opensquid 0.5.395

package/dist/setup/cli/audit_actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit_actions.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/audit_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAA0C,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAInG,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,QAAQ,CAAC;IACd,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzB,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyDD,MAAM,WAAW,QAAS,SAAQ,gBAAgB;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAWD,wBAAsB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB7E;AAMD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUtF;AAMD,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUzF;AAOD,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxF;AAOD,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC7E;AAgCD,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/E;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E"}

package/dist/setup/cli/audit_actions.js

@@ -0,0 +1,200 @@
+/**
+ * Action implementations for CLI.5 — `opensquid audit …`.
+ *
+ * Split out of `audit.ts` (file-size budget). Seven verb bodies:
+ *
+ *   actList    — default; newest 20 entries (or filtered).
+ *   actShell   — narrow to `pending_shell` (queued shell_exec approvals).
+ *                (capability_gate shell_exec verdicts are surfaced by
+ *                permissions audit — CLI.4 — to avoid duplication.)
+ *   actChannels— narrow to `channel_send` (deliver-only + outbound).
+ *   actPending — narrow to `pending_shell` decision=`prompted` (the
+ *                queue the user must approve/reject to unblock).
+ *   actTail    — live polling tail; AbortController-owned lifecycle.
+ *   actApprove — `transitionPending(id, 'approved')`. Exit 1 if no row.
+ *   actReject  — `transitionPending(id, 'rejected')`. Exit 1 if no row.
+ *
+ * Output discipline: JSON-on-stdout for `list / shell / channels /
+ * pending / approve / reject` (pipeable). `tail` emits one row per line —
+ * compact format for human readability + greppability.
+ *
+ * Imports from: ../../runtime/audit_log.
+ * Imported by: src/setup/cli/audit.ts.
+ */
+import {} from '../../runtime/audit_log.js';
+import { formatTimestamp, parseDurationToMs } from './audit_state.js';
+const VALID_DECISIONS = new Set([
+    'allowed',
+    'denied',
+    'prompted',
+    'success',
+    'error',
+    'approved',
+    'rejected',
+]);
+function resolveFilter(deps, opts, verb) {
+    const out = {};
+    if (opts.since !== undefined) {
+        const ms = parseDurationToMs(opts.since);
+        if (ms === null) {
+            deps.err(`opensquid audit ${verb}: --since "${opts.since}" must be like "24h", "7d", "30m", "60s"\n`);
+            process.exitCode = 1;
+            return null;
+        }
+        out.sinceMs = deps.now() - ms;
+    }
+    if (opts.decision !== undefined) {
+        if (!VALID_DECISIONS.has(opts.decision)) {
+            deps.err(`opensquid audit ${verb}: --decision "${opts.decision}" must be one of ${[...VALID_DECISIONS].join('|')}\n`);
+            process.exitCode = 1;
+            return null;
+        }
+        out.decision = opts.decision;
+    }
+    if (opts.limit !== undefined) {
+        const n = Number.parseInt(opts.limit, 10);
+        if (Number.isFinite(n) && n > 0)
+            out.limit = n;
+    }
+    return out;
+}
+const VALID_CATEGORIES = new Set([
+    'capability_gate',
+    'webhook',
+    'schedule',
+    'resume',
+    'channel_send',
+    'pending_shell',
+]);
+export async function actList(deps, opts) {
+    const filter = resolveFilter(deps, opts, 'list');
+    if (filter === null)
+        return;
+    let category;
+    if (opts.category !== undefined) {
+        if (!VALID_CATEGORIES.has(opts.category)) {
+            deps.err(`opensquid audit list: --category "${opts.category}" must be one of ${[...VALID_CATEGORIES].join('|')}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        category = opts.category;
+    }
+    const rows = await deps.log.query({
+        ...(filter.sinceMs !== undefined ? { sinceMs: filter.sinceMs } : {}),
+        ...(filter.decision !== undefined ? { decision: filter.decision } : {}),
+        ...(category !== undefined ? { category } : {}),
+        limit: filter.limit ?? 20,
+    });
+    if (rows.length === 0) {
+        deps.out('(no audit entries match the query)\n');
+        return;
+    }
+    deps.out(JSON.stringify({ entries: rows }, null, 2) + '\n');
+}
+// ---------------------------------------------------------------------------
