ctx-sync 1.0.0

package/dist/index.js

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * ctx-sync — Sync your complete development context across machines.
+ *
+ * CLI entry point. Uses Commander.js for command parsing and routing.
+ *
+ * @module ctx-sync
+ */
+import { Command } from 'commander';
+import { VERSION } from '@ctx-sync/shared';
+import { formatError } from './utils/errors.js';
+import { registerInitCommand } from './commands/init.js';
+import { registerTrackCommand } from './commands/track.js';
+import { registerListCommand } from './commands/list.js';
+import { registerStatusCommand } from './commands/status.js';
+import { registerEnvCommand } from './commands/env.js';
+import { registerSyncCommand } from './commands/sync.js';
+import { registerPushCommand } from './commands/push.js';
+import { registerPullCommand } from './commands/pull.js';
+import { registerRestoreCommand } from './commands/restore.js';
+import { registerNoteCommand } from './commands/note.js';
+import { registerShowCommand } from './commands/show.js';
+import { registerDockerCommand } from './commands/docker.js';
+import { registerServiceCommand } from './commands/service.js';
+import { registerDirCommand } from './commands/dir.js';
+import { registerKeyCommand } from './commands/key.js';
+import { registerAuditCommand } from './commands/audit.js';
+import { registerTeamCommand } from './commands/team.js';
+import { registerConfigCommand } from './commands/config.js';
+/**
+ * Create and configure the root CLI program.
+ *
+ * @returns The configured Commander program instance.
+ */
+export function createProgram() {
+    const program = new Command();
+    program
+        .name('ctx-sync')
+        .description('Sync your complete development context across machines')
+        .version(VERSION, '-V, --version');
+    // Register subcommands
+    registerInitCommand(program);
+    registerTrackCommand(program);
+    registerListCommand(program);
+    registerStatusCommand(program);
+    registerEnvCommand(program);
+    registerSyncCommand(program);
+    registerPushCommand(program);
+    registerPullCommand(program);
+    registerRestoreCommand(program);
+    registerNoteCommand(program);
+    registerShowCommand(program);
+    registerDockerCommand(program);
+    registerServiceCommand(program);
+    registerDirCommand(program);
+    registerKeyCommand(program);
+    registerAuditCommand(program);
+    registerTeamCommand(program);
+    registerConfigCommand(program);
+    return program;
+}
+/**
+ * Main entry point — parse CLI arguments and execute the matched command.
+ */
+export async function main(argv) {
+    const program = createProgram();
+    await program.parseAsync(argv ?? process.argv);
+}
+// Run when executed directly (not imported as a module in tests)
+const isDirectExecution = process.argv[1] &&
+    (process.argv[1].endsWith('/index.ts') ||
+        process.argv[1].endsWith('/index.js') ||
+        process.argv[1].endsWith('ctx-sync'));
+if (isDirectExecution) {
+    main().catch((err) => {
+        console.error(formatError(err));
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CAAC,wDAAwD,CAAC;SACrE,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAErC,uBAAuB;IACvB,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAe;IACxC,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,iEAAiE;AACjE,MAAM,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACf,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAE1C,IAAI,iBAAiB,EAAE,CAAC;IACtB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Re-export shared types for convenience.
+ */
+export type { Project, EnvVars, DockerState, MentalContext, ServiceState, DirectoryState, Manifest, } from '@ctx-sync/shared';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,OAAO,EACP,OAAO,EACP,WAAW,EACX,aAAa,EACb,YAAY,EACZ,cAAc,EACd,QAAQ,GACT,MAAM,kBAAkB,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/utils/errors.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Custom error classes for ctx-sync.
+ *
+ * Each error class provides:
+ * - A user-friendly message with suggested fix.
+ * - An error code for programmatic handling.
+ * - Stack traces only shown with `--verbose` or `DEBUG=*`.
