clawdlets 0.0.1 → 0.2.0

package/node_modules/@clawdlets/core/dist/lib/deploy-creds.js

@@ -0,0 +1,111 @@
+import fs from "node:fs";
+import path from "node:path";
+import dotenv from "dotenv";
+import { getRepoLayout } from "../repo-layout.js";
+import { expandPath } from "./path-expand.js";
+import { findRepoRoot } from "./repo.js";
+export const DEPLOY_CREDS_KEYS = ["HCLOUD_TOKEN", "GITHUB_TOKEN", "NIX_BIN", "SOPS_AGE_KEY_FILE"];
+function trimEnv(v) {
+    const trimmed = String(v ?? "").trim();
+    return trimmed ? trimmed : undefined;
+}
+function validateEnvFileSecurity(filePath) {
+    let st;
+    try {
+        st = fs.lstatSync(filePath);
+    }
+    catch (e) {
+        return { ok: false, error: `cannot stat: ${String(e?.message || e)}` };
+    }
+    if (st.isSymbolicLink())
+        return { ok: false, error: "refusing to load: is a symlink" };
+    if (!st.isFile())
+        return { ok: false, error: "refusing to load: not a regular file" };
+    const badPerms = (st.mode & 0o077) !== 0;
+    if (badPerms)
+        return { ok: false, error: `refusing to load: insecure permissions (mode ${(st.mode & 0o777).toString(8)}; expected 600)` };
+    if (typeof process.getuid === "function") {
+        const uid = process.getuid();
+        if (st.uid !== uid)
+            return { ok: false, error: `refusing to load: wrong owner (uid ${st.uid}; expected ${uid})` };
+    }
+    return { ok: true };
+}
+function resolveEnvFile(params) {
+    const layout = getRepoLayout(params.repoRoot, params.runtimeDir);
+    const explicit = trimEnv(params.envFile);
+    if (explicit) {
+        const expanded = expandPath(explicit);
+        const abs = path.isAbsolute(expanded) ? expanded : path.resolve(params.cwd, expanded);
+        return { origin: "explicit", filePath: abs, exists: fs.existsSync(abs) };
+    }
+    const abs = layout.envFilePath;
+    return { origin: "default", filePath: abs, exists: fs.existsSync(abs) };
+}
+export function loadDeployCreds(params) {
+    const repoRoot = findRepoRoot(params.cwd);
+    const resolved = resolveEnvFile({ cwd: params.cwd, repoRoot, runtimeDir: params.runtimeDir, envFile: params.envFile });
+    let envFile;
+    let envFromFile = {};
+    if (resolved.exists) {
+        const check = validateEnvFileSecurity(resolved.filePath);
+        envFile = check.ok
+            ? { origin: resolved.origin, status: "ok", path: resolved.filePath }
+            : { origin: resolved.origin, status: "invalid", path: resolved.filePath, error: check.error };
+        if (check.ok) {
+            try {
+                const raw = fs.readFileSync(resolved.filePath, "utf8");
+                envFromFile = dotenv.parse(raw);
+            }
+            catch (e) {
+                envFile = {
+                    origin: resolved.origin,
+                    status: "invalid",
+                    path: resolved.filePath,
+                    error: `cannot read/parse: ${String(e?.message || e)}`,
+                };
+                envFromFile = {};
+            }
+        }
+    }
+    else if (resolved.origin === "explicit") {
+        envFile = { origin: resolved.origin, status: "missing", path: resolved.filePath, error: "file not found" };
+    }
+    const get = (k) => {
+        const fromEnv = trimEnv(process.env[k]);
+        if (fromEnv)
+            return { value: fromEnv, source: "env" };
+        const fromFile = trimEnv(envFromFile[k]);
+        if (fromFile)
+            return { value: fromFile, source: "file" };
+        if (k === "NIX_BIN")
+            return { value: "nix", source: "default" };
+        return { value: undefined, source: "unset" };
+    };
+    const HCLOUD_TOKEN = get("HCLOUD_TOKEN");
+    const GITHUB_TOKEN = get("GITHUB_TOKEN");
+    const NIX_BIN = get("NIX_BIN");
+    const SOPS_AGE_KEY_FILE = get("SOPS_AGE_KEY_FILE");
+    const sopsAgeKeyFileRaw = SOPS_AGE_KEY_FILE.value ? expandPath(SOPS_AGE_KEY_FILE.value) : undefined;
+    const sopsAgeKeyFile = sopsAgeKeyFileRaw
+        ? (path.isAbsolute(sopsAgeKeyFileRaw) ? sopsAgeKeyFileRaw : path.resolve(repoRoot, sopsAgeKeyFileRaw))
+        : undefined;
+    return {
+        repoRoot,
+        envFile,
+        envFromFile,
+        values: {
+            HCLOUD_TOKEN: HCLOUD_TOKEN.value,
+            GITHUB_TOKEN: GITHUB_TOKEN.value,
+            NIX_BIN: NIX_BIN.value || "nix",
+            SOPS_AGE_KEY_FILE: sopsAgeKeyFile,
+        },
+        sources: {
+            HCLOUD_TOKEN: HCLOUD_TOKEN.source,
+            GITHUB_TOKEN: GITHUB_TOKEN.source,
+            NIX_BIN: NIX_BIN.source,
+            SOPS_AGE_KEY_FILE: SOPS_AGE_KEY_FILE.source,
+        },
+    };
+}
+//# sourceMappingURL=deploy-creds.js.map

