clawdlets 0.0.1 → 0.2.0

package/node_modules/@clawdlets/core/dist/lib/persona-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persona-loader.js","sourceRoot":"","sources":["../../src/lib/persona-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAU,CAAC;AAExD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IAC9F,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACzD,CAAC;SACD,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;CAC3C,CAAC;KACD,WAAW,EAAE,CAAC;AAejB,SAAS,mBAAmB,CAAC,QAAgB,EAAE,QAAgB;IAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,EAAE,CAAC,IAAI,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,KAAK,EAAE,CAAC,IAAI,eAAe,QAAQ,GAAG,CAAC,CAAC;IAC3G,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,WAAmB;IACjE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAM3B;IACC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAExD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,iBAAiB,UAAU,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;IAE9F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IAEtF,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,KAAK,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAErD,MAAM,cAAc,GAAoC;QACtD,EAAE,IAAI,EAAE,2CAA2C,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,QAAQ,IAAI,EAAE;QACxH,EAAE,IAAI,EAAE,+CAA+C,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KACxJ,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,UAAU;QACV,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,SAAS;QACT,MAAM;QACN,cAAc;KACf,CAAC;AACJ,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/repo.d.ts

@@ -0,0 +1,2 @@
+export declare function findRepoRoot(startDir: string): string;
+//# sourceMappingURL=repo.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../src/lib/repo.ts"],"names":[],"mappings":"AAGA,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUrD"}

package/node_modules/@clawdlets/core/dist/lib/repo.js

@@ -0,0 +1,16 @@
+import fs from "node:fs";
+import path from "node:path";
+export function findRepoRoot(startDir) {
+    let current = path.resolve(startDir);
+    for (;;) {
+        const flake = path.join(current, "flake.nix");
+        const scriptsDir = path.join(current, "scripts");
+        if (fs.existsSync(flake) && fs.existsSync(scriptsDir))
+            return current;
+        const parent = path.dirname(current);
+        if (parent === current)
+            return path.resolve(startDir);
+        current = parent;
+    }
+}
+//# sourceMappingURL=repo.js.map

package/node_modules/@clawdlets/core/dist/lib/repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../src/lib/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,OAAO,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/run.d.ts

@@ -0,0 +1,14 @@
+export type RunOpts = {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    dryRun?: boolean;
+    redact?: string[];
+    stdin?: "inherit" | "ignore";
+    timeoutMs?: number;
+    maxOutputBytes?: number;
+    redactOutput?: boolean;
+};
+export declare function run(cmd: string, args: string[], opts?: RunOpts): Promise<void>;
+export declare function capture(cmd: string, args: string[], opts?: RunOpts): Promise<string>;
+export declare function captureWithInput(cmd: string, args: string[], input: string, opts?: RunOpts): Promise<string>;
+//# sourceMappingURL=run.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/lib/run.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,OAAO,GAAG;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAaF,wBAAsB,GAAG,CACvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,OAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,OAAY,GACjB,OAAO,CAAC,MAAM,CAAC,CAiDjB;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,OAAY,GACjB,OAAO,CAAC,MAAM,CAAC,CAgDjB"}

