agenshield 0.6.1 → 0.7.0

package/src/wizard/types.js

@@ -42,10 +42,11 @@ export const WIZARD_STEPS = [
     },
     // Setup phase
     {
-        id: 'backup',
-        name: 'Backup Installation',
-        description: 'Save backup for safe reversal',
+        id: 'cleanup-previous',
+        name: 'Clean Previous Installation',
+        description: 'Remove any previous AgenShield installation',
         phase: 'setup',
+        requiresSudo: true,
         dependsOn: ['confirm'],
     },
     {
@@ -54,7 +55,7 @@ export const WIZARD_STEPS = [
         description: 'Create socket access and workspace groups',
         phase: 'setup',
         requiresSudo: true,
-        dependsOn: ['backup'],
+        dependsOn: ['cleanup-previous'],
     },
     {
         id: 'create-agent-user',
@@ -89,19 +90,43 @@ export const WIZARD_STEPS = [
         dependsOn: ['create-directories'],
     },
     {
-        id: 'generate-seatbelt',
-        name: 'Generate Seatbelt Profiles',
-        description: 'Generate macOS sandbox profiles',
+        id: 'install-homebrew',
+        name: 'Install Homebrew',
+        description: 'Install user-specific Homebrew for agent user (this may take up to 2 minutes)',
         phase: 'setup',
         requiresSudo: true,
         dependsOn: ['create-directories'],
     },
+    {
+        id: 'install-nvm',
+        name: 'Install NVM & Node.js',
+        description: 'Install NVM and Node.js for agent user (this may take up to 2 minutes)',
+        phase: 'setup',
+        requiresSudo: true,
+        dependsOn: ['install-homebrew'],
+    },
+    {
+        id: 'configure-shell',
+        name: 'Configure Shell',
+        description: 'Set up guarded shell with Homebrew and NVM paths',
+        phase: 'setup',
+        requiresSudo: true,
+        dependsOn: ['install-nvm'],
+    },
     {
         id: 'install-wrappers',
         name: 'Install Wrappers',
         description: 'Install command wrappers to agent home bin directory (this may take up to a minute)',
         phase: 'setup',
         requiresSudo: true,
+        dependsOn: ['configure-shell'],
+    },
+    {
+        id: 'generate-seatbelt',
+        name: 'Generate Seatbelt Profiles',
+        description: 'Generate macOS sandbox profiles',
+        phase: 'setup',
+        requiresSudo: true,
         dependsOn: ['create-directories'],
     },
     {
@@ -120,6 +145,14 @@ export const WIZARD_STEPS = [
         requiresSudo: true,
         dependsOn: ['create-directories'],
     },
+    {
+        id: 'install-sudoers',
+        name: 'Install Sudoers Rule',
+        description: 'Grant broker passwordless sudo for agent operations',
+        phase: 'setup',
+        requiresSudo: true,
+        dependsOn: ['create-broker-user', 'create-agent-user'],
+    },
     {
         id: 'install-policies',
         name: 'Install Policies',
@@ -131,40 +164,78 @@ export const WIZARD_STEPS = [
     {
         id: 'setup-launchdaemon',
         name: 'Setup LaunchDaemon',
-        description: 'Create and load launchd plist (this may take up to a minute)',
+        description: 'Create and load broker launchd plist (this may take up to a minute)',
         phase: 'setup',
         requiresSudo: true,
         dependsOn: ['install-broker', 'install-daemon-config'],
     },
     {
-        id: 'migrate',
-        name: 'Migrate Installation',
-        description: 'Move target application to sandbox',
+        id: 'copy-openclaw-config',
+        name: 'Copy OpenClaw Config',
+        description: 'Copy and sanitize OpenClaw config from host user',
         phase: 'setup',
         requiresSudo: true,
-        dependsOn: ['install-wrappers', 'setup-launchdaemon'],
+        dependsOn: ['create-directories'],
+    },
+    {
+        id: 'install-openclaw',
+        name: 'Install OpenClaw',
+        description: 'Install OpenClaw in agent sandbox via NVM npm (this may take up to 3 minutes)',
+        phase: 'setup',
+        requiresSudo: true,
+        dependsOn: ['setup-launchdaemon', 'install-wrappers', 'copy-openclaw-config'],
+    },
+    {
+        id: 'stop-host-openclaw',
+        name: 'Stop Host OpenClaw',