package/node_modules/@clawdlets/core/dist/lib/deploy-creds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-creds.js","sourceRoot":"","sources":["../../src/lib/deploy-creds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,mBAAmB,CAAU,CAAC;AA4B3G,SAAS,OAAO,CAAC,CAAU;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IAAI,EAAY,CAAC;IACjB,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,EAAE,CAAC,cAAc,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACvF,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;IAEtF,MAAM,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAE1I,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC;IACpH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,MAAgF;IAEtG,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA8D;IAC5F,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAEvH,IAAI,OAAsC,CAAC;IAC3C,IAAI,WAAW,GAA2B,EAAE,CAAC;IAE7C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzD,OAAO,GAAG,KAAK,CAAC,EAAE;YAChB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE;YACpE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAEhG,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACvD,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG;oBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE,QAAQ,CAAC,QAAQ;oBACvB,KAAK,EAAE,sBAAsB,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE;iBAClE,CAAC;gBACF,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC7G,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,CAAiB,EAAiD,EAAE;QAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEzD,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,iBAAiB,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEnD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,MAAM,cAAc,GAAG,iBAAiB;QACtC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACtG,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,QAAQ;QACR,OAAO;QACP,WAAW;QACX,MAAM,EAAE;YACN,YAAY,EAAE,YAAY,CAAC,KAAK;YAChC,YAAY,EAAE,YAAY,CAAC,KAAK;YAChC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;YAC/B,iBAAiB,EAAE,cAAc;SAClC;QACD,OAAO,EAAE;YACP,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,iBAAiB,EAAE,iBAAiB,CAAC,MAAM;SAC5C;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/docs-index.d.ts

@@ -0,0 +1,13 @@
+export type DocsIndexEntry = {
+    path: string;
+    when?: string;
+    summary?: string;
+};
+export declare function validateDocsIndexIntegrity(params: {
+    repoRoot: string;
+    templateRoot?: string | null;
+}): {
+    ok: boolean;
+    errors: string[];
+};
+//# sourceMappingURL=docs-index.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/docs-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-index.d.ts","sourceRoot":"","sources":["../../src/lib/docs-index.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAqDF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA2DpC"}