package/node_modules/@clawdlets/core/dist/lib/run.js

@@ -0,0 +1,161 @@
+import { spawn } from "node:child_process";
+function redactLine(line, values) {
+    if (!values || values.length === 0)
+        return line;
+    let redacted = line;
+    for (const value of values) {
+        const trimmed = value?.trim();
+        if (!trimmed)
+            continue;
+        redacted = redacted.split(trimmed).join("<redacted>");
+    }
+    return redacted;
+}
+export async function run(cmd, args, opts = {}) {
+    if (opts.dryRun) {
+        const line = [cmd, ...args].join(" ");
+        console.log(redactLine(line, opts.redact));
+        return;
+    }
+    await new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            if (err)
+                reject(err);
+            else
+                resolve();
+        };
+        const child = spawn(cmd, args, {
+            cwd: opts.cwd,
+            env: opts.env,
+            stdio: "inherit",
+        });
+        const timeout = opts.timeoutMs
+            ? setTimeout(() => {
+                child.kill("SIGTERM");
+                finish(new Error(`${cmd} timed out after ${opts.timeoutMs}ms`));
+            }, opts.timeoutMs)
+            : null;
+        child.on("error", (err) => finish(err));
+        child.on("exit", (code) => {
+            if (timeout)
+                clearTimeout(timeout);
+            if (code === 0)
+                finish();
+            else
+                finish(new Error(`${cmd} exited with code ${code ?? "null"}`));
+        });
+    });
+}
+export async function capture(cmd, args, opts = {}) {
+    if (opts.dryRun)
+        return "";
+    return await new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (err, value) => {
+            if (settled)
+                return;
+            settled = true;
+            if (err)
+                reject(err);
+            else
+                resolve(value ?? "");
+        };
+        const chunks = [];
+        let totalBytes = 0;
+        const stdinMode = opts.stdin ?? "ignore";
+        const stdio = stdinMode === "inherit" ? ["inherit", "pipe", "inherit"] : ["ignore", "pipe", "inherit"];
+        const child = spawn(cmd, args, {
+            cwd: opts.cwd,
+            env: opts.env,
+            stdio,
+        });
+        const timeout = opts.timeoutMs
+            ? setTimeout(() => {
+                child.kill("SIGTERM");
+                finish(new Error(`${cmd} timed out after ${opts.timeoutMs}ms`));
+            }, opts.timeoutMs)
+            : null;
+        child.stdout.on("data", (buf) => {
+            if (opts.maxOutputBytes) {
+                totalBytes += buf.length;
+                if (totalBytes > opts.maxOutputBytes) {
+                    child.kill("SIGTERM");
+                    finish(new Error(`${cmd} output exceeded ${opts.maxOutputBytes} bytes`));
+                    return;
+                }
+            }
+            chunks.push(Buffer.from(buf));
+        });
+        child.on("error", (err) => finish(err));
+        child.on("exit", (code) => {
+            if (timeout)
+                clearTimeout(timeout);
+            if (code === 0) {
+                const output = Buffer.concat(chunks).toString("utf8").trim();
+                const finalOutput = opts.redactOutput ? redactLine(output, opts.redact) : output;
+                finish(undefined, finalOutput);
+            }
+            else
+                finish(new Error(`${cmd} exited with code ${code ?? "null"}`));
+        });
+    });
+}
+export async function captureWithInput(cmd, args, input, opts = {}) {
+    if (opts.dryRun)
+        return "";
+    return await new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (err, value) => {
+            if (settled)
+                return;
+            settled = true;
+            if (err)
+                reject(err);
+            else
+                resolve(value ?? "");
+        };
+        const chunks = [];
+        let totalBytes = 0;
+        const child = spawn(cmd, args, {
+            cwd: opts.cwd,
+            env: opts.env,
+            stdio: ["pipe", "pipe", "inherit"],
+        });
+        const timeout = opts.timeoutMs
+            ? setTimeout(() => {
+                child.kill("SIGTERM");
+                finish(new Error(`${cmd} timed out after ${opts.timeoutMs}ms`));
+            }, opts.timeoutMs)
+            : null;
+        child.stdout.on("data", (buf) => {
+            if (opts.maxOutputBytes) {
+                totalBytes += buf.length;
+                if (totalBytes > opts.maxOutputBytes) {
+                    child.kill("SIGTERM");
+                    finish(new Error(`${cmd} output exceeded ${opts.maxOutputBytes} bytes`));
+                    return;
+                }
+            }
+            chunks.push(Buffer.from(buf));
+        });
+        child.on("error", (err) => finish(err));
+        child.stdin.write(input);
+        child.stdin.end();
+        child.on("exit", (code) => {
+            if (timeout)
+                clearTimeout(timeout);
+            if (code === 0) {
+                const output = Buffer.concat(chunks).toString("utf8").trim();
+                const finalOutput = opts.redactOutput ? redactLine(output, opts.redact) : output;
+                finish(undefined, finalOutput);
+            }
+            else
+                finish(new Error(`${cmd} exited with code ${code ?? "null"}`));
+        });
+    });
+}
+//# sourceMappingURL=run.js.map

