glirastes 0.4.0 → 0.5.0

package/dist/cli/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,sDAAsD;AACtD,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,SAAS;YAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,2BAA2B;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC9C,mCAAmC;YACnC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACrD,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtC,IAAI,6BAA6B,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,wEAAwE;IACxE,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YACvE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,OAAO,GAAG,CAAC;oBAAE,SAAS;gBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IACvC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;SAAM,IAAI,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/commands/agent-setup.d.ts

@@ -0,0 +1,27 @@
+type AgentHost = 'codex' | 'claude';
+interface AvailableAgent {
+    host: AgentHost;
+    executable: string;
+}
+export interface AgentLaunchRequest {
+    executable: string;
+    args: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+}
+export interface AgentSetupDependencies {
+    env?: NodeJS.ProcessEnv;
+    isInteractive?: boolean;
+    ask?: (question: string) => Promise<string>;
+    available?: () => Promise<AvailableAgent[]>;
+    launch?: (request: AgentLaunchRequest) => Promise<number>;
+}
+export declare function launchSetupAgent(request: AgentLaunchRequest): Promise<number>;
+export declare function runAgentSetup(options: {
+    rootDir: string;
+    agent?: string;
+    dryRun?: boolean;
+    json?: boolean;
+    managed?: boolean;
+}, deps?: AgentSetupDependencies): Promise<void>;
+export {};