+// shell — pending_shell rows (queue + history).
+// ---------------------------------------------------------------------------
+export async function actShell(deps, opts) {
+    const filter = resolveFilter(deps, opts, 'shell');
+    if (filter === null)
+        return;
+    const rows = await deps.log.query({
+        category: 'pending_shell',
+        ...(filter.sinceMs !== undefined ? { sinceMs: filter.sinceMs } : {}),
+        ...(filter.decision !== undefined ? { decision: filter.decision } : {}),
+        limit: filter.limit ?? 20,
+    });
+    deps.out(JSON.stringify({ entries: rows }, null, 2) + '\n');
+}
+// ---------------------------------------------------------------------------
+// channels — channel_send rows.
+// ---------------------------------------------------------------------------
+export async function actChannels(deps, opts) {
+    const filter = resolveFilter(deps, opts, 'channels');
+    if (filter === null)
+        return;
+    const rows = await deps.log.query({
+        category: 'channel_send',
+        ...(filter.sinceMs !== undefined ? { sinceMs: filter.sinceMs } : {}),
+        ...(filter.decision !== undefined ? { decision: filter.decision } : {}),
+        limit: filter.limit ?? 20,
+    });
+    deps.out(JSON.stringify({ entries: rows }, null, 2) + '\n');
+}
+// ---------------------------------------------------------------------------
+// pending — pending_shell + decision=prompted. The queue the user must
+// approve/reject. Limit defaults to 50 (likely-larger than `list`).
+// ---------------------------------------------------------------------------
+export async function actPending(deps, opts) {
+    const filter = resolveFilter(deps, opts, 'pending');
+    if (filter === null)
+        return;
+    const rows = await deps.log.query({
+        category: 'pending_shell',
+        decision: 'prompted',
+        ...(filter.sinceMs !== undefined ? { sinceMs: filter.sinceMs } : {}),
+        limit: filter.limit ?? 50,
+    });
+    if (rows.length === 0) {
+        deps.out('(no pending approvals)\n');
+        return;
+    }
+    deps.out(JSON.stringify({ pending: rows }, null, 2) + '\n');
+}
+export async function actTail(deps, opts) {
+    let category;
+    if (opts.category !== undefined) {
+        if (!VALID_CATEGORIES.has(opts.category)) {
+            deps.err(`opensquid audit tail: --category "${opts.category}" must be one of ${[...VALID_CATEGORIES].join('|')}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        category = opts.category;
+    }
+    const intervalRaw = opts.interval !== undefined ? Number.parseInt(opts.interval, 10) : 1000;
+    const intervalMs = Number.isFinite(intervalRaw) && intervalRaw > 0 ? intervalRaw : 1000;
+    const tailOpts = {
+        sinceMs: deps.now(),
+        intervalMs,
+        signal: opts.signal,
+    };
+    if (category !== undefined)
+        tailOpts.category = category;
+    const stream = await deps.log.tail(tailOpts);
+    for await (const row of stream) {
+        deps.out(`${formatTimestamp(row.occurredAtMs)}  ${row.category.padEnd(16)} ${row.decision.padEnd(10)} ` +
+            `${(row.packId ?? '-').padEnd(20)} id=${String(row.id)}\n`);
+        if (opts.follow !== true) {
+            // Without --follow, exit after the first batch is yielded.
+            // The signal owner aborts via the verb's finally block.
+            break;
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// approve / reject — atomic transition. Both verbs treat
+// `rowsAffected === 0` as "already resolved or never existed" → exit 1.
+// ---------------------------------------------------------------------------
+async function actTransition(deps, rawId, to) {
+    const id = Number.parseInt(rawId, 10);
+    if (!Number.isFinite(id) || id <= 0) {
+        deps.err(`opensquid audit ${to === 'approved' ? 'approve' : 'reject'}: invalid id "${rawId}"\n`);
+        process.exitCode = 1;
+        return;
+    }
+    const updated = await deps.log.transitionPending(id, to);
+    if (!updated) {
+        deps.err(`opensquid audit ${to === 'approved' ? 'approve' : 'reject'}: ` +
+            `no pending row with id=${String(id)} (already resolved or never existed)\n`);
+        process.exitCode = 1;
+        return;
+    }
+    deps.out(JSON.stringify({ transitioned: { id, to } }, null, 2) + '\n');
+}
+export async function actApprove(deps, rawId) {
+    await actTransition(deps, rawId, 'approved');
+}
+export async function actReject(deps, rawId) {
+    await actTransition(deps, rawId, 'rejected');
+}
+//# sourceMappingURL=audit_actions.js.map

