ctx-sync 1.0.0

package/dist/commands/team.js

@@ -0,0 +1,233 @@
+/**
+ * `ctx-sync team` command group.
+ *
+ * Manages team members (multi-recipient encryption):
+ *   - `team add --name <n> --key <pubkey>` — add a team member with fingerprint verification.
+ *   - `team remove <name>` — remove a team member and re-encrypt all state.
+ *   - `team list` — list all team members and their public keys.
+ *   - `team revoke <pubkey>` — immediately revoke a key and re-encrypt all state.
+ *
+ * **Security:**
+ *   - Adding a member prompts for out-of-band fingerprint verification.
+ *   - Removing/revoking a member triggers full re-encryption of all state files
+ *     so the revoked key can no longer decrypt current or future data.
+ *   - Recipients config is stored locally and NEVER synced to Git.
+ *
+ * @module commands/team
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { withErrorHandler } from '../utils/errors.js';
+import { identityToRecipient } from 'age-encryption';
+import { decryptState, encryptStateForRecipients } from '../core/encryption.js';
+import { loadKey, } from '../core/key-store.js';
+import { listStateFiles, readManifest, writeManifest, } from '../core/state-manager.js';
+import { addRecipient, removeRecipientByName, removeRecipientByKey, getRecipients, initRecipients, getAllRecipientKeys, computeFingerprint, } from '../core/recipients.js';
+import { getConfigDir, getSyncDir } from './init.js';
+// ─── Core Logic ───────────────────────────────────────────────────────────
+/**
+ * Ensure the recipients config is initialised.
+ *
+ * If no recipients file exists, creates one with the owner's public key.
+ */
+async function ensureRecipientsInit() {
+    const configDir = getConfigDir();
+    const config = getRecipients(configDir);
+    if (!config) {
+        const privateKey = loadKey(configDir);
+        const publicKey = await identityToRecipient(privateKey);
+        initRecipients(configDir, publicKey);
+    }
+}
+/**
+ * Re-encrypt all state files for the current set of recipients.
+ *
+ * Used after removing/revoking a team member to ensure they can no
+ * longer decrypt any state files.
+ *
+ * @returns Array of filenames that were re-encrypted.
+ */
+async function reEncryptAllState() {
+    const configDir = getConfigDir();
+    const syncDir = getSyncDir();
+    const privateKey = loadKey(configDir);
+    const ownerPublicKey = await identityToRecipient(privateKey);
+    const allKeys = getAllRecipientKeys(configDir, ownerPublicKey);
+    const ageFiles = listStateFiles(syncDir);
+    const filesReEncrypted = [];
+    for (const filename of ageFiles) {
+        const filePath = path.join(syncDir, filename);
+        const ciphertext = fs.readFileSync(filePath, 'utf-8');
+        if (!ciphertext.trim()) {
+            continue;
+        }
+        // Decrypt with owner's key, re-encrypt for all current recipients
+        const plainData = await decryptState(ciphertext, privateKey);
+        const newCiphertext = await encryptStateForRecipients(plainData, allKeys);
+        fs.writeFileSync(filePath, newCiphertext, 'utf-8');
+        filesReEncrypted.push(filename);
+    }
+    // Update manifest
+    const manifest = readManifest(syncDir);
+    if (manifest) {
+        manifest.lastSync = new Date().toISOString();
+        writeManifest(syncDir, manifest);
+    }
+    return filesReEncrypted;
+}
+/**
+ * Execute `ctx-sync team add`.
+ *
+ * Adds a new team member to the recipients list and re-encrypts
+ * all state files so the new member can decrypt them.
+ */
+export async function executeTeamAdd(options) {
+    await ensureRecipientsInit();
+    const configDir = getConfigDir();
+    const member = addRecipient(configDir, options.name, options.key);
+    // Re-encrypt all state for all recipients (including the new member)
+    await reEncryptAllState();
+    return {
+        name: member.name,
+        publicKey: member.publicKey,
+        fingerprint: member.fingerprint,
+    };
+}
+/**
+ * Execute `ctx-sync team remove`.