package/dist/cli/commands/agent-setup.js

@@ -0,0 +1,149 @@
+import { constants } from 'node:fs';
+import { access, lstat, realpath } from 'node:fs/promises';
+import { delimiter, isAbsolute, join, resolve } from 'node:path';
+import { spawn } from 'node:child_process';
+import { FoundationDiagnosticError } from '../../diagnostics/index.js';
+import { scaffoldToolsInputs } from './init-scaffold.js';
+import { findPackageSkillsDir, installSkills } from './install-skills.js';
+import { hostRecord, readInstalledSkillsManifest } from './installed-skills-manifest.js';
+import { inspectSetupProject } from './project-inspection.js';
+import { createDoctorReport, formatDoctorReport } from './doctor.js';
+const TARGETS = { codex: '.agents/skills', claude: '.claude/skills' };
+function failure(message, remediation) {
+    return new FoundationDiagnosticError({ code: 'E-SETUP-020', operation: 'setup.agent', message, remediation });
+}
+async function availableAgents(env) {
+    const result = [];
+    // Relative PATH entries could select a project-supplied executable by accident.
+    const paths = (env.PATH ?? '').split(delimiter).filter(isAbsolute);
+    for (const host of ['codex', 'claude']) {
+        for (const path of paths) {
+            const executable = join(path, host);
+            try {
+                await access(executable, constants.X_OK);
+                if (!(await lstat(await realpath(executable))).isFile())
+                    continue;
+                result.push({ host, executable });
+                break;
+            }
+            catch { /* This PATH entry does not provide the selected CLI. */ }
+        }
+    }
+    return result;
+}
+export function launchSetupAgent(request) {
+    return new Promise((resolveExit, reject) => {
+        const child = spawn(request.executable, request.args, {
+            cwd: request.cwd, env: request.env, stdio: 'inherit', shell: false,
+        });
+        child.once('error', () => reject(failure('The selected coding agent could not start.', 'check-selected-agent')));
+        child.once('close', (code) => resolveExit(code ?? 1));
+    });
+}
+async function assertLocalInstallPaths(root, host) {
+    const target = TARGETS[host];
+    for (const path of ['.glirastes', '.glirastes/installed-skills.json', target.split('/')[0], target]) {
+        try {
+            if ((await lstat(join(root, path))).isSymbolicLink()) {
+                throw failure('Review linked setup or skill folders before installing.', 'review-setup-write-paths');
+            }
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    const record = hostRecord(await readInstalledSkillsManifest(root), host);
+    if (record && resolve(root, record.target) !== resolve(root, target)) {
+        throw failure('The recorded skills use a different installation folder. Preserve it and review the target.', 'review-setup-write-paths');
+    }
+}
+export async function runAgentSetup(options, deps = {}) {
+    const env = deps.env ?? process.env;
+    if (env.GLIRASTES_SETUP_AGENT_ACTIVE) {
+        throw failure('Continue the current integration with setup and doctor; do not start init recursively.', 'continue-current-setup');
+    }
+    if (options.agent && options.agent !== 'codex' && options.agent !== 'claude') {
+        throw failure('Choose one verified setup launcher: --agent codex or --agent claude.', 'choose-setup-agent');
+    }
+    const active = env.CODEX_THREAD_ID && !env.CLAUDECODE
+        ? 'codex' : env.CLAUDECODE && !env.CODEX_THREAD_ID ? 'claude' : undefined;
+    const interactive = deps.isInteractive ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
+    const available = await (deps.available ?? (() => availableAgents(env)))();
+    let agent = options.agent ?? active;
+    if (!agent && available.length === 1)
+        agent = available[0].host;
+    if (!agent && !options.json && interactive && deps.ask && available.length > 1) {
+        const answer = (await deps.ask(`Which existing coding agent should set up this app (${available.map((item) => item.host).join(' / ')})? `)).trim();
+        if (available.some((item) => item.host === answer))
+            agent = answer;
+    }
+    if (!agent)
+        throw failure('Select your existing coding agent with --agent codex or --agent claude.', 'choose-setup-agent');
+    if (!options.dryRun && (env.CODEX_THREAD_ID || env.CLAUDECODE) && active !== agent) {
+        throw failure('Continue with the current coding agent, or start the other agent from a separate terminal. No files were changed.', 'use-current-agent-session');
+    }
+    const selected = available.find((item) => item.host === agent);
+    if (!selected && active !== agent)
+        throw failure('Install or sign in to the selected coding agent, then run init again. No other provider was selected.', 'install-selected-agent');
+    if (!options.dryRun && active !== agent && !interactive) {
+        throw failure('Run init in your coding-agent session or an interactive terminal. No files were changed.', 'use-interactive-agent');
+    }
+    if (!options.dryRun && active !== agent && options.json) {
+        throw failure('Interactive agents write their own terminal output. Omit --json, or use --dry-run --json for a machine-readable preview. No files were changed.', 'use-interactive-output');
+    }
+    const root = await realpath(resolve(options.rootDir));
+    const inspection = await inspectSetupProject(root);
+    await assertLocalInstallPaths(root, agent);
+    const bundled = findPackageSkillsDir();
+    const instructions = [
+        'Complete the Glirastes integration in this app and verify a successful authorized tool action.',
+        `App folder: ${JSON.stringify(root)}. SDK package used by this command: ${JSON.stringify(resolve(bundled, '..'))}.`,
+        `Read the full bundled workflow at ${JSON.stringify(join(bundled, 'setting-up-glirastes/SKILL.md'))}, including its required references, before editing.`,
+        'Use this exact SDK package/API surface; do not substitute an unrelated same-version registry package.',
+        'Inspect the app code for frontend, backend, schemas, navigation, filters and server-side authorization. Manifest detection alone is not integration proof.',
+        'Preserve modified installed skills and all existing app changes. Reconcile their project-specific instructions with the bundled workflow; never force-replace them.',
+        'Use the current agent and its existing model configuration; do not request an extra setup provider key or silently change provider.',
+        'The app chat needs its own authorized runtime model binding. Do not extract coding-agent credentials for app use.',
+        'Continue autonomously from existing evidence. Ask only genuinely unresolved decisions. Create source-derived local bindings, chat integration and repeatable build/CI regeneration; do not ask the developer to maintain a second tool catalogue.',
+        'Init wrote .glirastes/tools.json, .glirastes/prompt-bundle.json, the predev/prebuild scripts and the agent hint where they were missing. Run glirastes tools refresh, work through glirastes tools resolve --print and glirastes tools describe --print, then glirastes tools refresh and glirastes tools eval again. Never change the appId in tools.json.',
+        options.managed
+            ? 'Managed mode is explicit: existing Managed apps retain --managed for setup and doctor. For a fresh app, prepare local pairing artifacts, connect with approval, then apply Managed setup before any chat/tool execution. Preserve app/environment scope; never downgrade an existing Managed app.'
+            : 'A fresh app defaults to Standalone without a Platform account. Preserve any existing Connected/Managed configuration; never silently downgrade it.',
+        'Keep final authorization and business data local. No unsigned fallback, blanket approval removal, secret logging, push, merge, publication or deployment.',
+        'Run local setup/doctor and the actual chat/tool test. Report separately what passed and what is blocked; agent exit or Doctor success is not tool-action proof. Do not run glirastes init again inside this setup.',
+    ].join('\n');
+    const base = { schemaVersion: 1, agent, instructions, inspection };
+    const scaffoldText = (scaffold, verb) => [
+        scaffold.written.length > 0 ? `${verb}: ${scaffold.written.join(', ')}` : 'No Glirastes input files were missing.',
+        ...scaffold.notes,
+    ].join('\n');
+    if (options.dryRun) {
+        const scaffold = await scaffoldToolsInputs({ root, host: agent, dryRun: true });
+        const preview = { ...base, status: 'preview', skillDirectory: TARGETS[agent], scaffold };
+        console.log(options.json ? JSON.stringify(preview)
+            : `Glirastes setup preview (${agent})\nNo files changed or agent started.\n${scaffoldText(scaffold, 'Would write')}\n${instructions}`);
+        return;
+    }
+    await installSkills({ rootDir: root, host: agent, parts: ['setup', 'tools', 'chat-ui', 'framework'], quiet: options.json });
+    const scaffold = await scaffoldToolsInputs({ root, host: agent });
+    if (active === agent) {
+        console.log(options.json ? JSON.stringify({ ...base, status: 'continue-in-session', scaffold })
+            : `${scaffoldText(scaffold, 'Wrote')}\nContinue setup in this ${agent} session:\n${instructions}`);
+        return;
+    }
+    console.log(scaffoldText(scaffold, 'Wrote'));
+    console.log(`Starting ${agent} in the app folder with its existing model and permission settings.`);
+    const exitCode = await (deps.launch ?? launchSetupAgent)({
+        executable: selected.executable, args: [instructions], cwd: root,
+        env: { ...env, GLIRASTES_SETUP_AGENT_ACTIVE: '1' },
+    });
+    if (exitCode !== 0) {
+        throw failure('The coding agent stopped before setup verification. Existing work was preserved; resume it in your agent.', 'resume-selected-agent');
+    }
+    const doctor = await createDoctorReport({ rootDir: root, managed: options.managed, env });
+    console.log(options.json ? JSON.stringify({ schemaVersion: 1, status: 'agent-exited', doctor }) : formatDoctorReport(doctor));
+    if (doctor.status === 'fail' || doctor.counts.tools === 0)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=agent-setup.js.map

