opensquid 0.5.395

package/dist/setup/cli/triggers.js

@@ -0,0 +1,141 @@
+/**
+ * CLI.1 — `opensquid triggers list|show|fire|enable|disable`.
+ *
+ * Commander wiring + table rendering. Pack enumeration + state-file IO
+ * live in `triggers_state.ts`; synthetic-event construction lives in
+ * `triggers_synth.ts` (both split for file-size budget). Trigger id
+ * format (locked): `<pack>:<skill>:<kind>:<index>`. `fire` requires
+ * `--yes` in non-TTY contexts; TTY shows an interactive `[y/N]` prompt.
+ *
+ * Imports from: commander, picocolors, node:readline/promises,
+ *   ./triggers_state.js, ./triggers_synth.js.
+ * Imported by: src/cli.ts.
+ */
+import pc from 'picocolors';
+import { buildRows, defaultStatePath, readDisabledSet, resolveTrigger, writeDisabledSet, } from './triggers_state.js';
+import { synthFireEvent } from './triggers_synth.js';
+const defaultIsTty = () => process.stdout.isTTY === true;
+// Kubectl-style left-aligned columns, padded to widest cell.
+const COLS = ['ID', 'KIND', 'PACK', 'SKILL', 'FILTER', 'STATUS'];
+export function renderTable(rows, opts = {}) {
+    const c = pc.createColors(opts.color ?? defaultIsTty());
+    const cells = rows.map((r) => [
+        r.id,
+        r.kind,
+        r.pack,
+        r.skill,
+        r.filter,
+        r.enabled ? 'enabled' : 'disabled',
+    ]);
+    const widths = COLS.map((h, i) => Math.max(h.length, ...cells.map((row) => (row[i] ?? '').length)));
+    const pad = (s, n) => s + ' '.repeat(Math.max(0, n - s.length));
+    const lines = [COLS.map((h, i) => c.bold(pad(h, widths[i] ?? 0))).join('  ')];
+    cells.forEach((row, rIdx) => {
+        const enabled = rows[rIdx]?.enabled === true;
+        lines.push(row
+            .map((cell, i) => {
+            const padded = pad(cell, widths[i] ?? 0);
+            if (i === COLS.length - 1)
+                return enabled ? c.green(padded) : c.dim(padded);
+            return enabled ? padded : c.dim(padded);
+        })
+            .join('  '));
+    });
+    return lines.join('\n');
+}
+export function registerTriggers(parent, deps = {}) {
+    const out = deps.stdout ?? ((s) => process.stdout.write(s));
+    const err = deps.stderr ?? ((s) => process.stderr.write(s));
+    const isTty = deps.isTty ?? defaultIsTty;
+    const stateOpts = {
+        ...(deps.packsDir !== undefined && { packsDir: deps.packsDir }),
+        ...(deps.statePath !== undefined && { statePath: deps.statePath }),
+    };
+    const t = parent.command('triggers').description('Unified view of all trigger sources');
+    t.command('list')
+        .description('List all configured triggers across packs')
+        .option('--kind <kind>', 'filter by kind (schedule|webhook|file_changed|inbound_channel)')
+        .option('--pack <pack>', 'filter by pack')
+        .action(async (opts) => {
+        const rows = (await buildRows(stateOpts)).filter((r) => (opts.kind === undefined || r.kind === opts.kind) &&
+            (opts.pack === undefined || r.pack === opts.pack));
+        if (rows.length === 0) {
+            out('(no triggers found)\n');
+            return;
+        }
+        out(renderTable(rows, { color: isTty() }) + '\n');
+    });
+    t.command('show <triggerId>')
+        .description('Show full detail for one trigger')
+        .action(async (id) => {
+        const resolved = await resolveTrigger(id, stateOpts);
+        if (!resolved) {
+            err(`opensquid triggers show: no trigger with id "${id}"\n`);
+            process.exitCode = 1;
+            return;
+        }
+        out(JSON.stringify({ ...resolved.row, raw: resolved.trigger }, null, 2) + '\n');
+    });
+    t.command('fire <triggerId>')
+        .option('--yes', 'skip confirmation (required in non-TTY contexts)', false)
+        .description('Manually fire a trigger for testing')
+        .action(async (id, opts) => {
+        const resolved = await resolveTrigger(id, stateOpts);
+        if (!resolved) {
+            err(`opensquid triggers fire: no trigger with id "${id}"\n`);
+            process.exitCode = 1;
+            return;
+        }
+        if (!opts.yes && !isTty()) {
+            err(`opensquid triggers fire: refusing to dispatch "${id}" without --yes in non-interactive context\n`);
+            process.exitCode = 1;
+            return;
+        }
+        if (!opts.yes && isTty()) {
+            const rl = (await import('node:readline/promises')).createInterface({
+                input: process.stdin,
+                output: process.stdout,
+            });
+            try {
+                const answer = (await rl.question(`Fire trigger "${id}"? [y/N] `)).trim().toLowerCase();
+                if (answer !== 'y' && answer !== 'yes') {
+                    out('aborted\n');
+                    return;
+                }
+            }
+            finally {
+                rl.close();
+            }
+        }
+        const dispatch = deps.dispatch;
+        if (!dispatch) {
+            err(`opensquid triggers fire: no dispatcher wired (daemon not running)\n`);
+            process.exitCode = 1;
+            return;
+        }
+        await dispatch(synthFireEvent(resolved.row, resolved.trigger, (deps.now ?? (() => new Date()))()));
+        out(`fired ${id}\n`);
+    });
+    for (const verb of ['enable', 'disable']) {
+        t.command(`${verb} <triggerId>`)
+            .description(`${verb === 'enable' ? 'Enable' : 'Disable'} a trigger (atomic write to trigger_state.yaml)`)
+            .action(async (id) => {
+            const resolved = await resolveTrigger(id, stateOpts);
+            if (!resolved) {
+                err(`opensquid triggers ${verb}: no trigger with id "${id}"\n`);
+                process.exitCode = 1;
+                return;
+            }
+            const statePath = deps.statePath ?? defaultStatePath();
+            const disabled = await readDisabledSet(statePath);
+            if (verb === 'enable')
+                disabled.delete(id);
+            else
+                disabled.add(id);
+            await writeDisabledSet(statePath, disabled);
+            out(`${verb}d ${id}\n`);
+        });
+    }
+    return t;
+}
+//# sourceMappingURL=triggers.js.map

