opensquid 0.5.395

package/dist/setup/cli/gate.js

@@ -0,0 +1,287 @@
+/**
+ * `opensquid gate commit|push` — the owned-boundary EXECUTE gate (GF.2 — F2 + F3 + F4).
+ *
+ * Invoked by the opensquid-managed git `pre-commit` / `pre-push` hooks. Instead of
+ * pattern-matching tool calls (a denylist over an unbounded input — the F2/F3/F4 hole),
+ * enforcement moves to the boundary git OWNS: git runs these hooks on EVERY commit/push
+ * unconditionally and the gate reads the REAL changed files (ground truth — no
+ * path-guessing) plus the same session FSM / phase / active-task state, and blocks there.
+ *
+ * Contract (total):
+ *   - NON-gated repo (no `.opensquid/active.json` opting into `coding-flow`) → ALLOW (0).
+ *     Never block an unrelated commit on the machine.
+ *   - No changed files, or a docs-only change (flow artifacts: pre-research / spec /
+ *     CHANGELOG live under docs/) → ALLOW (0).
+ *   - GATED repo with code changes: FAIL CLOSED — block (2) unless the live session has an
+ *     active task whose FSM reached `phases_complete` with a complete 7-phase ledger. A
+ *     terminal `phases_complete` is unreachable without SCOPE (guess-audit) + AUTHOR
+ *     (spec-audit) having passed, so this one check transitively enforces all three stages.
+ *   - No resolvable session in a gated repo → block (cannot prove the flow ran).
+ *
+ * The only honest escape is `git commit --no-verify`, a single closed opt-out token a
+ * narrow PreToolUse detector covers (GF.3). Session resolution out-of-band:
+ * `resolveMcpSessionId` (CLAUDE_PROJECT_DIR → project-scoped pointer → global).
+ *
+ * Imported by: src/cli.ts (registerGate); the installed git hooks (`exec opensquid gate …`).
+ */
+import { execFile } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { promisify } from 'node:util';
+import { resolveMcpSessionId } from '../../runtime/hooks/session_id.js';
+import { OPENSQUID_HOME, resolveProjectScopeRoot } from '../../runtime/paths.js';
+import { readFsmStateRaw } from '../../runtime/fsm_state.js';
+import { readActiveTask } from '../../runtime/session_state.js';
+import { isComplete, readPhaseState } from '../../runtime/workflow_phases.js';
+import { appendAttestation, readAttestedShas } from './attestations.js';
+const execFileP = promisify(execFile);
+const GATED_PACK = 'coding-flow';
+/** GDC.2 — is this invocation gated? The gate binds to the AGENT, not to a
+ *  location (user directive 2026-06-11: "all agents in any harness; git on
+ *  the terminal behaves normally"): `coding-flow` in the USER scope
+ *  (~/.opensquid/active.json — the agent's own config) gates the agent in
+ *  EVERY repo; a project-scope opt-in still works too (e.g. a team gating
+ *  one repo for all agents). Humans pass upstream regardless
+ *  (isAgentInvocation, GDC.1). */
+export async function isGatedRepo(cwd) {
+    const candidates = [join(OPENSQUID_HOME(), 'active.json')];
+    const scopeRoot = await resolveProjectScopeRoot(cwd);
+    if (scopeRoot !== null)
+        candidates.push(join(scopeRoot, 'active.json'));
+    for (const path of candidates) {
+        try {
+            const parsed = JSON.parse(await readFile(path, 'utf8'));
+            if (Array.isArray(parsed.packs) && parsed.packs.includes(GATED_PACK))
+                return true;
+        }
+        catch {
+            /* absent/malformed scope → not active here */
+        }
+    }
+    return false;
+}
+/** The files a `commit` would record (staged) or a `push` would publish (HEAD vs upstream).
+ *  Empty array on any git error — the caller treats "nothing to gate" as ALLOW. */
+async function changedFiles(boundary, cwd) {
+    const split = (s) => s
+        .split('\n')
+        .map((l) => l.trim())
+        .filter(Boolean);
+    try {
+        if (boundary === 'commit') {
+            const { stdout } = await execFileP('git', ['diff', '--cached', '--name-only'], { cwd });
+            return split(stdout);
+        }
+        // push: the commits ahead of the upstream; fall back to the last commit.
