI,SAAS,cAAc;AACzB,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,oBAAoB;AACtD,QAAI,QAAQ,aAAa,UAAU;AACjC,YAAM,WAAW,KAAK,MAAM,WAAW,2BAA2B;AAClE,YAAM,WAAW,KAAK,QAAQ,GAAG,WAAW,gBAAgB,2BAA2B;AACvF,UAAI,WAAW,QAAQ,GAAG;AACxB,cAAM,UAAU,aAAa,UAAU,OAAO,EAAE,WAAW,YAAY,QAAQ,CAAC;AAChF,cAAM,EAAE,cAAc,IAAI,MAAM,OAAO,SAAS;AAChD,sBAAc,UAAU,OAAO;AAC/B,YAAI;AAAE,mBAAS,mBAAmB,QAAQ,KAAK,EAAE,OAAO,SAAS,CAAC;AAAA,QAAG,QAAQ;AAAA,QAAuB;AACpG,gBAAQ,OAAO,MAAM;AAAA,CAAiC;AAAA,MACxD;AAAA,IACF,WAAW,QAAQ,aAAa,SAAS;AACvC,YAAM,UAAU,KAAK,MAAM,WAAW,yBAAyB;AAC/D,YAAM,UAAU,KAAK,QAAQ,GAAG,WAAW,WAAW,MAAM;AAC5D,UAAI,WAAW,OAAO,GAAG;AACvB,kBAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,qBAAa,SAAS,KAAK,SAAS,yBAAyB,CAAC;AAC9D,YAAI;AAAE,mBAAS,mFAAmF,EAAE,OAAO,SAAS,CAAC;AAAA,QAAG,QAAQ;AAAA,QAA2B;AAC3J,gBAAQ,OAAO,MAAM;AAAA,CAA2C;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM;AAAA;AAAA,CAAuB;AAC5C,MAAI,CAAC,iBAAiB,cAAc,YAAY,IAAI;AAClD,YAAQ,OAAO,MAAM;AAAA,CAAkE;AAAA,EACzF,OAAO;AACL,YAAQ,OAAO,MAAM;AAAA;AAAA,CAAsB;AAC3C,YAAQ,OAAO,MAAM;AAAA,CAA0E;AAC/F,YAAQ,OAAO,MAAM;AAAA,CAAuG;AAC5H,YAAQ,OAAO,MAAM;AAAA;AAAA,CAAiE;AAAA,EACxF;AAEA,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,4BAAmB;AAC/D,qBAAmB,MAAM,IAAI;AAG7B,MAAI,CAAC,KAAK,UAAU,KAAK,SAAS;AAChC,UAAM,EAAE,0BAA0B,sBAAsB,IAAI,MAAM,OAAO,gCAAuB;AAChG,UAAM,aAAa,yBAAyB,MAAM,MAAM;AACxD,QAAI,CAAC,WAAW,IAAI;AAClB,YAAM,aAAa,4BAA4B,KAAK,OAAO;AAC3D,cAAQ,OAAO,MAAM,OAAO,sBAAsB,YAAY,UAAU,IAAI,IAAI;AAChF,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;",
+  "names": []
+}

package/bundle/ensure-invariants-BJIEOSJ2.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  init_logger,
+  logInfo
+} from "./chunk-2BY6I4P5.js";
+import "./chunk-MJ6PHMOK.js";
+import "./chunk-7K2YZTLD.js";
+
+// src/cli/ensure-invariants.ts
+init_logger();
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+var TAG = "ensure-invariants";
+var MIGRATIONS = [
+  {
+    id: "irc-secure-to-signed",
+    file: "config/irc.json",
+    applies: (c) => c.includes('"secure"'),
+    apply: (c) => c.replace(/"secure"/g, '"signed"')
+  }
+];
+async function ensureInstallInvariants(repoRoot, home) {
+  const { loadManifest } = await import("./install-manifest-QRWID3KZ.js");
+  const manifest = loadManifest(repoRoot);
+  const created = [];
+  for (const seed of manifest.configSeeds) {
+    const src = join(repoRoot, seed.source);
+    const dst = join(home, seed.dest);
+    if (!existsSync(src) || existsSync(dst)) continue;
+    mkdirSync(dirname(dst), { recursive: true });
+    writeFileSync(dst, readFileSync(src, "utf-8"), { mode: seed.mode ? parseInt(seed.mode, 8) : 420 });
+    created.push(seed.dest);
+    logInfo(TAG, `Seeded missing: ${seed.dest}`);
+  }
+  for (const m of MIGRATIONS) {
+    const path = join(home, m.file);
+    if (!existsSync(path)) continue;
+    const content = readFileSync(path, "utf-8");
+    if (!m.applies(content)) continue;
+    writeFileSync(path, m.apply(content));
+    logInfo(TAG, `Migrated: ${m.id} (${m.file})`);
+    created.push(`[migrated] ${m.file}`);
+  }
+  return created;
+}
+export {
+  ensureInstallInvariants
+};
+//# sourceMappingURL=ensure-invariants-BJIEOSJ2.js.map

