opensip-cli 0.1.0

package/dist/commands/tools/validate.js

@@ -0,0 +1,202 @@
+/**
+ * `tools validate` — user-invocable tool conformance (ADR-0041).
+ *
+ * The SAME admission pipeline bootstrap runs (`admitToolPackage` — one
+ * validator, four consumers), rendered as a sectioned report, plus the
+ * Tier A storage-contract scan (ADR-0042) and the config-contract checks.
+ *
+ * EXECUTION MODEL (the trust posture, stated plainly): validating a package
+ * is trusting it to execute — the runtime sections import the candidate's
+ * module. Mitigations, not promises: staging installs run npm with
+ * `--ignore-scripts` (install-time hooks never fire), and the module import
+ * happens in a child-process probe with a hard timeout (a crash boundary,
+ * NOT a security boundary).
+ *
+ * Staging: an npm/tarball spec installs into a TEMP host dir (removed in
+ * `finally`); a local directory path validates IN PLACE by default, or via a
+ * temp-host install with `--install-deps` (which also resolves the package's
+ * dependencies so the runtime sections can load it).
+ */
+import { existsSync, mkdtempSync, rmSync, statSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { isAbsolute, join, resolve } from 'node:path';
+import { admitToolPackage } from '../../bootstrap/admit-tool-package.js';
+import { ensureHostDir } from '../plugin/host-dir.js';
+import { npmInstallIntoHost } from '../plugin-host-ops.js';
+import { runRuntimeProbe } from './runtime-probe.js';
+import { runStorageContractChecks } from './storage-contract-checks.js';
+/** The one-line execution notice printed before any candidate code can run. */
+export const VALIDATE_EXECUTION_NOTICE = 'opensip: validating runs the package’s module (untrusted code; ' +
+    'install scripts stay blocked, the import runs in a sandboxed-by-timeout ' +
+    'child process — a crash boundary, not a security boundary).\n';
+const NOOP_CLEANUP = () => {
+    /* in-place candidates own their dir; nothing was staged */
+};
+/** True when `spec` points at an existing local directory. */
+function isLocalDirSpec(spec, cwd) {
+    const candidate = isAbsolute(spec) ? spec : resolve(cwd, spec);
+    return existsSync(candidate) && statSync(candidate).isDirectory();
+}
+/**
+ * Stage the candidate. npm/tarball specs (and `--install-deps` paths) install
+ * into a fresh temp host with `--ignore-scripts`; bare local dirs stage in
+ * place (zero side effects).
+ */
+function stageCandidate(opts) {
+    const localDir = isLocalDirSpec(opts.spec, opts.cwd);
+    if (localDir && opts.installDeps !== true) {
+        const pkgDir = isAbsolute(opts.spec) ? opts.spec : resolve(opts.cwd, opts.spec);
+        return { pkgDir, cleanup: NOOP_CLEANUP, stagedByInstall: false };
+    }
+    const tempHost = mkdtempSync(join(tmpdir(), 'ost-tools-validate-'));
+    const cleanup = () => rmSync(tempHost, { recursive: true, force: true });
+    ensureHostDir(tempHost, 'tool');
+    const spec = localDir && !isAbsolute(opts.spec) ? resolve(opts.cwd, opts.spec) : opts.spec;
+    const outcome = npmInstallIntoHost(tempHost, spec);
+    if (!outcome.ok) {
+        return { pkgDir: '', cleanup, stagedByInstall: true, stagingError: outcome.error };
+    }
+    return {
+        pkgDir: join(tempHost, 'node_modules', outcome.installedName),
+        cleanup,
+        stagedByInstall: true,
+    };
+}
+function section(name, status, diagnostics = []) {
+    return { name, status, diagnostics };
+}
+function storageSections(findings) {
+    const isBoundary = (f) => f.clause.includes('imports') || f.clause.includes('runners');
+    const fmt = (f) => `${f.file}:${f.line} — ${f.clause}`;
+    const boundaries = findings.filter((f) => isBoundary(f));
+    const storage = findings.filter((f) => !isBoundary(f));
+    return [
+        section('storage-contract', storage.length === 0 ? 'passed' : 'failed', storage.map(fmt)),
+        section('import-boundaries', boundaries.length === 0 ? 'passed' : 'failed', boundaries.map(fmt)),
+    ];
+}
+/** Map one admission section result to a report section. */
+function fromAdmission(s) {
+    return section(s.section, s.ok ? 'passed' : 'failed', s.diagnostic ? [s.diagnostic] : []);
+}
+/**
+ * True when a FAILED probe over an IN-PLACE candidate failed on the
+ * candidate's own unresolved dependencies (expected without `--install-deps`).