+ *
+ * Removes a team member by name and re-encrypts all state files
+ * so the removed member can no longer decrypt them.
+ */
+export async function executeTeamRemove(name) {
+    await ensureRecipientsInit();
+    const configDir = getConfigDir();
+    const removed = removeRecipientByName(configDir, name);
+    // Re-encrypt ALL state without the removed member
+    const filesReEncrypted = await reEncryptAllState();
+    return {
+        name: removed.name,
+        publicKey: removed.publicKey,
+        filesReEncrypted,
+    };
+}
+/**
+ * Execute `ctx-sync team revoke`.
+ *
+ * Immediately revokes a team member's key and re-encrypts all
+ * state files. Similar to remove but uses the public key directly.
+ */
+export async function executeTeamRevoke(publicKey) {
+    await ensureRecipientsInit();
+    const configDir = getConfigDir();
+    const removed = removeRecipientByKey(configDir, publicKey);
+    // Re-encrypt ALL state without the revoked key
+    const filesReEncrypted = await reEncryptAllState();
+    return {
+        name: removed.name,
+        publicKey: removed.publicKey,
+        filesReEncrypted,
+    };
+}
+/**
+ * Execute `ctx-sync team list`.
+ *
+ * Returns the owner's public key and all team members.
+ */
+export async function executeTeamList() {
+    await ensureRecipientsInit();
+    const configDir = getConfigDir();
+    const config = getRecipients(configDir);
+    if (!config) {
+        throw new Error('Recipients configuration not initialised. Run `ctx-sync init` first.');
+    }
+    return {
+        ownerPublicKey: config.ownerPublicKey,
+        members: config.members.map((m) => ({
+            name: m.name,
+            publicKey: m.publicKey,
+            fingerprint: m.fingerprint,
+            addedAt: m.addedAt,
+        })),
+    };
+}
+// ─── Commander Registration ───────────────────────────────────────────────
+/**
+ * Register the `ctx-sync team` command group on the given program.
+ */
+export function registerTeamCommand(program) {
+    const teamCmd = program
+        .command('team')
+        .description('Manage team members (multi-recipient encryption)');
+    // ── team add ──────────────────────────────────────────────────────
+    teamCmd
+        .command('add')
+        .description('Add a team member as an encryption recipient')
+        .requiredOption('--name <name>', 'Human-readable name for the team member')
+        .requiredOption('--key <pubkey>', 'Age public key (age1...)')
+        .option('--no-verify', 'Skip fingerprint verification prompt')
+        .action(withErrorHandler(async (opts) => {
+        // Show fingerprint for verification
+        if (opts.verify) {
+            const fingerprint = computeFingerprint(opts.key);
+            console.log(`\n⚠ Verify this key fingerprint with ${opts.name}:`);
+            console.log(`   Fingerprint: ${fingerprint}`);
+            console.log(`   Key: ${opts.key}`);
+            console.log('');
+        }
+        const result = await executeTeamAdd({
+            name: opts.name,
+            key: opts.key,
+            noVerify: !opts.verify,
+        });
+        console.log(`✓ Added team member: ${result.name}`);
+        console.log(`  Public key: ${result.publicKey}`);
+        console.log(`  Fingerprint: ${result.fingerprint}`);
+        console.log('  All state re-encrypted for new recipient set.');
+    }));
+    // ── team remove ───────────────────────────────────────────────────
+    teamCmd
+        .command('remove <name>')
+        .description('Remove a team member and re-encrypt all state')
+        .action(withErrorHandler(async (name) => {
+        const result = await executeTeamRemove(name);
+        console.log(`✓ Removed team member: ${result.name}`);
+        console.log(`  Public key: ${result.publicKey}`);
+        console.log(`  Files re-encrypted: ${String(result.filesReEncrypted.length)}`);
+        console.log(`  ${result.name} can no longer decrypt any state files.`);
+    }));
+    // ── team list ─────────────────────────────────────────────────────
+    teamCmd
+        .command('list')
+        .description('List all team members and their public keys')
+        .action(withErrorHandler(async () => {
+        const result = await executeTeamList();
+        console.log(`Owner key: ${result.ownerPublicKey}`);