+ *
+ * @module utils/errors
+ */
+/** Base class for all ctx-sync errors with user-friendly messaging. */
+export declare class CtxSyncError extends Error {
+    /** Machine-readable error code (e.g. 'ENCRYPTION_FAILED'). */
+    readonly code: string;
+    /** Suggested fix for the user. */
+    readonly suggestion: string;
+    constructor(message: string, code: string, suggestion: string);
+    /** Format a user-friendly error message (no stack trace). */
+    toFriendlyString(): string;
+}
+/** Encryption/decryption failures. */
+export declare class EncryptionError extends CtxSyncError {
+    constructor(message: string, suggestion?: string);
+}
+/** Git sync failures. */
+export declare class SyncError extends CtxSyncError {
+    constructor(message: string, suggestion?: string);
+}
+/** Configuration errors (missing config, invalid values). */
+export declare class ConfigError extends CtxSyncError {
+    constructor(message: string, suggestion?: string);
+}
+/** Security violations (bad permissions, insecure transport, etc.). */
+export declare class SecurityError extends CtxSyncError {
+    constructor(message: string, suggestion?: string);
+}
+/** Project not found or invalid project state. */
+export declare class ProjectError extends CtxSyncError {
+    constructor(message: string, suggestion?: string);
+}
+/** Edge-case errors (disk full, permission denied, corrupted data). */
+export declare class EdgeCaseError extends CtxSyncError {
+    constructor(message: string, suggestion?: string);
+}
+/**
+ * Determine whether verbose/debug output should be shown.
+ *
+ * Returns `true` if `--verbose` was passed or `DEBUG` env is set.
+ */
+export declare function isVerbose(): boolean;
+/**
+ * Map common raw errors to ctx-sync error classes.
+ *
+ * Takes an unknown thrown value and wraps it in the most appropriate
+ * CtxSyncError subclass when possible.
+ *
+ * @param err - The raw thrown value.
+ * @returns A CtxSyncError (or the original if already one).
+ */
+export declare function classifyError(err: unknown): CtxSyncError;
+/**
+ * Format an error for user-facing output.
+ *
+ * In normal mode: shows only the friendly message + suggestion.
+ * In verbose mode: also shows the full stack trace.
+ *
+ * @param err - The error to format.
+ * @returns Formatted string for console output.
+ */
+export declare function formatError(err: unknown): string;
+/**
+ * Wrap a command handler with user-friendly error handling.
+ *
+ * Catches any thrown error, classifies it, and prints a friendly message.
+ * Sets `process.exitCode = 1` on failure.
+ *
+ * @param fn - The async command handler function.
+ * @returns A wrapped function safe for use as a Commander action.
+ */
+export declare function withErrorHandler<T extends unknown[]>(fn: (...args: T) => Promise<void>): (...args: T) => Promise<void>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,uEAAuE;AACvE,qBAAa,YAAa,SAAQ,KAAK;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,kCAAkC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAO7D,6DAA6D;IAC7D,gBAAgB,IAAI,MAAM;CAS3B;AAED,sCAAsC;AACtC,qBAAa,eAAgB,SAAQ,YAAY;gBACnC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAQjD;AAED,yBAAyB;AACzB,qBAAa,SAAU,SAAQ,YAAY;gBAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAQjD;AAED,6DAA6D;AAC7D,qBAAa,WAAY,SAAQ,YAAY;gBAC/B,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CASjD;AAED,uEAAuE;AACvE,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAQjD;AAED,kDAAkD;AAClD,qBAAa,YAAa,SAAQ,YAAY;gBAChC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAQjD;AAED,uEAAuE;AACvE,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAQjD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAOnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAiGxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAahD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,OAAO,EAAE,EAClD,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAChC,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAS/B"}

package/dist/utils/errors.js

@@ -0,0 +1,191 @@
+/**
+ * Custom error classes for ctx-sync.
+ *
+ * Each error class provides:
+ * - A user-friendly message with suggested fix.
+ * - An error code for programmatic handling.
+ * - Stack traces only shown with `--verbose` or `DEBUG=*`.
