opensquid 0.5.395

package/dist/secrets/backends/literal.js

@@ -0,0 +1,25 @@
+/**
+ * Literal-value secret backend. URI shape `literal:<value>` returns `<value>`
+ * verbatim. Used by CLI-managed subscriptions where the secret IS the
+ * authoritative artifact (it was generated by `opensquid webhooks subscribe`
+ * and stored inline in `webhooks.yaml`). Production deployments typically
+ * prefer `env:` / `op:` / `keychain:` instead, but the CLI's rotate path
+ * needs an atomic "write new secret to webhooks.yaml BEFORE invalidating
+ * old" guarantee, which only inline storage provides.
+ *
+ * Empty literal (`literal:`) resolves to null so a malformed URI surfaces
+ * via the loader's missing-secret error path instead of silently providing
+ * an empty HMAC key.
+ *
+ * Imports from: ../types.js.
+ * Imported by: src/secrets/index.ts.
+ */
+export function literalBackend() {
+    return {
+        scheme: 'literal',
+        async resolve(ref) {
+            return Promise.resolve(ref.length > 0 ? ref : null);
+        },
+    };
+}
+//# sourceMappingURL=literal.js.map

package/dist/secrets/backends/literal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"literal.js","sourceRoot":"","sources":["../../../src/secrets/backends/literal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/secrets/backends/op.d.ts

@@ -0,0 +1,36 @@
+/**
+ * 1Password CLI subprocess backend for the secrets resolver.
+ *
+ * Resolves `op://vault/item/field` references by shelling out to the `op` CLI
+ * (https://developer.1password.com/docs/cli/) and capturing stdout. `validate()`
+ * runs `op whoami` to confirm the binary is present and authenticated.
+ *
+ * Subprocess discipline:
+ *   - `stdio: ['ignore', 'pipe', 'pipe']` — no stdin (op read doesn't need it),
+ *     captured stdout + stderr.
+ *   - SIGTERM after `timeoutMs` (default 5000) to avoid blocking on a Touch ID
+ *     prompt or hung network call.
+ *   - Spawn errors (binary missing) become `{ code: -1, stderr: 'spawn failed' }`
+ *     so the caller treats them as "unresolvable" instead of throwing.
+ *
+ * Security:
+ *   - NEVER log resolved secret values. Only exit codes / stderr land in logs,
+ *     and that only at the caller's discretion — this module logs nothing.
+ *
+ * macOS gotcha (see post-research note): without `OP_SERVICE_ACCOUNT_TOKEN`, the
+ * `op` CLI may pop a Touch ID prompt on first use. The 5s timeout catches the
+ * stall, but the setup UI should warn users to configure a service account
+ * token for non-interactive contexts.
+ *
+ * Imports from: node:child_process, ../types.js.
+ * Imported by: src/secrets/index.ts.
+ */
+import type { SecretBackend } from '../types.js';
+export interface OpBackendOptions {
+    /** Path or PATH-resolvable name of the 1Password CLI binary. Default 'op'. */
+    binary?: string;
+    /** Subprocess timeout in ms. Default 5000. */
+    timeoutMs?: number;
+}
+export declare function opBackend(opts?: OpBackendOptions): SecretBackend;
+//# sourceMappingURL=op.d.ts.map

package/dist/secrets/backends/op.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"op.d.ts","sourceRoot":"","sources":["../../../src/secrets/backends/op.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD,wBAAgB,SAAS,CAAC,IAAI,GAAE,gBAAqB,GAAG,aAAa,CAiBpE"}