+        console.log('');
+        if (result.members.length === 0) {
+            console.log('No team members added yet.');
+            console.log('Use `ctx-sync team add --name <name> --key <pubkey>` to add one.');
+        }
+        else {
+            console.log(`Team members (${String(result.members.length)}):`);
+            for (const member of result.members) {
+                console.log(`  ${member.name}`);
+                console.log(`    Key: ${member.publicKey}`);
+                console.log(`    Fingerprint: ${member.fingerprint}`);
+                console.log(`    Added: ${member.addedAt}`);
+            }
+        }
+    }));
+    // ── team revoke ───────────────────────────────────────────────────
+    teamCmd
+        .command('revoke <pubkey>')
+        .description('Immediately revoke a key and re-encrypt all state')
+        .action(withErrorHandler(async (pubkey) => {
+        const result = await executeTeamRevoke(pubkey);
+        console.log(`✓ Revoked key for: ${result.name}`);
+        console.log(`  Public key: ${result.publicKey}`);
+        console.log(`  Files re-encrypted: ${String(result.filesReEncrypted.length)}`);
+        console.log(`  ${result.name} can no longer decrypt new or existing state.`);
+    }));
+}
+//# sourceMappingURL=team.js.map

package/dist/commands/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../../src/commands/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,OAAO,GACR,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAqCrD,6EAA6E;AAE7E;;;;GAIG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAExC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACxD,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YACvB,SAAS;QACX,CAAC;QAED,kEAAkE;QAClE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAU,UAAU,EAAE,UAAU,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1E,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACnD,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,kBAAkB;IAClB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAuB;IAEvB,MAAM,oBAAoB,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAElE,qEAAqE;IACrE,MAAM,iBAAiB,EAAE,CAAC;IAE1B,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY;IAEZ,MAAM,oBAAoB,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEvD,kDAAkD;IAClD,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEnD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB;IAEjB,MAAM,oBAAoB,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAE3D,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEnD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,oBAAoB,EAAE,CAAC;IAE7B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAExC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,kDAAkD,CAAC,CAAC;IAEnE,qEAAqE;IACrE,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,8CAA8C,CAAC;SAC3D,cAAc,CAAC,eAAe,EAAE,yCAAyC,CAAC;SAC1E,cAAc,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;SAC5D,MAAM,CAAC,aAAa,EAAE,sCAAsC,CAAC;SAC7D,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAoD,EAAE,EAAE;QACtF,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC,CAAC;IAEN,qEAAqE;IACrE,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE7C,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CACT,yBAAyB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAClE,CAAC;QACF,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,IAAI,yCAAyC,CAC1D,CAAC;IACJ,CAAC,CAAC,CAAC,CAAC;IAEN,qEAAqE;IACrE,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QAEvC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CACT,kEAAkE,CACnE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;IAEN,qEAAqE;IACrE,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CACT,yBAAyB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAClE,CAAC;QACF,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,IAAI,+CAA+C,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/commands/track.d.ts

@@ -0,0 +1,109 @@
+/**
+ * `ctx-sync track` command.
+ *
+ * Detects the current project's Git state, validates the path,
+ * encrypts the project entry, and writes it to `state.age`.
+ *
+ * Phase 16 enhancements: Step-by-step wizard with auto-detection,
+ * .env import, Docker tracking, mental context, and summary.
+ * `--yes` flag skips interactive confirmations (but NOT restore commands).