package/node_modules/@clawdlets/core/dist/lib/docs-index.js

@@ -0,0 +1,116 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+function isSafeRelativePath(p) {
+    if (!p)
+        return false;
+    if (path.isAbsolute(p))
+        return false;
+    const parts = p.split(/[\\/]+/g).filter(Boolean);
+    if (parts.includes(".."))
+        return false;
+    return true;
+}
+function normalizeEntry(raw) {
+    if (!raw || typeof raw !== "object")
+        throw new Error("docs entry must be an object");
+    const any = raw;
+    const p0 = String(any.path ?? "");
+    if (!p0)
+        throw new Error("docs entry missing path");
+    if (!isSafeRelativePath(p0))
+        throw new Error(`docs entry path must be a safe relative path: ${p0}`);
+    if (!p0.replace(/\\/g, "/").startsWith("docs/"))
+        throw new Error(`docs entry path must start with docs/: ${p0}`);
+    const when = any.when == null ? undefined : String(any.when);
+    const summary = any.summary == null ? undefined : String(any.summary);
+    return { path: p0.replace(/\\/g, "/"), when, summary };
+}
+function readDocsIndex(filePath) {
+    if (!fs.existsSync(filePath))
+        throw new Error(`missing docs index: ${filePath}`);
+    const raw = YAML.parse(fs.readFileSync(filePath, "utf8"));
+    if (!raw || typeof raw !== "object")
+        throw new Error(`docs index must be a YAML object: ${filePath}`);
+    if (!Array.isArray(raw.docs))
+        throw new Error(`docs index must contain docs: []: ${filePath}`);
+    return raw.docs.map(normalizeEntry);
+}
+function ensureUniquePaths(entries, label) {
+    const seen = new Set();
+    const dupes = [];
+    for (const e of entries) {
+        if (seen.has(e.path))
+            dupes.push(e.path);
+        seen.add(e.path);
+    }
+    return dupes.length > 0 ? [`${label} has duplicate path(s): ${Array.from(new Set(dupes)).join(", ")}`] : [];
+}
+function entriesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++) {
+        const ea = a[i];
+        const eb = b[i];
+        if (ea.path !== eb.path)
+            return false;
+        if ((ea.when ?? "") !== (eb.when ?? ""))
+            return false;
+        if ((ea.summary ?? "") !== (eb.summary ?? ""))
+            return false;
+    }
+    return true;
+}
+export function validateDocsIndexIntegrity(params) {
+    const repoRoot = params.repoRoot;
+    const repoDocsDir = path.join(repoRoot, "docs");
+    const repoIndexPath = path.join(repoDocsDir, "docs.yaml");
+    const templateDocsDir = params.templateRoot ? path.join(params.templateRoot, "docs") : null;
+    const templateIndexPath = templateDocsDir ? path.join(templateDocsDir, "docs.yaml") : null;
+    const errors = [];
+    let repoEntries = [];
+    let templateEntries = [];
+    const hasRepoDocs = fs.existsSync(repoDocsDir);
+    const hasRepoIndex = fs.existsSync(repoIndexPath);
+    const hasTemplateIndex = templateIndexPath ? fs.existsSync(templateIndexPath) : false;
+    if (!hasRepoDocs && !hasTemplateIndex) {
+        return { ok: true, errors: [] };
+    }
+    if (hasRepoDocs) {
+        try {
+            repoEntries = readDocsIndex(repoIndexPath);
+        }
+        catch (e) {
+            errors.push(String(e?.message || e));
+        }
+    }
+    if (templateIndexPath && hasTemplateIndex) {
+        try {
+            templateEntries = readDocsIndex(templateIndexPath);
+        }
+        catch (e) {
+            errors.push(String(e?.message || e));
+        }
+    }
+    errors.push(...ensureUniquePaths(repoEntries, "docs/docs.yaml"));
+    if (templateIndexPath && hasTemplateIndex) {
+        errors.push(...ensureUniquePaths(templateEntries, path.relative(repoRoot, templateIndexPath)));
+    }
+    for (const e of repoEntries) {
+        const abs = path.join(repoRoot, e.path);
+        if (!fs.existsSync(abs))
+            errors.push(`docs/docs.yaml references missing file: ${e.path}`);
+    }
+    if (templateIndexPath && hasTemplateIndex) {
+        for (const e of templateEntries) {
+            const abs = path.join(params.templateRoot, e.path);
+            if (!fs.existsSync(abs))
+                errors.push(`template docs.yaml references missing file: ${e.path}`);
+        }
+    }
+    if (templateIndexPath && hasTemplateIndex && repoEntries.length > 0 && templateEntries.length > 0 && !entriesEqual(repoEntries, templateEntries)) {
+        errors.push("docs index mismatch: docs/docs.yaml must match template docs/docs.yaml (paths + metadata + order)");
+    }
+    return { ok: errors.length === 0, errors };
+}
+//# sourceMappingURL=docs-index.js.map