package/dist/secrets/backends/op.js

@@ -0,0 +1,69 @@
+/**
+ * 1Password CLI subprocess backend for the secrets resolver.
+ *
+ * Resolves `op://vault/item/field` references by shelling out to the `op` CLI
+ * (https://developer.1password.com/docs/cli/) and capturing stdout. `validate()`
+ * runs `op whoami` to confirm the binary is present and authenticated.
+ *
+ * Subprocess discipline:
+ *   - `stdio: ['ignore', 'pipe', 'pipe']` — no stdin (op read doesn't need it),
+ *     captured stdout + stderr.
+ *   - SIGTERM after `timeoutMs` (default 5000) to avoid blocking on a Touch ID
+ *     prompt or hung network call.
+ *   - Spawn errors (binary missing) become `{ code: -1, stderr: 'spawn failed' }`
+ *     so the caller treats them as "unresolvable" instead of throwing.
+ *
+ * Security:
+ *   - NEVER log resolved secret values. Only exit codes / stderr land in logs,
+ *     and that only at the caller's discretion — this module logs nothing.
+ *
+ * macOS gotcha (see post-research note): without `OP_SERVICE_ACCOUNT_TOKEN`, the
+ * `op` CLI may pop a Touch ID prompt on first use. The 5s timeout catches the
+ * stall, but the setup UI should warn users to configure a service account
+ * token for non-interactive contexts.
+ *
+ * Imports from: node:child_process, ../types.js.
+ * Imported by: src/secrets/index.ts.
+ */
+import { spawn } from 'node:child_process';
+export function opBackend(opts = {}) {
+    const bin = opts.binary ?? 'op';
+    const timeout = opts.timeoutMs ?? 5000;
+    return {
+        scheme: 'op',
+        async validate() {
+            const r = await runOp(bin, ['whoami'], timeout);
+            return r.code === 0 ? { ok: true } : { ok: false, error: r.stderr };
+        },
+        async resolve(ref) {
+            // ref is the path after `op://`, e.g. `vault/item/field`.
+            const r = await runOp(bin, ['read', `op://${ref}`], timeout);
+            if (r.code !== 0)
+                return null;
+            return r.stdout.trim();
+        },
+    };
+}
+function runOp(bin, args, timeoutMs) {
+    return new Promise((resolve) => {
+        const proc = spawn(bin, args, { stdio: ['ignore', 'pipe', 'pipe'] });
+        let stdout = '';
+        let stderr = '';
+        const t = setTimeout(() => proc.kill('SIGTERM'), timeoutMs);
+        proc.stdout.on('data', (d) => {
+            stdout += typeof d === 'string' ? d : d.toString('utf8');
+        });
+        proc.stderr.on('data', (d) => {
+            stderr += typeof d === 'string' ? d : d.toString('utf8');
+        });
+        proc.on('close', (code) => {
+            clearTimeout(t);
+            resolve({ code: code ?? -1, stdout, stderr });
+        });
+        proc.on('error', () => {
+            clearTimeout(t);
+            resolve({ code: -1, stdout, stderr: 'spawn failed' });
+        });
+    });
+}
+//# sourceMappingURL=op.js.map

package/dist/secrets/backends/op.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"op.js","sourceRoot":"","sources":["../../../src/secrets/backends/op.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAiB3C,MAAM,UAAU,SAAS,CAAC,OAAyB,EAAE;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAEvC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,KAAK,CAAC,QAAQ;YACZ,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,0DAA0D;YAC1D,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,IAAc,EAAE,SAAiB;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAkB,EAAE,EAAE;YAC5C,MAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAkB,EAAE,EAAE;YAC5C,MAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/secrets/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Secrets: pluggable secrets resolver dispatching by URI scheme (env:, .env,
+ * op://, keychain:) with in-memory-only runtime cache.
+ *
+ * Imports from: nothing in src/ (sibling layer).
+ * Imported by: runtime/, channels/, models/, rag/, setup/, mcp/.
+ */
+export type { SecretBackend, SecretResolver } from './types.js';
+export { createResolver } from './resolver.js';
+export { dotenvBackend, type DotenvBackendOptions } from './backends/dotenv.js';
+export { opBackend, type OpBackendOptions } from './backends/op.js';
+export { keychainBackend, type KeychainBackendOptions } from './backends/keychain.js';
+export { literalBackend } from './backends/literal.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/secrets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/secrets/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/secrets/index.js