package/dist/setup/cli/audit_actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit_actions.js","sourceRoot":"","sources":["../../../src/setup/cli/audit_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAyD,MAAM,4BAA4B,CAAC;AAEnG,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAiBtE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAgB;IAC7C,SAAS;IACT,QAAQ;IACR,UAAU;IACV,SAAS;IACT,OAAO;IACP,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAQH,SAAS,aAAa,CACpB,IAAgB,EAChB,IAAsB,EACtB,IAAY;IAEZ,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CACN,mBAAmB,IAAI,cAAc,IAAI,CAAC,KAAK,4CAA4C,CAC5F,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAyB,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,GAAG,CACN,mBAAmB,IAAI,iBAAiB,IAAI,CAAC,QAAQ,oBAAoB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC5G,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAyB,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAgB;IAC9C,iBAAiB;IACjB,SAAS;IACT,UAAU;IACV,QAAQ;IACR,cAAc;IACd,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAc;IAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,IAAI,QAAmC,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAyB,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG,CACN,qCAAqC,IAAI,CAAC,QAAQ,oBAAoB,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC1G,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,QAAyB,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAgB,EAAE,IAAsB;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,eAAe;QACzB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAsB;IACxE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,cAAc;QACxB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,oEAAoE;AACpE,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAgB,EAAE,IAAsB;IACvE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,UAAU;QACpB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KAC1B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAc;IAC5D,IAAI,QAAmC,CAAC;IACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAyB,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG,CACN,qCAAqC,IAAI,CAAC,QAAQ,oBAAoB,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC1G,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,QAAyB,CAAC;IAC5C,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,MAAM,QAAQ,GAKV;QACF,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;QACnB,UAAU;QACV,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CACN,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;YAC5F,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAC7D,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,2DAA2D;YAC3D,wDAAwD;YACxD,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,wEAAwE;AACxE,8EAA8E;AAE9E,KAAK,UAAU,aAAa,CAC1B,IAAgB,EAChB,KAAa,EACb,EAA2B;IAE3B,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CACN,mBAAmB,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,iBAAiB,KAAK,KAAK,CACvF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CACN,mBAAmB,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI;YAC7D,0BAA0B,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAC/E,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAgB,EAAE,KAAa;IAC9D,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,KAAa;IAC7D,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC"}