package/node_modules/@clawdlets/core/dist/lib/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/lib/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAa3C,SAAS,UAAU,CAAC,IAAY,EAAE,MAAiB;IACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,GAAW,EACX,IAAc,EACd,OAAgB,EAAE;IAElB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;YAC5B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,oBAAoB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YAClE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC;QACT,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAY,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,EAAE,CAAC;;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,qBAAqB,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,IAAc,EACd,OAAgB,EAAE;IAElB,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAE3B,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;YAC7C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;QACzC,MAAM,KAAK,GACT,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK;SACN,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;YAC5B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,oBAAoB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YAClE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC;QACT,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;gBACzB,IAAI,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,oBAAoB,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC,CAAC;oBACzE,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAY,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjF,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACjC,CAAC;;gBACI,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,qBAAqB,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,IAAc,EACd,KAAa,EACb,OAAgB,EAAE;IAElB,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAE3B,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;YAC7C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS;YAC5B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,oBAAoB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YAClE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC;QACT,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;gBACzB,IAAI,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,oBAAoB,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC,CAAC;oBACzE,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAY,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAClB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACjF,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACjC,CAAC;;gBACI,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,qBAAqB,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/secrets-init.d.ts

@@ -0,0 +1,33 @@
+export type SecretsInitJson = {
+    adminPasswordHash: string;
+    tailscaleAuthKey?: string;
+    secrets?: Record<string, string>;
+    discordTokens: Record<string, string>;
+};
+export declare function resolveSecretsInitFromJsonArg(params: {
+    fromJsonRaw: unknown;
+    argv: string[];
+    stdinIsTTY: boolean;
+}): string | undefined;
+export declare function isPlaceholderSecretValue(value: string): boolean;
+export declare function listSecretsInitPlaceholders(params: {
+    input: SecretsInitJson;
+    bots: string[];
+    discordBots?: string[];
+    requiresTailscaleAuthKey: boolean;
+}): string[];
+export declare function buildSecretsInitTemplate(params: {
+    bots: string[];
+    discordBots?: string[];
+    requiresTailscaleAuthKey: boolean;
+    secrets?: Record<string, string>;
+}): SecretsInitJson;
+export declare function parseSecretsInitJson(raw: string): SecretsInitJson;
+export declare function validateSecretsInitNonInteractive(params: {
+    interactive: boolean;
+    fromJson: string | undefined;
+    yes: boolean;
+    dryRun: boolean;
+    localSecretsDirExists: boolean;
+}): void;
+//# sourceMappingURL=secrets-init.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/secrets-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-init.d.ts","sourceRoot":"","sources":["../../src/lib/secrets-init.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,CAAC;AAyBF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACrB,GAAG,MAAM,GAAG,SAAS,CA8BrB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK/D;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB,EAAE,OAAO,CAAC;CACnC,GAAG,MAAM,EAAE,CAwBX;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wBAAwB,EAAE,OAAO,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,GAAG,eAAe,CAWlB;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAqCjE;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,IAAI,CAQP"}