package/node_modules/@clawdlets/core/dist/lib/docs-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-index.js","sourceRoot":"","sources":["../../src/lib/docs-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,EAAE,EAAE,CAAC,CAAC;IACpG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC;IAEjH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAuB,CAAC;IAChF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACtG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IAC/F,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAyB,EAAE,KAAa;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,2BAA2B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,YAAY,CAAC,CAAmB,EAAE,CAAmB;IAC5D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACjB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACjB,IAAI,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAG1C;IACC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAEjC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE1D,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,MAAM,iBAAiB,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3F,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,WAAW,GAAqB,EAAE,CAAC;IACvC,IAAI,eAAe,GAAqB,EAAE,CAAC;IAE3C,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEtF,IAAI,CAAC,WAAW,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,WAAW,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,eAAe,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjE,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,IAAI,gBAAgB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;QACjJ,MAAM,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IACnH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/dot-path.d.ts

@@ -0,0 +1,2 @@
+export declare function splitDotPath(p0: string): string[];
+//# sourceMappingURL=dot-path.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/dot-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dot-path.d.ts","sourceRoot":"","sources":["../../src/lib/dot-path.ts"],"names":[],"mappings":"AAEA,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAcjD"}

package/node_modules/@clawdlets/core/dist/lib/dot-path.js

@@ -0,0 +1,19 @@
+const DISALLOWED_SEGMENTS = new Set(["__proto__", "prototype", "constructor"]);
+export function splitDotPath(p0) {
+    const p = p0.trim();
+    if (!p)
+        throw new Error("missing --path");
+    const parts = p
+        .split(".")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    if (parts.length === 0)
+        throw new Error("invalid --path");
+    for (const part of parts) {
+        if (DISALLOWED_SEGMENTS.has(part)) {
+            throw new Error(`invalid --path segment: ${part}`);
+        }
+    }
+    return parts;
+}
+//# sourceMappingURL=dot-path.js.map

package/node_modules/@clawdlets/core/dist/lib/dot-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dot-path.js","sourceRoot":"","sources":["../../src/lib/dot-path.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAE/E,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/dotenv-file.d.ts

@@ -0,0 +1,6 @@
+export type DotenvMap = Record<string, string>;
+export declare function parseDotenv(text: string): DotenvMap;
+export declare function formatDotenvValue(value: string): string;
+export declare function upsertDotenv(text: string, updates: DotenvMap): string;
+export declare function redactDotenv(text: string, keysToRedact: string[]): string;
+//# sourceMappingURL=dotenv-file.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/dotenv-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv-file.d.ts","sourceRoot":"","sources":["../../src/lib/dotenv-file.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAM/C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAEnD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,MAAM,CA6BrE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE"}

