opensquid 0.5.395

package/dist/setup/cli/permissions_state.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Permission override + audit persistence helpers for CLI.4.
+ *
+ * Split out of `permissions.ts` (file-size budget). Four concerns:
+ *
+ *   1. `readOverridesFile` / `writeOverridesFile` — load + atomically rewrite
+ *      `~/.opensquid/permission_overrides.yaml`. Schema:
+ *
+ *        overrides:
+ *          - pack: ci
+ *            capability: shell_exec
+ *            target: "pnpm test"
+ *            granted_at: "2026-05-20T12:00:00.000Z"
+ *
+ *      Atomic write via `tmp + rename` matches the webhooks.yaml +
+ *      schedules.yaml + trigger_state.yaml pattern.
+ *
+ *   2. `appendAuditEntry` / `readAuditEntries` — `~/.opensquid/
+ *      permission_audit.jsonl`. CLI.4 ships the FILE-based audit-log
+ *      surface; CLI.5 replaces this with the libsql `audit_log` table
+ *      under the unified `category: capability_gate` row. The on-disk
+ *      shape here is deliberately a subset of the CLI.5 column set so
+ *      the migration is `INSERT INTO audit_log SELECT ...` and not a
+ *      schema change.
+ *
+ *   3. `enumerateManifests` — walk `~/.opensquid/packs/<id>/manifest.yaml`
+ *      and parse each through the `Manifest` schema (NOT through
+ *      `loadPack`, which discards `manifest.permissions`). Returns the
+ *      validated manifests so `permissions list` can render per-pack
+ *      declared capabilities + their user overrides side-by-side.
+ *
+ *   4. `denylistRejectionFor` — central guard used by `grant`. Returns
+ *      the human-readable rejection message if a `(capability, target)`
+ *      pair would be blocked by the sealed built-in denylist; null if
+ *      safe to persist. Honors `OPENSQUID_TRUST_BUILTIN_DENY=0` escape
+ *      flag for parity with the gate.
+ *
+ * The override file is read by the daemon at gate-construction time
+ * (wired via `CapabilityGateOpts.overrides`); the CLI is the
+ * authoritative writer. We intentionally do NOT mutate pack manifests
+ * — overrides are user-side state, separate from pack identity.
+ *
+ * Imports from: node:fs/promises, yaml, ../../packs/schemas/index,
+ *   ../../packs/yaml, ../../runtime/builtin_denylist,
+ *   ../../runtime/capability_gate, ../../runtime/paths.
+ * Imported by: src/setup/cli/permissions.ts +
+ *   src/setup/cli/permissions_actions.ts.
+ */
+import { type Capability, type ManifestType } from '../../packs/schemas/index.js';
+import type { UserOverride } from '../../runtime/capability_gate.js';
+/** One row in `permission_overrides.yaml`. */
+export interface OverrideRecord {
+    pack: string;
+    capability: Capability;
+    target: string;
+    granted_at: string;
+}
+/** One row in `permission_audit.jsonl`. Mirrors the CLI.5 audit_log columns. */
+export interface AuditEntry {
+    occurred_at_ms: number;
+    category: 'capability_gate';
+    decision: 'allowed' | 'denied' | 'prompted';
+    pack: string;
+    capability: Capability;
+    target: string;
+    source: 'declared' | 'user_approved' | 'user_override' | 'denied' | 'denylist';
+    message?: string;
+}
+export declare const defaultOverridesPath: () => string;
+export declare const defaultAuditPath: () => string;
+export declare const defaultPacksDir: () => string;
+export declare function readOverridesFile(path: string): Promise<OverrideRecord[]>;
+/**
+ * Atomic write — delegates to `writeKeyedYamlList` (T-SIC L9 byte-preserves
+ * the `overrides: []\n` empty form). Callers MUST pass the FULL desired
+ * override set; we never merge here to avoid dropping unrelated overrides
+ * on concurrent CLI invocations.