@@ -0,0 +1,13 @@
+/**
+ * Secrets: pluggable secrets resolver dispatching by URI scheme (env:, .env,
+ * op://, keychain:) with in-memory-only runtime cache.
+ *
+ * Imports from: nothing in src/ (sibling layer).
+ * Imported by: runtime/, channels/, models/, rag/, setup/, mcp/.
+ */
+export { createResolver } from './resolver.js';
+export { dotenvBackend } from './backends/dotenv.js';
+export { opBackend } from './backends/op.js';
+export { keychainBackend } from './backends/keychain.js';
+export { literalBackend } from './backends/literal.js';
+//# sourceMappingURL=index.js.map

package/dist/secrets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/secrets/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAA6B,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,SAAS,EAAyB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,eAAe,EAA+B,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/secrets/resolver.d.ts

@@ -0,0 +1,19 @@
+/**
+ * URI parser + dispatcher for the secrets resolver.
+ *
+ * URI shapes:
+ *   - `env:MY_VAR`            scheme=env,      ref=MY_VAR
+ *   - `env://MY_VAR`          scheme=env,      ref=MY_VAR        (strip leading `//`)
+ *   - `op://vault/item/field` scheme=op,       ref=vault/item/field
+ *   - `keychain:TEST_KEY`     scheme=keychain, ref=TEST_KEY
+ *
+ * Cache semantics: positive resolutions are memoized for the lifetime of the
+ * resolver instance. Null results are NOT cached so a later-populated source
+ * (e.g. user adds the secret) can still be picked up.
+ *
+ * Imports from: ./types.ts.
+ * Imported by: src/secrets/index.ts.
+ */
+import type { SecretBackend, SecretResolver } from './types.js';
+export declare function createResolver(backends: SecretBackend[]): SecretResolver;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/secrets/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/secrets/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,cAAc,CAuBxE"}

package/dist/secrets/resolver.js

@@ -0,0 +1,40 @@
+/**
+ * URI parser + dispatcher for the secrets resolver.
+ *
+ * URI shapes:
+ *   - `env:MY_VAR`            scheme=env,      ref=MY_VAR
+ *   - `env://MY_VAR`          scheme=env,      ref=MY_VAR        (strip leading `//`)
+ *   - `op://vault/item/field` scheme=op,       ref=vault/item/field
+ *   - `keychain:TEST_KEY`     scheme=keychain, ref=TEST_KEY
+ *
+ * Cache semantics: positive resolutions are memoized for the lifetime of the
+ * resolver instance. Null results are NOT cached so a later-populated source
+ * (e.g. user adds the secret) can still be picked up.
+ *
+ * Imports from: ./types.ts.
+ * Imported by: src/secrets/index.ts.
+ */
+export function createResolver(backends) {
+    const map = new Map(backends.map((b) => [b.scheme, b]));
+    const cache = new Map();
+    return {
+        async resolve(uri) {
+            const cached = cache.get(uri);
+            if (cached !== undefined)
+                return cached;
+            const colon = uri.indexOf(':');
+            if (colon < 0)
+                return null;
+            const scheme = uri.slice(0, colon);
+            const ref = uri.slice(colon + 1).replace(/^\/\//, '');
+            const backend = map.get(scheme);
+            if (!backend)
+                return null;
+            const value = await backend.resolve(ref);
+            if (value !== null)
+                cache.set(uri, value);
+            return value;
+        },
+    };
+}
+//# sourceMappingURL=resolver.js.map