package/node_modules/@clawdlets/core/dist/lib/dotenv-file.js

@@ -0,0 +1,55 @@
+import dotenv from "dotenv";
+function escapeRegex(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+export function parseDotenv(text) {
+    return dotenv.parse(text);
+}
+export function formatDotenvValue(value) {
+    const trimmed = value.trim();
+    if (trimmed === "")
+        return "";
+    // Safer default: quote when characters could confuse dotenv parsing.
+    if (/[\s#"'`$]/.test(trimmed))
+        return JSON.stringify(trimmed);
+    return trimmed;
+}
+export function upsertDotenv(text, updates) {
+    const keys = Object.keys(updates);
+    const present = new Set();
+    const normalized = text.replace(/\r\n/g, "\n");
+    const lines = normalized === "" ? [] : normalized.split("\n");
+    const out = lines.map((line) => {
+        const m = line.match(/^([A-Za-z_][A-Za-z0-9_]*)=/);
+        if (!m)
+            return line;
+        const key = m[1];
+        if (!(key in updates))
+            return line;
+        present.add(key);
+        return `${key}=${formatDotenvValue(updates[key])}`;
+    });
+    const missing = keys.filter((k) => !present.has(k));
+    if (missing.length === 0) {
+        const joined = out.join("\n");
+        return joined === "" ? "" : joined.replace(/\n+$/, "\n");
+    }
+    const needsBlankLine = out.length > 0 && out[out.length - 1].trim() !== "";
+    const base = out.length === 0 ? [] : out;
+    const appended = [
+        ...base,
+        ...(needsBlankLine ? [""] : []),
+        ...missing.map((k) => `${k}=${formatDotenvValue(updates[k])}`),
+        "",
+    ];
+    return appended.join("\n");
+}
+export function redactDotenv(text, keysToRedact) {
+    let out = text;
+    for (const k of keysToRedact) {
+        const rx = new RegExp(`^(${escapeRegex(k)}=).*$`, "gm");
+        out = out.replace(rx, `$1"***REDACTED***"`);
+    }
+    return out;
+}
+//# sourceMappingURL=dotenv-file.js.map

package/node_modules/@clawdlets/core/dist/lib/dotenv-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv-file.js","sourceRoot":"","sources":["../../src/lib/dotenv-file.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAI5B,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC9B,qEAAqE;IACrE,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAClB,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,GAAG,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACzC,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI;QACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QAC/D,EAAE;KACH,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,YAAsB;IAC/D,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/fleet-nix-eval.d.ts

@@ -0,0 +1,6 @@
+import type { FleetConfig } from "./fleet-policy.js";
+export declare function evalFleetConfig(params: {
+    repoRoot: string;
+    nixBin: string;
+}): Promise<FleetConfig>;
+//# sourceMappingURL=fleet-nix-eval.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/fleet-nix-eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-nix-eval.d.ts","sourceRoot":"","sources":["../../src/lib/fleet-nix-eval.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQrD,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,WAAW,CAAC,CA0BvB"}

package/node_modules/@clawdlets/core/dist/lib/fleet-nix-eval.js

@@ -0,0 +1,33 @@
+import { z } from "zod";
+import { capture } from "./run.js";
+import { withFlakesEnv } from "./nix-flakes.js";
+const FleetConfigSchema = z.object({
+    bots: z.array(z.string()).default([]),
+    botProfiles: z.record(z.string(), z.any()).default(() => ({})),
+});
+export async function evalFleetConfig(params) {
+    const expr = [
+        "let",
+        "  flake = builtins.getFlake (toString ./.);",
+        "  lib = flake.inputs.clawdlets.inputs.nixpkgs.lib;",
+        "  project = {",
+        "    root = flake.outPath;",
+        "    config = builtins.fromJSON (builtins.readFile (flake.outPath + \"/fleet/clawdlets.json\"));",
+        "  };",
+        "  fleet = import (flake.inputs.clawdlets.outPath + \"/nix/lib/fleet-config.nix\") { inherit lib project; };",
+        "in {",
+        "  bots = fleet.bots;",
+        "  botProfiles = fleet.botProfiles;",
+        "}",
+    ].join("\n");
+    const out = await capture(params.nixBin, ["eval", "--impure", "--json", "--expr", expr], {
+        cwd: params.repoRoot,
+        env: withFlakesEnv(process.env),
+    });
+    const parsed = FleetConfigSchema.safeParse(JSON.parse(out));
+    if (!parsed.success) {
+        throw new Error(`invalid fleet JSON (nix eval): ${parsed.error.message}`);
+    }
+    return parsed.data;
+}
+//# sourceMappingURL=fleet-nix-eval.js.map