package/dist/cli/commands/agent-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-setup.js","sourceRoot":"","sources":["../../../src/cli/commands/agent-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAqB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAkBrE,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAW,CAAC;AAC/E,SAAS,OAAO,CAAC,OAAe,EAAE,WAAmB;IACnD,OAAO,IAAI,yBAAyB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAsB;IACnD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,gFAAgF;IAChF,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAU,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAClE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClC,MAAM;YACR,CAAC;YAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;YACpD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK;SACnE,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,4CAA4C,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACjH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,IAAe;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,kCAAkC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;QACpG,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBACrD,MAAM,OAAO,CAAC,yDAAyD,EAAE,0BAA0B,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,2BAA2B,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACrE,MAAM,OAAO,CAAC,6FAA6F,EAAE,0BAA0B,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAMnC,EAAE,OAA+B,EAAE;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,GAAG,CAAC,4BAA4B,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,wFAAwF,EAAE,wBAAwB,CAAC,CAAC;IACpI,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7E,MAAM,OAAO,CAAC,sEAAsE,EAAE,oBAAoB,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,MAAM,GAA0B,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,UAAU;QAC1E,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,KAAK,GAAG,OAAO,CAAC,KAA8B,IAAI,MAAM,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,uDAAuD,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnJ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;YAAE,KAAK,GAAG,MAAmB,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,OAAO,CAAC,yEAAyE,EAAE,oBAAoB,CAAC,CAAC;IAC3H,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACnF,MAAM,OAAO,CAAC,mHAAmH,EAAE,2BAA2B,CAAC,CAAC;IAClK,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,KAAK;QAAE,MAAM,OAAO,CAAC,uGAAuG,EAAE,wBAAwB,CAAC,CAAC;IACpL,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACxD,MAAM,OAAO,CAAC,0FAA0F,EAAE,uBAAuB,CAAC,CAAC;IACrI,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,OAAO,CAAC,iJAAiJ,EAAE,wBAAwB,CAAC,CAAC;IAC7L,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG;QACnB,gGAAgG;QAChG,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG;QACnH,qCAAqC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC,sDAAsD;QACzJ,uGAAuG;QACvG,4JAA4J;QAC5J,qKAAqK;QACrK,qIAAqI;QACrI,mHAAmH;QACnH,mPAAmP;QACnP,6VAA6V;QAC7V,OAAO,CAAC,OAAO;YACb,CAAC,CAAC,mSAAmS;YACrS,CAAC,CAAC,oJAAoJ;QACxJ,2JAA2J;QAC3J,oNAAoN;KACrN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,CAAC,QAAsB,EAAE,IAAY,EAAE,EAAE,CAAC;QAC7D,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC;QAClH,GAAG,QAAQ,CAAC,KAAK;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAChD,CAAC,CAAC,4BAA4B,KAAK,0CAA0C,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,YAAY,EAAE,CAAC,CAAC;QACzI,OAAO;IACT,CAAC;IACD,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC;YAC7F,CAAC,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,4BAA4B,KAAK,cAAc,YAAY,EAAE,CAAC,CAAC;QACrG,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,qEAAqE,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC;QACvD,UAAU,EAAE,QAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI;QACjE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,4BAA4B,EAAE,GAAG,EAAE;KACnD,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC,2GAA2G,EAAE,uBAAuB,CAAC,CAAC;IACtJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9H,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAClF,CAAC"}

