neotoma 0.18.2 → 0.18.3

package/dist/cli/activate.d.ts

@@ -0,0 +1,72 @@
+/**
+ * `neotoma setup --activate` — context detection for activation.
+ *
+ * Promoted from install.md Phase 3 Step 0. Before preference selection,
+ * detect whether the install directory is developer-oriented, personal,
+ * or mixed, so the agent doesn't default to personal-file ingestion in
+ * a directory full of git repos.
+ *
+ * Returns a structured report. The CLI handler renders it as JSON for agents
+ * or a human-readable summary for interactive use, then asks the user to
+ * confirm/override the detected context.
+ */
+export type ContextKind = "developer" | "personal" | "mixed" | "unknown";
+export interface ActivationContextReport {
+    cwd: string;
+    /** Direct subdirectories that contain a `.git/` folder. */
+    git_repos: string[];
+    /** True when the install directory itself is a git repository. */
+    cwd_is_git_repo: boolean;
+    /** Personal-file signal folders that exist at the top level. */
+    personal_signals: string[];
+    /**
+     * Best-guess context kind from the scan. Agents SHOULD still confirm with
+     * the user; this is a suggestion, not a decision.
+     */
+    detected_context: ContextKind;
+    /**
+     * One-line human summary suitable for the surfacing block in install.md
+     * Phase 3 Step 0.
+     */
+    summary_line: string;
+    /**
+     * The exact question install.md Phase 3 Step 0 asks the user once the scan
+     * results have been surfaced.
+     */
+    followup_question: string;
+}
+/**
+ * Scan the given directory and return the structured context report.
+ * Pure function (modulo filesystem reads); no prompts, no writes.
+ */
+export declare function detectActivationContext(cwd: string): ActivationContextReport;
+export interface RunActivateOptions {
+    cwd?: string;
+    /**
+     * Override the detected context (used when the user has answered the
+     * followup question). When provided, the report's `detected_context`
+     * stays as the scan's best guess and the override appears as
+     * `confirmed_context`.
+     */
+    context?: ContextKind;
+}
+export interface ActivateReport extends ActivationContextReport {
+    /**
+     * User's confirmed answer when --context was passed. Null when the agent
+     * still needs to ask the followup question.
+     */
+    confirmed_context: ContextKind | null;
+    /**
+     * Branch the agent should take next, derived from `confirmed_context` or
+     * `detected_context`. null when context is `unknown` AND no override was
+     * supplied (the agent MUST ask the user).
+     */
+    next_branch: "personal_data_ingest" | "developer_repo_integration" | "mixed_developer_then_personal" | "ask_user" | null;
+}
+/**
+ * Run the activation context-detection step. Pure: no prompts, no writes.
+ * The CLI handler renders the report and asks the user the followup question
+ * when `next_branch === "ask_user"`.
+ */
+export declare function runActivate(options?: RunActivateOptions): ActivateReport;
+//# sourceMappingURL=activate.d.ts.map

package/dist/cli/activate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.d.ts","sourceRoot":"","sources":["../../src/cli/activate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,eAAe,EAAE,OAAO,CAAC;IACzB,gEAAgE;IAChE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;OAGG;IACH,gBAAgB,EAAE,WAAW,CAAC;IAC9B;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAuCD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,uBAAuB,CAyE5E;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,cAAe,SAAQ,uBAAuB;IAC7D;;;OAGG;IACH,iBAAiB,EAAE,WAAW,GAAG,IAAI,CAAC;IACtC;;;;OAIG;IACH,WAAW,EACP,sBAAsB,GACtB,4BAA4B,GAC5B,+BAA+B,GAC/B,UAAU,GACV,IAAI,CAAC;CACV;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,cAAc,CA+B5E"}