+ * A probe-INFRA failure ("runtime probe crashed/timed out/…") must never
+ * classify as a candidate missing-dep, even when the child's stderr mentions
+ * an unresolved module.
+ */
+function isExpectedMissingDep(probe, stagedByInstall) {
+    if (probe.ok || stagedByInstall)
+        return false;
+    return probe.sections.some((s) => s.diagnostic !== undefined &&
+        !s.diagnostic.startsWith('runtime probe') &&
+        /cannot find (module|package)/i.test(s.diagnostic));
+}
+/** The three runtime sections marked skipped (in-place, deps not installed). */
+function skippedRuntimeSections() {
+    return [
+        section('runtime-load', 'skipped', [
+            'dependencies not installed — rerun with --install-deps to verify the runtime sections',
+        ]),
+        section('tool-shape', 'skipped'),
+        section('manifest-runtime-coherence', 'skipped'),
+    ];
+}
+/**
+ * Config contract (spec + ADR-0043 family): a manifest that declares config
+ * needs a runtime `Tool.config`; a runtime namespace must equal the tool id.
+ */
+function configContractSection(manifestDeclaresConfig, toolConfigNamespace, toolId) {
+    const diagnostics = [];
+    if (manifestDeclaresConfig && toolConfigNamespace === null) {
+        diagnostics.push('manifest declares config but the runtime Tool.config contribution is missing');
+    }
+    if (toolConfigNamespace !== null && toolConfigNamespace !== toolId) {
+        diagnostics.push(`Tool.config.namespace '${toolConfigNamespace}' does not match the tool id '${toolId ?? ''}'`);
+    }
+    return section('config-contract', diagnostics.length === 0 ? 'passed' : 'failed', diagnostics);
+}
+/** The runtime-probe + config-contract leg. Mutates nothing; returns its sections. */
+function runtimeSectionsFor(staged, manifestDeclaresConfig, manifestToolId) {
+    const probe = runRuntimeProbe(staged.pkgDir);
+    if (isExpectedMissingDep(probe, staged.stagedByInstall)) {
+        return { sections: skippedRuntimeSections(), toolId: manifestToolId, incomplete: true };
+    }
+    const sections = probe.sections
+        .filter((s) => s.section !== 'manifest' && s.section !== 'compatibility')
+        .map((s) => fromAdmission(s));
+    let toolId = manifestToolId;
+    if (probe.ok) {
+        if (probe.toolId !== null)
+            toolId = probe.toolId;
+        sections.push(configContractSection(manifestDeclaresConfig, probe.toolConfigNamespace, toolId));
+    }
+    return { sections, toolId, incomplete: false };
+}
+function verdictFor(sections, incomplete) {
+    if (sections.some((s) => s.status === 'failed'))
+        return 'failed';
+    if (incomplete)
+        return 'incomplete';
+    return 'passed';
+}
+/**
+ * Run every validation section against one candidate spec. Shared by
+ * `tools validate` (renders it) and `tools install` (gates activation on it).
+ * `keepStaged` hands ownership of the staged dir to the caller (install
+ * activates from the validated bytes — never a re-download).
+ */
+export async function runToolValidation(opts, { keepStaged = false } = {}) {
+    process.stderr.write(VALIDATE_EXECUTION_NOTICE);
+    const staged = stageCandidate(opts);
+    try {
+        if (staged.stagingError !== undefined) {
+            return {
+                result: {
+                    type: 'tools-validate',
+                    spec: opts.spec,
+                    verdict: 'failed',
+                    sections: [section('staging', 'failed', [staged.stagingError])],
+                },
+                cleanup: NOOP_CLEANUP,
+            };
+        }
+        // Static admission sections (manifest + compatibility) — in-process, no
+        // candidate code runs.