+        const { stdout } = await execFileP('git', ['diff', '--name-only', '@{u}..HEAD'], {
+            cwd,
+        }).catch(() => execFileP('git', ['diff', '--name-only', 'HEAD~1..HEAD'], { cwd }));
+        return split(stdout);
+    }
+    catch {
+        return [];
+    }
+}
+/** GDC.1 — the flow protects CODE: the same boundary set the in-session write
+ *  gates arm on (scope-lifecycle/skill.yaml:284 — keep the two lists in sync;
+ *  the drift pin in gate.test.ts enforces it). Those matchers are deliberately
+ *  loose substrings; THIS layer is "the precise boundary" (skill.yaml's own
+ *  framing), so startsWith over git's repo-relative paths is the exact form.
+ *  A change touching NONE of these is not the flow's subject (README, banner,
+ *  docs/, LICENSE, CI config…) → allowed, attested under the existing
+ *  `docs_only` wire reason (now meaning "non-code"). [] still fails closed
+ *  (commitFiles' git-error contract). */
+export const PROTECTED_PREFIXES = ['src/', 'packs/', 'test/'];
+const isDocsOnly = (files) => files.length > 0 && files.every((f) => !PROTECTED_PREFIXES.some((p) => f.startsWith(p)));
+/** GDC.1 — the gate's subject is the AGENT, never the human (user directive
+ *  2026-06-11: "I should be able to use the commands naturally"). Agent hosts
+ *  mark their spawned shells (live-probed: Claude Code sets CLAUDECODE +
+ *  AI_AGENT; codex exec sets CODEX_THREAD_ID + AI_AGENT); a human terminal
+ *  sets none. Env-scrubbing evasion is the --no-verify class — policed
+ *  in-session (GF.3), not here. Seam injectable for tests. */
+export const AGENT_ENV_MARKERS = ['AI_AGENT', 'CLAUDECODE', 'CODEX_THREAD_ID'];
+export const isAgentInvocation = (env = process.env) => AGENT_ENV_MARKERS.some((m) => (env[m] ?? '') !== '');
+function block(msg) {
+    process.stderr.write(`\n🦑 [opensquid gate] BLOCKED: ${msg}\n`);
+    return 2;
+}
+/** Does the LIVE session prove a completed flow / docs-only change right now?
+ *  Shared by the commit boundary (block decision) and the attest boundary (record
+ *  decision) so the two can never diverge. Null = not allowed. */
+export async function commitAllowedNow(sid, files, env = process.env) {
+    // GDC.1: the gate's subject is the AGENT — a human terminal (no host marker
+    // env) uses git naturally; the attestation trail still records provenance.
+    if (!isAgentInvocation(env))
+        return { allowed: true, reason: 'human' };
+    if (isDocsOnly(files))
+        return { allowed: true, reason: 'docs_only' };
+    if (sid === null)
+        return null;
+    const active = await readActiveTask(sid);
+    const fsm = await readFsmStateRaw(sid, GATED_PACK);
+    const phases = await readPhaseState(sid);
+    const done = active !== null && fsm === 'phases_complete' && isComplete(phases, active.id);
+    return done ? { allowed: true, reason: 'flow_complete' } : null;
+}
+/** The commit shas a push would publish (upstream gap; single-commit fallback). */
+async function outgoingShas(cwd) {
+    try {
+        const { stdout } = await execFileP('git', ['rev-list', '@{u}..HEAD'], { cwd }).catch(() => execFileP('git', ['rev-list', 'HEAD~1..HEAD'], { cwd }));
+        return stdout
+            .split('\n')
+            .map((l) => l.trim())
+            .filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+/** The files one commit touches. Empty on any git error (→ NOT docs-only → fail closed). */
+async function commitFiles(cwd, sha) {
+    try {
+        // --root: a root commit has no parent — without it diff-tree prints nothing and
+        // the commit would silently become unattestable.