package/dist/cli/activate.js

@@ -0,0 +1,160 @@
+/**
+ * `neotoma setup --activate` — context detection for activation.
+ *
+ * Promoted from install.md Phase 3 Step 0. Before preference selection,
+ * detect whether the install directory is developer-oriented, personal,
+ * or mixed, so the agent doesn't default to personal-file ingestion in
+ * a directory full of git repos.
+ *
+ * Returns a structured report. The CLI handler renders it as JSON for agents
+ * or a human-readable summary for interactive use, then asks the user to
+ * confirm/override the detected context.
+ */
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Folder name patterns that lightly indicate a personal-data directory.
+ * Conservative list — false positives are worse than false negatives here
+ * because the agent always asks the user to confirm.
+ */
+const PERSONAL_SIGNAL_FOLDERS = [
+    "notes",
+    "contracts",
+    "invoices",
+    "transcripts",
+    "financial",
+    "clients",
+    "documents",
+    "journal",
+    "writing",
+    "personal",
+    "household",
+];
+function isDirectory(p) {
+    try {
+        return statSync(p).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+function listSubdirs(cwd) {
+    try {
+        return readdirSync(cwd, { withFileTypes: true })
+            .filter((d) => d.isDirectory() && !d.name.startsWith("."))
+            .map((d) => d.name);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Scan the given directory and return the structured context report.
+ * Pure function (modulo filesystem reads); no prompts, no writes.
+ */
+export function detectActivationContext(cwd) {
+    const cwdIsGitRepo = isDirectory(join(cwd, ".git"));
+    const subs = listSubdirs(cwd);
+    const gitRepos = [];
+    const personalSignals = [];
+    for (const name of subs) {
+        const sub = join(cwd, name);
+        if (isDirectory(join(sub, ".git"))) {
+            gitRepos.push(name);
+            continue;
+        }
+        if (PERSONAL_SIGNAL_FOLDERS.includes(name.toLowerCase())) {
+            personalSignals.push(name);
+        }
+    }
+    // Heuristic for the suggested context. The user always confirms.
+    // - Multiple git repos (2+) and no personal signals → developer.
+    // - One git repo + personal signals OR cwd_is_git_repo with no subs → mixed.
+    // - No git repos, has personal signals → personal.
+    // - Otherwise unknown (let the user decide).
+    let detected;
+    if (gitRepos.length >= 2 && personalSignals.length === 0) {
+        detected = "developer";
+    }
+    else if (gitRepos.length >= 1 && personalSignals.length >= 1) {
+        detected = "mixed";
+    }
+    else if (gitRepos.length >= 2 && personalSignals.length >= 1) {
+        detected = "mixed";
+    }
+    else if (gitRepos.length === 0 && personalSignals.length >= 1) {
+        detected = "personal";
+    }
+    else if (gitRepos.length === 1 && personalSignals.length === 0) {
+        // A single repo at the top level usually means the user is inside the repo
+        // (e.g. `neotoma setup --activate` run from a checkout), not a developer
+        // projects directory of many repos.
+        detected = cwdIsGitRepo ? "developer" : "unknown";
+    }
+    else if (cwdIsGitRepo) {
+        detected = "developer";
+    }
+    else {
+        detected = "unknown";
+    }
+    const repoSummary = gitRepos.length > 0
+        ? `${gitRepos.length} git ${gitRepos.length === 1 ? "repository" : "repositories"}: ${gitRepos.slice(0, 5).join(", ")}${gitRepos.length > 5 ? ", ..." : ""}`
+        : cwdIsGitRepo
+            ? "this directory is itself a git repository"
+            : "no git repositories";
+    const personalSummary = personalSignals.length > 0
+        ? `; personal-file signals: ${personalSignals.join(", ")}`
+        : "";
+    const summaryLine = `I see ${repoSummary}${personalSummary}.`;
+    const followupQuestion = [
+        "Is this primarily:",
+        "(a) a developer/projects directory (repos for code projects),",
+        "(b) a personal-data directory (notes, clients, documents),",
+        "(c) a mix?",
+    ].join("\n");
+    return {
+        cwd,
+        git_repos: gitRepos,
+        cwd_is_git_repo: cwdIsGitRepo,
+        personal_signals: personalSignals,
+        detected_context: detected,
+        summary_line: summaryLine,
+        followup_question: followupQuestion,
+    };
+}
+/**
+ * Run the activation context-detection step. Pure: no prompts, no writes.
+ * The CLI handler renders the report and asks the user the followup question
+ * when `next_branch === "ask_user"`.
+ */
+export function runActivate(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    if (!existsSync(cwd)) {
+        throw new Error(`runActivate: cwd does not exist: ${cwd}`);
+    }
+    const scan = detectActivationContext(cwd);
+    const confirmed = options.context ?? null;
+    const effective = confirmed ?? scan.detected_context;
+    let nextBranch;
+    switch (effective) {
+        case "personal":
+            nextBranch = "personal_data_ingest";
+            break;
+        case "developer":
+            nextBranch = "developer_repo_integration";
+            break;
+        case "mixed":
+            nextBranch = "mixed_developer_then_personal";
+            break;
+        case "unknown":
+        default:
+            nextBranch = confirmed ? null : "ask_user";
+            break;
+    }
+    return {
+        ...scan,
+        confirmed_context: confirmed,
+        next_branch: nextBranch,
+    };
+}
+//# sourceMappingURL=activate.js.map