+        const staticReport = await admitToolPackage({
+            dir: staged.pkgDir,
+            source: 'installed',
+            explicitlyRequested: true,
+            staticOnly: true,
+        });
+        const sections = staticReport.sections.map((s) => fromAdmission(s));
+        let toolId = staticReport.manifest?.id;
+        let incomplete = false;
+        if (staticReport.ok) {
+            // Runtime sections — child-process probe (untrusted code executes there).
+            const runtime = runtimeSectionsFor(staged, staticReport.manifest?.config !== undefined, toolId);
+            sections.push(...runtime.sections);
+            toolId = runtime.toolId;
+            incomplete = runtime.incomplete;
+        }
+        // Tier A storage contract (ADR-0042) — pure file scan, always runs.
+        sections.push(...storageSections(runStorageContractChecks(staged.pkgDir)));
+        return {
+            result: {
+                type: 'tools-validate',
+                spec: opts.spec,
+                ...(toolId === undefined ? {} : { toolId }),
+                verdict: verdictFor(sections, incomplete),
+                sections,
+            },
+            ...(keepStaged && staged.stagedByInstall ? { stagedPkgDir: staged.pkgDir } : {}),
+            cleanup: keepStaged ? staged.cleanup : NOOP_CLEANUP,
+        };
+    }
+    finally {
+        if (!keepStaged)
+            staged.cleanup();
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/commands/tools/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/commands/tools/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAuB,MAAM,8BAA8B,CAAC;AAI7F,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GACpC,iEAAiE;IACjE,0EAA0E;IAC1E,+DAA+D,CAAC;AAoBlE,MAAM,YAAY,GAAG,GAAS,EAAE;IAC9B,2DAA2D;AAC7D,CAAC,CAAC;AAEF,8DAA8D;AAC9D,SAAS,cAAc,CAAC,IAAY,EAAE,GAAW;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAA2B;IACjD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3F,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC;QAC7D,OAAO;QACP,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,IAAY,EACZ,MAAsC,EACtC,cAAiC,EAAE;IAEnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,QAAmC;IAC1D,MAAM,UAAU,GAAG,CAAC,CAAiB,EAAW,EAAE,CAChD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,CAAC,CAAiB,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzF,OAAO,CACL,mBAAmB,EACnB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAC7C,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CACpB;KACF,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,SAAS,aAAa,CAAC,CAItB;IACC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,KAAyC,EACzC,eAAwB;IAExB,IAAI,KAAK,CAAC,EAAE,IAAI,eAAe;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,KAAK,SAAS;QAC1B,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC;QACzC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,sBAAsB;IAC7B,OAAO;QACL,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE;YACjC,uFAAuF;SACxF,CAAC;QACF,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC;QAChC,OAAO,CAAC,4BAA4B,EAAE,SAAS,CAAC;KACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,sBAA+B,EAC/B,mBAAkC,EAClC,MAA0B;IAE1B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,sBAAsB,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;QAC3D,WAAW,CAAC,IAAI,CACd,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,KAAK,IAAI,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;QACnE,WAAW,CAAC,IAAI,CACd,0BAA0B,mBAAmB,iCAAiC,MAAM,IAAI,EAAE,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACjG,CAAC;AAED,sFAAsF;AACtF,SAAS,kBAAkB,CACzB,MAAuB,EACvB,sBAA+B,EAC/B,cAAkC;IAElC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,eAAe,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,MAAM,GAAG,cAAc,CAAC;IAC5B,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,EAAE,KAAK,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CACjB,QAAyC,EACzC,UAAmB;IAEnB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjE,IAAI,UAAU;QAAE,OAAO,YAAY,CAAC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAA2B,EAC3B,EAAE,UAAU,GAAG,KAAK,KAA+B,EAAE;IAErD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO;gBACL,MAAM,EAAE;oBACN,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;iBAChE;gBACD,OAAO,EAAE,YAAY;aACtB,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,uBAAuB;QACvB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC;YAC1C,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,MAAM,EAAE,WAAW;YACnB,mBAAmB,EAAE,IAAI;YACzB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,QAAQ,GAA2B,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5F,IAAI,MAAM,GAAuB,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3D,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,0EAA0E;YAC1E,MAAM,OAAO,GAAG,kBAAkB,CAChC,MAAM,EACN,YAAY,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAC3C,MAAM,CACP,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAClC,CAAC;QAED,oEAAoE;QACpE,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAE3E,OAAO;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC3C,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;gBACzC,QAAQ;aACT;YACD,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;SACpD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/commands/uninstall/targets.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @fileoverview Uninstall target collection + display formatting.