+        description: 'Stop OpenClaw daemon and gateway on host user',
+        phase: 'setup',
+        dependsOn: ['install-openclaw'],
+    },
+    {
+        id: 'onboard-openclaw',
+        name: 'Initialize OpenClaw',
+        description: 'Run openclaw onboard to initialize agent environment (this may take up to 2 minutes)',
+        phase: 'setup',
+        requiresSudo: true,
+        dependsOn: ['stop-host-openclaw'],
     },
     {
         id: 'verify',
         name: 'Verify Installation',
-        description: 'Test sandboxed application',
+        description: 'Verify users, groups, and directories',
         phase: 'setup',
         requiresSudo: true,
-        dependsOn: ['migrate'],
+        dependsOn: ['onboard-openclaw'],
+    },
+    {
+        id: 'start-openclaw',
+        name: 'Start OpenClaw',
+        description: 'Install and start OpenClaw LaunchDaemons with intercepted Node.js',
+        phase: 'setup',
+        requiresSudo: true,
+        dependsOn: ['verify'],
     },
     {
         id: 'setup-passcode',
         name: 'Setup Passcode',
         description: 'Set a passcode to protect sensitive configuration',
         phase: 'setup',
-        dependsOn: ['verify'],
+        dependsOn: ['start-openclaw'],
+    },
+    {
+        id: 'open-dashboard',
+        name: 'Open Dashboard',
+        description: 'Open AgenShield dashboard in browser',
+        phase: 'setup',
+        dependsOn: ['setup-passcode'],
     },
     {
         id: 'complete',
         name: 'Complete',
         description: 'Setup finished successfully',
         phase: 'setup',
-        dependsOn: ['setup-passcode'],
+        dependsOn: ['open-dashboard'],
     },
 ];
 /**

package/src/wizard/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/wizard/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA4NH;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,kBAAkB;IAClB;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,WAAW;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,+DAA+D;QAC5E,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,gBAAgB,CAAC;KAC9B;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,WAAW,CAAC;KACzB;IAED,cAAc;IACd;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,SAAS,CAAC;KACvB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,gDAAgD;QAC7D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;KACvD;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,qFAAqF;QAClG,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,kCAAkC;QAC/C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,8DAA8D;QAC3E,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;KACvD;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;KACtD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,4BAA4B;QACzC,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,SAAS,CAAC;KACvB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,mDAAmD;QAChE,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,gBAAgB,CAAC;KAC9B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAA4B;IAC1D,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,SAAkB;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["/**\n * Types for the setup wizard\n */\n\nimport type { OriginalInstallation, UserConfig, PathsConfig } from '@agenshield/ipc';\nimport type { TargetPreset, PresetDetectionResult } from '@agenshield/sandbox';\n\nexport type WizardStepStatus = 'pending' | 'running' | 'completed' | 'error' | 'skipped';\n\n/**\n * Wizard step IDs\n */\nexport type WizardStepId =\n  | 'prerequisites'\n  | 'detect'\n  | 'install-target'\n  | 'configure'\n  | 'confirm'\n  | 'backup'\n  | 'create-groups'\n  | 'create-agent-user'\n  | 'create-broker-user'\n  | 'create-directories'\n  | 'setup-socket'\n  | 'generate-seatbelt'\n  | 'install-wrappers'\n  | 'install-broker'\n  | 'install-daemon-config'\n  | 'install-policies'\n  | 'setup-launchdaemon'\n  | 'migrate'\n  | 'verify'\n  | 'setup-passcode'\n  | 'complete';\n\nexport interface WizardStep {\n  id: WizardStepId;\n  name: string;\n  description: string;\n  status: WizardStepStatus;\n  error?: string;\n}\n\nexport interface WizardState {\n  currentStep: number;\n  steps: WizardStep[];\n  isComplete: boolean;\n  hasError: boolean;\n}\n\n/**\n * User information after creation\n */\nexport interface SandboxUserInfo {\n  username: string;\n  uid: number;\n  gid: number;\n  homeDir: string;\n  shell: string;\n}\n\n/**\n * Wizard options passed from CLI\n */\nexport interface WizardOptions {\n  /** Target preset to use: 'openclaw', 'custom', or auto-detect if not specified */\n  targetPreset?: string;\n  /** Entry point for custom target (Node.js file path) */\n  entryPoint?: string;\n  /** Base name for users/groups (default: 'agenshield') */\n  baseName?: string;\n  /** Optional prefix for user/group names (for testing) */\n  prefix?: string;\n  /** Optional base UID (for testing) */\n  baseUid?: number;\n  /** Optional base GID (for testing) */\n  baseGid?: number;\n  /** Dry run mode - show what would be done without making changes */\n  dryRun?: boolean;\n  /** Skip confirmation prompt */\n  skipConfirm?: boolean;\n  /** Verbose output */\n  verbose?: boolean;\n  /** Node.js version to install via NVM (default: '24') */\n  nodeVersion?: string;\n}\n\nexport interface WizardContext {\n  /** Wizard options from CLI */\n  options?: WizardOptions;\n\n  /** User configuration (dynamic based on prefix/baseUid/baseName) */\n  userConfig?: UserConfig;\n\n  /** Paths configuration */\n  pathsConfig?: PathsConfig;\n\n  /** Selected target preset */\n  preset?: TargetPreset;\n\n  /** Detection result from the preset */\n  presetDetection?: PresetDetectionResult;\n\n  /** Original installation info for backup (set during backup step) */\n  originalInstallation?: OriginalInstallation;\n\n  /** Agent user info */\n  agentUser?: SandboxUserInfo;\n\n  /** Broker user info */\n  brokerUser?: SandboxUserInfo;\n\n  /** Groups created */\n  groupsCreated?: {\n    socket: { name: string; gid: number };\n    workspace: { name: string; gid: number };\n  };\n\n  /** Directory structure created */\n  directories?: {\n    binDir: string;\n    wrappersDir: string;\n    configDir: string;\n    packageDir: string;\n    npmDir: string;\n    socketDir: string;\n    logDir: string;\n    seatbeltDir: string;\n  };\n\n  /** Socket setup result */\n  socketSetup?: {\n    path: string;\n    success: boolean;\n  };\n\n  /** Seatbelt profiles generated */\n  seatbeltProfiles?: {\n    agentProfile: string;\n    operationProfiles: string[];\n  };\n\n  /** Wrappers installed */\n  wrappersInstalled?: string[];\n\n  /** Broker installation */\n  brokerInstalled?: {\n    binaryPath: string;\n    success: boolean;\n  };\n\n  /** Daemon configuration */\n  daemonConfig?: {\n    configPath: string;\n    success: boolean;\n  };\n\n  /** Policies installed */\n  policiesInstalled?: {\n    builtinCount: number;\n    customCount: number;\n  };\n\n  /** LaunchDaemon setup */\n  launchDaemon?: {\n    plistPath: string;\n    loaded: boolean;\n  };\n\n  /** Migration result */\n  migration?: {\n    success: boolean;\n    newPaths?: {\n      packagePath: string;\n      binaryPath: string;\n      configPath?: string;\n    };\n  };\n\n  /** Verification result */\n  verification?: {\n    usersValid: boolean;\n    groupsValid: boolean;\n    directoriesValid: boolean;\n    socketValid: boolean;\n    daemonRunning: boolean;\n    networkBlocked: boolean;\n  };\n\n  /** Passcode setup result */\n  passcodeSetup?: {\n    /** Whether passcode was set */\n    configured: boolean;\n    /** Whether user skipped passcode setup */\n    skipped: boolean;\n  };\n\n  /** Passcode value (temporary, only during wizard flow) */\n  passcodeValue?: string;\n\n  /** Whether the target can be installed (e.g. via npm) */\n  targetInstallable?: boolean;\n\n  /** Whether the user requested target installation */\n  installTargetRequested?: boolean;\n}\n\n/**\n * Step definition for wizard\n */\nexport interface WizardStepDefinition {\n  id: WizardStepId;\n  name: string;\n  description: string;\n  /** Whether this step requires sudo */\n  requiresSudo?: boolean;\n  /** Dependencies (other step IDs that must complete first) */\n  dependsOn?: WizardStepId[];\n  /** Phase: 'detection' (runs before confirm) or 'setup' (runs after confirm) */\n  phase: 'detection' | 'setup';\n}\n\n/**\n * All wizard step definitions\n */\nexport