package/dist/setup/cli/audit_state.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Audit-CLI persistence helpers (CLI.5) — split out of audit.ts for the
+ * file-size budget.
+ *
+ * Two concerns live here:
+ *
+ *   1. `defaultAuditDbPath` — `file:${OPENSQUID_HOME()}/opensquid.db`. The
+ *      same DB as CheckpointStore + RateLimiter — one libsql file per
+ *      install. The audit_log table is created on first `init()`; no
+ *      separate migration step.
+ *
+ *   2. `parseDurationToMs` — shared with permissions_actions.ts (CLI.4)
+ *      but the import direction is reversed for CLI.5 to avoid leaking
+ *      permissions-state types into the audit verb. Same `(\d+)(s|m|h|d)`
+ *      regex; refactor candidate when a third caller appears.
+ *
+ * Imports from: node:path, ../../runtime/paths.
+ * Imported by: src/setup/cli/audit.ts + audit_actions.ts.
+ */
+export declare function defaultAuditDbPath(): string;
+export declare function parseDurationToMs(spec: string): number | null;
+/** Human-readable timestamp for CLI output. ISO-8601 with millisecond
+ *  precision — same posture as macOS Console.app's structured-log column
+ *  (`2026-05-20T09:00:00.123`). Local-TZ formatting deferred to a future
+ *  `--local-tz` flag if requested. */
+export declare function formatTimestamp(ms: number): string;
+//# sourceMappingURL=audit_state.d.ts.map

package/dist/setup/cli/audit_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit_state.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/audit_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAID,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiB7D;AAED;;;sCAGsC;AACtC,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/setup/cli/audit_state.js

@@ -0,0 +1,52 @@
+/**
+ * Audit-CLI persistence helpers (CLI.5) — split out of audit.ts for the
+ * file-size budget.
+ *
+ * Two concerns live here:
+ *
+ *   1. `defaultAuditDbPath` — `file:${OPENSQUID_HOME()}/opensquid.db`. The
+ *      same DB as CheckpointStore + RateLimiter — one libsql file per
+ *      install. The audit_log table is created on first `init()`; no
+ *      separate migration step.
+ *
+ *   2. `parseDurationToMs` — shared with permissions_actions.ts (CLI.4)
+ *      but the import direction is reversed for CLI.5 to avoid leaking
+ *      permissions-state types into the audit verb. Same `(\d+)(s|m|h|d)`
+ *      regex; refactor candidate when a third caller appears.
+ *
+ * Imports from: node:path, ../../runtime/paths.
+ * Imported by: src/setup/cli/audit.ts + audit_actions.ts.
+ */
+import { OPENSQUID_HOME } from '../../runtime/paths.js';
+export function defaultAuditDbPath() {
+    return `file:${OPENSQUID_HOME()}/opensquid.db`;
+}
+const DURATION_RE = /^(\d+)(s|m|h|d)$/;
+export function parseDurationToMs(spec) {
+    const m = DURATION_RE.exec(spec.trim());
+    if (!m)
+        return null;
+    const n = Number.parseInt(m[1] ?? '0', 10);
+    if (!Number.isFinite(n) || n < 0)
+        return null;
+    switch (m[2]) {
+        case 's':
+            return n * 1000;
+        case 'm':
+            return n * 60_000;
+        case 'h':
+            return n * 3_600_000;
+        case 'd':
+            return n * 86_400_000;
+        default:
+            return null;
+    }
+}
+/** Human-readable timestamp for CLI output. ISO-8601 with millisecond
+ *  precision — same posture as macOS Console.app's structured-log column
+ *  (`2026-05-20T09:00:00.123`). Local-TZ formatting deferred to a future
+ *  `--local-tz` flag if requested. */
+export function formatTimestamp(ms) {
+    return new Date(ms).toISOString();
+}
+//# sourceMappingURL=audit_state.js.map

package/dist/setup/cli/audit_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit_state.js","sourceRoot":"","sources":["../../../src/setup/cli/audit_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,UAAU,kBAAkB;IAChC,OAAO,QAAQ,cAAc,EAAE,eAAe,CAAC;AACjD,CAAC;AAED,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,KAAK,GAAG;YACN,OAAO,CAAC,GAAG,IAAI,CAAC;QAClB,KAAK,GAAG;YACN,OAAO,CAAC,GAAG,MAAM,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,CAAC,GAAG,SAAS,CAAC;QACvB,KAAK,GAAG;YACN,OAAO,CAAC,GAAG,UAAU,CAAC;QACxB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;sCAGsC;AACtC,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC"}