package/dist/secrets/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/secrets/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,UAAU,cAAc,CAAC,QAAyB;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAwB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YAExC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE3B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAEtD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAE1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/secrets/types.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Secrets backend + resolver interfaces.
+ *
+ * A `SecretBackend` owns one URI scheme (e.g. `env`, `op`, `keychain`).
+ * A `SecretResolver` dispatches a full URI to the appropriate backend
+ * and memoizes the result for the lifetime of the process.
+ *
+ * NEVER log resolved secret values. NEVER persist resolved values to disk.
+ *
+ * Imports from: nothing.
+ * Imported by: src/secrets/resolver.ts, src/secrets/backends/*.
+ */
+export interface SecretBackend {
+    /** URI scheme handled by this backend (e.g. 'env', 'op', 'keychain'). */
+    scheme: string;
+    /** Resolve a backend-scoped reference (already stripped of `scheme:` and any `//`). */
+    resolve(ref: string): Promise<string | null>;
+    /** Optional self-check (e.g. CLI binary present). */
+    validate?(): Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+}
+export interface SecretResolver {
+    /** Resolve a full URI like `env:NAME`, `env://NAME`, `op://vault/item/field`. */
+    resolve(uri: string): Promise<string | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/secrets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/secrets/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,qDAAqD;IACrD,QAAQ,CAAC,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9C"}

package/dist/secrets/types.js

@@ -0,0 +1,14 @@
+/**
+ * Secrets backend + resolver interfaces.
+ *
+ * A `SecretBackend` owns one URI scheme (e.g. `env`, `op`, `keychain`).
+ * A `SecretResolver` dispatches a full URI to the appropriate backend
+ * and memoizes the result for the lifetime of the process.
+ *
+ * NEVER log resolved secret values. NEVER persist resolved values to disk.
+ *
+ * Imports from: nothing.
+ * Imported by: src/secrets/resolver.ts, src/secrets/backends/*.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/secrets/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/secrets/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/setup/cli/attestations.d.ts

@@ -0,0 +1,32 @@
+/**
+ * PGB.2 (T-fix-pushgate-bypass) — per-commit flow attestations.
+ *
+ * Provenance rides the COMMIT, not the ambient session: when a gated commit passes
+ * the commit-boundary conditions (docs-only, or a completed SCOPE→AUTHOR→7-phase
+ * flow in the live session), the post-commit hook records one append-only JSON line
+ * in `<scopeRoot>/attestations.jsonl` (beside `active.json` — machine-local, survives
+ * session end, never cleaned by SessionEnd). The push gate then accepts a push whose
+ * outgoing commits are all attested, even when the authoring session is long gone —
+ * closing the false-block on handover pushes WITHOUT weakening fail-closed (an
+ * unattested code commit still needs a live completed flow, or is blocked).
+ *
+ * Trust model: plain local files, same trust level as `--no-verify` (the single
+ * closed escape hatch) — forgery hardening is explicitly out of scope.
+ *
+ * Imported by: src/setup/cli/gate.ts (append on attest, read on push).
+ */
+export interface Attestation {
+    sha: string;
+    allowed: boolean;
+    reason: 'docs_only' | 'flow_complete' | 'human';
+    session: string;
+    at: string;
+}
+/** Append one attestation row. A single short line « PIPE_BUF — concurrent sessions
+ *  cannot interleave mid-line on a local fs; a torn line is skipped by the reader. */
+export declare function appendAttestation(scopeRoot: string, a: Attestation): Promise<void>;
+/** The set of shas with an `allowed` attestation. Tolerant reader: a torn/foreign
+ *  line is skipped (that sha simply stays unattested → fail-closed downstream).
+ *  No file → empty set (behavior identical to pre-attestation clones). */
+export declare function readAttestedShas(scopeRoot: string): Promise<Set<string>>;
+//# sourceMappingURL=attestations.d.ts.map

package/dist/setup/cli/attestations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestations.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/attestations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,OAAO,CAAC;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAID;sFACsF;AACtF,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAExF;AAED;;0EAE0E;AAC1E,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAkB9E"}