package/bundle/ensure-invariants-BJIEOSJ2.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/ensure-invariants.ts"],
+  "sourcesContent": ["/**\n * ensure-invariants.ts \u2014 seed missing config files + run config migrations on update.\n * Called from both `abtars install` and `abtars update`. Idempotent.\n */\n\nimport { existsSync, readFileSync, writeFileSync, mkdirSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport { logInfo } from \"../components/logger.js\";\n\nconst TAG = \"ensure-invariants\";\n\ninterface ConfigMigration {\n  id: string;\n  file: string; // relative to home (e.g. \"config/irc.json\")\n  applies: (content: string) => boolean;\n  apply: (content: string) => string;\n}\n\nconst MIGRATIONS: ConfigMigration[] = [\n  {\n    id: \"irc-secure-to-signed\",\n    file: \"config/irc.json\",\n    applies: (c) => c.includes('\"secure\"'),\n    apply: (c) => c.replace(/\"secure\"/g, '\"signed\"'),\n  },\n];\n\n/** Seed missing config files from install-manifest. Returns list of created files. */\nexport async function ensureInstallInvariants(repoRoot: string, home: string): Promise<string[]> {\n  const { loadManifest } = await import(\"./install-manifest.js\");\n  const manifest = loadManifest(repoRoot);\n  const created: string[] = [];\n\n  for (const seed of manifest.configSeeds) {\n    const src = join(repoRoot, seed.source);\n    const dst = join(home, seed.dest);\n    if (!existsSync(src) || existsSync(dst)) continue;\n    mkdirSync(dirname(dst), { recursive: true });\n    writeFileSync(dst, readFileSync(src, \"utf-8\"), { mode: seed.mode ? parseInt(seed.mode, 8) : 0o644 });\n    created.push(seed.dest);\n    logInfo(TAG, `Seeded missing: ${seed.dest}`);\n  }\n\n  // Run config migrations\n  for (const m of MIGRATIONS) {\n    const path = join(home, m.file);\n    if (!existsSync(path)) continue;\n    const content = readFileSync(path, \"utf-8\");\n    if (!m.applies(content)) continue;\n    writeFileSync(path, m.apply(content));\n    logInfo(TAG, `Migrated: ${m.id} (${m.file})`);\n    created.push(`[migrated] ${m.file}`);\n  }\n\n  return created;\n}\n"],
+  "mappings": ";;;;;;;;;;AAOA;AAFA,SAAS,YAAY,cAAc,eAAe,iBAAiB;AACnE,SAAS,MAAM,eAAe;AAG9B,IAAM,MAAM;AASZ,IAAM,aAAgC;AAAA,EACpC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS,CAAC,MAAM,EAAE,SAAS,UAAU;AAAA,IACrC,OAAO,CAAC,MAAM,EAAE,QAAQ,aAAa,UAAU;AAAA,EACjD;AACF;AAGA,eAAsB,wBAAwB,UAAkB,MAAiC;AAC/F,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,gCAAuB;AAC7D,QAAM,WAAW,aAAa,QAAQ;AACtC,QAAM,UAAoB,CAAC;AAE3B,aAAW,QAAQ,SAAS,aAAa;AACvC,UAAM,MAAM,KAAK,UAAU,KAAK,MAAM;AACtC,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI;AAChC,QAAI,CAAC,WAAW,GAAG,KAAK,WAAW,GAAG,EAAG;AACzC,cAAU,QAAQ,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3C,kBAAc,KAAK,aAAa,KAAK,OAAO,GAAG,EAAE,MAAM,KAAK,OAAO,SAAS,KAAK,MAAM,CAAC,IAAI,IAAM,CAAC;AACnG,YAAQ,KAAK,KAAK,IAAI;AACtB,YAAQ,KAAK,mBAAmB,KAAK,IAAI,EAAE;AAAA,EAC7C;AAGA,aAAW,KAAK,YAAY;AAC1B,UAAM,OAAO,KAAK,MAAM,EAAE,IAAI;AAC9B,QAAI,CAAC,WAAW,IAAI,EAAG;AACvB,UAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,QAAI,CAAC,EAAE,QAAQ,OAAO,EAAG;AACzB,kBAAc,MAAM,EAAE,MAAM,OAAO,CAAC;AACpC,YAAQ,KAAK,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG;AAC5C,YAAQ,KAAK,cAAc,EAAE,IAAI,EAAE;AAAA,EACrC;AAEA,SAAO;AACT;",