package/dist/setup/cli/automation.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `opensquid automation on|off|status` CLI verb group (G.12).
+ *
+ * Thin wrapper around the `runtime/automation_state.ts` flag-file helpers.
+ * The flag at `~/.opensquid/sessions/<session-id>/automation.flag` is the
+ * canonical signal for "is this session in an automation loop?"; the
+ * `is_automation_mode` primitive reads it (OR'd with `OPENSQUID_AUTOMATION=1`)
+ * to gate skills like `d9-guard`.
+ *
+ * Session-id resolution (Phase-2 lock #5):
+ *   1. `--session-id <id>` flag (explicit override)              source: 'flag'
+ *   2. `OPENSQUID_SESSION_ID` env var                             source: 'env'
+ *   3. `.current-session` pointer (UserPromptSubmit hook writes)  source: 'pointer'
+ *   4. fresh `randomUUID()` — printed to stderr so the user can   source: 'random'
+ *      paste it into a follow-up `status` / `off` call.
+ *
+ * ASG.2 plausibility gate: only `source === 'pointer'` is gated. The pointer
+ * can go stale (a leaky test or contamination), so the CLI cross-checks that
+ * `sessions/<id>/active-task.json` or `state/tool-ledger.json` was modified
+ * within `OPENSQUID_SESSION_FRESH_MS` (default 30min). Stale ⇒ refuse +
+ * `process.exitCode = 2` unless `--force`. See `runtime/hooks/session_liveness.ts`.
+ *
+ * Exit codes:
+ *   - `on` / `off`     — 0 (idempotent), or 2 if the pointer's stale
+ *   - `status`         — 0 if any signal is on, 1 if completely off, 2 if the
+ *                        pointer's stale (gate fires before on/off check)
+ *
+ * Imports from: node:crypto, commander, ../../runtime/automation_state.js.
+ * Imported by: src/cli.ts.
+ */
+import { type PlausibilityResult } from '../../runtime/hooks/session_liveness.js';
+import type { Command } from 'commander';
+export interface AutomationCliDeps {
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+    randomSessionId?: () => string;
+    /** Reads the live-session pointer written by the UserPromptSubmit hook. */
+    readCurrentSession?: () => Promise<string | null>;
+    /**
+     * Plausibility probe — default: the real `isSessionPlausible` over the
+     * filesystem. Tests inject a stub so they don't depend on real fs mtimes.
+     */
+    isSessionPlausible?: (sid: string) => Promise<PlausibilityResult>;
+}
+/** Register `opensquid automation` on the parent program. */
+export declare function registerAutomation(parent: Command, deps?: AutomationCliDeps): Command;
+//# sourceMappingURL=automation.d.ts.map

package/dist/setup/cli/automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/automation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAWH,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yCAAyC,CAAC;AAEjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,MAAM,CAAC;IAC/B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACnE;AAkID,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAqBzF"}