package/dist/cli/activate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.js","sourceRoot":"","sources":["../../src/cli/activate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA6BjC;;;;GAIG;AACH,MAAM,uBAAuB,GAAG;IAC9B,OAAO;IACP,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;IACX,SAAS;IACT,WAAW;IACX,SAAS;IACT,SAAS;IACT,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACzD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,iEAAiE;IACjE,6EAA6E;IAC7E,mDAAmD;IACnD,6CAA6C;IAC7C,IAAI,QAAqB,CAAC;IAC1B,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,QAAQ,GAAG,WAAW,CAAC;IACzB,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/D,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC/D,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAChE,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,2EAA2E;QAC3E,yEAAyE;QACzE,oCAAoC;QACpC,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;SAAM,IAAI,YAAY,EAAE,CAAC;QACxB,QAAQ,GAAG,WAAW,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GACf,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,QAAQ,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5J,CAAC,CAAC,YAAY;YACZ,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,qBAAqB,CAAC;IAE9B,MAAM,eAAe,GACnB,eAAe,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC,4BAA4B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1D,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,WAAW,GAAG,SAAS,WAAW,GAAG,eAAe,GAAG,CAAC;IAE9D,MAAM,gBAAgB,GAAG;QACvB,oBAAoB;QACpB,+DAA+D;QAC/D,4DAA4D;QAC5D,YAAY;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,GAAG;QACH,SAAS,EAAE,QAAQ;QACnB,eAAe,EAAE,YAAY;QAC7B,gBAAgB,EAAE,eAAe;QACjC,gBAAgB,EAAE,QAAQ;QAC1B,YAAY,EAAE,WAAW;QACzB,iBAAiB,EAAE,gBAAgB;KACpC,CAAC;AACJ,CAAC;AAgCD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IAE1C,MAAM,SAAS,GAAG,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC;IACrD,IAAI,UAAyC,CAAC;IAC9C,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,UAAU;YACb,UAAU,GAAG,sBAAsB,CAAC;YACpC,MAAM;QACR,KAAK,WAAW;YACd,UAAU,GAAG,4BAA4B,CAAC;YAC1C,MAAM;QACR,KAAK,OAAO;YACV,UAAU,GAAG,+BAA+B,CAAC;YAC7C,MAAM;QACR,KAAK,SAAS,CAAC;QACf;YACE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAC3C,MAAM;IACV,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,iBAAiB,EAAE,SAAS;QAC5B,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC"}

package/dist/cli/auth_keygen.d.ts

@@ -0,0 +1,11 @@
+/**
+ * AAuth key provisioning: `neotoma auth keygen --aauth`
+ *
+ * Generates an EC P-256 key pair for AAuth agent identity signing.
+ * Writes the private JWK to `.creds/aauth_agent.private.jwk` and the
+ * public JWK to `.creds/aauth_agent.public.jwk`. Optionally uploads
+ * the public key to the issuer's JWKS endpoint.
+ */
+import type { Command } from "commander";
+export declare function registerAuthKeygenCommand(authCommand: Command): void;
+//# sourceMappingURL=auth_keygen.d.ts.map

package/dist/cli/auth_keygen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth_keygen.d.ts","sourceRoot":"","sources":["../../src/cli/auth_keygen.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+CzC,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,OAAO,GAAG,IAAI,CAgFpE"}