+  "names": []
+}

package/bundle/install-K67U3WLX.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  install,
+  writeWrapper
+} from "./chunk-XMJ76XLE.js";
+import "./chunk-HXJRZWKA.js";
+import "./chunk-7K2YZTLD.js";
+export {
+  install,
+  writeWrapper
+};
+//# sourceMappingURL=install-K67U3WLX.js.map

package/bundle/install-K67U3WLX.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/bundle/install-manifest-QRWID3KZ.js

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  init_logger,
+  logWarn
+} from "./chunk-2BY6I4P5.js";
+import "./chunk-MJ6PHMOK.js";
+import "./chunk-7K2YZTLD.js";
+
+// src/cli/install-manifest.ts
+init_logger();
+import { readFileSync, existsSync, mkdirSync, copyFileSync, chmodSync, statSync, realpathSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+var TAG = "manifest";
+var SUPPORTED_VERSION = 2;
+var cached = null;
+function loadManifest(repoRoot) {
+  if (cached) return cached;
+  const root = repoRoot ?? join(dirname(realpathSync(process.argv[1] ?? fileURLToPath(import.meta.url))), "..");
+  const p = join(root, "install-manifest.json");
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync(p, "utf-8"));
+  } catch (err) {
+    throw new Error(`Invalid JSON in install-manifest.json: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  if (raw.manifestVersion > SUPPORTED_VERSION) {
+    logWarn(TAG, `manifest version ${raw.manifestVersion} > supported ${SUPPORTED_VERSION} \u2014 some features may not be applied`);
+  }
+  cached = raw;
+  return raw;
+}
+function _resetManifestCache() {
+  cached = null;
+}
+function isLazyRootAllowed(manifest, relPath) {
+  return manifest.lazyRoots.some((root) => relPath === root || relPath.startsWith(root + "/"));
+}
+function reconcileManifest(manifest, home, repoRoot, fix) {
+  const ok = [];
+  const fixed = [];
+  const warnings = [];
+  for (const dir of manifest.directories) {
+    const abs = join(home, dir.path);
+    if (existsSync(abs)) {
+      if (dir.mode) {
+        const actual = (statSync(abs).mode & 511).toString(8);
+        const expected = dir.mode.replace(/^0/, "");
+        if (actual !== expected) {
+          if (fix) {
+            chmodSync(abs, parseInt(dir.mode, 8));
+            fixed.push(`${dir.path}/ permissions ${actual} \u2192 ${expected}`);
+          } else {
+            warnings.push(`${dir.path}/ permissions ${actual}, expected ${expected}`);
+          }
+        } else {
+          ok.push(`${dir.path}/`);
+        }
+      } else {
+        ok.push(`${dir.path}/`);
+      }
+    } else if (fix) {
+      mkdirSync(abs, { recursive: true, mode: dir.mode ? parseInt(dir.mode, 8) : void 0 });
+      fixed.push(`created ${dir.path}/`);
+    } else {
+      warnings.push(`${dir.path}/ MISSING`);
+    }
+  }
+  for (const seed of manifest.configSeeds) {
+    const dest = join(home, seed.dest);
+    if (existsSync(dest)) {
+      ok.push(seed.dest);
+    } else {
+      const src = join(repoRoot, seed.source);
+      if (fix && existsSync(src)) {
+        mkdirSync(join(home, seed.dest, ".."), { recursive: true });
+        copyFileSync(src, dest);
+        if (seed.mode) chmodSync(dest, parseInt(seed.mode, 8));