+ */
+export declare function writeOverridesFile(path: string, overrides: readonly OverrideRecord[]): Promise<void>;
+/** Convert persisted `OverrideRecord[]` into the runtime `UserOverride[]`
+ *  shape consumed by `CapabilityGateOpts.overrides`. The `granted_at`
+ *  stamp is for human audit; the gate doesn't need it. */
+export declare function toRuntimeOverrides(records: readonly OverrideRecord[]): UserOverride[];
+export declare function appendAuditEntry(path: string, entry: AuditEntry): Promise<void>;
+export declare function readAuditEntries(path: string): Promise<AuditEntry[]>;
+export interface ManifestRow {
+    packId: string;
+    manifest: ManifestType;
+}
+export declare function enumerateManifests(packsDir: string): Promise<ManifestRow[]>;
+export interface DenylistRejection {
+    message: string;
+}
+export declare function denylistRejectionFor(capability: Capability, target: string, opts?: {
+    homeDir?: string;
+    env?: NodeJS.ProcessEnv;
+}): DenylistRejection | null;
+//# sourceMappingURL=permissions_state.d.ts.map

package/dist/setup/cli/permissions_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions_state.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/permissions_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AASH,OAAO,EAAY,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAS5F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAUrE,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gFAAgF;AAChF,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,GAAG,eAAe,GAAG,eAAe,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,oBAAoB,QAAO,MACa,CAAC;AAEtD,eAAO,MAAM,gBAAgB,QAAO,MAA0D,CAAC;AAE/F,eAAO,MAAM,eAAe,QAAO,MAAyC,CAAC;AAa7E,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAO/E;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,cAAc,EAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;0DAE0D;AAC1D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,YAAY,EAAE,CAErF;AAMD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAErF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAE1E;AAOD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CA8BjF;AAmBD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GACvD,iBAAiB,GAAG,IAAI,CAmD1B"}

package/dist/setup/cli/permissions_state.js

@@ -0,0 +1,202 @@
+/**
+ * Permission override + audit persistence helpers for CLI.4.
+ *
+ * Split out of `permissions.ts` (file-size budget). Four concerns:
+ *
+ *   1. `readOverridesFile` / `writeOverridesFile` — load + atomically rewrite
+ *      `~/.opensquid/permission_overrides.yaml`. Schema:
+ *
+ *        overrides:
+ *          - pack: ci
+ *            capability: shell_exec
+ *            target: "pnpm test"
+ *            granted_at: "2026-05-20T12:00:00.000Z"
+ *
+ *      Atomic write via `tmp + rename` matches the webhooks.yaml +
+ *      schedules.yaml + trigger_state.yaml pattern.
+ *
+ *   2. `appendAuditEntry` / `readAuditEntries` — `~/.opensquid/
+ *      permission_audit.jsonl`. CLI.4 ships the FILE-based audit-log
+ *      surface; CLI.5 replaces this with the libsql `audit_log` table
+ *      under the unified `category: capability_gate` row. The on-disk
+ *      shape here is deliberately a subset of the CLI.5 column set so
+ *      the migration is `INSERT INTO audit_log SELECT ...` and not a
+ *      schema change.
+ *
+ *   3. `enumerateManifests` — walk `~/.opensquid/packs/<id>/manifest.yaml`
+ *      and parse each through the `Manifest` schema (NOT through
+ *      `loadPack`, which discards `manifest.permissions`). Returns the
+ *      validated manifests so `permissions list` can render per-pack
+ *      declared capabilities + their user overrides side-by-side.
+ *
+ *   4. `denylistRejectionFor` — central guard used by `grant`. Returns
+ *      the human-readable rejection message if a `(capability, target)`
+ *      pair would be blocked by the sealed built-in denylist; null if
+ *      safe to persist. Honors `OPENSQUID_TRUST_BUILTIN_DENY=0` escape
+ *      flag for parity with the gate.
+ *
+ * The override file is read by the daemon at gate-construction time
+ * (wired via `CapabilityGateOpts.overrides`); the CLI is the
+ * authoritative writer. We intentionally do NOT mutate pack manifests
+ * — overrides are user-side state, separate from pack identity.
+ *
+ * Imports from: node:fs/promises, yaml, ../../packs/schemas/index,
+ *   ../../packs/yaml, ../../runtime/builtin_denylist,
+ *   ../../runtime/capability_gate, ../../runtime/paths.
+ * Imported by: src/setup/cli/permissions.ts +
+ *   src/setup/cli/permissions_actions.ts.