package/node_modules/@clawdlets/core/dist/lib/secrets-init.js

@@ -0,0 +1,139 @@
+function getCliFlagValue(argv, flagNames) {
+    let found;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i] ?? "";
+        for (const flag of flagNames) {
+            if (a === flag) {
+                found = argv[i + 1];
+                break;
+            }
+            const prefix = `${flag}=`;
+            if (a.startsWith(prefix)) {
+                found = a.slice(prefix.length);
+                break;
+            }
+        }
+    }
+    return found;
+}
+export function resolveSecretsInitFromJsonArg(params) {
+    const raw = params.fromJsonRaw;
+    if (typeof raw === "string") {
+        const trimmed = raw.trim();
+        if (!trimmed)
+            return undefined;
+        if (trimmed.startsWith("-") && trimmed !== "-") {
+            throw new Error("missing --from-json value (use --from-json <path|->, --from-json=<path|->)");
+        }
+        if (trimmed === "-" && params.stdinIsTTY) {
+            throw new Error("refusing to read --from-json - from a TTY (pipe JSON or pass --from-json <file>)");
+        }
+        return trimmed;
+    }
+    if (raw === undefined || raw === null || raw === false)
+        return undefined;
+    if (raw !== true)
+        throw new Error("invalid --from-json value");
+    const cliValue = getCliFlagValue(params.argv, ["--from-json", "--fromJson"]);
+    const trimmed = String(cliValue || "").trim();
+    if (!trimmed || (trimmed.startsWith("-") && trimmed !== "-")) {
+        throw new Error("missing --from-json value (use --from-json <path|->, --from-json=<path|->)");
+    }
+    if (trimmed === "-" && params.stdinIsTTY) {
+        throw new Error("refusing to read --from-json - from a TTY (pipe JSON or pass --from-json <file>)");
+    }
+    return trimmed;
+}
+export function isPlaceholderSecretValue(value) {
+    const s = value.trim();
+    if (!s)
+        return false;
+    if (s === "<OPTIONAL>")
+        return false;
+    return /^<[^>]+>$/.test(s);
+}
+export function listSecretsInitPlaceholders(params) {
+    const out = new Set();
+    if (isPlaceholderSecretValue(params.input.adminPasswordHash))
+        out.add("adminPasswordHash");
+    if (params.requiresTailscaleAuthKey && params.input.tailscaleAuthKey && isPlaceholderSecretValue(params.input.tailscaleAuthKey)) {
+        out.add("tailscaleAuthKey");
+    }
+    if (params.input.secrets && typeof params.input.secrets === "object") {
+        for (const [k, v] of Object.entries(params.input.secrets)) {
+            if (typeof v !== "string")
+                continue;
+            if (v && isPlaceholderSecretValue(v))
+                out.add(`secrets.${k}`);
+        }
+    }
+    const bots = Array.from(new Set(params.bots.map((b) => String(b).trim()).filter(Boolean)));
+    const discordBots = Array.from(new Set((params.discordBots ?? bots).map((b) => String(b).trim()).filter(Boolean)));
+    for (const b of discordBots) {
+        const v = params.input.discordTokens?.[b];
+        if (v && isPlaceholderSecretValue(v))
+            out.add(`discordTokens.${b}`);
+    }
+    return Array.from(out).sort();
+}
+export function buildSecretsInitTemplate(params) {
+    const bots = Array.from(new Set(params.bots.map((b) => String(b).trim()).filter(Boolean)));
+    const discordBots = Array.from(new Set((params.discordBots ?? bots).map((b) => String(b).trim()).filter(Boolean)));
+    const secrets = params.secrets && typeof params.secrets === "object" ? params.secrets : undefined;
+    const hasSecrets = secrets && Object.keys(secrets).length > 0;
+    return {
+        adminPasswordHash: "<REPLACE_WITH_YESCRYPT_HASH>",
+        ...(params.requiresTailscaleAuthKey ? { tailscaleAuthKey: "<REPLACE_WITH_TSKEY_AUTH>" } : {}),
+        discordTokens: Object.fromEntries(discordBots.map((b) => [b, "<REPLACE_WITH_DISCORD_TOKEN>"])),
+        ...(hasSecrets ? { secrets } : {}),
+    };
+}
+export function parseSecretsInitJson(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("invalid --from-json (expected valid JSON)");
+    }
+    if (!parsed || typeof parsed !== "object")
+        throw new Error("invalid --from-json (expected JSON object)");
+    const obj = parsed;
+    const adminPasswordHash = typeof obj.adminPasswordHash === "string" ? obj.adminPasswordHash.trim() : "";
+    if (!adminPasswordHash)
+        throw new Error("invalid --from-json (missing adminPasswordHash)");
+    if (!obj.discordTokens || typeof obj.discordTokens !== "object")
+        throw new Error("invalid --from-json (missing discordTokens object)");
+    const discordTokens = {};
+    for (const [k, v] of Object.entries(obj.discordTokens)) {
+        if (typeof v !== "string")
+            continue;
+        const token = v.trim();
+        if (!token)
+            continue;
+        discordTokens[String(k)] = token;
+    }
+    const tailscaleAuthKey = typeof obj.tailscaleAuthKey === "string" ? obj.tailscaleAuthKey.trim() : undefined;
+    const secrets = {};
+    if (obj.secrets && typeof obj.secrets === "object" && !Array.isArray(obj.secrets)) {
+        for (const [k, v] of Object.entries(obj.secrets)) {
+            if (typeof v !== "string")
+                continue;
+            const token = v.trim();
+            if (!token)
+                continue;
+            secrets[String(k)] = token;
+        }
+    }
+    return { adminPasswordHash, tailscaleAuthKey, discordTokens, ...(Object.keys(secrets).length > 0 ? { secrets } : {}) };
+}
+export function validateSecretsInitNonInteractive(params) {
+    if (params.interactive)
+        return;
+    if (!params.fromJson)
+        throw new Error("non-interactive secrets init requires --from-json <path|->");
+    if (params.localSecretsDirExists && !params.yes && !params.dryRun) {
+        throw new Error("refusing to overwrite existing secrets without --yes (or pass --dry-run)");
+    }
+}
+//# sourceMappingURL=secrets-init.js.map