+        fixed.push(`seeded ${seed.dest} from ${seed.source}`);
+      } else if (!existsSync(src)) {
+        warnings.push(`${seed.dest} MISSING (source ${seed.source} not found)`);
+      } else {
+        warnings.push(`${seed.dest} MISSING (seed from ${seed.source})`);
+      }
+    }
+  }
+  for (const req of manifest.requiredConfigs) {
+    const abs = join(home, req.path);
+    if (existsSync(abs)) {
+      ok.push(req.path);
+    } else {
+      warnings.push(`${req.path} MISSING \u2014 ${req.remediation}`);
+    }
+  }
+  return { ok, fixed, warnings };
+}
+export {
+  _resetManifestCache,
+  isLazyRootAllowed,
+  loadManifest,
+  reconcileManifest
+};
+//# sourceMappingURL=install-manifest-QRWID3KZ.js.map

package/bundle/install-manifest-QRWID3KZ.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/install-manifest.ts"],
+  "sourcesContent": ["/**\n * install-manifest.ts \u2014 Load and validate install-manifest.json.\n * Single source of truth for install-time requirements.\n */\n\nimport { readFileSync, existsSync, mkdirSync, copyFileSync, chmodSync, statSync, realpathSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { logWarn } from \"../components/logger.js\";\n\nconst TAG = \"manifest\";\nconst SUPPORTED_VERSION = 2;\n\n// \u2500\u2500 Types \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface ManifestDirectory {\n  path: string;\n  mode?: string;\n}\n\nexport interface ManifestConfigSeed {\n  source: string;\n  dest: string;\n  mode?: string;\n}\n\nexport interface ManifestRequiredConfig {\n  path: string;\n  remediation: string;\n}\n\nexport interface ManifestScripts {\n  include: string[];\n  executable: string;\n}\n\nexport interface ManifestServices {\n  supervised: {\n    macos?: { plist: string; placeholders: string[] };\n    linux?: { units: string[] };\n  };\n}\n\n\nexport interface InstallManifest {\n  manifestVersion: number;\n  directories: ManifestDirectory[];\n  lazyRoots: string[];\n  configSeeds: ManifestConfigSeed[];\n  requiredConfigs: ManifestRequiredConfig[];\n  scripts: ManifestScripts;\n  services: ManifestServices;\n  cliWrappers: string[];\n}\n\n// \u2500\u2500 Loader \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nlet cached: InstallManifest | null = null;\n\nexport function loadManifest(repoRoot?: string): InstallManifest {\n  if (cached) return cached;\n  const root = repoRoot ?? join(dirname(realpathSync(process.argv[1] ?? fileURLToPath(import.meta.url))), \"..\");\n  const p = join(root, \"install-manifest.json\");\n  let raw: InstallManifest;\n  try { raw = JSON.parse(readFileSync(p, \"utf-8\")) as InstallManifest; }\n  catch (err) { throw new Error(`Invalid JSON in install-manifest.json: ${err instanceof Error ? err.message : String(err)}`); }\n  if (raw.manifestVersion > SUPPORTED_VERSION) {\n    logWarn(TAG, `manifest version ${raw.manifestVersion} > supported ${SUPPORTED_VERSION} \u2014 some features may not be applied`);\n  }\n  cached = raw;\n  return raw;\n}\n\n/** Clear cache (for tests). */\nexport function _resetManifestCache(): void { cached = null; }\n\n/** Check if a path is under a declared lazyRoot. */\nexport function isLazyRootAllowed(manifest: InstallManifest, relPath: string): boolean {\n  return manifest.lazyRoots.some(root => relPath === root || relPath.startsWith(root + \"/\"));\n}\n\n// \u2500\u2500 Reconciliation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface ReconcileResult {\n  ok: string[];\n  fixed: string[];\n  warnings: string[];\n}\n\n/**\n * Reconcile install state against manifest. If fix=true, creates missing dirs\n * and seeds missing configs. Returns a report.