aura-code 0.5.0 → 0.10.1

package/dist/agent/unified-memory.js

@@ -0,0 +1,164 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GLOBAL_LESSONS_FILE = exports.IDENTITY_FILE = void 0;
+exports.loadUnifiedMemory = loadUnifiedMemory;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+// ─────────────────────────────────────────────────────────────────────────────
+// Unified Memory — one read path shared by the CLI and the Telegram bot.
+//
+// Aura's memory used to live in three disconnected places (see the plan/design):
+//   1. key-value identity   ~/.aura/memory/*.json   (bot read default+user only)
+//   2. episode→dream         ~/.aura/episodes + dreams/  (CLI read per-project)
+//   3. chat history          ~/.aura/sessions
+// Facts saved by one surface never reached the other. This module gives both
+// surfaces ONE canonical view:
+//   • GLOBAL identity/facts  →  ~/.aura/memory/identity.json   (everywhere)
+//   • lessons                →  per-project reconciled dream (CLI) OR the
+//                               global digest ~/.aura/memory/lessons-global.md
+//                               (the bot, which is not tied to one project)
+//
+// It is read-only and defensive: any missing/corrupt file is skipped, and the
+// whole block is length-capped so it never bloats a prompt.
+// ─────────────────────────────────────────────────────────────────────────────
+const MEMORY_DIR = path.join(os.homedir(), '.aura', 'memory');
+/** Canonical global identity store (created by the consolidation migration). */
+exports.IDENTITY_FILE = path.join(MEMORY_DIR, 'identity.json');
+/** Global episodic-lessons digest (created by runGlobalReconciliation). */
+exports.GLOBAL_LESSONS_FILE = path.join(MEMORY_DIR, 'lessons-global.md');
+function loadJson(file) {
+    try {
+        if (!fs.existsSync(file))
+            return {};
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+function readText(file) {
+    try {
+        return fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : '';
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Identity/facts block from the canonical global store. Falls back to the
+ * legacy default.json + user.json if identity.json hasn't been created yet
+ * (so the surfaces keep working before/after the consolidation migration).
+ */
+function identitySection(maxChars) {
+    let store = loadJson(exports.IDENTITY_FILE);
+    if (Object.keys(store).length === 0) {
+        // Pre-migration fallback: merge the two namespaces the bot used to read.
+        store = { ...loadJson(path.join(MEMORY_DIR, 'default.json')), ...loadJson(path.join(MEMORY_DIR, 'user.json')) };
+    }
+    const keys = Object.keys(store);
+    if (keys.length === 0)
+        return '';
+    // Most-recently-updated entries first: identity.json only grows, and a
+    // budget-capped walk in raw insertion order silently drops whatever was
+    // added most recently once older entries fill the budget — which is
+    // exactly backwards, since a newly-added entry is usually a standing rule
+    // or current fact, while old entries are stable background bio. A missing
+    // `updated` sorts last (oldest-equivalent), not first.
+    const ordered = [...keys].sort((a, b) => {
+        const ta = Date.parse(store[a]?.updated ?? '') || 0;
+        const tb = Date.parse(store[b]?.updated ?? '') || 0;
+        return tb - ta;
+    });
+    const lines = [];
+    let used = 0;
+    for (const k of ordered) {
+        const v = store[k]?.value ?? '';
+        if (!v)
+            continue;
+        const line = `- **${k}**: ${v}`;
+        if (used + line.length > maxChars)
+            continue; // skip, don't stop — a later (older) entry may still fit
+        lines.push(line);
+        used += line.length;
+    }
+    return lines.length ? `### Who & what Aura knows (identity/facts)\n${lines.join('\n')}` : '';
+}
+/**
+ * Lessons block. CLI passes a projectRoot → per-project reconciled dream.
+ * The bot passes nothing → the global lessons digest.
+ */
+function lessonsSection(projectRoot, maxChars) {
+    let content = '';
+    if (projectRoot) {
+        const reconciled = path.join(projectRoot, 'dreams', '.reconciled.md');
+        content = readText(reconciled);
+        // Fall back to the latest dated dream if reconciliation hasn't run.