package/dist/setup/cli/attestations.js

@@ -0,0 +1,52 @@
+/**
+ * PGB.2 (T-fix-pushgate-bypass) — per-commit flow attestations.
+ *
+ * Provenance rides the COMMIT, not the ambient session: when a gated commit passes
+ * the commit-boundary conditions (docs-only, or a completed SCOPE→AUTHOR→7-phase
+ * flow in the live session), the post-commit hook records one append-only JSON line
+ * in `<scopeRoot>/attestations.jsonl` (beside `active.json` — machine-local, survives
+ * session end, never cleaned by SessionEnd). The push gate then accepts a push whose
+ * outgoing commits are all attested, even when the authoring session is long gone —
+ * closing the false-block on handover pushes WITHOUT weakening fail-closed (an
+ * unattested code commit still needs a live completed flow, or is blocked).
+ *
+ * Trust model: plain local files, same trust level as `--no-verify` (the single
+ * closed escape hatch) — forgery hardening is explicitly out of scope.
+ *
+ * Imported by: src/setup/cli/gate.ts (append on attest, read on push).
+ */
+import { appendFile, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+const attestationsPath = (scopeRoot) => join(scopeRoot, 'attestations.jsonl');
+/** Append one attestation row. A single short line « PIPE_BUF — concurrent sessions
+ *  cannot interleave mid-line on a local fs; a torn line is skipped by the reader. */
+export async function appendAttestation(scopeRoot, a) {
+    await appendFile(attestationsPath(scopeRoot), `${JSON.stringify(a)}\n`, 'utf8');
+}
+/** The set of shas with an `allowed` attestation. Tolerant reader: a torn/foreign
+ *  line is skipped (that sha simply stays unattested → fail-closed downstream).
+ *  No file → empty set (behavior identical to pre-attestation clones). */
+export async function readAttestedShas(scopeRoot) {
+    const out = new Set();
+    let raw;
+    try {
+        raw = await readFile(attestationsPath(scopeRoot), 'utf8');
+    }
+    catch {
+        return out;
+    }
+    for (const line of raw.split('\n')) {
+        if (line.trim() === '')
+            continue;
+        try {
+            const a = JSON.parse(line);
+            if (a.allowed === true && typeof a.sha === 'string' && a.sha !== '')
+                out.add(a.sha);
+        }
+        catch {
+            // torn/foreign line → skip
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=attestations.js.map

package/dist/setup/cli/attestations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestations.js","sourceRoot":"","sources":["../../../src/setup/cli/attestations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAE9F;sFACsF;AACtF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB,EAAE,CAAc;IACvE,MAAM,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED;;0EAE0E;AAC1E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;YACnD,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/setup/cli/audit.d.ts

@@ -0,0 +1,30 @@
+/**
+ * CLI.5 — `opensquid audit (list|shell|channels|pending|tail|approve|reject)`.
+ *
+ * Thin commander wiring. Verb bodies in `./audit_actions.ts`; libsql
+ * paths + duration parser in `./audit_state.ts`. This file owns commander
+ * option routing + libsql client lifecycle (open → action → close).
+ *
+ * Verb semantics (locked):
+ *   - list      — default; newest N across all categories. Filters:
+ *                 --since, --decision, --category, --limit.
+ *   - shell     — pending_shell rows (queue history).
+ *   - channels  — channel_send rows (deliver-only + outbound multicast).
+ *   - pending   — pending_shell + decision=prompted (the approval queue).
+ *   - tail      — live polling. `--follow` until SIGINT; otherwise exits
+ *                 after first batch. AbortController owns lifecycle.
+ *   - approve / reject — atomic prompted → terminal. Exit 1 if already
+ *                 resolved (race-safe via single UPDATE).
+ */
+import type { Client } from '@libsql/client';
+import type { Command } from 'commander';
+export interface AuditCliDeps {
+    /** Tests inject in-memory client + force-abort tail deterministically. */
+    openClient?: (dbPath: string) => Client;
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+    now?: () => number;
+    abort?: AbortController;
+}
+export declare function registerAudit(parent: Command, deps?: AuditCliDeps): Command;
+//# sourceMappingURL=audit.d.ts.map