package/dist/setup/cli/triggers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers.js","sourceRoot":"","sources":["../../../src/setup/cli/triggers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAkBrD,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AAElE,6DAA6D;AAC7D,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAE1E,MAAM,UAAU,WAAW,CAAC,IAA2B,EAAE,OAA4B,EAAE;IACrF,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;KACnC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACjE,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,GAAG;aACA,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YACf,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,OAAwB,EAAE;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;KACnE,CAAC;IAEF,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAExF,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,eAAe,EAAE,gEAAgE,CAAC;SACzF,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,IAAsC,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YACjD,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAC1B,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAC1B,MAAM,CAAC,OAAO,EAAE,kDAAkD,EAAE,KAAK,CAAC;SAC1E,WAAW,CAAC,qCAAqC,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,IAAsB,EAAE,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1B,GAAG,CACD,kDAAkD,EAAE,8CAA8C,CACnG,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC;gBAClE,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACxF,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACvC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACjB,OAAO;gBACT,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,qEAAqE,CAAC,CAAC;YAC3E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,CACZ,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CACnF,CAAC;QACF,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEL,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QAClD,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,cAAc,CAAC;aAC7B,WAAW,CACV,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,iDAAiD,CAC7F;aACA,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;YAC3B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,sBAAsB,IAAI,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ;gBAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;;gBACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,MAAM,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5C,GAAG,CAAC,GAAG,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/setup/cli/triggers_state.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Trigger state + pack enumeration helpers for CLI.1.
+ *
+ * Split out of `triggers.ts` (file-size budget). Three concerns:
+ *
+ *   1. `readDisabledSet` / `writeDisabledSet` — load + atomically rewrite
+ *      `~/.opensquid/trigger_state.yaml`. Malformed yaml throws (no silent
+ *      fail-open).
+ *   2. `enumeratePacks` — walk a packs directory (default
+ *      `~/.opensquid/packs/`) and `loadPack` each subdir, skipping
+ *      dotfiles + non-dirs.
+ *   3. `buildRows` / `resolveTrigger` — flatten `pack.skills[].triggers[]`
+ *      into rows + lookup-by-id.
+ *
+ * Trigger id format (locked): `<pack>:<skill>:<kind>:<index>`.
+ *
+ * Imports from: node:fs/promises, yaml, packs/loader, runtime/paths,
+ *   runtime/types.
+ * Imported by: src/setup/cli/triggers.ts.
+ */
+import type { Pack, Trigger } from '../../runtime/types.js';
+export interface TriggerRow {
+    id: string;
+    pack: string;
+    skill: string;
+    kind: Trigger['kind'];
+    index: number;
+    filter: string;
+    enabled: boolean;
+}
+export declare const defaultPacksDir: () => string;
+export declare const defaultStatePath: () => string;
+export declare function readDisabledSet(statePath: string): Promise<Set<string>>;
+export declare function writeDisabledSet(statePath: string, disabled: Set<string>): Promise<void>;
+export declare function enumeratePacks(packsDir: string): Promise<Pack[]>;
+export declare function buildRows(opts: {
+    packsDir?: string;
+    statePath?: string;
+}): Promise<TriggerRow[]>;
+export declare function resolveTrigger(id: string, opts: {
+    packsDir?: string;
+    statePath?: string;
+}): Promise<{
+    row: TriggerRow;
+    trigger: Trigger;
+} | null>;
+//# sourceMappingURL=triggers_state.d.ts.map