package/dist/cli/commands/apply-setup-plan.d.ts

@@ -0,0 +1,21 @@
+import { type AtomicArtifactWriteHooks } from './atomic-artifact-write.js';
+import { type SetupPlan } from './setup-plan.js';
+export interface ApplySetupPlanOptions {
+    rootDir: string;
+    plan: SetupPlan;
+    artifactPath?: string;
+    previousArtifactPath?: string;
+    inventoryPath?: string;
+    promptBundlePath?: string;
+    hooks?: AtomicArtifactWriteHooks;
+}
+export interface AppliedSetupPlan {
+    planDigest: string;
+    mode: 'standalone' | 'managed';
+    appId: string;
+    toolCount: number;
+    runtimeDigest: string;
+    promptDigest: string;
+    restartRequired: true;
+}
+export declare function applySetupPlan(options: ApplySetupPlanOptions): Promise<AppliedSetupPlan>;

package/dist/cli/commands/apply-setup-plan.js

@@ -0,0 +1,100 @@
+import { createHash } from 'node:crypto';
+import { mkdir, readFile, stat } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { FoundationDiagnosticError } from '../../diagnostics/index.js';
+import { writeArtifactSetAtomically, } from './atomic-artifact-write.js';
+import { renderManifests } from './validate-build.js';
+import { detectSetupProfile } from './setup-profile.js';
+import { createSetupPlan } from './setup-plan.js';
+async function exists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function digestOf(raw) {
+    return `sha256:${createHash('sha256').update(raw).digest('base64url')}`;
+}
+export async function applySetupPlan(options) {
+    const rootDir = resolve(options.rootDir);
+    const profile = await detectSetupProfile({
+        rootDir,
+        managed: options.plan.mode === 'managed',
+        artifactPath: options.artifactPath,
+        inventoryPath: options.inventoryPath,
+        promptBundlePath: options.promptBundlePath,
+    });
+    const currentPlan = await createSetupPlan({
+        rootDir,
+        managed: options.plan.mode === 'managed',
+        artifactPath: options.artifactPath,
+        previousArtifactPath: options.previousArtifactPath,
+        inventoryPath: options.inventoryPath,
+        promptBundlePath: options.promptBundlePath,
+    });
+    if (currentPlan.planDigest !== options.plan.planDigest) {
+        throw new FoundationDiagnosticError({
+            code: 'E-SETUP-006',
+            operation: 'setup.apply',
+            message: 'The local setup plan changed before it could be applied.',
+            remediation: 'rerun-setup-dry-run',
+        });
+    }
+    const proposedPath = resolve(rootDir, profile.paths.setupArtifact);
+    const proposedContent = await readFile(proposedPath, 'utf8');
+    const adopt = options.plan.operations.find(({ kind }) => kind === 'adopt');
+    if (!adopt || adopt.digest !== digestOf(proposedContent)) {
+        throw new FoundationDiagnosticError({
+            code: 'E-SETUP-006',
+            operation: 'setup.apply',
+            message: 'The proposed setup artifact no longer matches the plan.',
+            remediation: 'rerun-setup-dry-run',
+        });
+    }
+    const rendered = await renderManifests({
+        rootDir,
+        appId: profile.appId,
+        inventoryPath: profile.paths.inventory,
+        promptBundlePath: profile.paths.promptBundle,
+        setupArtifactPath: profile.paths.setupArtifact,
+    });
+    const canonicalPath = resolve(rootDir, profile.paths.canonicalSetupArtifact);
+    const writes = [];
+    if (await exists(canonicalPath)) {
+        writes.push({
+            path: resolve(rootDir, profile.paths.previousSetupArtifact),
+            content: await readFile(canonicalPath),
+        });
+    }
+    writes.push({ path: canonicalPath, content: proposedContent }, {
+        path: resolve(rootDir, profile.paths.buildDir, 'runtime-manifest.json'),
+        content: rendered.runtimeContent,
+    }, {
+        path: resolve(rootDir, profile.paths.buildDir, 'prompt-manifest.json'),
+        content: rendered.promptContent,
+    });
+    const result = {
+        planDigest: options.plan.planDigest,
+        mode: profile.mode,
+        appId: profile.appId,
+        toolCount: profile.toolCount,
+        runtimeDigest: rendered.runtimeDigest,
+        promptDigest: rendered.promptDigest,
+        restartRequired: true,
+    };
+    writes.push({
+        path: resolve(rootDir, profile.paths.receipt),
+        content: `${JSON.stringify({ schemaVersion: 1, ...result }, null, 2)}\n`,
+    });
+    for (const directory of new Set(writes.map(({ path }) => dirname(path)))) {
+        await mkdir(directory, { recursive: true });
+    }
+    await writeArtifactSetAtomically(writes, options.hooks);
+    return result;
+}
+//# sourceMappingURL=apply-setup-plan.js.map