+ *
+ * Extracted from `commands/uninstall.ts` so the executor there stays
+ * focused on the user/project mode dispatch and removal flow. Owns:
+ *
+ *  - The `Target` / `TargetBucket` types
+ *  - `collectTargets` (user mode + project mode bucketing)
+ *  - The pre-prompt print helpers (`printUserModeTargets`,
+ *    `printProjectDefault`, `printProjectPurge`) and supporting
+ *    formatters (`formatSize`, `formatKeepLine`).
+ */
+/**
+ * Bucket classification per target:
+ *  - 'runtime'      — opensip-cli/.runtime/. Rebuildable. Removed by default.
+ *  - 'user-content' — anything else under opensip-cli/. User-authored.
+ *                     Preserved unless --purge.
+ *  - 'config'       — opensip-cli.config.yml. Preserved unless --purge.
+ *  - 'user-level'   — ~/.opensip-cli/ in user mode.
+ */
+type TargetBucket = 'runtime' | 'user-content' | 'config' | 'user-level';
+/** Discrete target to remove (a file or a directory). */
+export interface Target {
+    readonly path: string;
+    readonly kind: 'file' | 'dir';
+    readonly sizeBytes: number;
+    readonly bucket: TargetBucket;
+    /** For user-content children: human label (e.g. 'fit/checks', 'notes'). */
+    readonly displayLabel?: string;
+    /** For user-content child directories: count of files inside (recursive). */
+    readonly fileCount?: number;
+}
+export type UninstallMode = 'user' | 'project';
+/**
+ * Build the bucketed list of targets that currently exist for the given mode.
+ *
+ * Project mode:
+ *  - .runtime/                      → bucket 'runtime'
+ *  - everything else under opensip-cli/ (per top-level entry)
+ *                                   → bucket 'user-content' (one entry each)
+ *  - opensip-cli.config.yml       → bucket 'config'
+ *
+ * The user-content invariant is "everything under opensip-cli/ minus
+ * .runtime/" — NOT an enumeration of known subdirs like fit/ + sim/.
+ * Future tools and user-created folders (e.g. opensip-cli/notes/) are
+ * preserved automatically.
+ */
+export declare function collectTargets(mode: UninstallMode, userRoot: string, projectDir: string): Target[];
+export declare function printUserModeTargets(write: (s: string) => void, targets: readonly Target[]): void;
+export declare function printProjectDefault(write: (s: string) => void, toDelete: readonly Target[], toKeep: readonly Target[], projectRoot: string): void;
+export declare function printProjectPurge(write: (s: string) => void, toDelete: readonly Target[], projectRoot: string): void;
+export {};
+//# sourceMappingURL=targets.d.ts.map

package/dist/commands/uninstall/targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../src/commands/uninstall/targets.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;GAWG;AAOH;;;;;;;GAOG;AACH,KAAK,YAAY,GAAG,SAAS,GAAG,cAAc,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEzE,yDAAyD;AACzD,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,CAAC;AA+C/C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,EAAE,CAMV;AAyED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAQjG;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAC1B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,WAAW,EAAE,MAAM,GAClB,IAAI,CAsBN;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAC1B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CASN"}

package/dist/commands/uninstall/targets.js

@@ -0,0 +1,205 @@
+// @fitness-ignore-file error-handling-quality -- file/dir walks for uninstall planning: missing/unreadable entries (TOCTOU vanish between readdir+stat, permission-denied subdirs) are the expected non-terminal signal to skip; failure-IS-the-signal is the contract in each catch.
+/**
+ * @fileoverview Uninstall target collection + display formatting.
+ *
+ * Extracted from `commands/uninstall.ts` so the executor there stays
+ * focused on the user/project mode dispatch and removal flow. Owns:
+ *
+ *  - The `Target` / `TargetBucket` types
+ *  - `collectTargets` (user mode + project mode bucketing)
+ *  - The pre-prompt print helpers (`printUserModeTargets`,
+ *    `printProjectDefault`, `printProjectPurge`) and supporting
+ *    formatters (`formatSize`, `formatKeepLine`).