package/node_modules/@clawdlets/core/dist/lib/secrets-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-init.js","sourceRoot":"","sources":["../../src/lib/secrets-init.ts"],"names":[],"mappings":"AAOA,SAAS,eAAe,CAAC,IAAc,EAAE,SAAmB;IAC1D,IAAI,KAAyB,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAExB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpB,MAAM;YACR,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;YAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAI7C;IACC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;IAE/B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,OAAO,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAEzE,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,OAAO,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAK3C;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9B,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAE3F,IAAI,MAAM,CAAC,wBAAwB,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YACpC,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnH,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAKxC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,UAAU,GAAG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,OAAO;QACL,iBAAiB,EAAE,8BAA8B;QACjD,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAC9F,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAEzG,MAAM,GAAG,GAAG,MAAa,CAAC;IAE1B,MAAM,iBAAiB,GAAG,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxG,IAAI,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAE3F,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvI,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACnC,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5G,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzH,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAMjD;IACC,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO;IAE/B,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAEpG,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/secrets-migrate.d.ts

@@ -0,0 +1,9 @@
+export declare function resolveLegacySecretPaths(params: {
+    localSecretsDir: string;
+    extraFilesSecretsDir: string;
+    secretName: string;
+}): {
+    localPath: string;
+    extraPath: string;
+};
+//# sourceMappingURL=secrets-migrate.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/secrets-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-migrate.d.ts","sourceRoot":"","sources":["../../src/lib/secrets-migrate.ts"],"names":[],"mappings":"AAYA,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAQ3C"}