package/dist/setup/cli/automation.js

@@ -0,0 +1,156 @@
+/**
+ * `opensquid automation on|off|status` CLI verb group (G.12).
+ *
+ * Thin wrapper around the `runtime/automation_state.ts` flag-file helpers.
+ * The flag at `~/.opensquid/sessions/<session-id>/automation.flag` is the
+ * canonical signal for "is this session in an automation loop?"; the
+ * `is_automation_mode` primitive reads it (OR'd with `OPENSQUID_AUTOMATION=1`)
+ * to gate skills like `d9-guard`.
+ *
+ * Session-id resolution (Phase-2 lock #5):
+ *   1. `--session-id <id>` flag (explicit override)              source: 'flag'
+ *   2. `OPENSQUID_SESSION_ID` env var                             source: 'env'
+ *   3. `.current-session` pointer (UserPromptSubmit hook writes)  source: 'pointer'
+ *   4. fresh `randomUUID()` — printed to stderr so the user can   source: 'random'
+ *      paste it into a follow-up `status` / `off` call.
+ *
+ * ASG.2 plausibility gate: only `source === 'pointer'` is gated. The pointer
+ * can go stale (a leaky test or contamination), so the CLI cross-checks that
+ * `sessions/<id>/active-task.json` or `state/tool-ledger.json` was modified
+ * within `OPENSQUID_SESSION_FRESH_MS` (default 30min). Stale ⇒ refuse +
+ * `process.exitCode = 2` unless `--force`. See `runtime/hooks/session_liveness.ts`.
+ *
+ * Exit codes:
+ *   - `on` / `off`     — 0 (idempotent), or 2 if the pointer's stale
+ *   - `status`         — 0 if any signal is on, 1 if completely off, 2 if the
+ *                        pointer's stale (gate fires before on/off check)
+ *
+ * Imports from: node:crypto, commander, ../../runtime/automation_state.js.
+ * Imported by: src/cli.ts.
+ */
+import { randomUUID } from 'node:crypto';
+import { automationFlagPath, clearAutomationFlag, isAutomationFlagSet, setAutomationFlag, } from '../../runtime/automation_state.js';
+import { readCurrentSession } from '../../runtime/hooks/session_id.js';
+import { isSessionPlausible, } from '../../runtime/hooks/session_liveness.js';
+function buildDeps(d) {
+    return {
+        out: d.stdout ?? ((s) => void process.stdout.write(s)),
+        err: d.stderr ?? ((s) => void process.stderr.write(s)),
+        randomSessionId: d.randomSessionId ?? (() => randomUUID()),
+        readCurrentSession: d.readCurrentSession ?? readCurrentSession,
+        isSessionPlausible: d.isSessionPlausible ?? ((sid) => isSessionPlausible(sid)),
+    };
+}
+/**
+ * Resolution precedence: `--session-id` → `OPENSQUID_SESSION_ID` →
+ * `.current-session` (recorded each turn by the UserPromptSubmit hook, so the
+ * CLI targets the session the hooks actually key on) → a fresh random id.
+ *
+ * Returns the source as well so {@link gateOrFail} can gate ONLY the
+ * pointer-derived path (the only stale-prone source). Explicit `--session-id`
+ * and `OPENSQUID_SESSION_ID` are user/wrapper intent; a fresh random id
+ * obviously has no state yet — none of those need the plausibility check.
+ */
+async function resolveSessionId(opts, r) {
+    if (opts.sessionId !== undefined && opts.sessionId !== '') {
+        return { sid: opts.sessionId, source: 'flag' };
+    }
+    const envId = process.env.OPENSQUID_SESSION_ID;
+    if (envId !== undefined && envId !== '')
+        return { sid: envId, source: 'env' };
+    const current = await r.readCurrentSession();
+    if (current !== null && current !== '')
+        return { sid: current, source: 'pointer' };
+    const fresh = r.randomSessionId();
+    r.err(`opensquid automation: no --session-id, OPENSQUID_SESSION_ID, or live session pointer; using ${fresh}\n`);
+    return { sid: fresh, source: 'random' };
+}
+/**
+ * ASG.2 plausibility gate. Returns `true` to proceed with the verb's side
+ * effect; `false` to abort (caller returns early). Sets `process.exitCode = 2`
+ * on rejection — distinct from `status`'s `exit 1` ("automation off"), so
+ * wrappers can tell "the gate refused" apart from "automation is off."
+ *
+ * Only `source === 'pointer'` is gated. `--force` bypasses with a stderr ⚠
+ * note (the audit trail for an intentional bypass).
+ */
+async function gateOrFail(resolved, opts, r) {
+    if (resolved.source !== 'pointer')
+        return true;
+    if (opts.force === true) {
+        r.err(`opensquid automation: ⚠ --force bypass for session id '${resolved.sid}' ` +
+            `from .current-session pointer (no recent activity)\n`);
+        return true;
+    }
+    const probe = await r.isSessionPlausible(resolved.sid);
+    if (probe.plausible)
+        return true;
+    const mtimeStr = probe.newestMtimeMs === null ? 'absent' : new Date(probe.newestMtimeMs).toISOString();
+    r.err(`opensquid automation: refusing to act on implausible session id ` +
+        `'${resolved.sid}' from .current-session pointer.\n` +
+        `  no recent activity in ${probe.probedFiles.join(' or ')} ` +
+        `(newest mtime: ${mtimeStr}).\n` +
+        `  this usually means the pointer was overwritten by a leaky test ` +
+        `or stale state.\n` +
+        `  pass --force to bypass, or pass --session-id <real-id> explicitly.\n`);
+    process.exitCode = 2;
+    return false;
+}
+async function actOn(r, opts) {
+    const resolved = await resolveSessionId(opts, r);
+    if (!(await gateOrFail(resolved, opts, r)))
+        return;
+    await setAutomationFlag(resolved.sid);
+    r.out(`automation: on (${automationFlagPath(resolved.sid)})\n`);
+}
+async function actOff(r, opts) {
+    const resolved = await resolveSessionId(opts, r);
+    if (!(await gateOrFail(resolved, opts, r)))
+        return;
+    await clearAutomationFlag(resolved.sid);
+    r.out(`automation: off (${automationFlagPath(resolved.sid)})\n`);
+}
+async function actStatus(r, opts) {
+    const resolved = await resolveSessionId(opts, r);
+    if (!(await gateOrFail(resolved, opts, r)))
+        return;
+    const sid = resolved.sid;
+    if (process.env.OPENSQUID_AUTOMATION === '1') {
+        r.out(`automation: on (source=env OPENSQUID_AUTOMATION=1)\n`);
+        return;
+    }
+    if (await isAutomationFlagSet(sid)) {
+        r.out(`automation: on (source=flag ${automationFlagPath(sid)})\n`);
+        return;
+    }
+    r.out(`automation: off (no env var, no flag at ${automationFlagPath(sid)})\n`);
+    process.exitCode = 1;
+}
+const SID_FLAG = '--session-id <id>';
+const SID_DESC = 'session id (default: $OPENSQUID_SESSION_ID, else random uuid)';
+const FORCE_FLAG = '--force';
+const FORCE_DESC = 'bypass the .current-session plausibility check (writes anyway with a stderr ⚠)';
+/** Register `opensquid automation` on the parent program. */
+export function registerAutomation(parent, deps = {}) {
+    const r = buildDeps(deps);
+    const c = parent
+        .command('automation')
+        .description('Toggle the session automation-mode flag (gates skills like d9-guard)');
+    c.command('on')
+        .description('Set the automation flag for this session')
+        .option(SID_FLAG, SID_DESC)
+        .option(FORCE_FLAG, FORCE_DESC, false)
+        .action((opts) => actOn(r, opts));
+    c.command('off')
+        .description('Clear the automation flag for this session')
+        .option(SID_FLAG, SID_DESC)
+        .option(FORCE_FLAG, FORCE_DESC, false)
+        .action((opts) => actOff(r, opts));
+    c.command('status')
+        .description('Report automation flag state (exit 0 = on, 1 = off, 2 = stale pointer)')
+        .option(SID_FLAG, SID_DESC)
+        .option(FORCE_FLAG, FORCE_DESC, false)
+        .action((opts) => actStatus(r, opts));
+    return c;
+}
+//# sourceMappingURL=automation.js.map