\n */\nexport function reconcileManifest(\n  manifest: InstallManifest,\n  home: string,\n  repoRoot: string,\n  fix: boolean,\n): ReconcileResult {\n  const ok: string[] = [];\n  const fixed: string[] = [];\n  const warnings: string[] = [];\n\n  // Eager directories\n  for (const dir of manifest.directories) {\n    const abs = join(home, dir.path);\n    if (existsSync(abs)) {\n      if (dir.mode) {\n        const actual = (statSync(abs).mode & 0o777).toString(8);\n        const expected = dir.mode.replace(/^0/, \"\");\n        if (actual !== expected) {\n          if (fix) {\n            chmodSync(abs, parseInt(dir.mode, 8));\n            fixed.push(`${dir.path}/ permissions ${actual} \u2192 ${expected}`);\n          } else {\n            warnings.push(`${dir.path}/ permissions ${actual}, expected ${expected}`);\n          }\n        } else {\n          ok.push(`${dir.path}/`);\n        }\n      } else {\n        ok.push(`${dir.path}/`);\n      }\n    } else if (fix) {\n      mkdirSync(abs, { recursive: true, mode: dir.mode ? parseInt(dir.mode, 8) : undefined });\n      fixed.push(`created ${dir.path}/`);\n    } else {\n      warnings.push(`${dir.path}/ MISSING`);\n    }\n  }\n\n  // Config seeds\n  for (const seed of manifest.configSeeds) {\n    const dest = join(home, seed.dest);\n    if (existsSync(dest)) {\n      ok.push(seed.dest);\n    } else {\n      const src = join(repoRoot, seed.source);\n      if (fix && existsSync(src)) {\n        mkdirSync(join(home, seed.dest, \"..\"), { recursive: true });\n        copyFileSync(src, dest);\n        if (seed.mode) chmodSync(dest, parseInt(seed.mode, 8));\n        fixed.push(`seeded ${seed.dest} from ${seed.source}`);\n      } else if (!existsSync(src)) {\n        warnings.push(`${seed.dest} MISSING (source ${seed.source} not found)`);\n      } else {\n        warnings.push(`${seed.dest} MISSING (seed from ${seed.source})`);\n      }\n    }\n  }\n\n  // Required configs (report only, never auto-fix)\n  for (const req of manifest.requiredConfigs) {\n    const abs = join(home, req.path);\n    if (existsSync(abs)) {\n      ok.push(req.path);\n    } else {\n      warnings.push(`${req.path} MISSING \u2014 ${req.remediation}`);\n    }\n  }\n\n  return { ok, fixed, warnings };\n}\n"],
+  "mappings": ";;;;;;;;;;AAQA;AAHA,SAAS,cAAc,YAAY,WAAW,cAAc,WAAW,UAAU,oBAAoB;AACrG,SAAS,MAAM,eAAe;AAC9B,SAAS,qBAAqB;AAG9B,IAAM,MAAM;AACZ,IAAM,oBAAoB;AA8C1B,IAAI,SAAiC;AAE9B,SAAS,aAAa,UAAoC;AAC/D,MAAI,OAAQ,QAAO;AACnB,QAAM,OAAO,YAAY,KAAK,QAAQ,aAAa,QAAQ,KAAK,CAAC,KAAK,cAAc,YAAY,GAAG,CAAC,CAAC,GAAG,IAAI;AAC5G,QAAM,IAAI,KAAK,MAAM,uBAAuB;AAC5C,MAAI;AACJ,MAAI;AAAE,UAAM,KAAK,MAAM,aAAa,GAAG,OAAO,CAAC;AAAA,EAAsB,SAC9D,KAAK;AAAE,UAAM,IAAI,MAAM,0CAA0C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,EAAG;AAC7H,MAAI,IAAI,kBAAkB,mBAAmB;