const WIZARD_STEPS: WizardStepDefinition[] = [\n  // Detection phase\n  {\n    id: 'prerequisites',\n    name: 'Check Prerequisites',\n    description: 'Verify Node.js 22+, macOS, and required tools',\n    phase: 'detection',\n  },\n  {\n    id: 'detect',\n    name: 'Detect Target',\n    description: 'Find target application (auto-detect or use specified preset)',\n    phase: 'detection',\n    dependsOn: ['prerequisites'],\n  },\n  {\n    id: 'install-target',\n    name: 'Install Target',\n    description: 'Install target application if not found',\n    phase: 'detection',\n    dependsOn: ['detect'],\n  },\n  {\n    id: 'configure',\n    name: 'Configure',\n    description: 'Set up user configuration',\n    phase: 'detection',\n    dependsOn: ['install-target'],\n  },\n  {\n    id: 'confirm',\n    name: 'Confirm Setup',\n    description: 'Show plan and get user confirmation',\n    phase: 'detection',\n    dependsOn: ['configure'],\n  },\n\n  // Setup phase\n  {\n    id: 'backup',\n    name: 'Backup Installation',\n    description: 'Save backup for safe reversal',\n    phase: 'setup',\n    dependsOn: ['confirm'],\n  },\n  {\n    id: 'create-groups',\n    name: 'Create Groups',\n    description: 'Create socket access and workspace groups',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['backup'],\n  },\n  {\n    id: 'create-agent-user',\n    name: 'Create Agent User',\n    description: 'Create sandboxed agent user with guarded shell',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-groups'],\n  },\n  {\n    id: 'create-broker-user',\n    name: 'Create Broker User',\n    description: 'Create broker user for daemon',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-groups'],\n  },\n  {\n    id: 'create-directories',\n    name: 'Create Directories',\n    description: 'Create /opt/agenshield, /etc/agenshield, etc.',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-agent-user', 'create-broker-user'],\n  },\n  {\n    id: 'setup-socket',\n    name: 'Setup Socket',\n    description: 'Create /var/run/agenshield/ with correct permissions',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'generate-seatbelt',\n    name: 'Generate Seatbelt Profiles',\n    description: 'Generate macOS sandbox profiles',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-wrappers',\n    name: 'Install Wrappers',\n    description: 'Install command wrappers to agent home bin directory (this may take up to a minute)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-broker',\n    name: 'Install Broker',\n    description: 'Install broker binary',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-daemon-config',\n    name: 'Install Daemon Config',\n    description: 'Write daemon configuration files',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-policies',\n    name: 'Install Policies',\n    description: 'Write default security policies',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'setup-launchdaemon',\n    name: 'Setup LaunchDaemon',\n    description: 'Create and load launchd plist (this may take up to a minute)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['install-broker', 'install-daemon-config'],\n  },\n  {\n    id: 'migrate',\n    name: 'Migrate Installation',\n    description: 'Move target application to sandbox',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['install-wrappers', 'setup-launchdaemon'],\n  },\n  {\n    id: 'verify',\n    name: 'Verify Installation',\n    description: 'Test sandboxed application',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['migrate'],\n  },\n  {\n    id: 'setup-passcode',\n    name: 'Setup Passcode',\n    description: 'Set a passcode to protect sensitive configuration',\n    phase: 'setup',\n    dependsOn: ['verify'],\n  },\n  {\n    id: 'complete',\n    name: 'Complete',\n    description: 'Setup finished successfully',\n    phase: 'setup',\n    dependsOn: ['setup-passcode'],\n  },\n];\n\n/**\n * Get step IDs for a specific phase\n */\nexport function getStepsByPhase(phase: 'detection' | 'setup'): WizardStepId[] {\n  return WIZARD_STEPS.filter((s) => s.phase === phase).map((s) => s.id);\n}\n\n/**\n * Get all step IDs in order\n */\nexport function