+        if (!content) {
+            try {
+                const dir = path.join(projectRoot, 'dreams');
+                const files = fs.readdirSync(dir).filter(f => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).sort();
+                if (files.length)
+                    content = readText(path.join(dir, files[files.length - 1]));
+            }
+            catch { /* no dreams yet */ }
+        }
+    }
+    else {
+        content = readText(exports.GLOBAL_LESSONS_FILE);
+    }
+    content = content.trim();
+    if (!content)
+        return '';
+    if (content.length > maxChars)
+        content = content.slice(0, maxChars) + '\n… (truncated)';
+    return `### Lessons from past sessions\n${content}`;
+}
+/**
+ * The single memory block both the CLI and the Telegram bot inject into their
+ * system prompts. Returns '' when there's nothing to add.
+ */
+function loadUnifiedMemory(opts = {}) {
+    const budget = opts.maxChars ?? 4000;
+    // Split the budget: identity gets the larger share, lessons the rest.
+    const idBlock = identitySection(Math.floor(budget * 0.6));
+    const lessonBlock = lessonsSection(opts.projectRoot, budget - idBlock.length);
+    const parts = [idBlock, lessonBlock].filter(Boolean);
+    if (parts.length === 0)
+        return '';
+    return `\n\n## Memory (shared across Aura CLI + Telegram)\n${parts.join('\n\n')}\n`;
+}
+//# sourceMappingURL=unified-memory.js.map

package/dist/agent/unified-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified-memory.js","sourceRoot":"","sources":["../../src/agent/unified-memory.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4HA,8CASC;AArID,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,gFAAgF;AAChF,yEAAyE;AACzE,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,8CAA8C;AAC9C,6EAA6E;AAC7E,+BAA+B;AAC/B,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,4DAA4D;AAC5D,gFAAgF;AAEhF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAE9D,gFAAgF;AACnE,QAAA,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AACpE,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAI9E,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAU,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,KAAK,GAAG,QAAQ,CAAC,qBAAa,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,yEAAyE;QACzE,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,SAAS,CAAC,yDAAyD;QACtG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,+CAA+C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,WAA+B,EAAE,QAAgB;IACvE,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACtE,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/B,oEAAoE;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC7C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxF,IAAI,KAAK,CAAC,MAAM;oBAAE,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC,2BAAmB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,iBAAiB,CAAC;IACxF,OAAO,mCAAmC,OAAO,EAAE,CAAC;AACtD,CAAC;AASD;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,OAA6B,EAAE;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACrC,sEAAsE;IACtE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,sDAAsD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACtF,CAAC"}

package/dist/checkpoints/engine.d.ts

@@ -0,0 +1,44 @@
+export interface Checkpoint {
+    /** Short id, e.g. "m1x2y3-4f" — used in refs and CLI commands. */
+    id: string;
+    /** Full ref name: refs/aura/checkpoints/<id> */
+    ref: string;
+    /** Commit hash of the shadow commit. */
+    commit: string;
+    /** Tree hash of the snapshot. */
+    tree: string;
+    /** Human label (usually the task that triggered the snapshot). */
+    label: string;
+    /** ISO timestamp of creation. */
+    createdAt: string;
+}
+export interface RestoreResult {
+    /** Files written back from the snapshot. */
+    restored: string[];
+    /** Files deleted because they did not exist at snapshot time. */
+    deleted: string[];
+    /** Checkpoint of the state just before restoring (undo the undo). */
+    preRestore: Checkpoint | null;
+}
+/** Absolute .git dir of the repo containing root, or null if not a repo. */
+export declare function gitDirOf(root: string): Promise<string | null>;
+/**
+ * Create a checkpoint of the current working tree.
+ * Returns null when: not a git repo, or the tree is identical to the most
+ * recent checkpoint (deduped — repeated calls within a burst are no-ops).
+ */
+export declare function createCheckpoint(root: string, label: string): Promise<Checkpoint | null>;
+/** All checkpoints for the repo containing root, newest first. */
+export declare function listCheckpoints(root: string): Promise<Checkpoint[]>;
+/**
+ * Restore the working tree to the state captured by checkpoint `id`
+ * (or the most recent checkpoint when id is omitted).
+ *
+ * Only paths that differ are touched; the user's index/HEAD stay put, so
+ * after a restore `git status` simply reflects the restored content.