AAC3C,YAAQ,KAAK,oBAAoB,IAAI,eAAe,gBAAgB,iBAAiB,0CAAqC;AAAA,EAC5H;AACA,WAAS;AACT,SAAO;AACT;AAGO,SAAS,sBAA4B;AAAE,WAAS;AAAM;AAGtD,SAAS,kBAAkB,UAA2B,SAA0B;AACrF,SAAO,SAAS,UAAU,KAAK,UAAQ,YAAY,QAAQ,QAAQ,WAAW,OAAO,GAAG,CAAC;AAC3F;AAcO,SAAS,kBACd,UACA,MACA,UACA,KACiB;AACjB,QAAM,KAAe,CAAC;AACtB,QAAM,QAAkB,CAAC;AACzB,QAAM,WAAqB,CAAC;AAG5B,aAAW,OAAO,SAAS,aAAa;AACtC,UAAM,MAAM,KAAK,MAAM,IAAI,IAAI;AAC/B,QAAI,WAAW,GAAG,GAAG;AACnB,UAAI,IAAI,MAAM;AACZ,cAAM,UAAU,SAAS,GAAG,EAAE,OAAO,KAAO,SAAS,CAAC;AACtD,cAAM,WAAW,IAAI,KAAK,QAAQ,MAAM,EAAE;AAC1C,YAAI,WAAW,UAAU;AACvB,cAAI,KAAK;AACP,sBAAU,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC;AACpC,kBAAM,KAAK,GAAG,IAAI,IAAI,iBAAiB,MAAM,WAAM,QAAQ,EAAE;AAAA,UAC/D,OAAO;AACL,qBAAS,KAAK,GAAG,IAAI,IAAI,iBAAiB,MAAM,cAAc,QAAQ,EAAE;AAAA,UAC1E;AAAA,QACF,OAAO;AACL,aAAG,KAAK,GAAG,IAAI,IAAI,GAAG;AAAA,QACxB;AAAA,MACF,OAAO;AACL,WAAG,KAAK,GAAG,IAAI,IAAI,GAAG;AAAA,MACxB;AAAA,IACF,WAAW,KAAK;AACd,gBAAU,KAAK,EAAE,WAAW,MAAM,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,CAAC,IAAI,OAAU,CAAC;AACtF,YAAM,KAAK,WAAW,IAAI,IAAI,GAAG;AAAA,IACnC,OAAO;AACL,eAAS,KAAK,GAAG,IAAI,IAAI,WAAW;AAAA,IACtC;AAAA,EACF;AAGA,aAAW,QAAQ,SAAS,aAAa;AACvC,UAAM,OAAO,KAAK,MAAM,KAAK,IAAI;AACjC,QAAI,WAAW,IAAI,GAAG;AACpB,SAAG,KAAK,KAAK,IAAI;AAAA,IACnB,OAAO;AACL,YAAM,MAAM,KAAK,UAAU,KAAK,MAAM;AACtC,UAAI,OAAO,WAAW,GAAG,GAAG;AAC1B,kBAAU,KAAK,MAAM,KAAK,MAAM,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,qBAAa,KAAK,IAAI;AACtB,YAAI,KAAK,KAAM,WAAU,MAAM,SAAS,KAAK,MAAM,CAAC,CAAC;AACrD,cAAM,KAAK,UAAU,KAAK,IAAI,SAAS,KAAK,MAAM,EAAE;AAAA,MACtD,WAAW,CAAC,WAAW,GAAG,GAAG;AAC3B,iBAAS,KAAK,GAAG,KAAK,IAAI,oBAAoB,KAAK,MAAM,aAAa;AAAA,MACxE,OAAO;AACL,iBAAS,KAAK,GAAG,KAAK,IAAI,uBAAuB,KAAK,MAAM,GAAG;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAGA,aAAW,OAAO,SAAS,iBAAiB;AAC1C,UAAM,MAAM,KAAK,MAAM,IAAI,IAAI;AAC/B,QAAI,WAAW,GAAG,GAAG;AACnB,SAAG,KAAK,IAAI,IAAI;AAAA,IAClB,OAAO;AACL,eAAS,KAAK,GAAG,IAAI,IAAI,mBAAc,IAAI,WAAW,EAAE;AAAA,IAC1D;AAAA,EACF;AAEA,SAAO,EAAE,IAAI,OAAO,SAAS;AAC/B;",
+  "names": []
+}

package/bundle/meta.json

@@ -22623,7 +22623,7 @@
       "format": "esm"
     },
     "src/cli/install-manifest.ts": {
-      "bytes": 5289,
+      "bytes": 5330,
       "imports": [
         {
           "path": "node:fs",
@@ -23867,13 +23867,13 @@
     }
   },
   "outputs": {
-    "bundle/ensure-invariants-KUXIW73S.js.map": {
+    "bundle/ensure-invariants-BJIEOSJ2.js.map": {
       "imports": [],
       "exports": [],
       "inputs": {},
       "bytes": 3144
     },
-    "bundle/ensure-invariants-KUXIW73S.js": {
+    "bundle/ensure-invariants-BJIEOSJ2.js": {
       "imports": [
         {
           "path": "bundle/chunk-2BY6I4P5.js",
@@ -23898,7 +23898,7 @@
           "external": true
         },
         {
-          "path": "bundle/install-manifest-ZETY4AFS.js",
+          "path": "bundle/install-manifest-QRWID3KZ.js",
           "kind": "dynamic-import"
         }
       ],
@@ -24358,13 +24358,13 @@
       "inputs": {},
       "bytes": 1224
     },
-    "bundle/install-manifest-ZETY4AFS.js.map": {
+    "bundle/install-manifest-QRWID3KZ.js.map": {
       "imports": [],
       "exports": [],
       "inputs": {},
-      "bytes": 8579
+      "bytes": 8648
     },