+        const { stdout } = await execFileP('git', ['diff-tree', '--no-commit-id', '--name-only', '-r', '--root', sha], { cwd });
+        return stdout
+            .split('\n')
+            .map((l) => l.trim())
+            .filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+/** The gate decision. Returns the process exit code (0 allow, 2 block). */
+export async function runGate(boundary, cwd, env = process.env) {
+    if (!(await isGatedRepo(cwd)))
+        return 0; // unrelated repo → never block
+    const files = await changedFiles(boundary, cwd);
+    if (files.length === 0)
+        return 0; // nothing to gate (amend / empty / undetermined)
+    if (isDocsOnly(files))
+        return 0; // flow artifacts only → allow
+    // PGB.2 — push: accept when EVERY outgoing commit carries provenance (an attestation
+    // recorded when its commit passed the commit boundary, or a docs-only diff). This is
+    // what lets a fresh session push commits flow-authored in a PRIOR session without
+    // weakening fail-closed: an unattested code commit still needs the live-session proof
+    // below. Strictly more permissive than the session check alone, never less.
+    if (boundary === 'push') {
+        const scopeRoot = await resolveProjectScopeRoot(cwd);
+        if (scopeRoot !== null) {
+            const outgoing = await outgoingShas(cwd);
+            if (outgoing.length > 0) {
+                const attested = await readAttestedShas(scopeRoot);
+                const covered = await Promise.all(outgoing.map(async (sha) => attested.has(sha) || isDocsOnly(await commitFiles(cwd, sha))));
+                if (covered.every(Boolean))
+                    return 0;
+            }
+        }
+    }
+    // GDC.1 tail REORDER: commitAllowedNow decides FIRST (the human branch must
+    // dominate — a human on a fresh machine has NO resolvable session and was
+    // blocked by the old early sid-null check, the most natural human case);
+    // the no-session block below is agent-only by construction.
+    const sid = await resolveMcpSessionId();
+    const verdict = await commitAllowedNow(sid, files, env);
+    if (verdict !== null)
+        return 0;
+    if (sid === null) {
+        return block(`no resolvable opensquid session — cannot prove the SCOPE→AUTHOR→7-phase flow ran for ` +
+            `this ${boundary}. Run inside an opensquid session, or pass --no-verify only with ` +
+            `explicit authorization.`);
+    }
+    const active = await readActiveTask(sid);
+    const fsm = await readFsmStateRaw(sid, GATED_PACK);
+    return block(`this ${boundary} has code changes but the active task has not completed the ` +
+        `SCOPE→AUTHOR→7-phase flow (FSM=${fsm ?? 'none'}, active task=${active?.id ?? 'none'}). ` +
+        `Finish the flow (log all 7 phases), or pass --no-verify only with explicit authorization.`);
+}
+/** HEAD's sha, or null when it cannot be resolved (unborn branch, not a repo). */
+async function headSha(cwd) {
+    try {
+        const { stdout } = await execFileP('git', ['rev-parse', 'HEAD'], { cwd });
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** PGB.2 — the attest boundary (post-commit hook + `opensquid gate attest` CLI):
+ *  record provenance for HEAD when the live session can prove it RIGHT NOW. Never
+ *  blocks, never throws — recording is best-effort; an unattested commit simply
+ *  falls back to the session check at push time (fail-closed preserved). */
+export async function runAttest(cwd, env = process.env) {
+    try {
+        if (!(await isGatedRepo(cwd)))
+            return 0;
+        const scopeRoot = await resolveProjectScopeRoot(cwd);
+        const sha = await headSha(cwd);
+        if (scopeRoot === null || sha === null)
+            return 0;
+        const files = await commitFiles(cwd, sha);
+        if (files.length === 0)
+            return 0; // empty/merge/undetermined → nothing to attest
+        const sid = await resolveMcpSessionId();
+        const verdict = await commitAllowedNow(sid, files, env);
+        if (verdict !== null) {
+            await appendAttestation(scopeRoot, {
+                sha,
+                ...verdict,
+                session: sid ?? 'none',
+                at: new Date().toISOString(),
+            });
+        }
+        return 0;
+    }
+    catch {
+        return 0; // best-effort contract: attest never breaks a commit
+    }
+}
+/** Resolve the git work-tree root for `cwd`, or null if not in a repo. */
+export async function gitRoot(cwd) {
+    try {
+        const { stdout } = await execFileP('git', ['rev-parse', '--show-toplevel'], { cwd });
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+export function registerGate(program) {
+    const gate = program
+        .command('gate')
+        .description('Owned-boundary workflow gate invoked by the git pre-commit / pre-push hooks');
+    gate
+        .command('commit')
+        .description('pre-commit: block a code commit that has not completed the coding-flow')