package/dist/cli/commands/apply-setup-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-setup-plan.js","sourceRoot":"","sources":["../../../src/cli/commands/apply-setup-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EACL,0BAA0B,GAG3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAkB,MAAM,iBAAiB,CAAC;AAsBlE,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA8B;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;QACvC,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC;QACxC,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACvD,MAAM,IAAI,yBAAyB,CAAC;YAClC,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,0DAA0D;YACnE,WAAW,EAAE,qBAAqB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,yBAAyB,CAAC;YAClC,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,yDAAyD;YAClE,WAAW,EAAE,qBAAqB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;QACrC,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;QACtC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;QAC5C,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa;KAC/C,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;YAC3D,OAAO,EAAE,MAAM,QAAQ,CAAC,aAAa,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,EACjD;QACE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QACvE,OAAO,EAAE,QAAQ,CAAC,cAAc;KACjC,EACD;QACE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QACtE,OAAO,EAAE,QAAQ,CAAC,aAAa;KAChC,CACF,CAAC;IACF,MAAM,MAAM,GAAqB;QAC/B,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,eAAe,EAAE,IAAI;KACtB,CAAC;IACF,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;KACzE,CAAC,CAAC;IAEH,KAAK,MAAM,SAAS,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli/commands/atomic-artifact-write.d.ts

@@ -0,0 +1,19 @@
+export interface ArtifactWrite {
+    path: string;
+    content: string | Uint8Array;
+    /**
+     * Gives the replacement the permission bits of the file it replaces. Staged
+     * files are created 0600, which suits secrets and generated artifacts but
+     * would silently narrow a developer's own source file. Off by default so a
+     * credential file is never loosened to its previous mode.
+     */
+    preserveMode?: boolean;
+}
+export interface AtomicArtifactWriteHooks {
+    afterReplace?(index: number): void | Promise<void>;
+}
+/**
+ * Stages and fsyncs the complete set before replacement. Recoverable copies
+ * remain until every authoritative path has been replaced successfully.
+ */
+export declare function writeArtifactSetAtomically(writes: ReadonlyArray<ArtifactWrite>, hooks?: AtomicArtifactWriteHooks): Promise<void>;