+ */
+export declare function restoreCheckpoint(root: string, id?: string): Promise<RestoreResult>;
+/** Delete all but the newest `keep` checkpoints. Returns how many were pruned. */
+export declare function pruneCheckpoints(root: string, keep: number): Promise<number>;
+/** Delete a single checkpoint by id. */
+export declare function deleteCheckpoint(root: string, id: string): Promise<boolean>;

package/dist/checkpoints/engine.js

@@ -0,0 +1,324 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gitDirOf = gitDirOf;
+exports.createCheckpoint = createCheckpoint;
+exports.listCheckpoints = listCheckpoints;
+exports.restoreCheckpoint = restoreCheckpoint;
+exports.pruneCheckpoints = pruneCheckpoints;
+exports.deleteCheckpoint = deleteCheckpoint;
+/**
+ * Checkpoints — shadow-git snapshots of the working tree, so every agent
+ * write is cheaply reversible with `aura --undo` (or `:undo` in the REPL).
+ *
+ * How it works: before the first mutating tool call of each turn, the loop
+ * snapshots the ENTIRE working tree (tracked + untracked, .gitignore
+ * respected) into the repo's object store via a TEMPORARY index, then points
+ * a ref at it under `refs/aura/checkpoints/<id>`. The user's real index,
+ * HEAD, branches, and reflog are never touched — checkpoints are invisible
+ * to normal git workflows and are garbage-collectable once pruned.
+ *
+ * Restore diffs the snapshot tree against a fresh snapshot of "now", writes
+ * changed/added files back and deletes files that didn't exist at snapshot
+ * time. A pre-restore checkpoint is always taken first, so restore itself
+ * is undoable.
+ *
+ * Requires the project to be a git repository; in a non-repo all operations
+ * are silent no-ops (create returns null).
+ */
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const REF_PREFIX = 'refs/aura/checkpoints/';
+/** Shadow commits need an ident but must never depend on user git config. */
+const SHADOW_IDENT = {
+    GIT_AUTHOR_NAME: 'aura-checkpoint',
+    GIT_AUTHOR_EMAIL: 'checkpoint@aura.local',
+    GIT_COMMITTER_NAME: 'aura-checkpoint',
+    GIT_COMMITTER_EMAIL: 'checkpoint@aura.local',
+};
+function git(root, args, extraEnv, stdin) {
+    return new Promise((resolve, reject) => {
+        const child = (0, child_process_1.execFile)('git', args, { cwd: root, env: { ...process.env, ...SHADOW_IDENT, ...extraEnv }, maxBuffer: 64 * 1024 * 1024 }, (err, stdout, stderr) => {
+            if (err)
+                reject(new Error(`git ${args[0]}: ${stderr || err.message}`));
+            else
+                resolve(stdout);
+        });
+        if (stdin !== undefined)
+            child.stdin?.end(stdin);
+        else
+            child.stdin?.end();
+    });
+}
+/** Absolute .git dir of the repo containing root, or null if not a repo. */
+async function gitDirOf(root) {
+    try {
+        return (await git(root, ['rev-parse', '--absolute-git-dir'])).trim();
+    }
+    catch {
+        return null;
+    }
+}
+// Monotonic within the process so ids created in the same millisecond still
+// sort in creation order (listCheckpoints sorts by refname).
+let lastIdTs = 0;
+function newId() {
+    lastIdTs = Math.max(Date.now(), lastIdTs + 1);
+    return `${lastIdTs.toString(36)}-${Math.random().toString(36).slice(2, 6)}`;
+}
+/**
+ * Common secret patterns that should never be captured in checkpoints.
+ * These patterns match files that contain API keys, tokens, or other secrets.
+ */
+const SECRET_PATTERNS = [
+    // Environment variable style: TOKEN=, API_KEY=, etc.
+    /^(?:TOKEN|API_KEY|SECRET|PASSWORD|AUTH|KEY|BEARER)\s*=/i,
+    // JSON style: "api_key": "sk_...", "token": "ghp_..."