package/node_modules/@clawdlets/core/dist/lib/fleet-nix-eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-nix-eval.js","sourceRoot":"","sources":["../../src/lib/fleet-nix-eval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEnC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAGrC;IACC,MAAM,IAAI,GAAG;QACX,KAAK;QACL,6CAA6C;QAC7C,oDAAoD;QACpD,eAAe;QACf,2BAA2B;QAC3B,iGAAiG;QACjG,MAAM;QACN,6GAA6G;QAC7G,MAAM;QACN,sBAAsB;QACtB,oCAAoC;QACpC,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QACvF,GAAG,EAAE,MAAM,CAAC,QAAQ;QACpB,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;KAChC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,IAAmB,CAAC;AACpC,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/fleet-policy.d.ts

@@ -0,0 +1,28 @@
+export type FleetPolicyViolation = {
+    filePath: string;
+    message: string;
+    detail?: string;
+};
+export type FleetConfig = {
+    bots: string[];
+    botProfiles: Record<string, {
+        skills?: {
+            allowBundled?: unknown;
+            entries?: Record<string, any>;
+        };
+        github?: {
+            appId?: unknown;
+            installationId?: unknown;
+            privateKeySecret?: unknown;
+        };
+    }>;
+};
+export declare function validateFleetPolicy(params: {
+    filePath: string;
+    fleet: FleetConfig;
+    knownBundledSkills: string[];
+}): {
+    ok: boolean;
+    violations: FleetPolicyViolation[];
+};
+//# sourceMappingURL=fleet-policy.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/fleet-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-policy.d.ts","sourceRoot":"","sources":["../../src/lib/fleet-policy.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,CACjB,MAAM,EACN;QACE,MAAM,CAAC,EAAE;YACP,YAAY,CAAC,EAAE,OAAO,CAAC;YACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAC/B,CAAC;QACF,MAAM,CAAC,EAAE;YACP,KAAK,CAAC,EAAE,OAAO,CAAC;YAChB,cAAc,CAAC,EAAE,OAAO,CAAC;YACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;SAC5B,CAAC;KACH,CACF,CAAC;CACH,CAAC;AAMF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC;IACnB,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,oBAAoB,EAAE,CAAA;CAAE,CAsEtD"}