+        .action(async () => {
+        process.exit(await runGate('commit', process.cwd()));
+    });
+    gate
+        .command('push')
+        .description('pre-push: block a push whose commits have not completed the coding-flow')
+        .action(async () => {
+        process.exit(await runGate('push', process.cwd()));
+    });
+    gate
+        .command('attest')
+        .description('post-commit: record flow provenance for HEAD (also run manually after amend/rebase)')
+        .action(async () => {
+        process.exit(await runAttest(process.cwd()));
+    });
+    gate
+        .command('install')
+        .description('install the opensquid pre-commit + pre-push hooks into the current git repo')
+        .action(async () => {
+        const { installGitHooks } = await import('../wizard/git-hooks.js');
+        const root = await gitRoot(process.cwd());
+        if (root === null) {
+            process.stderr.write('opensquid gate install: not inside a git work tree\n');
+            process.exit(1);
+        }
+        const res = await installGitHooks(root);
+        for (const h of res)
+            process.stdout.write(`[${h.state}] ${h.name}\n`);
+    });
+}
+//# sourceMappingURL=gate.js.map

package/dist/setup/cli/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/setup/cli/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAE9E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACtC,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC;;;;;;kCAMkC;AAClC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAa,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,SAAS,KAAK,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IACxE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;YAC/E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;mFACmF;AACnF,KAAK,UAAU,YAAY,CAAC,QAA2B,EAAE,GAAW;IAClE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAY,EAAE,CACpC,CAAC;SACE,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACxF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,yEAAyE;QACzE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC,EAAE;YAC/E,GAAG;SACJ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;yCAQyC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AACvE,MAAM,UAAU,GAAG,CAAC,KAAe,EAAW,EAAE,CAC9C,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3F;;;;;8DAK8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,CAAU,CAAC;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAW,EAAE,CACjF,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;AAEvD,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;kEAEkE;AAClE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,KAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvE,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACrE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,IAAI,GAAG,KAAK,iBAAiB,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CACxF,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CACxD,CAAC;QACF,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,GAAW;IACjD,IAAI,CAAC;QACH,gFAAgF;QAChF,iDAAiD;QACjD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,KAAK,EACL,CAAC,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,EACnE,EAAE,GAAG,EAAE,CACR,CAAC;QACF,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,QAA2B,EAC3B,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,+BAA+B;IACxE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,iDAAiD;IACnF,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,8BAA8B;IAE/D,qFAAqF;IACrF,qFAAqF;IACrF,kFAAkF;IAClF,sFAAsF;IACtF,4EAA4E;IAC5E,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAC1F,CAAC;gBACF,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,KAAK,CACV,uFAAuF;YACrF,QAAQ,QAAQ,mEAAmE;YACnF,yBAAyB,CAC5B,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,OAAO,KAAK,CACV,QAAQ,QAAQ,8DAA8D;QAC5E,kCAAkC,GAAG,IAAI,MAAM,iBAAiB,MAAM,EAAE,EAAE,IAAI,MAAM,KAAK;QACzF,2FAA2F,CAC9F,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,OAAO,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;4EAG4E;AAC5E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,SAAS,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,+CAA+C;QACjF,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,iBAAiB,CAAC,SAAS,EAAE;gBACjC,GAAG;gBACH,GAAG,OAAO;gBACV,OAAO,EAAE,GAAG,IAAI,MAAM;gBACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,qDAAqD;IACjE,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6EAA6E,CAAC,CAAC;IAC9F,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wEAAwE,CAAC;SACrF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACL,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yEAAyE,CAAC;SACtF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,qFAAqF,CACtF;SACA,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IACL,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/setup/cli/hooks.d.ts

@@ -0,0 +1,69 @@
+/**
+ * `opensquid setup wizard hooks` — write Claude Code hook entries.