package/dist/setup/cli/automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation.js","sourceRoot":"","sources":["../../../src/setup/cli/automation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,yCAAyC,CAAC;AAuCjD,SAAS,SAAS,CAAC,CAAoB;IACrC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC,GAAW,EAAE,CAAC,UAAU,EAAE,CAAC;QAClE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,kBAAkB;QAC9D,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;KACvF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,CAAW;IACzD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAC7C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC;IAClC,CAAC,CAAC,GAAG,CACH,+FAA+F,KAAK,IAAI,CACzG,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CAAC,QAAqB,EAAE,IAAc,EAAE,CAAW;IAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACxB,CAAC,CAAC,GAAG,CACH,0DAA0D,QAAQ,CAAC,GAAG,IAAI;YACxE,sDAAsD,CACzD,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,QAAQ,GACZ,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IACxF,CAAC,CAAC,GAAG,CACH,kEAAkE;QAChE,IAAI,QAAQ,CAAC,GAAG,oCAAoC;QACpD,2BAA2B,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG;QAC5D,kBAAkB,QAAQ,MAAM;QAChC,mEAAmE;QACnE,mBAAmB;QACnB,wEAAwE,CAC3E,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,CAAW,EAAE,IAAc;IAC9C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO;IACnD,MAAM,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAW,EAAE,IAAc;IAC/C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO;IACnD,MAAM,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,GAAG,CAAC,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,CAAW,EAAE,IAAc;IAClD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG,EAAE,CAAC;QAC7C,CAAC,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,IAAI,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,CAAC,CAAC,GAAG,CAAC,+BAA+B,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,2CAA2C,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AACrC,MAAM,QAAQ,GAAG,+DAA+D,CAAC;AACjF,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,UAAU,GAAG,gFAAgF,CAAC;AAEpG,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,OAA0B,EAAE;IAC9E,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM;SACb,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,sEAAsE,CAAC,CAAC;IACvF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;SACZ,WAAW,CAAC,0CAA0C,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC1B,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC;SACrC,MAAM,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;SACb,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC1B,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC;SACrC,MAAM,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChB,WAAW,CAAC,wEAAwE,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC1B,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC;SACrC,MAAM,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/setup/cli/cache.d.ts