+ */
+import { readdir, stat } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { minimatch } from 'minimatch';
+import { parseYamlFile } from '../../packs/yaml.js';
+import { Manifest } from '../../packs/schemas/index.js';
+import { BUILTIN_BINARY_DENY, BUILTIN_CHANNEL_DENY, BUILTIN_PATH_DENY, BUILTIN_SHELL_DENY, BUILTIN_SUBAGENT_DENY, trustBuiltinDeny, } from '../../runtime/builtin_denylist.js';
+import { OPENSQUID_HOME } from '../../runtime/paths.js';
+import { appendJsonlEntry, readJsonlEntries, readKeyedYamlList, writeKeyedYamlList, } from './state_io.js';
+export const defaultOverridesPath = () => join(OPENSQUID_HOME(), 'permission_overrides.yaml');
+export const defaultAuditPath = () => join(OPENSQUID_HOME(), 'permission_audit.jsonl');
+export const defaultPacksDir = () => join(OPENSQUID_HOME(), 'packs');
+// ---------------------------------------------------------------------------
+// permission_overrides.yaml — read / write
+// ---------------------------------------------------------------------------
+const isOverrideRecord = (v) => typeof v === 'object' &&
+    v !== null &&
+    typeof v.pack === 'string' &&
+    typeof v.capability === 'string' &&
+    typeof v.target === 'string';
+export async function readOverridesFile(path) {
+    return readKeyedYamlList(path, 'overrides', 'permission_overrides.yaml', isOverrideRecord);
+}
+/**
+ * Atomic write — delegates to `writeKeyedYamlList` (T-SIC L9 byte-preserves
+ * the `overrides: []\n` empty form). Callers MUST pass the FULL desired
+ * override set; we never merge here to avoid dropping unrelated overrides
+ * on concurrent CLI invocations.
+ */
+export async function writeOverridesFile(path, overrides) {
+    return writeKeyedYamlList(path, 'overrides', overrides);
+}
+/** Convert persisted `OverrideRecord[]` into the runtime `UserOverride[]`
+ *  shape consumed by `CapabilityGateOpts.overrides`. The `granted_at`
+ *  stamp is for human audit; the gate doesn't need it. */
+export function toRuntimeOverrides(records) {
+    return records.map((r) => ({ pack: r.pack, capability: r.capability, target: r.target }));
+}
+// ---------------------------------------------------------------------------
+// permission_audit.jsonl — append-only ring (CLI.4 only; CLI.5 migrates)
+// ---------------------------------------------------------------------------
+export async function appendAuditEntry(path, entry) {
+    return appendJsonlEntry(path, entry);
+}
+export async function readAuditEntries(path) {
+    return readJsonlEntries(path);
+}
+export async function enumerateManifests(packsDir) {
+    let entries;
+    try {
+        entries = await readdir(packsDir);
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return [];
+        throw e;
+    }
+    entries.sort();
+    const out = [];
+    for (const e of entries) {
+        if (e.startsWith('.'))
+            continue;
+        const dir = join(packsDir, e);
+        let st;
+        try {
+            st = await stat(dir);
+        }
+        catch {
+            continue;
+        }
+        if (!st.isDirectory())
+            continue;
+        const manifestPath = join(dir, 'manifest.yaml');
+        try {
+            const { data } = await parseYamlFile(manifestPath, Manifest);
+            out.push({ packId: e, manifest: data });
+        }
+        catch {
+            // Pack with a malformed manifest is invisible to `list`; the
+            // setup wizard surfaces those at install time. Skip-silent here.
+        }
+    }
+    return out;
+}
+export function denylistRejectionFor(capability, target, opts = {}) {
+    if (!trustBuiltinDeny(opts.env ?? process.env))
+        return null;
+    const home = opts.homeDir ?? homedir();
+    switch (capability) {
+        case 'shell_exec':
+            for (const re of BUILTIN_SHELL_DENY) {
+                if (re.test(target)) {
+                    return {
+                        message: `cannot grant shell_exec target "${target}" — matches built-in shell denylist ` +
+                            `(/${re.source}/). The sealed denylist blocks destructive patterns ` +
+                            `(rm -rf /, fork bombs, curl|sh, etc.). To override, set ` +
+                            `OPENSQUID_TRUST_BUILTIN_DENY=0 in the environment (NOT recommended — ` +
+                            `the gate will then trust pack + user overrides ONLY).`,
+                    };
+                }
+            }
+            return null;
+        case 'file_write': {
+            const expandedTarget = resolveHome(target, home);
+            for (const pattern of BUILTIN_PATH_DENY) {
+                const expandedPattern = resolveHome(pattern, home);
+                if (minimatch(expandedTarget, expandedPattern, { dot: true })) {
+                    return {
+                        message: `cannot grant file_write target "${target}" — matches built-in path denylist ` +
+                            `("${pattern}"). The sealed denylist blocks system + secret paths ` +
+                            `(/etc, /usr, ~/.ssh, ~/.aws/credentials, etc.). To override, set ` +
+                            `OPENSQUID_TRUST_BUILTIN_DENY=0 in the environment.`,
+                    };
+                }
+            }
+            return null;
+        }
+        case 'send_message':
+            return matchBuiltinGlobList(target, BUILTIN_CHANNEL_DENY, 'send_message', 'channel');
+        case 'subprocess_call':
+            return matchBuiltinGlobList(target, BUILTIN_BINARY_DENY, 'subprocess_call', 'binary');
+        case 'subagent_call':
+            return matchBuiltinGlobList(target, BUILTIN_SUBAGENT_DENY, 'subagent_call', 'subagent');
+        case 'http_request':
+            // http_request has no built-in denylist (parse-failure is the only
+            // gate-side deny; an invalid URL would never reach `grant`).