package/dist/cli/auth_keygen.js

@@ -0,0 +1,110 @@
+/**
+ * AAuth key provisioning: `neotoma auth keygen --aauth`
+ *
+ * Generates an EC P-256 key pair for AAuth agent identity signing.
+ * Writes the private JWK to `.creds/aauth_agent.private.jwk` and the
+ * public JWK to `.creds/aauth_agent.public.jwk`. Optionally uploads
+ * the public key to the issuer's JWKS endpoint.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import * as jose from "jose";
+function defaultOutputDir() {
+    return resolve(process.cwd(), ".creds");
+}
+async function generateKeyPair(kid) {
+    const { publicKey, privateKey } = await jose.generateKeyPair("ES256", {
+        extractable: true,
+    });
+    const privateJwk = await jose.exportJWK(privateKey);
+    const publicJwk = await jose.exportJWK(publicKey);
+    privateJwk.kid = kid;
+    privateJwk.alg = "ES256";
+    privateJwk.use = "sig";
+    publicJwk.kid = kid;
+    publicJwk.alg = "ES256";
+    publicJwk.use = "sig";
+    return { privateJwk, publicJwk };
+}
+function writeEnvHints(outputDir, sub, iss) {
+    const privatePath = resolve(outputDir, "aauth_agent.private.jwk");
+    const lines = [
+        `# AAuth agent identity (add to .env or export in shell)`,
+        `NEOTOMA_AAUTH_PRIVATE_JWK_PATH="${privatePath}"`,
+    ];
+    if (sub)
+        lines.push(`NEOTOMA_AAUTH_SUB="${sub}"`);
+    if (iss)
+        lines.push(`NEOTOMA_AAUTH_ISS="${iss}"`);
+    lines.push("");
+    const hintPath = resolve(outputDir, "aauth_env_hints.txt");
+    writeFileSync(hintPath, lines.join("\n"), "utf-8");
+    process.stderr.write(`  Env hints written to ${hintPath}\n`);
+}
+export function registerAuthKeygenCommand(authCommand) {
+    authCommand
+        .command("keygen")
+        .description("Generate AAuth key pair for agent identity signing")
+        .option("--aauth", "Generate AAuth keys (required flag for safety)")
+        .option("--output-dir <dir>", "Directory for key files (default: .creds/)")
+        .option("--kid <id>", "Key ID (default: auto-generated UUID)")
+        .option("--sub <subject>", "AAuth subject claim (e.g. cursor@you.com)")
+        .option("--iss <issuer>", "AAuth issuer claim (e.g. https://you.com)")
+        .option("--force", "Overwrite existing key files")
+        .action(async (opts) => {
+        if (!opts.aauth) {
+            process.stderr.write("Error: --aauth flag is required. This confirms you want to generate AAuth signing keys.\n" +
+                "Usage: neotoma auth keygen --aauth [--sub <subject>] [--iss <issuer>]\n");
+            process.exitCode = 1;
+            return;
+        }
+        const outputDir = opts.outputDir ?? defaultOutputDir();
+        const kid = opts.kid ?? randomUUID();
+        const privatePath = resolve(outputDir, "aauth_agent.private.jwk");
+        const publicPath = resolve(outputDir, "aauth_agent.public.jwk");
+        if (!opts.force && existsSync(privatePath)) {
+            process.stderr.write(`Error: Private key already exists at ${privatePath}\n` +
+                `Use --force to overwrite.\n`);
+            process.exitCode = 1;
+            return;
+        }
+        mkdirSync(outputDir, { recursive: true });
+        process.stderr.write("Generating EC P-256 key pair for AAuth...\n");
+        const { privateJwk, publicJwk } = await generateKeyPair(kid);
+        writeFileSync(privatePath, JSON.stringify(privateJwk, null, 2) + "\n", {
+            mode: 0o600,
+        });
+        writeFileSync(publicPath, JSON.stringify(publicJwk, null, 2) + "\n", {
+            mode: 0o644,
+        });
+        const thumbprint = await jose.calculateJwkThumbprint(publicJwk, "sha256");
+        process.stderr.write(`\nAAuth key pair generated:\n`);
+        process.stderr.write(`  Private: ${privatePath}\n`);
+        process.stderr.write(`  Public:  ${publicPath}\n`);
+        process.stderr.write(`  kid:     ${kid}\n`);
+        process.stderr.write(`  jkt:     ${thumbprint}\n`);
+        process.stderr.write(`  alg:     ES256 (EC P-256)\n\n`);
+        writeEnvHints(outputDir, opts.sub, opts.iss);
+        process.stderr.write(`\nNext steps:\n`);
+        process.stderr.write(`  1. Add the env vars from ${resolve(outputDir, "aauth_env_hints.txt")} to your .env\n`);
+        process.stderr.write(`  2. Publish ${publicPath} to your JWKS endpoint at <ISS>/.well-known/jwks.json\n`);
+        process.stderr.write(`  3. Run 'neotoma mcp proxy --aauth' to start the proxy with AAuth signing\n`);
+        if (!opts.sub || !opts.iss) {
+            process.stderr.write(`\n  Note: --sub and --iss were not provided. Set NEOTOMA_AAUTH_SUB and\n` +
+                `  NEOTOMA_AAUTH_ISS in your .env before using AAuth.\n`);
+        }
+        const gitignorePath = resolve(outputDir, ".gitignore");
+        if (!existsSync(gitignorePath)) {
+            writeFileSync(gitignorePath, "*.private.jwk\naauth_env_hints.txt\n");
+            process.stderr.write(`  .gitignore created in ${outputDir} to protect private keys\n`);
+        }
+        else {
+            const existing = readFileSync(gitignorePath, "utf-8");
+            if (!existing.includes("*.private.jwk")) {
+                writeFileSync(gitignorePath, existing.trimEnd() + "\n*.private.jwk\naauth_env_hints.txt\n");
+            }
+        }
+    });
+}
+//# sourceMappingURL=auth_keygen.js.map