+ *
+ * @module utils/errors
+ */
+/** Base class for all ctx-sync errors with user-friendly messaging. */
+export class CtxSyncError extends Error {
+    /** Machine-readable error code (e.g. 'ENCRYPTION_FAILED'). */
+    code;
+    /** Suggested fix for the user. */
+    suggestion;
+    constructor(message, code, suggestion) {
+        super(message);
+        this.name = 'CtxSyncError';
+        this.code = code;
+        this.suggestion = suggestion;
+    }
+    /** Format a user-friendly error message (no stack trace). */
+    toFriendlyString() {
+        const lines = [];
+        lines.push(`Error: ${this.message}`);
+        if (this.suggestion) {
+            lines.push('');
+            lines.push(`  Suggested fix: ${this.suggestion}`);
+        }
+        return lines.join('\n');
+    }
+}
+/** Encryption/decryption failures. */
+export class EncryptionError extends CtxSyncError {
+    constructor(message, suggestion) {
+        super(message, 'ENCRYPTION_FAILED', suggestion ?? 'Check your encryption key with `ctx-sync key verify`.');
+        this.name = 'EncryptionError';
+    }
+}
+/** Git sync failures. */
+export class SyncError extends CtxSyncError {
+    constructor(message, suggestion) {
+        super(message, 'SYNC_FAILED', suggestion ?? 'Run `ctx-sync init` to set up the sync repository.');
+        this.name = 'SyncError';
+    }
+}
+/** Configuration errors (missing config, invalid values). */
+export class ConfigError extends CtxSyncError {
+    constructor(message, suggestion) {
+        super(message, 'CONFIG_ERROR', suggestion ??
+            'Run `ctx-sync init` to create a fresh configuration, or check ~/.config/ctx-sync/.');
+        this.name = 'ConfigError';
+    }
+}
+/** Security violations (bad permissions, insecure transport, etc.). */
+export class SecurityError extends CtxSyncError {
+    constructor(message, suggestion) {
+        super(message, 'SECURITY_ERROR', suggestion ?? 'Run `ctx-sync audit` to diagnose security issues.');
+        this.name = 'SecurityError';
+    }
+}
+/** Project not found or invalid project state. */
+export class ProjectError extends CtxSyncError {
+    constructor(message, suggestion) {
+        super(message, 'PROJECT_ERROR', suggestion ?? 'Run `ctx-sync list` to see tracked projects.');
+        this.name = 'ProjectError';
+    }
+}
+/** Edge-case errors (disk full, permission denied, corrupted data). */
+export class EdgeCaseError extends CtxSyncError {
+    constructor(message, suggestion) {
+        super(message, 'EDGE_CASE_ERROR', suggestion ?? 'Check system resources and file permissions.');
+        this.name = 'EdgeCaseError';
+    }
+}
+/**
+ * Determine whether verbose/debug output should be shown.
+ *
+ * Returns `true` if `--verbose` was passed or `DEBUG` env is set.
+ */
+export function isVerbose() {
+    const args = process.argv;
+    return (args.includes('--verbose') ||
+        args.includes('-v') ||
+        !!process.env['DEBUG']);
+}
+/**
+ * Map common raw errors to ctx-sync error classes.
+ *
+ * Takes an unknown thrown value and wraps it in the most appropriate
+ * CtxSyncError subclass when possible.
+ *
+ * @param err - The raw thrown value.
+ * @returns A CtxSyncError (or the original if already one).
+ */
+export function classifyError(err) {
+    if (err instanceof CtxSyncError) {
+        return err;
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    const lowerMsg = message.toLowerCase();
+    // Encryption / decryption problems
+    // Note: avoid matching "age" alone — it also appears in "Invalid Age public key format".
+    // Only match "age:" (library prefix) or "age ciphertext" patterns.
+    if (lowerMsg.includes('decrypt') ||
+        lowerMsg.includes('age:') ||
+        lowerMsg.includes('age ciphertext') ||
+        lowerMsg.includes('ciphertext') ||
+        lowerMsg.includes('encrypted')) {
+        return new EncryptionError('Failed to decrypt state file.', 'Your encryption key may be wrong or the file may be corrupted.\n' +
+            '  Try: ctx-sync key verify');
+    }
+    // Missing key
+    if (lowerMsg.includes('key.txt') ||
+        lowerMsg.includes('key file') ||
+        lowerMsg.includes('no such file') && lowerMsg.includes('key')) {
+        return new ConfigError('Encryption key not found.', 'Run `ctx-sync init` to generate a new key, or `ctx-sync init --restore` to restore an existing one.');
+    }
+    // Permissions
+    if (lowerMsg.includes('permission') ||
+        lowerMsg.includes('eacces') ||
+        lowerMsg.includes('eperm')) {
+        return new SecurityError('Permission denied.', 'Check file permissions. Key file should be 600, config dir should be 700.\n' +
+            '  Try: chmod 600 ~/.config/ctx-sync/key.txt');
+    }
+    // Disk space
+    if (lowerMsg.includes('enospc') || lowerMsg.includes('no space')) {
+        return new EdgeCaseError('Disk is full — cannot write state files.', 'Free up disk space and try again.');
+    }
+    // Transport security (check before generic git errors)
+    if (lowerMsg.includes('insecure') || lowerMsg.includes('http://')) {
+        return new SecurityError(message, 'Use SSH (git@...) or HTTPS (https://...) for your remote URL.\n' +
+            '  Try: git remote set-url origin <secure-url>');
+    }
+    // Git errors
+    if (lowerMsg.includes('git') ||
+        lowerMsg.includes('remote') ||
+        lowerMsg.includes('repository')) {
+        return new SyncError(message, 'Ensure Git is installed and the sync repo is initialized.\n' +
+            '  Try: ctx-sync init');
+    }
+    // Path validation
+    if (lowerMsg.includes('path') &&
+        (lowerMsg.includes('outside') || lowerMsg.includes('traversal'))) {
+        return new SecurityError(message, 'Project paths must be within your home directory.');
+    }
+    // Fallback: wrap as a generic CtxSyncError
+    return new CtxSyncError(message, 'UNKNOWN_ERROR', 'If this persists, run with --verbose for more details or file an issue.');
+}
+/**
+ * Format an error for user-facing output.