+    /["'](?:api_key|token|secret|password|auth_key|bearer|access_token)["']?\s*:\s*["']?(?:sk_|pk_|ghp_|gho_|ghu_|glpat-|ey|Bearer)/i,
+    // Common API key patterns (more lenient)
+    /(?:sk_|pk_|ghp_|gho_|ghu_|glpat-)[a-zA-Z0-9_]{10,}/i,
+    // Bearer tokens
+    /Bearer\s+[a-zA-Z0-9_\-\.]{10,}/i,
+    // Private keys
+    /-----BEGIN\s+(?:RSA\s+)?PRIVATE\s+KEY-----/,
+    // Generic long base64-like strings (likely tokens)
+    /[a-zA-Z0-9_\-\.]{32,}/,
+];
+/**
+ * Check if a file contains potential secrets by scanning its content.
+ * Returns true if any secret pattern is matched.
+ */
+function fileContainsSecrets(content) {
+    for (const pattern of SECRET_PATTERNS) {
+        if (pattern.test(content))
+            return true;
+    }
+    return false;
+}
+/**
+ * Get list of files in the temporary index that should be excluded from checkpoints
+ * due to containing secrets.
+ */
+async function getSecretFilesFromIndex(root, env) {
+    const secretFiles = [];
+    try {
+        // Get all files in the temporary index (tracked + staged untracked files)
+        const out = await git(root, ['ls-files', '-z'], env);
+        const files = out.split('\0').filter(Boolean);
+        for (const file of files) {
+            const absPath = path.join(root, file);
+            try {
+                // Only check text-based files that might contain credentials
+                if (/\.(json|js|ts|mjs|env|config|sh|py|ya?ml|toml|ini|conf|txt|md)$/.test(file)) {
+                    const content = fs.readFileSync(absPath, 'utf8');
+                    if (fileContainsSecrets(content)) {
+                        secretFiles.push(file);
+                    }
+                }
+            }
+            catch (e) { /* skip files we can't read */ }
+        }
+    }
+    catch (e) { /* if git ls-files fails, return empty array */ }
+    return secretFiles;
+}
+/**
+ * Snapshot the working tree into the object store through a temporary index.
+ * Returns the tree hash. Never touches the user's real index.
+ *
+ * SECURITY: Excludes files containing secrets to prevent credential leakage
+ * into checkpoint refs. This is a critical safety measure since checkpoint refs
+ * live outside normal branches and won't be caught by standard secret scanning.
+ */
+async function writeShadowTree(root, gitDir) {
+    const tmpIndex = path.join(gitDir, `aura-checkpoint-index-${process.pid}`);
+    const env = { GIT_INDEX_FILE: tmpIndex };
+    try {
+        // Seed from HEAD when it exists so `add -A` computes a minimal update.
+        try {
+            await git(root, ['read-tree', 'HEAD'], env);
+        }
+        catch {
+            await git(root, ['read-tree', '--empty'], env);
+        }
+        // Add all files, respecting .gitignore (git add -A behavior)
+        await git(root, ['add', '-A', '--', '.'], env);
+        // CRITICAL: Remove any files that contain secrets (check AFTER adding to index)
+        const secretFiles = await getSecretFilesFromIndex(root, env);
+        if (secretFiles.length > 0) {
+            // Remove files with secrets from the index
+            await git(root, ['rm', '--cached', '--', ...secretFiles], env);
+            console.warn(`[checkpoint] Excluded ${secretFiles.length} file(s) containing secrets from checkpoint`);
+        }
+        return (await git(root, ['write-tree'], env)).trim();
+    }
+    finally {
+        try {
+            fs.unlinkSync(tmpIndex);
+        }
+        catch { /* already gone */ }
+    }
+}
+/**
+ * Create a checkpoint of the current working tree.
+ * Returns null when: not a git repo, or the tree is identical to the most
+ * recent checkpoint (deduped — repeated calls within a burst are no-ops).