package/node_modules/@clawdlets/core/dist/lib/fleet-policy.js

@@ -0,0 +1,67 @@
+function isStringArray(v) {
+    return Array.isArray(v) && v.every((x) => typeof x === "string");
+}
+export function validateFleetPolicy(params) {
+    const { filePath, fleet, knownBundledSkills } = params;
+    const violations = [];
+    const bots = Array.isArray(fleet.bots) ? fleet.bots : [];
+    const botProfiles = fleet.botProfiles && typeof fleet.botProfiles === "object" ? fleet.botProfiles : {};
+    if (bots.length === 0) {
+        violations.push({ filePath, message: "fleet.bots is empty or missing" });
+        return { ok: false, violations };
+    }
+    for (const b of bots) {
+        const profile = botProfiles[b];
+        if (!profile) {
+            violations.push({ filePath, message: `missing botProfiles.${b}` });
+            continue;
+        }
+        const allowBundled = profile.skills?.allowBundled;
+        if (allowBundled == null) {
+            violations.push({ filePath, message: `botProfiles.${b}.skills.allowBundled must be set (explicit allowlist required)` });
+            continue;
+        }
+        if (allowBundled === null) {
+            violations.push({ filePath, message: `botProfiles.${b}.skills.allowBundled must not be null (null typically means allow-all)` });
+            continue;
+        }
+        if (!isStringArray(allowBundled)) {
+            violations.push({ filePath, message: `botProfiles.${b}.skills.allowBundled must be a list of strings` });
+            continue;
+        }
+        const allow = allowBundled.map((s) => s.trim()).filter(Boolean);
+        for (const s of allow) {
+            if (!knownBundledSkills.includes(s)) {
+                violations.push({
+                    filePath,
+                    message: `unknown bundled skill in botProfiles.${b}.skills.allowBundled: ${s}`,
+                    detail: `known: ${knownBundledSkills.join(", ")}`,
+                });
+            }
+        }
+        if (allow.includes("github")) {
+            const gh = profile.github || {};
+            const ok = typeof gh.appId === "number" && typeof gh.installationId === "number" && typeof gh.privateKeySecret === "string" && gh.privateKeySecret.trim();
+            if (!ok) {
+                violations.push({
+                    filePath,
+                    message: `bundled skill "github" enabled for ${b} but missing botProfiles.${b}.github.{ appId, installationId, privateKeySecret }`,
+                });
+            }
+        }
+        if (allow.includes("brave-search")) {
+            const entries = profile.skills?.entries || {};
+            const brave = entries["brave-search"] || {};
+            const apiKeySecret = brave.apiKeySecret;
+            const ok = typeof apiKeySecret === "string" && apiKeySecret.trim().length > 0;
+            if (!ok) {
+                violations.push({
+                    filePath,
+                    message: `bundled skill "brave-search" enabled for ${b} but missing skills.entries."brave-search".apiKeySecret`,
+                });
+            }
+        }
+    }
+    return { ok: violations.length === 0, violations };
+}
+//# sourceMappingURL=fleet-policy.js.map

package/node_modules/@clawdlets/core/dist/lib/fleet-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-policy.js","sourceRoot":"","sources":["../../src/lib/fleet-policy.ts"],"names":[],"mappings":"AAwBA,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAInC;IACC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAExG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,uBAAuB,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;QAClD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,gEAAgE,EAAE,CAAC,CAAC;YACzH,SAAS;QACX,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,wEAAwE,EAAE,CAAC,CAAC;YACjI,SAAS;QACX,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,gDAAgD,EAAE,CAAC,CAAC;YACzG,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,OAAO,EAAE,wCAAwC,CAAC,yBAAyB,CAAC,EAAE;oBAC9E,MAAM,EAAE,UAAU,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC1J,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,OAAO,EAAE,sCAAsC,CAAC,4BAA4B,CAAC,qDAAqD;iBACnI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YACxC,MAAM,EAAE,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC9E,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,OAAO,EAAE,4CAA4C,CAAC,yDAAyD;iBAChH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/fleet-secrets.d.ts

@@ -0,0 +1,23 @@
+import type { ClawdletsConfig } from "./clawdlets-config.js";
+export type MissingFleetSecretConfig = {
+    kind: "discord";
+    bot: string;
+} | {
+    kind: "model";
+    bot: string;
+    provider: string;
+    model: string;
+};
+export type FleetSecretsPlan = {
+    bots: string[];
+    secretNamesAll: string[];
+    secretNamesRequired: string[];
+    missingSecretConfig: MissingFleetSecretConfig[];
+    discordSecretsByBot: Record<string, string>;
+    modelSecretsByBot: Record<string, Record<string, string>>;
+};
+export declare function buildFleetSecretsPlan(params: {
+    config: ClawdletsConfig;
+    hostName: string;
+}): FleetSecretsPlan;
+//# sourceMappingURL=fleet-secrets.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/fleet-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-secrets.d.ts","sourceRoot":"","sources":["../../src/lib/fleet-secrets.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAsD7D,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,mBAAmB,EAAE,wBAAwB,EAAE,CAAC;IAChD,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3D,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CA+D7G"}