package/node_modules/@clawdlets/core/dist/lib/secrets-migrate.js

@@ -0,0 +1,20 @@
+import path from "node:path";
+import { assertSafeSecretName } from "./identifiers.js";
+function assertPathWithinDir(rootDir, absPath) {
+    const root = path.resolve(rootDir);
+    const resolved = path.resolve(absPath);
+    const rel = path.relative(root, resolved);
+    if (rel === "" || rel === "." || rel.startsWith("..") || path.isAbsolute(rel)) {
+        throw new Error(`path escapes dir: ${resolved}`);
+    }
+}
+export function resolveLegacySecretPaths(params) {
+    const secretName = params.secretName.trim();
+    assertSafeSecretName(secretName);
+    const localPath = path.resolve(params.localSecretsDir, `${secretName}.yaml`);
+    const extraPath = path.resolve(params.extraFilesSecretsDir, `${secretName}.yaml`);
+    assertPathWithinDir(params.localSecretsDir, localPath);
+    assertPathWithinDir(params.extraFilesSecretsDir, extraPath);
+    return { localPath, extraPath };
+}
+//# sourceMappingURL=secrets-migrate.js.map

package/node_modules/@clawdlets/core/dist/lib/secrets-migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-migrate.js","sourceRoot":"","sources":["../../src/lib/secrets-migrate.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,SAAS,mBAAmB,CAAC,OAAe,EAAE,OAAe;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAIxC;IACC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC5C,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;IAClF,mBAAmB,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACvD,mBAAmB,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAC5D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/secrets-policy.d.ts

@@ -0,0 +1,12 @@
+export type SecretsPolicyViolation = {
+    filePath: string;
+    message: string;
+    line?: number;
+};
+export declare function validateHostSecretsYamlFiles(params: {
+    secretsDir: string;
+}): {
+    ok: boolean;
+    violations: SecretsPolicyViolation[];
+};
+//# sourceMappingURL=secrets-policy.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/secrets-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-policy.d.ts","sourceRoot":"","sources":["../../src/lib/secrets-policy.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAMF,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,sBAAsB,EAAE,CAAA;CAAE,CA8ClI"}

package/node_modules/@clawdlets/core/dist/lib/secrets-policy.js

@@ -0,0 +1,54 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+function isYamlFile(name) {
+    return /\.ya?ml$/i.test(name);
+}
+export function validateHostSecretsYamlFiles(params) {
+    const dir = params.secretsDir;
+    const violations = [];
+    if (!fs.existsSync(dir)) {
+        violations.push({ filePath: dir, message: "missing secrets dir" });
+        return { ok: false, violations };
+    }
+    const st = fs.statSync(dir);
+    if (!st.isDirectory()) {
+        violations.push({ filePath: dir, message: "secrets path is not a directory" });
+        return { ok: false, violations };
+    }
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const e of entries) {
+        if (!e.isFile())
+            continue;
+        if (!isYamlFile(e.name))
+            continue;
+        const filePath = path.join(dir, e.name);
+        const expectedKey = e.name.replace(/\.ya?ml$/i, "");
+        let parsed;
+        try {
+            parsed = YAML.parse(fs.readFileSync(filePath, "utf8"));
+        }
+        catch (err) {
+            violations.push({ filePath, message: `invalid YAML: ${String(err?.message || err)}` });
+            continue;
+        }
+        if (!parsed || typeof parsed !== "object") {
+            violations.push({ filePath, message: "expected YAML mapping/object at top-level" });
+            continue;
+        }
+        const keys = Object.keys(parsed).filter((k) => k !== "sops");
+        if (keys.length !== 1) {
+            violations.push({ filePath, message: `expected exactly 1 secret key (found ${keys.length})` });
+            continue;
+        }
+        const actualKey = keys[0];
+        if (actualKey !== expectedKey) {
+            violations.push({ filePath, message: `secret key must match filename (expected ${expectedKey}, got ${actualKey})` });
+        }
+        if (!Object.prototype.hasOwnProperty.call(parsed, "sops")) {
+            violations.push({ filePath, message: "missing sops metadata (file looks unencrypted)" });
+        }
+    }
+    return { ok: violations.length === 0, violations };
+}
+//# sourceMappingURL=secrets-policy.js.map