+ */
+import { existsSync, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { resolveProjectPaths } from '@opensip-cli/core';
+/** Recursively tally size of a directory. */
+function dirSize(path) {
+    let total = 0;
+    const entries = readdirSync(path, { withFileTypes: true });
+    for (const e of entries) {
+        const p = join(path, e.name);
+        try {
+            if (e.isDirectory()) {
+                total += dirSize(p);
+            }
+            else if (e.isFile()) {
+                total += statSync(p).size;
+            }
+        }
+        catch {
+            // File vanished between readdir + stat; ignore.
+        }
+    }
+    return total;
+}
+function formatSize(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    if (bytes < 1024 * 1024 * 1024)
+        return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
+    return `${(bytes / 1024 / 1024 / 1024).toFixed(2)} GB`;
+}
+/** Count files recursively under a directory; best-effort (unreadable subdirs skipped). */
+function countFilesRecursive(dir) {
+    let count = 0;
+    const walk = (d) => {
+        try {
+            const entries = readdirSync(d, { withFileTypes: true });
+            for (const e of entries) {
+                const p = join(d, e.name);
+                if (e.isDirectory())
+                    walk(p);
+                else if (e.isFile())
+                    count++;
+            }
+        }
+        catch {
+            /* unreadable subdir — best-effort */
+        }
+    };
+    walk(dir);
+    return count;
+}
+/**
+ * Build the bucketed list of targets that currently exist for the given mode.
+ *
+ * Project mode:
+ *  - .runtime/                      → bucket 'runtime'
+ *  - everything else under opensip-cli/ (per top-level entry)
+ *                                   → bucket 'user-content' (one entry each)
+ *  - opensip-cli.config.yml       → bucket 'config'
+ *
+ * The user-content invariant is "everything under opensip-cli/ minus
+ * .runtime/" — NOT an enumeration of known subdirs like fit/ + sim/.
+ * Future tools and user-created folders (e.g. opensip-cli/notes/) are
+ * preserved automatically.
+ */
+export function collectTargets(mode, userRoot, projectDir) {
+    if (mode === 'user') {
+        if (!existsSync(userRoot))
+            return [];
+        return [{ path: userRoot, kind: 'dir', sizeBytes: dirSize(userRoot), bucket: 'user-level' }];
+    }
+    return collectProjectTargets(projectDir);
+}
+function collectProjectTargets(projectDir) {
+    const paths = resolveProjectPaths(projectDir);
+    const targets = [];
+    if (existsSync(paths.runtimeDir)) {
+        targets.push({
+            path: paths.runtimeDir,
+            kind: 'dir',
+            sizeBytes: dirSize(paths.runtimeDir),
+            bucket: 'runtime',
+        });
+    }
+    if (existsSync(paths.userSourceDir)) {
+        targets.push(...collectUserContentTargets(paths.userSourceDir));
+    }
+    if (existsSync(paths.configFile)) {
+        targets.push({
+            path: paths.configFile,
+            kind: 'file',
+            sizeBytes: statSync(paths.configFile).size,
+            bucket: 'config',
+        });
+    }
+    return targets;
+}
+/**
+ * Enumerate every top-level entry under opensip-cli/ EXCEPT .runtime/.
+ * Enumeration is for display; the invariant is "not .runtime/".