package/dist/cli/auth_keygen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth_keygen.js","sourceRoot":"","sources":["../../src/cli/auth_keygen.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAW,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAW7B,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;QACpE,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAElD,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;IACrB,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC;IACzB,UAAU,CAAC,GAAG,GAAG,KAAK,CAAC;IAEvB,SAAS,CAAC,GAAG,GAAG,GAAG,CAAC;IACpB,SAAS,CAAC,GAAG,GAAG,OAAO,CAAC;IACxB,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC;IAEtB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,GAAuB,EAAE,GAAuB;IACxF,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG;QACZ,yDAAyD;QACzD,mCAAmC,WAAW,GAAG;KAClD,CAAC;IACF,IAAI,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC;IAClD,IAAI,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC3D,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,QAAQ,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAAoB;IAC5D,WAAW;SACR,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oDAAoD,CAAC;SACjE,MAAM,CAAC,SAAS,EAAE,gDAAgD,CAAC;SACnE,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;SAC1E,MAAM,CAAC,YAAY,EAAE,uCAAuC,CAAC;SAC7D,MAAM,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;SACtE,MAAM,CAAC,gBAAgB,EAAE,2CAA2C,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,8BAA8B,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,IAAmB,EAAE,EAAE;QACpC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2FAA2F;gBAC3F,yEAAyE,CAC1E,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QAErC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAEhE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,WAAW,IAAI;gBACvD,6BAA6B,CAC9B,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACpE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAE7D,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YACrE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YACnE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,WAAW,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,UAAU,IAAI,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,UAAU,IAAI,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAExD,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC/G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,UAAU,yDAAyD,CAAC,CAAC;QAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACrG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0EAA0E;gBAC1E,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/B,aAAa,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;YACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,SAAS,4BAA4B,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACxC,aAAa,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,wCAAwC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/packs.d.ts

@@ -0,0 +1,15 @@
+export type PacksOutputMode = "text" | "json";
+export declare function runPacksList(options?: {
+    mode?: PacksOutputMode;
+}): Promise<void>;
+export declare function runPacksInstall(slug: string, options?: {
+    mode?: PacksOutputMode;
+    userId?: string;
+}): Promise<void>;
+export declare function runPacksUninstall(slug: string, options?: {
+    mode?: PacksOutputMode;
+}): Promise<void>;
+export declare function runPacksStatus(slug: string | undefined, options?: {
+    mode?: PacksOutputMode;
+}): Promise<void>;
+//# sourceMappingURL=packs.d.ts.map

package/dist/cli/packs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packs.d.ts","sourceRoot":"","sources":["../../src/cli/packs.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AA8B9C,wBAAsB,YAAY,CAChC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAA;CAAO,GACvC,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAA;CAAO,GACvC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,eAAe,CAAA;CAAO,GACvC,OAAO,CAAC,IAAI,CAAC,CAyEf"}