package/dist/cli/commands/atomic-artifact-write.js

@@ -0,0 +1,106 @@
+import { randomUUID } from 'node:crypto';
+import { copyFile, open, rename, stat, unlink, } from 'node:fs/promises';
+import { dirname } from 'node:path';
+async function exists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+async function existingMode(path) {
+    try {
+        return (await stat(path)).mode & 0o7777;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+}
+async function removeIfPresent(path) {
+    try {
+        await unlink(path);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+/**
+ * Stages and fsyncs the complete set before replacement. Recoverable copies
+ * remain until every authoritative path has been replaced successfully.
+ */
+export async function writeArtifactSetAtomically(writes, hooks = {}) {
+    const seen = new Set();
+    for (const write of writes) {
+        if (!write.path || seen.has(write.path)) {
+            throw new Error('Artifact transaction paths must be unique and explicit.');
+        }
+        seen.add(write.path);
+    }
+    const transactionId = randomUUID();
+    const entries = writes.map((write) => ({
+        ...write,
+        staged: `${write.path}.glirastes-stage-${transactionId}`,
+        backup: `${write.path}.glirastes-backup-${transactionId}`,
+        existed: false,
+    }));
+    let replacementStarted = false;
+    try {
+        for (const entry of entries) {
+            const handle = await open(entry.staged, 'wx', 0o600);
+            try {
+                await handle.writeFile(entry.content);
+                const mode = entry.preserveMode ? await existingMode(entry.path) : undefined;
+                if (mode !== undefined)
+                    await handle.chmod(mode);
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            entry.existed = await exists(entry.path);
+            if (entry.existed)
+                await copyFile(entry.path, entry.backup);
+        }
+        replacementStarted = true;
+        for (const [index, entry] of entries.entries()) {
+            await rename(entry.staged, entry.path);
+            await hooks.afterReplace?.(index);
+        }
+        for (const directory of new Set(entries.map((entry) => dirname(entry.path)))) {
+            const handle = await open(directory, 'r');
+            try {
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+        }
+    }
+    catch (error) {
+        if (replacementStarted) {
+            for (const entry of entries) {
+                if (entry.existed && await exists(entry.backup)) {
+                    await copyFile(entry.backup, entry.path);
+                }
+                else if (!entry.existed) {
+                    await removeIfPresent(entry.path);
+                }
+            }
+        }
+        throw error;
+    }
+    finally {
+        for (const entry of entries) {
+            await removeIfPresent(entry.staged);
+            await removeIfPresent(entry.backup);
+        }
+    }
+}
+//# sourceMappingURL=atomic-artifact-write.js.map

package/dist/cli/commands/atomic-artifact-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-artifact-write.js","sourceRoot":"","sources":["../../../src/cli/commands/atomic-artifact-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAoC,EACpC,QAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,GAAG,KAAK;QACR,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,oBAAoB,aAAa,EAAE;QACxD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,qBAAqB,aAAa,EAAE;QACzD,OAAO,EAAE,KAAK;KACf,CAAC,CAAC,CAAC;IACJ,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC7E,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,KAAK,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,OAAO;gBAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC;QAED,kBAAkB,GAAG,IAAI,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChD,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,CAAC;qBAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/commands/ci-workflow.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `glirastes init --ci github` (spec 4.6, 4.8): the GitHub Actions workflow
+ * with the model-free check job `glirastes-tools` and the Pro job
+ * `glirastes-tools-enrich`, which stays off until the repository variable
+ * GLIRASTES_MANAGED_TOOLS is "true". It runs on pull requests and, on request,
+ * after pushes to the branches the environments deploy from.
+ */
+export declare const CI_WORKFLOW_PATH = ".github/workflows/glirastes-tools.yml";
+/** Below the one-hour lifetime of the job key, so the ledger still arrives. */
+export declare const ENRICH_TIMEOUT_MINUTES = 50;
+export type PackageManager = 'bun' | 'pnpm' | 'yarn' | 'npm';
+export declare class CiWorkflowError extends Error {
+    readonly code: 'ci_provider_unsupported' | 'ci_workflow_exists' | 'ci_branch_invalid' | 'ci_environment_invalid';
+    constructor(code: 'ci_provider_unsupported' | 'ci_workflow_exists' | 'ci_branch_invalid' | 'ci_environment_invalid');
+}
+export declare function detectPackageManager(root: string): PackageManager;
+/**
+ * The environment branches the managed job also runs on after a push
+ * (`--enrich-on staging,main`; `--enrich-on-main` is `main`). There the bot
+ * never commits: it opens a pull request against that branch.
+ */
+export declare function enrichBranches(options: {
+    enrichOn?: readonly string[];
+    enrichOnMain?: boolean;
+}): string[];
+export declare function githubToolsWorkflow(options: {
+    packageManager: PackageManager;
+    enrichOnMain?: boolean;
+    enrichOn?: readonly string[];
+    /**
+     * The GitHub environment whose secrets and variables the managed job reads
+     * (`--ci-environment staging`), so a staging Platform's CI key never sits
+     * beside production's repository values. A job-level `if` cannot see
+     * environment variables, so every step checks GLIRASTES_MANAGED_TOOLS.
+     */
+    environment?: string;
+}): string;
+export declare function writeCiWorkflow(options: {
+    root: string;
+    provider: string;
+    enrichOnMain?: boolean;
+    enrichOn?: readonly string[];
+    environment?: string;
+    force?: boolean;
+}): Promise<{
+    path: string;
+    status: 'written' | 'unchanged' | 'replaced';
+}>;