+ */
+function collectUserContentTargets(userSourceDir) {
+    const out = [];
+    let entries;
+    try {
+        entries = readdirSync(userSourceDir, { withFileTypes: true });
+    }
+    catch {
+        return out;
+    }
+    for (const entry of entries) {
+        if (entry.name === '.runtime')
+            continue;
+        const p = join(userSourceDir, entry.name);
+        const isDir = entry.isDirectory();
+        let sizeBytes = 0;
+        try {
+            sizeBytes = isDir ? dirSize(p) : statSync(p).size;
+        }
+        catch {
+            /* skip unreadable */
+        }
+        out.push({
+            path: p,
+            kind: isDir ? 'dir' : 'file',
+            sizeBytes,
+            bucket: 'user-content',
+            displayLabel: entry.name,
+            fileCount: isDir ? countFilesRecursive(p) : undefined,
+        });
+    }
+    return out;
+}
+function formatKeepLine(t) {
+    if (t.bucket === 'config')
+        return 'opensip-cli.config.yml';
+    if (t.displayLabel === undefined)
+        return t.path;
+    const slash = t.kind === 'dir' ? '/' : '';
+    let inner = '';
+    if (t.fileCount !== undefined) {
+        const plural = t.fileCount === 1 ? '' : 's';
+        inner = ` (${t.fileCount} file${plural})`;
+    }
+    return `opensip-cli/${t.displayLabel}${slash}${inner}`;
+}
+export function printUserModeTargets(write, targets) {
+    const totalSize = targets.reduce((sum, t) => sum + t.sizeBytes, 0);
+    write('\n');
+    write(`About to remove user-level state (${formatSize(totalSize)}):\n`);
+    for (const t of targets) {
+        write(`  - ${t.path}${t.kind === 'dir' ? '/' : ''} (${formatSize(t.sizeBytes)})\n`);
+    }
+    write('\n');
+}
+export function printProjectDefault(write, toDelete, toKeep, projectRoot) {
+    write('\n');
+    write(`Project: ${projectRoot}\n\n`);
+    if (toDelete.length === 0) {
+        write('Nothing to remove — runtime state is already absent.\n\n');
+    }
+    else {
+        write('This will remove (rebuildable runtime state only):\n');
+        for (const t of toDelete) {
+            write(`  - ${t.path}${t.kind === 'dir' ? '/' : ''}  (${formatSize(t.sizeBytes)})\n`);
+            if (t.bucket === 'runtime') {
+                write('    sessions database, cache, logs, baselines\n');
+            }
+        }
+        write('\n');
+    }
+    if (toKeep.length > 0) {
+        write('These will be KEPT (your authored content):\n');
+        for (const t of toKeep) {
+            write(`  ✓ ${formatKeepLine(t)}\n`);
+        }
+        write('\n  To also remove your authored content, re-run with --purge.\n\n');
+    }
+}
+export function printProjectPurge(write, toDelete, projectRoot) {
+    write('\n');
+    write(`Project: ${projectRoot}\n\n`);
+    write('⚠ This removes EVERYTHING, including your authored content:\n\n');
+    for (const t of toDelete) {
+        write(`  - ${t.path}${t.kind === 'dir' ? '/' : ''}  (${formatSize(t.sizeBytes)})\n`);
+    }
+    write('\n  ⚠ If your custom checks are not committed to git, you will\n');
+    write('    lose them. We recommend running `git status` first.\n\n');
+}
+//# sourceMappingURL=targets.js.map

package/dist/commands/uninstall/targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.js","sourceRoot":"","sources":["../../../src/commands/uninstall/targets.ts"],"names":[],"mappings":"AAAA,sRAAsR;AACtR;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAe,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AA0BxD,6CAA6C;AAC7C,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAChF,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AAED,2FAA2F;AAC3F,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC1B,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,CAAC,CAAC,CAAC;qBACxB,IAAI,CAAC,CAAC,MAAM,EAAE;oBAAE,KAAK,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAmB,EACnB,QAAgB,EAChB,UAAkB;IAElB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;YACpC,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI;YAC1C,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,aAAqB;IACtD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YAC5B,SAAS;YACT,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,wBAAwB,CAAC;IAC3D,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5C,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,QAAQ,MAAM,GAAG,CAAC;IAC5C,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,YAAY,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA0B,EAAE,OAA0B;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,CAAC,qCAAqC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAA0B,EAC1B,QAA2B,EAC3B,MAAyB,EACzB,WAAmB;IAEnB,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,CAAC,YAAY,WAAW,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAA0B,EAC1B,QAA2B,EAC3B,WAAmB;IAEnB,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,CAAC,YAAY,WAAW,MAAM,CAAC,CAAC;IACrC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC1E,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACvE,CAAC"}

package/dist/commands/uninstall.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @fileoverview `opensip uninstall` — remove opensip-cli state
+ * from a user account and/or project.