+ *
+ * Two-stage wizard:
+ *   1. Discover-and-preview — read existing `~/.claude/settings.json` and
+ *      (when present) `<project>/.claude/settings.json`, project the
+ *      proposed change, render a counts summary to stdout. If `--dry-run`
+ *      was passed, exit here.
+ *   2. Commit — call `writeOpensquidHooks(...)` on each target; print
+ *      the resolved counters per file.
+ *
+ * Target selection:
+ *   - user scope: ALWAYS targeted (`~/.claude/settings.json`).
+ *   - project scope: targeted when `resolveProjectScopeRoot(cwd)` finds a
+ *     `.opensquid/` ancestor — then `<projectRoot>/../.claude/settings.json`
+ *     gets written too. Wait — `.opensquid/` lives at the project root, not
+ *     `.claude/`. So we write to `dirname(projectScopeRoot)/.claude/settings.json`.
+ *
+ * Idempotent: re-running the command after the first pass produces a
+ * byte-identical `~/.claude/settings.json` (verified by a test fixture).
+ *
+ * Flags:
+ *   --dry-run    Render counts + projected output without writing.
+ *   --user-only  Only write `~/.claude/settings.json`; skip project scope.
+ *
+ * Imports from: commander, node:path, ../wizard/settings-writer, ../../runtime/paths.
+ * Imported by: src/cli.ts (via `registerSetupWizard`).
+ */
+import { type WriteResult } from '../wizard/settings-writer.js';
+import type { Command } from 'commander';
+export interface HooksCliDeps {
+    /** Test injection — override the writer. Defaults to the real impl. */
+    writer?: (path: string) => Promise<WriteResult>;
+    /** Test injection — override the preview reader. Defaults to the real impl. */
+    reader?: (path: string) => Promise<unknown>;
+    /** Test injection — override `process.cwd()`. */
+    cwd?: () => string;
+    /** Test injection — override `homedir()` for ~/.claude resolution. */
+    home?: () => string;
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+}
+export interface HooksCliFlags {
+    dryRun?: boolean;
+    userOnly?: boolean;
+}
+/**
+ * Resolve the two candidate settings.json paths. User-scope is always
+ * present (file may not exist yet — `readSettingsJson` returns `{}`).
+ * Project-scope is null when there's no `.opensquid/` ancestor.
+ */
+export declare function resolveTargets(deps: {
+    cwd: () => string;
+    home: () => string;
+}): Promise<{
+    user: string;
+    project: string | null;
+}>;
+/**
+ * Run the hooks wizard. Pulled out of the commander action so tests can
+ * call it directly without spinning a Command tree.
+ */
+export declare function runHooksWizard(flags: HooksCliFlags, deps?: HooksCliDeps): Promise<void>;
+/**
+ * Register the `wizard hooks` subcommand under the supplied `setup` parent.
+ * Returns the wizard subgroup so callers can chain additional wizards.
+ */
+export declare function registerSetupWizard(setup: Command, deps?: HooksCliDeps): Command;
+//# sourceMappingURL=hooks.d.ts.map

package/dist/setup/cli/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,+EAA+E;IAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AA8BD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CASpD;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BjG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAapF"}

package/dist/setup/cli/hooks.js

@@ -0,0 +1,104 @@
+/**
+ * `opensquid setup wizard hooks` — write Claude Code hook entries.
+ *
+ * Two-stage wizard:
+ *   1. Discover-and-preview — read existing `~/.claude/settings.json` and
+ *      (when present) `<project>/.claude/settings.json`, project the
+ *      proposed change, render a counts summary to stdout. If `--dry-run`
+ *      was passed, exit here.
+ *   2. Commit — call `writeOpensquidHooks(...)` on each target; print
+ *      the resolved counters per file.
+ *
+ * Target selection:
+ *   - user scope: ALWAYS targeted (`~/.claude/settings.json`).
+ *   - project scope: targeted when `resolveProjectScopeRoot(cwd)` finds a
+ *     `.opensquid/` ancestor — then `<projectRoot>/../.claude/settings.json`
+ *     gets written too. Wait — `.opensquid/` lives at the project root, not
+ *     `.claude/`. So we write to `dirname(projectScopeRoot)/.claude/settings.json`.
+ *
+ * Idempotent: re-running the command after the first pass produces a
+ * byte-identical `~/.claude/settings.json` (verified by a test fixture).