+            return null;
+        default: {
+            const _exhaustive = capability;
+            return {
+                message: `unknown capability "${String(_exhaustive)}" — cannot grant`,
+            };
+        }
+    }
+}
+function matchBuiltinGlobList(target, patterns, capability, label) {
+    for (const pattern of patterns) {
+        if (minimatch(target, pattern)) {
+            return {
+                message: `cannot grant ${capability} target "${target}" — matches built-in ${label} denylist ` +
+                    `("${pattern}"). To override, set OPENSQUID_TRUST_BUILTIN_DENY=0 in the environment.`,
+            };
+        }
+    }
+    return null;
+}
+function resolveHome(path, home) {
+    if (path === '~')
+        return resolve(home);
+    if (path.startsWith('~/'))
+        return resolve(home, path.slice(2));
+    return resolve(path);
+}
+//# sourceMappingURL=permissions_state.js.map

package/dist/setup/cli/permissions_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions_state.js","sourceRoot":"","sources":["../../../src/setup/cli/permissions_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAsC,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAsBvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAC/C,IAAI,CAAC,cAAc,EAAE,EAAE,2BAA2B,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,eAAe,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;AAE7E,8EAA8E;AAC9E,2CAA2C;AAC3C,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,CAAC,CAAU,EAAuB,EAAE,CAC3D,OAAO,CAAC,KAAK,QAAQ;IACrB,CAAC,KAAK,IAAI;IACV,OAAQ,CAAoB,CAAC,IAAI,KAAK,QAAQ;IAC9C,OAAQ,CAAoB,CAAC,UAAU,KAAK,QAAQ;IACpD,OAAQ,CAAoB,CAAC,MAAM,KAAK,QAAQ,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,OAAO,iBAAiB,CACtB,IAAI,EACJ,WAAW,EACX,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,SAAoC;IAEpC,OAAO,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED;;0DAE0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACnE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAiB;IACpE,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,OAAO,gBAAgB,CAAa,IAAI,CAAC,CAAC;AAC5C,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACvD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;YAAE,SAAS;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAoB,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,iEAAiE;QACnE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAuBD,MAAM,UAAU,oBAAoB,CAClC,UAAsB,EACtB,MAAc,EACd,OAAsD,EAAE;IAExD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IACvC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBACpC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACpB,OAAO;wBACL,OAAO,EACL,mCAAmC,MAAM,sCAAsC;4BAC/E,KAAK,EAAE,CAAC,MAAM,sDAAsD;4BACpE,0DAA0D;4BAC1D,uEAAuE;4BACvE,uDAAuD;qBAC1D,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;gBACxC,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnD,IAAI,SAAS,CAAC,cAAc,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC9D,OAAO;wBACL,OAAO,EACL,mCAAmC,MAAM,qCAAqC;4BAC9E,KAAK,OAAO,uDAAuD;4BACnE,mEAAmE;4BACnE,oDAAoD;qBACvD,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QACvF,KAAK,iBAAiB;YACpB,OAAO,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACxF,KAAK,eAAe;YAClB,OAAO,oBAAoB,CAAC,MAAM,EAAE,qBAAqB,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAC1F,KAAK,cAAc;YACjB,mEAAmE;YACnE,6DAA6D;YAC7D,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,UAAU,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,uBAAuB,MAAM,CAAC,WAAW,CAAC,kBAAkB;aACtE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAc,EACd,QAA2B,EAC3B,UAAkB,EAClB,KAAa;IAEb,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EACL,gBAAgB,UAAU,YAAY,MAAM,wBAAwB,KAAK,YAAY;oBACrF,KAAK,OAAO,yEAAyE;aACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC"}

package/dist/setup/cli/portability.d.ts

@@ -0,0 +1,68 @@
+/**
+ * T-PORTABILITY POR.1 — `opensquid export` / `import` / `rebuild`.