package/dist/setup/cli/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAoBH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAoDD,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAuF/E"}

package/dist/setup/cli/audit.js

@@ -0,0 +1,139 @@
+/**
+ * CLI.5 — `opensquid audit (list|shell|channels|pending|tail|approve|reject)`.
+ *
+ * Thin commander wiring. Verb bodies in `./audit_actions.ts`; libsql
+ * paths + duration parser in `./audit_state.ts`. This file owns commander
+ * option routing + libsql client lifecycle (open → action → close).
+ *
+ * Verb semantics (locked):
+ *   - list      — default; newest N across all categories. Filters:
+ *                 --since, --decision, --category, --limit.
+ *   - shell     — pending_shell rows (queue history).
+ *   - channels  — channel_send rows (deliver-only + outbound multicast).
+ *   - pending   — pending_shell + decision=prompted (the approval queue).
+ *   - tail      — live polling. `--follow` until SIGINT; otherwise exits
+ *                 after first batch. AbortController owns lifecycle.
+ *   - approve / reject — atomic prompted → terminal. Exit 1 if already
+ *                 resolved (race-safe via single UPDATE).
+ */
+import { createClient } from '@libsql/client';
+import { AuditLog } from '../../runtime/audit_log.js';
+import { actApprove, actChannels, actList, actPending, actReject, actShell, actTail, } from './audit_actions.js';
+import { defaultAuditDbPath } from './audit_state.js';
+function defaultOpen(dbPath) {
+    const url = dbPath.startsWith('file:') || dbPath === ':memory:' ? dbPath : `file:${dbPath}`;
+    return createClient({ url });
+}
+function buildDeps(deps) {
+    const out = {
+        open: deps.openClient ?? defaultOpen,
+        out: deps.stdout ?? ((s) => process.stdout.write(s)),
+        err: deps.stderr ?? ((s) => process.stderr.write(s)),
+        now: deps.now ?? (() => Date.now()),
+    };
+    if (deps.abort !== undefined)
+        out.abort = deps.abort;
+    return out;
+}
+async function withLog(resolved, dbPath, body) {
+    const client = resolved.open(dbPath);
+    try {
+        const log = new AuditLog(client);
+        const deps = {
+            log,
+            out: resolved.out,
+            err: resolved.err,
+            now: resolved.now,
+            ...(resolved.abort !== undefined ? { abort: resolved.abort } : {}),
+        };
+        await body(deps);
+    }
+    finally {
+        client.close();
+    }
+}
+const DB_DESC = 'Path to the libsql DB';
+const SINCE_DESC = 'e.g. 24h, 7d, 30m, 60s';
+const CAT_LIST = 'capability_gate|webhook|schedule|resume|channel_send|pending_shell';
+const DEC_LIST = 'allowed|denied|prompted|success|error|approved|rejected';
+export function registerAudit(parent, deps = {}) {
+    const r = buildDeps(deps);
+    const a = parent.command('audit').description('Unified audit log');
+    const db = defaultAuditDbPath();
+    a.command('list', { isDefault: true })
+        .description('Recent audit entries (default: 20)')
+        .option('--db <path>', DB_DESC, db)
+        .option('--since <duration>', SINCE_DESC)
+        .option('--decision <kind>', DEC_LIST)