+ *
+ * In normal mode: shows only the friendly message + suggestion.
+ * In verbose mode: also shows the full stack trace.
+ *
+ * @param err - The error to format.
+ * @returns Formatted string for console output.
+ */
+export function formatError(err) {
+    const ctxErr = classifyError(err);
+    const lines = [];
+    lines.push(ctxErr.toFriendlyString());
+    if (isVerbose() && ctxErr.stack) {
+        lines.push('');
+        lines.push('Stack trace:');
+        lines.push(ctxErr.stack);
+    }
+    return lines.join('\n');
+}
+/**
+ * Wrap a command handler with user-friendly error handling.
+ *
+ * Catches any thrown error, classifies it, and prints a friendly message.
+ * Sets `process.exitCode = 1` on failure.
+ *
+ * @param fn - The async command handler function.
+ * @returns A wrapped function safe for use as a Commander action.
+ */
+export function withErrorHandler(fn) {
+    return async (...args) => {
+        try {
+            await fn(...args);
+        }
+        catch (err) {
+            console.error(formatError(err));
+            process.exitCode = 1;
+        }
+    };
+}
+//# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,uEAAuE;AACvE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,8DAA8D;IACrD,IAAI,CAAS;IAEtB,kCAAkC;IACzB,UAAU,CAAS;IAE5B,YAAY,OAAe,EAAE,IAAY,EAAE,UAAkB;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,6DAA6D;IAC7D,gBAAgB;QACd,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,sCAAsC;AACtC,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CACH,OAAO,EACP,mBAAmB,EACnB,UAAU,IAAI,uDAAuD,CACtE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,yBAAyB;AACzB,MAAM,OAAO,SAAU,SAAQ,YAAY;IACzC,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CACH,OAAO,EACP,aAAa,EACb,UAAU,IAAI,oDAAoD,CACnE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,WAAY,SAAQ,YAAY;IAC3C,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CACH,OAAO,EACP,cAAc,EACd,UAAU;YACR,oFAAoF,CACvF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CACH,OAAO,EACP,gBAAgB,EAChB,UAAU,IAAI,mDAAmD,CAClE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,OAAO,YAAa,SAAQ,YAAY;IAC5C,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CACH,OAAO,EACP,eAAe,EACf,UAAU,IAAI,8CAA8C,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAe,EAAE,UAAmB;QAC9C,KAAK,CACH,OAAO,EACP,iBAAiB,EACjB,UAAU,IAAI,8CAA8C,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEvC,mCAAmC;IACnC,yFAAyF;IACzF,mEAAmE;IACnE,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC9B,CAAC;QACD,OAAO,IAAI,eAAe,CACxB,+BAA+B,EAC/B,kEAAkE;YAChE,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC7B,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC7D,CAAC;QACD,OAAO,IAAI,WAAW,CACpB,2BAA2B,EAC3B,qGAAqG,CACtG,CAAC;IACJ,CAAC;IAED,cAAc;IACd,IACE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC1B,CAAC;QACD,OAAO,IAAI,aAAa,CACtB,oBAAoB,EACpB,6EAA6E;YAC3E,6CAA6C,CAChD,CAAC;IACJ,CAAC;IAED,aAAa;IACb,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,aAAa,CACtB,0CAA0C,EAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,aAAa,CACtB,OAAO,EACP,iEAAiE;YAC/D,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,aAAa;IACb,IACE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/B,CAAC;QACD,OAAO,IAAI,SAAS,CAClB,OAAO,EACP,6DAA6D;YAC3D,sBAAsB,CACzB,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,IACE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAChE,CAAC;QACD,OAAO,IAAI,aAAa,CACtB,OAAO,EACP,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,OAAO,IAAI,YAAY,CACrB,OAAO,EACP,eAAe,EACf,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEtC,IAAI,SAAS,EAAE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAiC;IAEjC,OAAO,KAAK,EAAE,GAAG,IAAO,EAAiB,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/utils/secure-memory.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Secure memory handling utilities.