+ *
+ * Roadmap stage ②: migration-grade whole-home portability. The bundle carries
+ * TRUTH ONLY (the files-are-truth / projections-rebuild split the local-first
+ * design already guarantees): everything under `~/.opensquid/` EXCEPT the
+ * denylist below is exported by default (fail-portable for future truth
+ * stores); the sqlite projections are rebuilt on import via the existing
+ * idempotent entries.
+ *
+ * SECRETS (engineered, not assumed — a live bot_token was found in the export
+ * set during design review): the catalogued credential fields in config.json
+ * are REDACTED in the bundled copy (the live file is never touched), and a
+ * fail-closed key-name scan over every bundled JSON/YAML REFUSES the export
+ * on any uncatalogued secret-shaped value. Scope: structured config only —
+ * user-authored .md/inbox content is not scanned (stated in the summary).
+ *
+ * IMPORT REFUSALS (different override semantics, by design): a lived-in home
+ * refuses with NO override (no-silent-mutation; merge is v2); a newer-version
+ * bundle refuses unless --force (forward-parse tolerance is unproven).
+ * Rebuild failure never deletes extracted truth — the exact re-run commands
+ * print (all three are real verbs: migrate-memories, migrate-lessons, and
+ * the `rebuild` verb shipped here).
+ *
+ * Imports from: commander, node:fs(/promises), node:os, node:path, tar,
+ *   ../../rag/migrate_memories.js, ../../rag/wedge/migrate.js,
+ *   ../../workgraph/store.js, ../../rag/embedders/fastembed.js, yaml.
+ * Imported by: src/cli.ts.
+ */
+import type { Command } from 'commander';
+import { fastembedEmbedder } from '../../rag/embedders/fastembed.js';
+export declare function isExcluded(rel: string): boolean;
+/** Redact the catalogued credential fields (channels/config.ts schema:
+ *  chat_connections.<platform>.bot_token|app_token). Pure — operates on the
+ *  parsed copy bound for the bundle; the live file is never modified. */
+export declare function redactConfig(parsed: Record<string, unknown>): Record<string, unknown>;
+/** Fail-closed: any uncatalogued secret-shaped value in structured config
+ *  refuses the export, naming the exact path. `env:` URIs and the redaction
+ *  marker are exempt. */
+export declare function scanForSecrets(rel: string, parsed: unknown, path?: string): string[];
+/** The truth file list for a home (denylist applied). */
+export declare function buildExportList(homeDir: string): Promise<string[]>;
+export declare function runExport(opts: {
+    homeDir?: string;
+    out?: string;
+    dryRun?: boolean;
+    print?: (line: string) => void;
+}): Promise<string>;
+export declare function truthPresent(homeDir: string): Promise<string[]>;
+/** Each rebuild attempts independently; failure NEVER deletes extracted truth —
+ *  the exact re-run command records and the caller exits non-zero. */
+export declare function rebuildProjections(homeDir: string, embedder?: import("../../rag/embedders/types.js").Embedder): Promise<{
+    rebuilt: string[];
+    failed: string[];
+}>;
+export declare function runImport(opts: {
+    bundle: string;
+    homeDir?: string;
+    list?: boolean;
+    force?: boolean;
+    embedder?: ReturnType<typeof fastembedEmbedder>;
+    print?: (line: string) => void;
+}): Promise<{
+    rebuilt: string[];
+    failed: string[];
+}>;
+export declare function registerPortability(program: Command): void;
+//# sourceMappingURL=portability.d.ts.map

package/dist/setup/cli/portability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portability.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/portability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA2BrE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/C;AAUD;;yEAEyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYrF;AAMD;;yBAEyB;AACzB,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,SAAK,GAAG,MAAM,EAAE,CAoBhF;AAgBD,yDAAyD;AACzD,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIxE;AAwBD,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,CAAC,CA0ElB;AAsBD,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAWrE;AAED;sEACsE;AACtE,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,QAAQ,kDAAsB,GAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsClD;AAWD,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAuEnD;AAMD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkD1D"}