+ *
+ * Flags:
+ *   --dry-run    Render counts + projected output without writing.
+ *   --user-only  Only write `~/.claude/settings.json`; skip project scope.
+ *
+ * Imports from: commander, node:path, ../wizard/settings-writer, ../../runtime/paths.
+ * Imported by: src/cli.ts (via `registerSetupWizard`).
+ */
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { resolveProjectScopeRoot } from '../../runtime/paths.js';
+import { projectOpensquidHooks, readSettingsJson, writeOpensquidHooks, } from '../wizard/settings-writer.js';
+function buildDeps(deps) {
+    return {
+        writer: deps.writer ?? writeOpensquidHooks,
+        reader: deps.reader ?? readSettingsJson,
+        cwd: deps.cwd ?? (() => process.cwd()),
+        home: deps.home ?? homedir,
+        out: deps.stdout ??
+            ((s) => {
+                process.stdout.write(s);
+            }),
+        err: deps.stderr ??
+            ((s) => {
+                process.stderr.write(s);
+            }),
+    };
+}
+/**
+ * Resolve the two candidate settings.json paths. User-scope is always
+ * present (file may not exist yet — `readSettingsJson` returns `{}`).
+ * Project-scope is null when there's no `.opensquid/` ancestor.
+ */
+export async function resolveTargets(deps) {
+    const user = join(deps.home(), '.claude', 'settings.json');
+    const projectScopeRoot = await resolveProjectScopeRoot(deps.cwd());
+    // `.opensquid/` and `.claude/` are siblings under the project root.
+    // `projectScopeRoot` is the path TO `<project>/.opensquid`; its parent
+    // is the project root itself.
+    const project = projectScopeRoot === null ? null : join(dirname(projectScopeRoot), '.claude', 'settings.json');
+    return { user, project };
+}
+/**
+ * Run the hooks wizard. Pulled out of the commander action so tests can
+ * call it directly without spinning a Command tree.
+ */
+export async function runHooksWizard(flags, deps = {}) {
+    const r = buildDeps(deps);
+    const targets = await resolveTargets({ cwd: r.cwd, home: r.home });
+    const paths = [targets.user];
+    if (targets.project !== null && flags.userOnly !== true)
+        paths.push(targets.project);
+    if (flags.dryRun === true) {
+        r.out('opensquid setup wizard hooks — DRY RUN (no files written)\n');
+        for (const p of paths) {
+            const input = (await r.reader(p));
+            const { added, replaced, preserved } = projectOpensquidHooks(input);
+            r.out(`  ${p}: would add ${String(added)}, replace ${String(replaced)}, preserve ${String(preserved)} hook group(s)\n`);
+        }
+        return;
+    }
+    r.out('opensquid setup wizard hooks — writing entries\n');
+    for (const p of paths) {
+        const result = await r.writer(p);
+        r.out(`  ${p}: added ${String(result.added)}, replaced ${String(result.replaced)}, preserved ${String(result.preserved)} hook group(s) (backup: ${result.backupPath})\n`);
+    }
+}
+/**
+ * Register the `wizard hooks` subcommand under the supplied `setup` parent.
+ * Returns the wizard subgroup so callers can chain additional wizards.