+        .option('--category <kind>', CAT_LIST)
+        .option('--limit <n>', 'cap result count (default 20)')
+        .action(async (opts) => {
+        await withLog(r, opts.db, (d) => actList(d, opts));
+    });
+    a.command('shell')
+        .description('Pending-shell queue history (pending_shell category)')
+        .option('--db <path>', DB_DESC, db)
+        .option('--since <duration>', SINCE_DESC)
+        .option('--decision <kind>', 'prompted|approved|rejected|denied')
+        .option('--limit <n>', 'cap result count (default 20)')
+        .action(async (opts) => {
+        await withLog(r, opts.db, (d) => actShell(d, opts));
+    });
+    a.command('channels')
+        .description('Channel send audit (channel_send category)')
+        .option('--db <path>', DB_DESC, db)
+        .option('--since <duration>', SINCE_DESC)
+        .option('--decision <kind>', 'success|error|denied')
+        .option('--limit <n>', 'cap result count (default 20)')
+        .action(async (opts) => {
+        await withLog(r, opts.db, (d) => actChannels(d, opts));
+    });
+    a.command('pending')
+        .description('Pending shell_exec approvals (pending_shell + decision=prompted)')
+        .option('--db <path>', DB_DESC, db)
+        .option('--since <duration>', SINCE_DESC)
+        .option('--limit <n>', 'cap result count (default 50)')
+        .action(async (opts) => {
+        await withLog(r, opts.db, (d) => actPending(d, opts));
+    });
+    a.command('tail')
+        .description('Stream new audit entries as they land')
+        .option('--db <path>', DB_DESC, db)
+        .option('-f, --follow', 'Keep tailing until SIGINT', false)
+        .option('--interval <ms>', 'Polling interval (default 1000ms, floor 100ms)', '1000')
+        .option('--category <kind>', CAT_LIST)
+        .action(async (opts) => {
+        const controller = r.abort ?? new AbortController();
+        const onSigint = () => {
+            controller.abort();
+        };
+        process.on('SIGINT', onSigint);
+        try {
+            await withLog(r, opts.db, (d) => actTail(d, {
+                follow: opts.follow,
+                interval: opts.interval,
+                ...(opts.category !== undefined ? { category: opts.category } : {}),
+                signal: controller.signal,
+            }));
+        }
+        finally {
+            process.off('SIGINT', onSigint);
+            if (r.abort === undefined)
+                controller.abort();
+        }
+    });
+    a.command('approve <pendingId>')
+        .description('Approve a queued shell_exec (atomic prompted → approved)')
+        .option('--db <path>', DB_DESC, db)
+        .action(async (pendingId, opts) => {
+        await withLog(r, opts.db, (d) => actApprove(d, pendingId));
+    });
+    a.command('reject <pendingId>')
+        .description('Reject a queued shell_exec (atomic prompted → rejected)')
+        .option('--db <path>', DB_DESC, db)
+        .action(async (pendingId, opts) => {
+        await withLog(r, opts.db, (d) => actReject(d, pendingId));
+    });
+    return a;
+}
+//# sourceMappingURL=audit.js.map