+ *
+ * Two modes:
+ *
+ *  • Default (no flag) — remove the user-level directory
+ *    `~/.opensip-cli/`. Contract: this dir holds `config.yml` only
+ *    (cloud API key + per-user defaults). Persistence and logging code
+ *    throws if asked to write anywhere user-global, so the dir does
+ *    not grow over time. Any pre-existing `sessions/`, `reports/`,
+ *    `logs/`, or `fit/` subdirectories on disk are legacy cruft from
+ *    earlier versions and are swept up by the same removal.
+ *
+ *  • `--project [path]` — remove project-local state at `[path]` (or
+ *    cwd if omitted): both `<path>/opensip-cli/` (user-authored
+ *    checks + recipes plus the gitignored `.runtime/` cache) and
+ *    `<path>/opensip-cli.config.yml`. Refuses to run if neither
+ *    target exists at the resolved path, to avoid `rm -rf`-ing an
+ *    unrelated directory.
+ *
+ *    The recursive removal of `<path>/opensip-cli/` transitively
+ *    sweeps up `.runtime/datastore.sqlite` and its `-wal`/`-shm` SQLite
+ *    sidecars — no datastore-specific path needs to be
+ *    enumerated here. Caveat for Windows: open file handles can block
+ *    removal of WAL/SHM files; ensure no opensip-cli CLI process is
+ *    active when running uninstall.
+ *
+ * Does NOT remove the npm global install — the running binary can't
+ * safely self-delete. Prints the exact next-step command for that.
+ *
+ * Flags:
+ *   --project [path]   Remove project-local state instead of user-level.
+ *   --yes              Skip confirmation prompt.
+ *   --dry-run          Print what would be removed; take no action.
+ *
+ * Result-shape contract (audit 2026-05-23 G5)
+ * -------------------------------------------
+ * `executeUninstall` returns a discriminated `UninstallDoneResult` whose
+ * `type === 'uninstall-done'` makes it a valid `CommandResult`. The
+ * trailing success / cancelled / dry-run / empty notice — previously
+ * raw-stdout writes that bypassed the theme — is rendered via Ink in
+ * `App.tsx`'s `case 'uninstall-done':` branch. The pre-confirmation
+ * target listing stays as a direct `write()` because it must appear
+ * BEFORE the readline confirmation prompt; same pattern as
+ * `configure.ts` printing the "current key" hint above the prompt.
+ *
+ * Module layout
+ * -------------
+ * - This file owns `executeUninstall` and removal orchestration.
+ * - `uninstall/targets.ts` owns Target collection + pre-prompt display.
+ */
+import type { UninstallDoneResult } from '@opensip-cli/contracts';
+import type { ProjectContext } from '@opensip-cli/core';
+export interface UninstallOptions {
+    readonly yes?: boolean;
+    readonly dryRun?: boolean;
+    /**
+     * If set, run in project mode and target this path. If `true`, use
+     * cwd. If `undefined`, run in user-level mode.
+     */
+    readonly project?: string | true;
+    /** Override the user-level root dir (primarily for tests). */
+    readonly rootDir?: string;
+    /** Override cwd resolution for `--project` with no arg (tests). */
+    readonly cwd?: string;
+    /**
+     * Resolved ProjectContext from pre-action-hook. Used as the primary
+     * source for `resolveProjectDir` when `--project` wasn't passed —
+     * without it, `uninstall` run from a subdir would target the wrong
+     * .runtime/.
+     */
+    readonly projectContext?: ProjectContext;
+    /**
+     * When true, in project mode also remove user-authored content and the
+     * config file (DESTRUCTIVE). Default (false) only removes the
+     * rebuildable .runtime/ subtree, preserving custom checks/recipes/
+     * scenarios/config. `--purge` is the explicit opt-in for the old
+     * destructive behavior.
+     */
+    readonly purge?: boolean;
+    /** Override stdout (primarily for tests). */
+    readonly write?: (s: string) => void;
+    /** Override the confirmation prompt (primarily for tests). */
+    readonly prompt?: (question: string) => Promise<string>;
+}
+export declare function executeUninstall(opts?: UninstallOptions): Promise<UninstallDoneResult>;
+//# sourceMappingURL=uninstall.d.ts.map

package/dist/commands/uninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAkBH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACzD;AA6FD,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6ChG"}