+ */
+async function createCheckpoint(root, label) {
+    const gitDir = await gitDirOf(root);
+    if (!gitDir)
+        return null;
+    const tree = await writeShadowTree(root, gitDir);
+    const existing = await listCheckpoints(root);
+    if (existing[0]?.tree === tree)
+        return null;
+    let head = null;
+    try {
+        head = (await git(root, ['rev-parse', '--verify', 'HEAD'])).trim();
+    }
+    catch { /* unborn branch — parentless shadow commit */ }
+    const cleanLabel = label.replace(/\s+/g, ' ').trim().slice(0, 120) || 'checkpoint';
+    const commitArgs = ['commit-tree', tree, '-m', cleanLabel];
+    if (head)
+        commitArgs.push('-p', head);
+    const commit = (await git(root, commitArgs)).trim();
+    const id = newId();
+    const ref = REF_PREFIX + id;
+    await git(root, ['update-ref', ref, commit]);
+    return { id, ref, commit, tree, label: cleanLabel, createdAt: new Date().toISOString() };
+}
+/** All checkpoints for the repo containing root, newest first. */
+async function listCheckpoints(root) {
+    const gitDir = await gitDirOf(root);
+    if (!gitDir)
+        return [];
+    // Sort by refname, not creatordate: commit dates have 1-second resolution,
+    // while ids embed a base36 ms timestamp that sorts correctly lexically.
+    const out = await git(root, [
+        'for-each-ref', '--sort=-refname',
+        '--format=%(refname)%09%(objectname)%09%(tree)%09%(creatordate:iso-strict)%09%(subject)',
+        REF_PREFIX,
+    ]);
+    return out.split('\n').filter(Boolean).map(line => {
+        const [ref, commit, tree, createdAt, ...subject] = line.split('\t');
+        return {
+            id: ref.slice(REF_PREFIX.length),
+            ref, commit, tree, createdAt,
+            label: subject.join('\t'),
+        };
+    });
+}
+/**
+ * Restore the working tree to the state captured by checkpoint `id`
+ * (or the most recent checkpoint when id is omitted).
+ *
+ * Only paths that differ are touched; the user's index/HEAD stay put, so
+ * after a restore `git status` simply reflects the restored content.
+ */
+async function restoreCheckpoint(root, id) {
+    const gitDir = await gitDirOf(root);
+    if (!gitDir)
+        throw new Error('Not a git repository — checkpoints unavailable.');
+    const all = await listCheckpoints(root);
+    if (all.length === 0)
+        throw new Error('No checkpoints exist for this repository.');
+    const target = id ? all.find(c => c.id === id) : all[0];
+    if (!target)
+        throw new Error(`Checkpoint not found: ${id}`);
+    // Snapshot "now" first — makes the restore itself undoable, and gives us
+    // the tree to diff against. createCheckpoint dedupes, so when the tree
+    // hasn't changed since the latest checkpoint we reuse that one's tree.
+    const preRestore = await createCheckpoint(root, `pre-restore (before restoring ${target.id})`);
+    const nowTree = preRestore?.tree ?? (await listCheckpoints(root))[0].tree;
+    if (nowTree === target.tree)
+        return { restored: [], deleted: [], preRestore };
+    // -z output: STATUS NUL path NUL … — statuses relative nowTree → target:
+    //   A = exists only in the snapshot (write it back)
+    //   D = exists only now (delete it)
+    //   M/T = content/type differs (write it back)
+    const raw = await git(root, ['diff-tree', '-r', '-z', '--name-status', nowTree, target.tree]);
+    const parts = raw.split('\0').filter(p => p.length > 0);
+    const toWrite = [];
+    const toDelete = [];
+    for (let i = 0; i + 1 < parts.length; i += 2) {
+        const status = parts[i];
+        const file = parts[i + 1];
+        if (status === 'D')
+            toDelete.push(file);
+        else
+            toWrite.push(file);
+    }
+    for (const file of toDelete) {
+        try {
+            fs.rmSync(path.join(root, file), { force: true });
+        }
+        catch { /* best-effort */ }
+    }
+    if (toWrite.length > 0) {
+        const tmpIndex = path.join(gitDir, `aura-restore-index-${process.pid}`);
+        const env = { GIT_INDEX_FILE: tmpIndex };
+        try {
+            await git(root, ['read-tree', target.tree], env);
+            await git(root, ['checkout-index', '-f', '-z', '--stdin'], env, toWrite.join('\0') + '\0');
+        }
+        finally {
+            try {
+                fs.unlinkSync(tmpIndex);
+            }
+            catch { /* already gone */ }
+        }
+    }
+    return { restored: toWrite, deleted: toDelete, preRestore };
+}
+/** Delete all but the newest `keep` checkpoints. Returns how many were pruned. */
+async function pruneCheckpoints(root, keep) {
+    const all = await listCheckpoints(root);
+    const stale = all.slice(Math.max(0, keep));
+    for (const cp of stale) {
+        await git(root, ['update-ref', '-d', cp.ref]);
+    }
+    return stale.length;
+}
+/** Delete a single checkpoint by id. */
+async function deleteCheckpoint(root, id) {
+    const all = await listCheckpoints(root);
+    const cp = all.find(c => c.id === id);