-    "bundle/install-manifest-ZETY4AFS.js": {
+    "bundle/install-manifest-QRWID3KZ.js": {
       "imports": [
         {
           "path": "bundle/chunk-2BY6I4P5.js",
@@ -24403,10 +24403,10 @@
       "entryPoint": "src/cli/install-manifest.ts",
       "inputs": {
         "src/cli/install-manifest.ts": {
-          "bytesInOutput": 3056
+          "bytesInOutput": 3097
         }
       },
-      "bytes": 3752
+      "bytes": 3793
     },
     "bundle/install-log-Q6RUHKWC.js.map": {
       "imports": [],
@@ -24523,16 +24523,16 @@
       },
       "bytes": 2345
     },
-    "bundle/install-24XR5FO5.js.map": {
+    "bundle/install-K67U3WLX.js.map": {
       "imports": [],
       "exports": [],
       "inputs": {},
       "bytes": 93
     },
-    "bundle/install-24XR5FO5.js": {
+    "bundle/install-K67U3WLX.js": {
       "imports": [
         {
-          "path": "bundle/chunk-7CHLS36W.js",
+          "path": "bundle/chunk-XMJ76XLE.js",
           "kind": "import-statement"
         },
         {
@@ -33806,7 +33806,7 @@
     "bundle/abtars-cli.js": {
       "imports": [
         {
-          "path": "bundle/chunk-7CHLS36W.js",
+          "path": "bundle/chunk-XMJ76XLE.js",
           "kind": "import-statement"
         },
         {
@@ -34099,11 +34099,11 @@
           "external": true
         },
         {
-          "path": "bundle/install-manifest-ZETY4AFS.js",
+          "path": "bundle/install-manifest-QRWID3KZ.js",
           "kind": "dynamic-import"
         },
         {
-          "path": "bundle/install-24XR5FO5.js",
+          "path": "bundle/install-K67U3WLX.js",
           "kind": "dynamic-import"
         },
         {
@@ -34112,7 +34112,7 @@
           "external": true
         },
         {
-          "path": "bundle/ensure-invariants-KUXIW73S.js",
+          "path": "bundle/ensure-invariants-BJIEOSJ2.js",
           "kind": "dynamic-import"
         },
         {
@@ -34205,13 +34205,13 @@
       },
       "bytes": 77079
     },
-    "bundle/chunk-7CHLS36W.js.map": {
+    "bundle/chunk-XMJ76XLE.js.map": {
       "imports": [],
       "exports": [],
       "inputs": {},
       "bytes": 27771
     },
-    "bundle/chunk-7CHLS36W.js": {
+    "bundle/chunk-XMJ76XLE.js": {
       "imports": [
         {
           "path": "bundle/chunk-HXJRZWKA.js",
@@ -34248,11 +34248,11 @@
           "external": true
         },
         {
-          "path": "bundle/install-manifest-ZETY4AFS.js",
+          "path": "bundle/install-manifest-QRWID3KZ.js",
           "kind": "dynamic-import"
         },
         {
-          "path": "bundle/install-manifest-ZETY4AFS.js",
+          "path": "bundle/install-manifest-QRWID3KZ.js",
           "kind": "dynamic-import"
         },
         {
@@ -34290,7 +34290,7 @@
           "external": true
         },
         {
-          "path": "bundle/install-manifest-ZETY4AFS.js",
+          "path": "bundle/install-manifest-QRWID3KZ.js",
           "kind": "dynamic-import"
         },
         {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "abtars",
-  "version": "0.1.0-alpha.23",
+  "version": "0.1.0-alpha.24",
   "description": "Standalone agent bridging Telegram to Kiro CLI via tmux/ACP",
   "type": "module",
   "main": "bundle/abtars.js",