package/dist/cli/packs.js

@@ -0,0 +1,156 @@
+/**
+ * `neotoma packs` subcommand: list, install, uninstall, and inspect status of
+ * vertical packs.
+ */
+import { installVerticalPack, uninstallVerticalPack, getInstalledPacks, isVerticalPackInstalled, listPacksWithStatus, readManifest, } from "../services/verticals/install.js";
+import { resolveVerticalPack, VERTICAL_PACKS, } from "../services/verticals/registry.js";
+function describePack(pack, installed, installed_at) {
+    return {
+        slug: pack.slug,
+        label: pack.label,
+        installed,
+        installed_at,
+        has_schema_manifest: Boolean(pack.schema_manifest_path),
+        has_sandbox_manifest: Boolean(pack.sandbox_manifest_path),
+        meta_fallback: pack.meta_fallback,
+        entity_examples: [...pack.entityExamples],
+    };
+}
+export async function runPacksList(options = {}) {
+    const mode = options.mode ?? "text";
+    const status = listPacksWithStatus();
+    const rows = status.map((entry) => describePack(entry.pack, entry.installed, entry.installed_at));
+    if (mode === "json") {
+        process.stdout.write(JSON.stringify({ packs: rows }, null, 2) + "\n");
+        return;
+    }
+    process.stdout.write(`Available vertical packs (${rows.length}):\n\n`);
+    for (const row of rows) {
+        const flags = [];
+        if (row.installed)
+            flags.push("installed");
+        if (row.has_schema_manifest)
+            flags.push("schema");
+        if (row.has_sandbox_manifest)
+            flags.push("sandbox");
+        if (row.meta_fallback)
+            flags.push("meta-fallback");
+        const flagStr = flags.length ? `  [${flags.join(", ")}]` : "";
+        process.stdout.write(`  - ${row.slug.padEnd(22)} ${row.label}${flagStr}\n`);
+    }
+    process.stdout.write("\n");
+    process.stdout.write("Run 'neotoma packs install <slug>' to install a pack's schemas.\n");
+}
+export async function runPacksInstall(slug, options = {}) {
+    const mode = options.mode ?? "text";
+    const pack = resolveVerticalPack(slug);
+    if (!pack.schema_manifest_path) {
+        if (mode === "json") {
+            process.stdout.write(JSON.stringify({ ok: true, slug: pack.slug, note: "no schema manifest; nothing to install" }, null, 2) + "\n");
+        }
+        else {
+            process.stdout.write(`Pack '${pack.slug}' has no schema manifest yet; nothing to install.\n`);
+        }
+        return;
+    }
+    const result = await installVerticalPack(pack.slug, {
+        user_id: options.userId,
+    });
+    if (mode === "json") {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+        return;
+    }
+    process.stdout.write(`Installed pack '${pack.slug}'\n`);
+    if (result.installed.length) {
+        process.stdout.write(`  Newly registered: ${result.installed.map((s) => s.entity_type).join(", ")}\n`);
+    }
+    if (result.upgraded.length) {
+        process.stdout.write(`  Upgraded:          ${result.upgraded.map((s) => s.entity_type).join(", ")}\n`);
+    }
+    if (result.skipped.length) {
+        process.stdout.write(`  Skipped:\n`);
+        for (const item of result.skipped) {
+            process.stdout.write(`    - ${item.entity_type}: ${item.reason}\n`);
+        }
+    }
+}
+export async function runPacksUninstall(slug, options = {}) {
+    const mode = options.mode ?? "text";
+    const result = await uninstallVerticalPack(slug);
+    if (mode === "json") {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+        return;
+    }
+    if (!result.removed_record) {
+        process.stdout.write(`Pack '${slug}' is not currently installed.\n`);
+        return;
+    }
+    process.stdout.write(`Removed install record for '${result.slug}'. Schemas retained: ${result.retained_schemas.join(", ")}\n`);
+}
+export async function runPacksStatus(slug, options = {}) {
+    const mode = options.mode ?? "text";
+    if (slug) {
+        const pack = resolveVerticalPack(slug);
+        const installed = isVerticalPackInstalled(pack.slug);
+        const records = getInstalledPacks();
+        const record = records.find((r) => r.slug === pack.slug);
+        let manifestPreview = [];
+        if (pack.schema_manifest_path) {
+            try {
+                const manifest = readManifest(pack);
+                manifestPreview = manifest.schemas.map((s) => ({
+                    entity_type: s.entity_type,
+                    schema_version: s.schema_version,
+                }));
+            }
+            catch {
+                // ignore — surfaced separately if needed
+            }
+        }
+        const payload = {
+            slug: pack.slug,
+            label: pack.label,
+            installed,
+            installed_at: record?.installed_at,
+            manifest_schemas: manifestPreview,
+            installed_schemas: record?.schemas ?? [],
+        };
+        if (mode === "json") {
+            process.stdout.write(JSON.stringify(payload, null, 2) + "\n");
+            return;
+        }
+        process.stdout.write(`Pack: ${pack.slug} (${pack.label})\n`);
+        process.stdout.write(`  Installed: ${installed ? "yes" : "no"}\n`);
+        if (record?.installed_at) {
+            process.stdout.write(`  Installed at: ${record.installed_at}\n`);
+        }
+        if (manifestPreview.length) {
+            process.stdout.write(`  Manifest declares:\n`);
+            for (const s of manifestPreview) {
+                process.stdout.write(`    - ${s.entity_type}@${s.schema_version}\n`);
+            }
+        }
+        return;
+    }
+    const installed = getInstalledPacks();
+    const known = new Set(VERTICAL_PACKS.map((p) => p.slug));
+    if (mode === "json") {
+        process.stdout.write(JSON.stringify({
+            installed_count: installed.length,
+            installed,
+            unknown: installed
+                .filter((r) => !known.has(r.slug))
+                .map((r) => r.slug),
+        }, null, 2) + "\n");
+        return;
+    }
+    if (!installed.length) {
+        process.stdout.write("No vertical packs are currently installed.\n");
+        return;
+    }
+    process.stdout.write(`Installed packs (${installed.length}):\n`);
+    for (const record of installed) {
+        process.stdout.write(`  - ${record.slug} (${record.schemas.length} schemas) — ${record.installed_at}\n`);
+    }
+}
+//# sourceMappingURL=packs.js.map