getAllStepIds(): WizardStepId[] {\n  return WIZARD_STEPS.map((s) => s.id);\n}\n\n/**\n * Create initial wizard steps from definitions\n */\nexport function createWizardSteps(): WizardStep[] {\n  return WIZARD_STEPS.map((def) => ({\n    id: def.id,\n    name: def.name,\n    description: def.description,\n    status: 'pending' as const,\n  }));\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/wizard/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAsSH;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,kBAAkB;IAClB;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,WAAW;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,+DAA+D;QAC5E,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,gBAAgB,CAAC;KAC9B;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,CAAC,WAAW,CAAC;KACzB;IAED,cAAc;IACd;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,6CAA6C;QAC1D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,SAAS,CAAC;KACvB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,kBAAkB,CAAC;KAChC;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,gDAAgD;QAC7D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,eAAe,CAAC;KAC7B;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;KACvD;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,+EAA+E;QAC5F,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,wEAAwE;QACrF,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,kBAAkB,CAAC;KAChC;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,kDAAkD;QAC/D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,aAAa,CAAC;KAC3B;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,qFAAqF;QAClG,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,iBAAiB,CAAC;KAC/B;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,kCAAkC;QAC/C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,qDAAqD;QAClE,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;KACvD;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,qEAAqE;QAClF,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;KACvD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,kDAAkD;QAC/D,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,+EAA+E;QAC5F,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC;KAC9E;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,kBAAkB,CAAC;KAChC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,sFAAsF;QACnG,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,uCAAuC;QACpD,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,kBAAkB,CAAC;KAChC;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,mEAAmE;QAChF,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,mDAAmD;QAChE,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,gBAAgB,CAAC;KAC9B;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sCAAsC;QACnD,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,gBAAgB,CAAC;KAC9B;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,CAAC,gBAAgB,CAAC;KAC9B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAA4B;IAC1D,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,SAAkB;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["/**\n * Types for the setup wizard\n */\n\nimport type { OriginalInstallation, UserConfig, PathsConfig, MigrationScanResult, MigrationSelection } from '@agenshield/ipc';\nimport type { TargetPreset, PresetDetectionResult } from '@agenshield/sandbox';\n\nexport type WizardStepStatus = 'pending' | 'running' | 'completed' | 'error' | 'skipped';\n\n/**\n * Wizard step IDs\n */\nexport type WizardStepId =\n  | 'prerequisites'\n  | 'detect'\n  | 'install-target'\n  | 'configure'\n  | 'confirm'\n  | 'cleanup-previous'\n  | 'create-groups'\n  | 'create-agent-user'\n  | 'create-broker-user'\n  | 'create-directories'\n  | 'setup-socket'\n  | 'install-homebrew'\n  | 'install-nvm'\n  | 'configure-shell'\n  | 'install-wrappers'\n  | 'generate-seatbelt'\n  | 'install-broker'\n  | 'install-daemon-config'\n  | 'install-sudoers'\n  | 'install-policies'\n  | 'setup-launchdaemon'\n  | 'install-openclaw'\n  | 'copy-openclaw-config'\n  | 'stop-host-openclaw'\n  | 'onboard-openclaw'\n  | 'verify'\n  | 'start-openclaw'\n  | 'setup-passcode'\n  | 'open-dashboard'\n  | 'complete';\n\nexport interface WizardStep {\n  id: WizardStepId;\n  name: string;\n  description: string;\n  status: WizardStepStatus;\n  error?: string;\n}\n\nexport interface WizardState {\n  currentStep: number;\n  steps: WizardStep[];\n  isComplete: boolean;\n  hasError: boolean;\n}\n\n/**\n * User information after creation\n */\nexport interface SandboxUserInfo {\n  username: string;\n  uid: number;\n  gid: number;\n  homeDir: string;\n  shell: string;\n}\n\n/**\n * Wizard options passed from CLI\n */\nexport interface WizardOptions {\n  /** Target preset to use: 'openclaw', 'custom', or auto-detect if not specified */\n  targetPreset?: string;\n  /** Entry point for custom target (Node.js file path) */\n  entryPoint?: string;\n  /** Base name for users/groups (default: 'agenshield') */\n  baseName?: string;\n  /** Optional prefix for user/group names (for testing) */\n  prefix?: string;\n  /** Optional base UID (for testing) */\n  baseUid?: number;\n  /** Optional base GID (for testing) */\n  baseGid?: number;\n  /** Dry run mode - show what would be done without making changes */\n  dryRun?: boolean;\n  /** Skip confirmation prompt */\n  skipConfirm?: boolean;\n  /** Verbose output */\n  verbose?: boolean;\n  /** Node.js version to install via NVM (default: '24') */\n  nodeVersion?: string;\n}\n\nexport interface WizardContext {\n  /** Wizard options from CLI */\n  options?: WizardOptions;\n\n  /** User configuration (dynamic based on prefix/baseUid/baseName) */\n  userConfig?: UserConfig;\n\n  /** Paths configuration */\n  pathsConfig?: PathsConfig;\n\n  /** Selected target preset */\n  preset?: TargetPreset;\n\n  /** Detection result from the preset */\n  presetDetection?: PresetDetectionResult;\n\n  /** Original installation info for backup (set during backup step) */\n  originalInstallation?: OriginalInstallation;\n\n  /** Agent user info */\n  agentUser?: SandboxUserInfo;\n\n  /** Broker user info */\n  brokerUser?: SandboxUserInfo;\n\n  /** Groups created */\n  groupsCreated?: {\n    socket: { name: string; gid: number };\n    workspace: { name: string; gid: number };\n  };\n\n  /** Directory structure created */\n  directories?: {\n    binDir: string;\n    wrappersDir: string;\n    configDir: string;\n    packageDir?: string;\n    npmDir: string;\n    socketDir: string;\n    logDir: string;\n    seatbeltDir: string;\n  };\n\n  /** Socket setup result */\n  socketSetup?: {\n    path: string;\n    success: boolean;\n  };\n\n  /** Seatbelt profiles generated */\n  seatbeltProfiles?: {\n    agentProfile: string;\n    operationProfiles: string[];\n  };\n\n  /** Wrappers installed */\n  wrappersInstalled?: string[];\n\n  /** Broker installation */\n  brokerInstalled?: {\n    binaryPath: string;\n    success: boolean;\n  };\n\n  /** Daemon configuration */\n  daemonConfig?: {\n    configPath: string;\n    success: boolean;\n  };\n\n  /** Policies installed */\n  policiesInstalled?: {\n    builtinCount: number;\n    customCount: number;\n  };\n\n  /** LaunchDaemon setup */\n  launchDaemon?: {\n    plistPath: string;\n    loaded: boolean;\n  };\n\n  /** Migration result */\n  migration?: {\n    success: boolean;\n    newPaths?: {\n      packagePath: string;\n      binaryPath: string;\n      configPath?: string;\n    };\n  };\n\n  /** Verification result */\n  verification?: {\n    usersValid: boolean;\n    groupsValid: boolean;\n    directoriesValid: boolean;\n    socketValid: boolean;\n    daemonRunning: boolean;\n    networkBlocked: boolean;\n  };\n\n  /** Passcode setup result */\n  passcodeSetup?: {\n    /** Whether passcode was set */\n    configured: boolean;\n    /** Whether user skipped passcode setup */\n    skipped: boolean;\n  };\n\n  /** Passcode value (temporary, only during wizard flow) */\n  passcodeValue?: string;\n\n  /** Whether the target can be installed (e.g. via npm) */\n  targetInstallable?: boolean;\n\n  /** Whether the user requested target installation */\n  installTargetRequested?: boolean;\n\n  /** Migration scan result (from scan-source step) */\n  scanResult?: MigrationScanResult;\n\n  /** User's migration selection (from select-items step) */\n  migrationSelection?: MigrationSelection;\n\n  // ── New setup flow fields ──────────────────────────────────────────────\n\n  /** Homebrew installation result */\n  homebrewInstalled?: {\n    brewPath: string;\n    success: boolean;\n  };\n\n  /** NVM installation result */\n  nvmInstalled?: {\n    nvmDir: string;\n    nodeVersion: string;\n    nodeBinaryPath: string;\n    success: boolean;\n  };\n\n  /** Shell configuration result */\n  shellConfigured?: {\n    success: boolean;\n  };\n\n  /** OpenClaw installation result (via npm in agent sandbox) */\n  openclawInstalled?: {\n    version: string;\n    binaryPath: string;\n    success: boolean;\n  };\n\n  /** OpenClaw config copy result */\n  openclawConfigCopied?: {\n    configDir: string;\n    sanitized: boolean;\n    success: boolean;\n  };\n\n  /** Host OpenClaw stop result */\n  hostOpenclawStopped?: {\n    daemonStopped: boolean;\n    gatewayStopped: boolean;\n  };\n\n  /** OpenClaw LaunchDaemon setup */\n  openclawLaunchDaemons?: {\n    daemonPlistPath: string;\n    gatewayPlistPath: string;\n    loaded: boolean;\n  };\n\n  /** OpenClaw onboard result */\n  openclawOnboarded?: {\n    success: boolean;\n  };\n\n  /** OpenClaw gateway process (started inline) */\n  openclawGateway?: {\n    pid: number;\n    running: boolean;\n  };\n}\n\n/**\n * Step definition for wizard\n */\nexport interface WizardStepDefinition {\n  id: WizardStepId;\n  name: string;\n  description: string;\n  /** Whether this step requires sudo */\n  requiresSudo?: boolean;\n  /** Dependencies (other step IDs that must complete first) */\n  dependsOn?: WizardStepId[];\n  /** Phase: 'detection' (runs before confirm) or 'setup' (runs after confirm) */\n  phase: 'detection' | 'setup';\n}\n\n/**\n * All wizard step definitions\n */\nexport const WIZARD_STEPS: WizardStepDefinition[] = [\n  // Detection phase\n  {\n    id: 'prerequisites',\n    name: 'Check Prerequisites',\n    description: 'Verify Node.js 22+, macOS, and required tools',\n    phase: 'detection',\n  },\n  {\n    id: 'detect',\n    name: 'Detect Target',\n    description: 'Find target application (auto-detect or use specified preset)',\n    phase: 'detection',\n    dependsOn: ['prerequisites'],\n  },\n  {\n    id: 'install-target',\n    name: 'Install Target',\n    description: 'Install target application if not found',\n    phase: 'detection',\n    dependsOn: ['detect'],\n  },\n  {\n    id: 'configure',\n    name: 'Configure',\n    description: 'Set up user configuration',\n    phase: 'detection',\n    dependsOn: ['install-target'],\n  },\n  {\n    id: 'confirm',\n    name: 'Confirm Setup',\n    description: 'Show plan and get user confirmation',\n    phase: 'detection',\n    dependsOn: ['configure'],\n  },\n\n  // Setup phase\n  {\n    id: 'cleanup-previous',\n    name: 'Clean Previous Installation',\n    description: 'Remove any previous AgenShield installation',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['confirm'],\n  },\n  {\n    id: 'create-groups',\n    name: 'Create Groups',\n    description: 'Create socket access and workspace groups',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['cleanup-previous'],\n  },\n  {\n    id: 'create-agent-user',\n    name: 'Create Agent User',\n    description: 'Create sandboxed agent user with guarded shell',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-groups'],\n  },\n  {\n    id: 'create-broker-user',\n    name: 'Create Broker User',\n    description: 'Create broker user for daemon',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-groups'],\n  },\n  {\n    id: 'create-directories',\n    name: 'Create Directories',\n    description: 'Create /opt/agenshield, /etc/agenshield, etc.',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-agent-user', 'create-broker-user'],\n  },\n  {\n    id: 'setup-socket',\n    name: 'Setup Socket',\n    description: 'Create /var/run/agenshield/ with correct permissions',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-homebrew',\n    name: 'Install Homebrew',\n    description: 'Install user-specific Homebrew for agent user (this may take up to 2 minutes)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-nvm',\n    name: 'Install NVM & Node.js',\n    description: 'Install NVM and Node.js for agent user (this may take up to 2 