+ *
+ * @module commands/track
+ */
+import type { Command } from 'commander';
+import type { Project } from '@ctx-sync/shared';
+/** Options for the track command */
+export interface TrackOptions {
+    /** Override the auto-detected project name */
+    name?: string;
+    /** Path to the project directory (default: CWD) */
+    path?: string;
+    /** Skip committing/pushing to sync repo */
+    noSync?: boolean;
+    /** Skip interactive prompts — accept defaults */
+    yes?: boolean;
+    /** Non-interactive mode — skip all prompts */
+    noInteractive?: boolean;
+    /** Override wizard prompt function (for testing) */
+    wizardPromptFn?: (context: WizardContext) => Promise<WizardAnswers>;
+}
+/** Context provided to the wizard prompt function */
+export interface WizardContext {
+    projectName: string;
+    projectPath: string;
+    gitBranch: string;
+    envFileFound: boolean;
+    dockerComposeFound: boolean;
+    isNew: boolean;
+}
+/** Answers collected from the wizard */
+export interface WizardAnswers {
+    /** Whether to import .env file */
+    importEnv: boolean;
+    /** Whether to track Docker services */
+    trackDocker: boolean;
+    /** Mental context — current task (empty string = skip) */
+    currentTask: string;
+    /** Mental context — next steps (empty array = skip) */
+    nextSteps: string[];
+    /** Whether to proceed with commit */
+    confirmCommit: boolean;
+}
+/** Result returned by executeTrack */
+export interface TrackResult {
+    /** The project entry that was created or updated */
+    project: Project;
+    /** Whether this is a newly tracked project (vs. update) */
+    isNew: boolean;
+    /** Whether a .env file was found in the project */
+    envFileFound: boolean;
+    /** Whether a docker-compose file was found in the project */
+    dockerComposeFound: boolean;
+    /** Number of env vars imported (0 if skipped) */
+    envVarsImported: number;
+    /** Number of Docker services tracked (0 if skipped) */
+    dockerServicesTracked: number;
+    /** Whether mental context was set */
+    mentalContextSet: boolean;
+}
+/**
+ * Detect Git information for a project directory.
+ *
+ * @param projectPath - Absolute path to the project directory.
+ * @returns Git metadata (branch, remote, uncommitted, stash count).
+ */
+export declare function detectGitInfo(projectPath: string): Promise<Project['git']>;
+/**
+ * Auto-detect project name from Git remote URL or directory name.
+ *
+ * Priority:
+ *   1. Explicit `--name` flag.
+ *   2. Repository name from Git remote URL (e.g., `origin`).
+ *   3. Directory name.
+ *
+ * @param projectPath - Absolute path to the project directory.
+ * @param gitRemote - The Git remote fetch URL (empty if none).
+ * @returns The detected project name.
+ */
+export declare function detectProjectName(projectPath: string, gitRemote: string): string;
+/**
+ * Execute the track command logic.
+ *
+ * 1. Resolve and validate the project path.
+ * 2. Auto-detect project name from Git remote / directory.
+ * 3. Detect Git info, .env, docker-compose.
+ * 4. Run interactive wizard (if not --yes or --no-interactive).
+ * 5. Build or update the Project entry.
+ * 6. Optionally import .env, track Docker, set mental context.
+ * 7. Encrypt and write state.age.
+ * 8. Optionally commit to the sync repo.
+ *
+ * @param options - Track command options.
+ * @returns Track result including the project entry.
+ */
+export declare function executeTrack(options: TrackOptions): Promise<TrackResult>;
+/**
+ * Register the `track` command on the given Commander program.
+ */
+export declare function registerTrackCommand(program: Command): void;
+//# sourceMappingURL=track.d.ts.map

package/dist/commands/track.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.d.ts","sourceRoot":"","sources":["../../src/commands/track.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAA4B,MAAM,kBAAkB,CAAC;AAU1E,oCAAoC;AACpC,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,8CAA8C;IAC9C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oDAAoD;IACpD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;CACrE;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,sCAAsC;AACtC,MAAM,WAAW,WAAW;IAC1B,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,mDAAmD;IACnD,YAAY,EAAE,OAAO,CAAC;IACtB,6DAA6D;IAC7D,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qCAAqC;IACrC,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CA2CzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAkBhF;AA4FD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA6L9E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6E3D"}