package/dist/cli/packs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packs.js","sourceRoot":"","sources":["../../src/cli/packs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,GACb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,mCAAmC,CAAC;AAe3C,SAAS,YAAY,CACnB,IAAkB,EAClB,SAAkB,EAClB,YAAqB;IAErB,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS;QACT,YAAY;QACZ,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACvD,oBAAoB,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC;QACzD,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAChC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAC9D,CAAC;IAEF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,mBAAmB;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,oBAAoB;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mEAAmE,CACpE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,UAAuD,EAAE;IAEzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,wCAAwC,EAAE,EAC7E,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS,IAAI,CAAC,IAAI,qDAAqD,CACxE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE;QAClD,OAAO,EAAE,OAAO,CAAC,MAAM;KACxB,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,iCAAiC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,MAAM,CAAC,IAAI,wBAAwB,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,UAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,eAAe,GAAsD,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBACpC,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7C,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;iBACjC,CAAC,CAAC,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS;YACT,YAAY,EAAE,MAAM,EAAE,YAAY;YAClC,gBAAgB,EAAE,eAAe;YACjC,iBAAiB,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE;SACzC,CAAC;QACF,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnE,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC/C,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;gBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;YACE,eAAe,EAAE,SAAS,CAAC,MAAM;YACjC,SAAS;YACT,OAAO,EAAE,SAAS;iBACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACtB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,SAAS,CAAC,MAAM,MAAM,CAAC,CAAC;IACjE,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,eAAe,MAAM,CAAC,YAAY,IAAI,CACnF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/triage.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Implementation of the `neotoma triage` subcommands for the agent-feedback
+ * pipeline. Registered in `src/cli/index.ts` with:
+ *
+ *   neotoma triage                  # run one ingest pass
+ *   neotoma triage --watch          # continuous ingest loop
+ *   neotoma triage --list-pending   # dump pending items (use --json for machine-readable)
+ *   neotoma triage --set-status ... # update a feedback's status + resolution_links
+ *   neotoma triage --resolve ...    # shorthand for marking resolved with a commit/PR
+ *   neotoma triage --health         # classification accuracy summary
+ *
+ * Transport follows `NEOTOMA_FEEDBACK_TRANSPORT` / `AGENT_SITE_BASE_URL`.
+ */
+export interface TriageOptions {
+    watch?: boolean;
+    remote?: boolean;
+    listPending?: boolean;
+    json?: boolean;
+    health?: boolean;
+    setStatus?: string;
+    feedbackId?: string;
+    classification?: string;
+    triageNotes?: string;
+    issueUrl?: string;
+    prUrl?: string;
+    commitSha?: string;
+    resolve?: string;
+    buildGuidanceFromRelease?: string;
+    dryRun?: boolean;
+    mirrorReplay?: string;
+}
+export declare function runTriage(opts: TriageOptions): Promise<void>;
+//# sourceMappingURL=triage.d.ts.map

package/dist/cli/triage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../src/cli/triage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAgOD,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBlE"}