+    if (!cp)
+        return false;
+    await git(root, ['update-ref', '-d', cp.ref]);
+    return true;
+}
+//# sourceMappingURL=engine.js.map

package/dist/checkpoints/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/checkpoints/engine.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEA,4BAMC;AAyGD,4CAuBC;AAGD,0CAkBC;AASD,8CAgDC;AAGD,4CAOC;AAGD,4CAMC;AAhTD;;;;;;;;;;;;;;;;;;GAkBG;AACH,iDAAyC;AACzC,uCAAyB;AACzB,2CAA6B;AA0B7B,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAE5C,6EAA6E;AAC7E,MAAM,YAAY,GAAG;IACnB,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,uBAAuB;IACzC,kBAAkB,EAAE,iBAAiB;IACrC,mBAAmB,EAAE,uBAAuB;CAC7C,CAAC;AAEF,SAAS,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,QAAiC,EAAE,KAAc;IAC1F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,wBAAQ,EACpB,KAAK,EAAE,IAAI,EACX,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EACjG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;;gBAClE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CACF,CAAC;QACF,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;;YAC5C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AACrE,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,6DAA6D;AAC7D,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,SAAS,KAAK;IACZ,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG;IACtB,qDAAqD;IACrD,yDAAyD;IACzD,sDAAsD;IACtD,iIAAiI;IACjI,yCAAyC;IACzC,qDAAqD;IACrD,gBAAgB;IAChB,iCAAiC;IACjC,eAAe;IACf,4CAA4C;IAC5C,mDAAmD;IACnD,uBAAuB;CACxB,CAAC;AAEF;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,GAA2B;IAC9E,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,0EAA0E;QAC1E,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,6DAA6D;gBAC7D,IAAI,iEAAiE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjF,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACjD,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;wBACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,CAAC,+CAA+C,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,yBAAyB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,uEAAuE;QACvE,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QACpD,MAAM,CAAC;YAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAEzD,6DAA6D;QAC7D,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAE/C,gFAAgF;QAChF,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,2CAA2C;YAC3C,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,yBAAyB,WAAW,CAAC,MAAM,6CAA6C,CAAC,CAAC;QACzG,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAChE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5C,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAC3E,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC;IACnF,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,UAAU,GAAG,EAAE,CAAC;IAC5B,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAE7C,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED,kEAAkE;AAC3D,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC1B,cAAc,EAAE,iBAAiB;QACjC,wFAAwF;QACxF,UAAU;KACX,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAChC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;SAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,EAAW;IAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAEhF,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IAE5D,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,iCAAiC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,UAAU,EAAE,IAAI,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1E,IAAI,OAAO,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;IAE9E,yEAAyE;IACzE,oDAAoD;IACpD,oCAAoC;IACpC,+CAA+C;IAC/C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACjD,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7F,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAC3E,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAC/D,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,wCAAwC;AACjC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IAC7D,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/command-palette.d.ts

@@ -0,0 +1,26 @@
+export interface PaletteCommand {
+    id: string;
+    label: string;
+    description: string;
+    category: string;
+}
+/**
+ * All commands available in the palette. Derived from help-data.ts
+ * but kept as a static list here to avoid circular imports.
+ */
+export declare const PALETTE_COMMANDS: PaletteCommand[];
+/**
+ * Fuzzy-match a query against a command's label + id.
+ * Returns a score (lower = better match), or -1 for no match.
+ */
+export declare function fuzzyMatch(query: string, text: string): number;
+/**
+ * Filter and sort commands by fuzzy match score.
+ */
+export declare function filterCommands(query: string): PaletteCommand[];
+/**
+ * Render the palette overlay. Returns styled lines to draw.
+ * `selectedIdx` is the currently highlighted item.
+ * `maxVisible` controls how many items fit in the overlay.
+ */
+export declare function renderPalette(commands: PaletteCommand[], query: string, selectedIdx: number, maxVisible: number, width: number): string[];