+ */
+export function registerSetupWizard(setup, deps = {}) {
+    const wizard = setup.command('wizard').description('Setup wizards (multi-step config writers)');
+    wizard
+        .command('hooks')
+        .description("Write opensquid's 4 anti-drift hook entries into Claude Code settings.json")
+        .option('--dry-run', 'preview the projected changes without writing any file', false)
+        .option('--user-only', 'skip the project-scope settings.json even when one is detected', false)
+        .action(async (flags) => {
+        await runHooksWizard(flags, deps);
+    });
+    return wizard;
+}
+//# sourceMappingURL=hooks.js.map

package/dist/setup/cli/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/setup/cli/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AA+BtC,SAAS,SAAS,CAAC,IAAkB;IACnC,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,mBAAmB;QAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,gBAAgB;QACvC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO;QAC1B,GAAG,EACD,IAAI,CAAC,MAAM;YACX,CAAC,CAAC,CAAS,EAAQ,EAAE;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC;QACJ,GAAG,EACD,IAAI,CAAC,MAAM;YACX,CAAC,CAAC,CAAS,EAAQ,EAAE;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAGpC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnE,oEAAoE;IACpE,uEAAuE;IACvE,8BAA8B;IAC9B,MAAM,OAAO,GACX,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACjG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAoB,EAAE,OAAqB,EAAE;IAChF,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnE,MAAM,KAAK,GAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAErF,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAgD,CAAC;YACjF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC,CAAC,GAAG,CACH,KAAK,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,cAAc,MAAM,CACjF,SAAS,CACV,kBAAkB,CACpB,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,GAAG,CACH,KAAK,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,MAAM,CAC7F,MAAM,CAAC,SAAS,CACjB,2BAA2B,MAAM,CAAC,UAAU,KAAK,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,OAAqB,EAAE;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC;IAEhG,MAAM;SACH,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,4EAA4E,CAAC;SACzF,MAAM,CAAC,WAAW,EAAE,wDAAwD,EAAE,KAAK,CAAC;SACpF,MAAM,CAAC,aAAa,EAAE,gEAAgE,EAAE,KAAK,CAAC;SAC9F,MAAM,CAAC,KAAK,EAAE,KAAoB,EAAE,EAAE;QACrC,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEL,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/setup/cli/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Public barrel for `src/setup/cli/*` — re-exports the named entry points
+ * the CLI binary (and external embedders) consume.
+ *
+ * Lean by design: each setup-cli subcommand registers itself via a
+ * `register<X>(parent)` function that `src/cli.ts` calls; this barrel just
+ * surfaces the names so a future consumer can `import { runChatSetupWizard }
+ * from 'opensquid/setup/cli'` without reaching into a sub-module path.
+ */
+export { runChatSetupWizard, type WizardDeps, type WizardResult } from './chat_actions.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/setup/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/setup/cli/index.js

@@ -0,0 +1,11 @@
+/**
+ * Public barrel for `src/setup/cli/*` — re-exports the named entry points
+ * the CLI binary (and external embedders) consume.
+ *
+ * Lean by design: each setup-cli subcommand registers itself via a
+ * `register<X>(parent)` function that `src/cli.ts` calls; this barrel just
+ * surfaces the names so a future consumer can `import { runChatSetupWizard }
+ * from 'opensquid/setup/cli'` without reaching into a sub-module path.
+ */
+export { runChatSetupWizard } from './chat_actions.js';
+//# sourceMappingURL=index.js.map

package/dist/setup/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/setup/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAsC,MAAM,mBAAmB,CAAC"}

package/dist/setup/cli/limits.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `opensquid limits` CLI verb group (CLI.8) — thin commander wiring.
+ *
+ * Two verbs, both backed by `RateLimiter` state (AUTO.2):
+ *
+ *   (default)     — per-pack per-trigger budget table (max + used + remaining).
+ *                   Joins pack-declared `rate_limits:` blocks with live bucket
+ *                   rows. Unconfigured triggers contribute no rows (runtime
+ *                   treats them as unlimited; CLI mirrors that).
+ *   reset <pack>  — atomic `DELETE FROM rate_limit_buckets WHERE pack_id = ?`.
+ *                   Confirmation required: `--yes` flag OR interactive y/N.
+ *                   Non-TTY without `--yes` refuses with exit 1.
+ *
+ * Pure handlers live in `./limits_state.ts` (enumerate + read + reset +
+ * render); this file owns commander wiring + libsql client lifecycle.
+ *
+ * Imports from: commander, @libsql/client, ./audit_state.js, ./limits_state.js.
+ * Imported by: src/cli.ts, src/setup/cli/limits.test.ts.
+ */
+import type { Client } from '@libsql/client';
+import type { Command } from 'commander';
+export interface LimitsCliDeps {
+    openClient?: (dbPath: string) => Client;
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+    isTty?: () => boolean;
+}
+/** Register `opensquid limits` on the parent program. */
+export declare function registerLimits(parent: Command, deps?: LimitsCliDeps): Command;
+//# sourceMappingURL=limits.d.ts.map

package/dist/setup/cli/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAcH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC;CACvB;AAoFD,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAiBjF"}