package/node_modules/@clawdlets/core/dist/lib/secrets-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-policy.js","sourceRoot":"","sources":["../../src/lib/secrets-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAA8B;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,MAAM,UAAU,GAA6B,EAAE,CAAC;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,SAAS;QAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAiC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,wCAAwC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QAC3B,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,4CAA4C,WAAW,SAAS,SAAS,GAAG,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC"}

package/node_modules/@clawdlets/core/dist/lib/secrets-tar.d.ts

@@ -0,0 +1,9 @@
+export declare function createSecretsTar(params: {
+    hostName: string;
+    localDir: string;
+}): Promise<{
+    tarPath: string;
+    digest: string;
+    files: string[];
+}>;
+//# sourceMappingURL=secrets-tar.d.ts.map

package/node_modules/@clawdlets/core/dist/lib/secrets-tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-tar.d.ts","sourceRoot":"","sources":["../../src/lib/secrets-tar.ts"],"names":[],"mappings":"AA0BA,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsChE"}

package/node_modules/@clawdlets/core/dist/lib/secrets-tar.js

@@ -0,0 +1,61 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import crypto from "node:crypto";
+import process from "node:process";
+import { run } from "./run.js";
+async function sha256File(filePath) {
+    return await new Promise((resolve, reject) => {
+        const hash = crypto.createHash("sha256");
+        const stream = fs.createReadStream(filePath);
+        stream.on("error", (err) => reject(err));
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.on("end", () => resolve(hash.digest("hex")));
+    });
+}
+function listYamlFiles(dir) {
+    if (!fs.existsSync(dir))
+        return [];
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    return entries
+        .filter((e) => e.isFile() && e.name.endsWith(".yaml"))
+        .map((e) => e.name)
+        .sort();
+}
+export async function createSecretsTar(params) {
+    if (!fs.existsSync(params.localDir)) {
+        throw new Error(`missing local secrets dir: ${params.localDir}`);
+    }
+    const files = listYamlFiles(params.localDir);
+    if (files.length === 0) {
+        throw new Error(`no secrets found in ${params.localDir}`);
+    }
+    const tarPath = path.join(os.tmpdir(), `clawdlets-secrets.${params.hostName}.${process.pid}.tgz`);
+    const tarPathRaw = path.join(os.tmpdir(), `clawdlets-secrets.${params.hostName}.${process.pid}.tar`);
+    const stageDir = fs.mkdtempSync(path.join(os.tmpdir(), `clawdlets-secrets-stage.${params.hostName}.`));
+    try {
+        for (const file of files) {
+            const src = path.join(params.localDir, file);
+            const dest = path.join(stageDir, file);
+            fs.copyFileSync(src, dest);
+            fs.chmodSync(dest, 0o400);
+            fs.utimesSync(dest, 0, 0);
+        }
+        await run("tar", ["--owner=0", "--group=0", "--numeric-owner", "-C", stageDir, "-cf", tarPathRaw, ...files], { redact: [] });
+        await run("gzip", ["-n", "-f", tarPathRaw], { redact: [] });
+        if (!fs.existsSync(tarPath) && fs.existsSync(`${tarPathRaw}.gz`)) {
+            fs.renameSync(`${tarPathRaw}.gz`, tarPath);
+        }
+    }
+    finally {
+        try {
+            fs.rmSync(stageDir, { recursive: true, force: true });
+        }
+        catch {
+            // best-effort cleanup
+        }
+    }
+    const digest = await sha256File(tarPath);
+    return { tarPath, digest, files };
+}
+//# sourceMappingURL=secrets-tar.js.map

package/node_modules/@clawdlets/core/dist/lib/secrets-tar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-tar.js","sourceRoot":"","sources":["../../src/lib/secrets-tar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAGtC;IACC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,2BAA2B,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAEvG,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7H,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,CAAC;YACjE,EAAE,CAAC,UAAU,CAAC,GAAG,UAAU,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC"}