+ *
+ * Provides best-effort memory cleanup for sensitive data.
+ * Buffers are zeroed after use; string clearing is best-effort
+ * due to JavaScript string immutability.
+ *
+ * **Limitations (documented trade-offs):**
+ * - JavaScript strings are immutable and interned by the V8 engine.
+ *   Once a string is created, we cannot reliably zero it from memory.
+ *   The `clearString` function is a best-effort signal; true clearing
+ *   requires using Buffer/Uint8Array for sensitive data throughout.
+ * - The garbage collector may copy data before we can zero it.
+ * - V8 may keep optimised copies in JIT-compiled code.
+ *
+ * For maximum security, prefer using Buffers for sensitive data and
+ * pass them through `withSecret()` to ensure cleanup.
+ *
+ * @module utils/secure-memory
+ */
+/**
+ * Execute a function with a secret buffer, ensuring the buffer is
+ * zeroed in the `finally` block regardless of success or failure.
+ *
+ * @param buffer - The buffer containing sensitive data.
+ * @param fn - The function to execute with the buffer.
+ * @returns The return value of `fn`.
+ */
+export declare function withSecret<T>(buffer: Buffer, fn: (buf: Buffer) => T | Promise<T>): Promise<T>;
+/**
+ * Synchronous version of `withSecret`.
+ *
+ * @param buffer - The buffer containing sensitive data.
+ * @param fn - The synchronous function to execute with the buffer.
+ * @returns The return value of `fn`.
+ */
+export declare function withSecretSync<T>(buffer: Buffer, fn: (buf: Buffer) => T): T;
+/**
+ * Best-effort clearing of a string variable.
+ *
+ * **Important:** Due to JavaScript string immutability, this function
+ * cannot guarantee the original string is removed from memory. It returns
+ * an empty string that the caller should assign back to the variable.
+ * The original string will be eligible for garbage collection, but may
+ * persist in memory until the GC runs.
+ *
+ * Usage:
+ * ```ts
+ * let secret = 'my-secret';
+ * // ... use secret ...
+ * secret = clearString(secret);
+ * // secret is now '', original may still be in memory until GC
+ * ```
+ *
+ * @param _variable - The string to "clear" (unused, but required for intent).
+ * @returns An empty string to assign back to the variable.
+ */
+export declare function clearString(_variable: string): string;
+/**
+ * Zero out a Uint8Array (for use with raw crypto buffers).
+ *
+ * @param array - The array to zero.
+ */
+export declare function zeroOut(array: Uint8Array): void;
+//# sourceMappingURL=secure-memory.d.ts.map

package/dist/utils/secure-memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-memory.d.ts","sourceRoot":"","sources":["../../src/utils/secure-memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAMnG;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAM3E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAE/C"}

package/dist/utils/secure-memory.js

@@ -0,0 +1,86 @@
+/**
+ * Secure memory handling utilities.
+ *
+ * Provides best-effort memory cleanup for sensitive data.
+ * Buffers are zeroed after use; string clearing is best-effort
+ * due to JavaScript string immutability.
+ *
+ * **Limitations (documented trade-offs):**
+ * - JavaScript strings are immutable and interned by the V8 engine.
+ *   Once a string is created, we cannot reliably zero it from memory.
+ *   The `clearString` function is a best-effort signal; true clearing
+ *   requires using Buffer/Uint8Array for sensitive data throughout.
+ * - The garbage collector may copy data before we can zero it.
+ * - V8 may keep optimised copies in JIT-compiled code.