@@ -0,0 +1,44 @@
+/**
+ * `opensquid cache` CLI verb group (CLI.7).
+ *
+ * Two verbs, backed by the DURABLE.3 `MemoCache`:
+ *
+ *   stats  — per-primitive hit / size table. Reads `MemoCache.stats()`,
+ *            which queries the libsql tier (the authoritative cross-
+ *            restart record). The in-memory LRU tier deliberately does
+ *            NOT contribute — a restart would otherwise reset reported
+ *            hits to zero and trip the "is this thing working" check
+ *            (see memo_cache.ts MemoStats comment).
+ *   clear  — selective invalidation. `--primitive <name>` purges one
+ *            primitive's rows; `--older-than <duration>` purges rows
+ *            older than the window; both flags combine via AND. A
+ *            zero-filter (full) clear requires `--yes` or interactive
+ *            y/N confirmation; non-TTY without `--yes` exits 1.
+ *
+ * Confirmation policy (locked):
+ *   - At least one filter → no confirmation. Output reports row count
+ *     removed; the user already declared the scope.
+ *   - No filter (full wipe) → `--yes` or TTY confirmation required.
+ *     Mirrors the `checkpoints clean` non-TTY refusal pattern.
+ *
+ * File-size budget: this file ≤ 200 LOC including both verbs (CLI.7
+ * deliverable). Pure runtime logic (`MemoCache.stats` / `.clear`)
+ * already lives in `runtime/durable/memo_cache.ts`; we just wire
+ * commander + format output.
+ *
+ * Imports from: commander, @libsql/client, ../../runtime/durable/index.js,
+ *   ./audit_state.js (parseDurationToMs + defaultAuditDbPath).
+ * Imported by: src/cli.ts, src/setup/cli/cache.test.ts.
+ */
+import type { Client } from '@libsql/client';
+import type { Command } from 'commander';
+export interface CacheCliDeps {
+    openClient?: (dbPath: string) => Client;
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+    isTty?: () => boolean;
+    now?: () => number;
+}
+/** Register `opensquid cache` on the parent program. */
+export declare function registerCache(parent: Command, deps?: CacheCliDeps): Command;
+//# sourceMappingURL=cache.d.ts.map

package/dist/setup/cli/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAQH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAgID,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAmB/E"}