package/dist/setup/cli/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/setup/cli/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAEtD,OAAO,EACL,UAAU,EACV,WAAW,EACX,OAAO,EACP,UAAU,EACV,SAAS,EACT,QAAQ,EACR,OAAO,GAIR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AActD,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;IAC5F,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAC/B,CAAC;AAUD,SAAS,SAAS,CAAC,IAAkB;IACnC,MAAM,GAAG,GAAiB;QACxB,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,WAAW;QACpC,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;KAC5C,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,QAAsB,EACtB,MAAc,EACd,IAAyC;IAEzC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAe;YACvB,GAAG;YACH,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,uBAAuB,CAAC;AACxC,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,QAAQ,GAAG,oEAAoE,CAAC;AACtF,MAAM,QAAQ,GAAG,yDAAyD,CAAC;AAE3E,MAAM,UAAU,aAAa,CAAC,MAAe,EAAE,OAAqB,EAAE;IACpE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAEhC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACnC,WAAW,CAAC,oCAAoC,CAAC;SACjD,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC;SACxC,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC;SACrC,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC;SACrC,MAAM,CAAC,aAAa,EAAE,+BAA+B,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,IAA+B,EAAE,EAAE;QAChD,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;SACf,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC;SACxC,MAAM,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;SAChE,MAAM,CAAC,aAAa,EAAE,+BAA+B,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,IAAuC,EAAE,EAAE;QACxD,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;SAClB,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC;SACxC,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;SACnD,MAAM,CAAC,aAAa,EAAE,+BAA+B,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,IAAuC,EAAE,EAAE;QACxD,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;SACjB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC;SACxC,MAAM,CAAC,aAAa,EAAE,+BAA+B,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,IAAuC,EAAE,EAAE;QACxD,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,cAAc,EAAE,2BAA2B,EAAE,KAAK,CAAC;SAC1D,MAAM,CAAC,iBAAiB,EAAE,gDAAgD,EAAE,MAAM,CAAC;SACnF,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,IAA0E,EAAE,EAAE;QAC3F,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,eAAe,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,OAAO,CAAC,CAAC,EAAE;gBACT,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;SAC7B,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,IAAoB,EAAE,EAAE;QACxD,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAC5B,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,SAAiB,EAAE,IAAoB,EAAE,EAAE;QACxD,MAAM,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEL,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/setup/cli/audit_actions.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Action implementations for CLI.5 — `opensquid audit …`.
+ *
+ * Split out of `audit.ts` (file-size budget). Seven verb bodies:
+ *
+ *   actList    — default; newest 20 entries (or filtered).
+ *   actShell   — narrow to `pending_shell` (queued shell_exec approvals).
+ *                (capability_gate shell_exec verdicts are surfaced by
+ *                permissions audit — CLI.4 — to avoid duplication.)
+ *   actChannels— narrow to `channel_send` (deliver-only + outbound).
+ *   actPending — narrow to `pending_shell` decision=`prompted` (the
+ *                queue the user must approve/reject to unblock).
+ *   actTail    — live polling tail; AbortController-owned lifecycle.
+ *   actApprove — `transitionPending(id, 'approved')`. Exit 1 if no row.
+ *   actReject  — `transitionPending(id, 'rejected')`. Exit 1 if no row.
+ *
+ * Output discipline: JSON-on-stdout for `list / shell / channels /
+ * pending / approve / reject` (pipeable). `tail` emits one row per line —
+ * compact format for human readability + greppability.
+ *
+ * Imports from: ../../runtime/audit_log.
+ * Imported by: src/setup/cli/audit.ts.
+ */
+import { type AuditLog } from '../../runtime/audit_log.js';
+export interface ActionDeps {
+    log: AuditLog;
+    out: (s: string) => void;
+    err: (s: string) => void;
+    now: () => number;
+    /** Tail uses a caller-owned AbortController so SIGINT + tests can abort. */
+    abort?: AbortController;
+}
+export interface CommonFilterOpts {
+    since?: string;
+    decision?: string;
+    limit?: string;
+}
+export interface ListOpts extends CommonFilterOpts {
+    category?: string;
+}
+export declare function actList(deps: ActionDeps, opts: ListOpts): Promise<void>;
+export declare function actShell(deps: ActionDeps, opts: CommonFilterOpts): Promise<void>;
+export declare function actChannels(deps: ActionDeps, opts: CommonFilterOpts): Promise<void>;
+export declare function actPending(deps: ActionDeps, opts: CommonFilterOpts): Promise<void>;
+export interface TailOpts {
+    follow?: boolean;
+    interval?: string;
+    category?: string;
+    signal: AbortSignal;
+}
+export declare function actTail(deps: ActionDeps, opts: TailOpts): Promise<void>;
+export declare function actApprove(deps: ActionDeps, rawId: string): Promise<void>;
+export declare function actReject(deps: ActionDeps, rawId: string): Promise<void>;
+//# sourceMappingURL=audit_actions.d.ts.map