+ *
+ * For maximum security, prefer using Buffers for sensitive data and
+ * pass them through `withSecret()` to ensure cleanup.
+ *
+ * @module utils/secure-memory
+ */
+/**
+ * Execute a function with a secret buffer, ensuring the buffer is
+ * zeroed in the `finally` block regardless of success or failure.
+ *
+ * @param buffer - The buffer containing sensitive data.
+ * @param fn - The function to execute with the buffer.
+ * @returns The return value of `fn`.
+ */
+export async function withSecret(buffer, fn) {
+    try {
+        return await fn(buffer);
+    }
+    finally {
+        buffer.fill(0);
+    }
+}
+/**
+ * Synchronous version of `withSecret`.
+ *
+ * @param buffer - The buffer containing sensitive data.
+ * @param fn - The synchronous function to execute with the buffer.
+ * @returns The return value of `fn`.
+ */
+export function withSecretSync(buffer, fn) {
+    try {
+        return fn(buffer);
+    }
+    finally {
+        buffer.fill(0);
+    }
+}
+/**
+ * Best-effort clearing of a string variable.
+ *
+ * **Important:** Due to JavaScript string immutability, this function
+ * cannot guarantee the original string is removed from memory. It returns
+ * an empty string that the caller should assign back to the variable.
+ * The original string will be eligible for garbage collection, but may
+ * persist in memory until the GC runs.
+ *
+ * Usage:
+ * ```ts
+ * let secret = 'my-secret';
+ * // ... use secret ...
+ * secret = clearString(secret);
+ * // secret is now '', original may still be in memory until GC
+ * ```
+ *
+ * @param _variable - The string to "clear" (unused, but required for intent).
+ * @returns An empty string to assign back to the variable.
+ */
+export function clearString(_variable) {
+    // We cannot mutate the original string in JavaScript.
+    // Return empty string for the caller to overwrite their reference.
+    // The original string becomes eligible for garbage collection.
+    return '';
+}
+/**
+ * Zero out a Uint8Array (for use with raw crypto buffers).
+ *
+ * @param array - The array to zero.
+ */
+export function zeroOut(array) {
+    array.fill(0);
+}
+//# sourceMappingURL=secure-memory.js.map

package/dist/utils/secure-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-memory.js","sourceRoot":"","sources":["../../src/utils/secure-memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,MAAc,EAAE,EAAmC;IACrF,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAI,MAAc,EAAE,EAAsB;IACtE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,sDAAsD;IACtD,mEAAmE;IACnE,+DAA+D;IAC/D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "ctx-sync",
+  "version": "1.0.0",
+  "description": "Sync your complete development context across machines using Git",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "ctx-sync": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "dev": "tsx src/index.ts",
+    "test": "NODE_OPTIONS='--experimental-vm-modules' jest",
+    "test:unit": "NODE_OPTIONS='--experimental-vm-modules' jest test/unit",
+    "test:integration": "NODE_OPTIONS='--experimental-vm-modules' jest test/integration",
+    "test:e2e": "NODE_OPTIONS='--experimental-vm-modules' jest test/e2e",
+    "test:security": "NODE_OPTIONS='--experimental-vm-modules' jest test/security",
+    "test:pentest": "NODE_OPTIONS='--experimental-vm-modules' jest test/security/pentest.test.ts",
+    "test:coverage": "NODE_OPTIONS='--experimental-vm-modules' jest --coverage",
+    "test:watch": "NODE_OPTIONS='--experimental-vm-modules' jest --watch",
+    "test:performance": "NODE_OPTIONS='--experimental-vm-modules' jest test/performance --no-coverage",
+    "test:all": "npm run typecheck && npm run lint && NODE_OPTIONS='--experimental-vm-modules' jest --coverage"
+  },
+  "keywords": [
+    "cli",
+    "context",
+    "sync",
+    "development",
+    "git",
+    "encryption",
+    "developer-tools"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@types/jest": "30.0.0",
+    "@types/mock-fs": "4.13.4",
+    "jest": "30.2.0",
+    "ts-jest": "29.4.6"
+  },
+  "dependencies": {
+    "age-encryption": "0.3.0",
+    "chalk": "5.6.2",
+    "commander": "14.0.3",
+    "enquirer": "2.4.1",
+    "ora": "9.3.0",
+    "simple-git": "3.30.0"
+  }
+}