minutes)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['install-homebrew'],\n  },\n  {\n    id: 'configure-shell',\n    name: 'Configure Shell',\n    description: 'Set up guarded shell with Homebrew and NVM paths',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['install-nvm'],\n  },\n  {\n    id: 'install-wrappers',\n    name: 'Install Wrappers',\n    description: 'Install command wrappers to agent home bin directory (this may take up to a minute)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['configure-shell'],\n  },\n  {\n    id: 'generate-seatbelt',\n    name: 'Generate Seatbelt Profiles',\n    description: 'Generate macOS sandbox profiles',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-broker',\n    name: 'Install Broker',\n    description: 'Install broker binary',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-daemon-config',\n    name: 'Install Daemon Config',\n    description: 'Write daemon configuration files',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-sudoers',\n    name: 'Install Sudoers Rule',\n    description: 'Grant broker passwordless sudo for agent operations',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-broker-user', 'create-agent-user'],\n  },\n  {\n    id: 'install-policies',\n    name: 'Install Policies',\n    description: 'Write default security policies',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'setup-launchdaemon',\n    name: 'Setup LaunchDaemon',\n    description: 'Create and load broker launchd plist (this may take up to a minute)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['install-broker', 'install-daemon-config'],\n  },\n  {\n    id: 'copy-openclaw-config',\n    name: 'Copy OpenClaw Config',\n    description: 'Copy and sanitize OpenClaw config from host user',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['create-directories'],\n  },\n  {\n    id: 'install-openclaw',\n    name: 'Install OpenClaw',\n    description: 'Install OpenClaw in agent sandbox via NVM npm (this may take up to 3 minutes)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['setup-launchdaemon', 'install-wrappers', 'copy-openclaw-config'],\n  },\n  {\n    id: 'stop-host-openclaw',\n    name: 'Stop Host OpenClaw',\n    description: 'Stop OpenClaw daemon and gateway on host user',\n    phase: 'setup',\n    dependsOn: ['install-openclaw'],\n  },\n  {\n    id: 'onboard-openclaw',\n    name: 'Initialize OpenClaw',\n    description: 'Run openclaw onboard to initialize agent environment (this may take up to 2 minutes)',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['stop-host-openclaw'],\n  },\n  {\n    id: 'verify',\n    name: 'Verify Installation',\n    description: 'Verify users, groups, and directories',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['onboard-openclaw'],\n  },\n  {\n    id: 'start-openclaw',\n    name: 'Start OpenClaw',\n    description: 'Install and start OpenClaw LaunchDaemons with intercepted Node.js',\n    phase: 'setup',\n    requiresSudo: true,\n    dependsOn: ['verify'],\n  },\n  {\n    id: 'setup-passcode',\n    name: 'Setup Passcode',\n    description: 'Set a passcode to protect sensitive configuration',\n    phase: 'setup',\n    dependsOn: ['start-openclaw'],\n  },\n  {\n    id: 'open-dashboard',\n    name: 'Open Dashboard',\n    description: 'Open AgenShield dashboard in browser',\n    phase: 'setup',\n    dependsOn: ['setup-passcode'],\n  },\n  {\n    id: 'complete',\n    name: 'Complete',\n    description: 'Setup finished successfully',\n    phase: 'setup',\n    dependsOn: ['open-dashboard'],\n  },\n];\n\n/**\n * Get step IDs for a specific phase\n */\nexport function getStepsByPhase(phase: 'detection' | 'setup'): WizardStepId[] {\n  return WIZARD_STEPS.filter((s) => s.phase === phase).map((s) => s.id);\n}\n\n/**\n * Get all step IDs in order\n */\nexport function getAllStepIds(): WizardStepId[] {\n  return WIZARD_STEPS.map((s) => s.id);\n}\n\n/**\n * Create initial wizard steps from definitions\n */\nexport function createWizardSteps(): WizardStep[] {\n  return WIZARD_STEPS.map((def) => ({\n    id: def.id,\n    name: def.name,\n    description: def.description,\n    status: 'pending' as const,\n  }));\n}\n"]}