package/dist/setup/cli/triggers_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers_state.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/triggers_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAE5D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,eAAO,MAAM,eAAe,QAAO,MAAyC,CAAC;AAC7E,eAAO,MAAM,gBAAgB,QAAO,MAAsD,CAAC;AAI3F,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAI7E;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9F;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAuBtE;AAoCD,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAYxB;AAED,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAavD"}

package/dist/setup/cli/triggers_state.js

@@ -0,0 +1,119 @@
+/**
+ * Trigger state + pack enumeration helpers for CLI.1.
+ *
+ * Split out of `triggers.ts` (file-size budget). Three concerns:
+ *
+ *   1. `readDisabledSet` / `writeDisabledSet` — load + atomically rewrite
+ *      `~/.opensquid/trigger_state.yaml`. Malformed yaml throws (no silent
+ *      fail-open).
+ *   2. `enumeratePacks` — walk a packs directory (default
+ *      `~/.opensquid/packs/`) and `loadPack` each subdir, skipping
+ *      dotfiles + non-dirs.
+ *   3. `buildRows` / `resolveTrigger` — flatten `pack.skills[].triggers[]`
+ *      into rows + lookup-by-id.
+ *
+ * Trigger id format (locked): `<pack>:<skill>:<kind>:<index>`.
+ *
+ * Imports from: node:fs/promises, yaml, packs/loader, runtime/paths,
+ *   runtime/types.
+ * Imported by: src/setup/cli/triggers.ts.
+ */
+import { readdir, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { loadPack } from '../../packs/loader.js';
+import { OPENSQUID_HOME } from '../../runtime/paths.js';
+import { readKeyedYamlList, writeKeyedYamlList } from './state_io.js';
+export const defaultPacksDir = () => join(OPENSQUID_HOME(), 'packs');
+export const defaultStatePath = () => join(OPENSQUID_HOME(), 'trigger_state.yaml');
+const isString = (v) => typeof v === 'string';
+export async function readDisabledSet(statePath) {
+    return new Set(await readKeyedYamlList(statePath, 'disabled', 'trigger_state.yaml', isString));
+}
+export async function writeDisabledSet(statePath, disabled) {
+    return writeKeyedYamlList(statePath, 'disabled', [...disabled].sort());
+}
+export async function enumeratePacks(packsDir) {
+    let entries;
+    try {
+        entries = await readdir(packsDir);
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return [];
+        throw e;
+    }
+    entries.sort();
+    const packs = [];
+    for (const e of entries) {
+        if (e.startsWith('.'))
+            continue;
+        const dir = join(packsDir, e);
+        let st;
+        try {
+            st = await stat(dir);
+        }
+        catch {
+            continue;
+        }
+        if (!st.isDirectory())
+            continue;
+        packs.push(await loadPack(dir));
+    }
+    return packs;
+}
+function filterSummary(t) {
+    switch (t.kind) {
+        case 'schedule':
+            return t.cron !== undefined ? `cron=${t.cron}` : '';
+        case 'webhook':
+            return t.path !== undefined ? `path=${t.path}` : '';
+        case 'inbound_channel':
+            return t.channel !== undefined ? `channel=${t.channel}` : '';
+        case 'file_changed':
+            return t.paths !== undefined && t.paths.length > 0 ? `paths=${t.paths.join(',')}` : '';
+        default:
+            return '';
+    }
+}
+function rowFor(pack, skill, index, disabled) {
+    const trigger = skill.triggers[index];
+    const id = `${pack.name}:${skill.name}:${trigger.kind}:${String(index)}`;
+    return {
+        id,
+        pack: pack.name,
+        skill: skill.name,
+        kind: trigger.kind,
+        index,
+        filter: filterSummary(trigger),
+        enabled: !disabled.has(id),
+    };
+}
+export async function buildRows(opts) {
+    const [packs, disabled] = await Promise.all([
+        enumeratePacks(opts.packsDir ?? defaultPacksDir()),
+        readDisabledSet(opts.statePath ?? defaultStatePath()),
+    ]);
+    const rows = [];
+    for (const pack of packs) {
+        for (const skill of pack.skills) {
+            skill.triggers.forEach((_t, i) => rows.push(rowFor(pack, skill, i, disabled)));
+        }
+    }
+    return rows;
+}
+export async function resolveTrigger(id, opts) {
+    const packs = await enumeratePacks(opts.packsDir ?? defaultPacksDir());
+    const disabled = await readDisabledSet(opts.statePath ?? defaultStatePath());
+    for (const pack of packs) {
+        for (const skill of pack.skills) {
+            for (let i = 0; i < skill.triggers.length; i += 1) {
+                const trigger = skill.triggers[i];
+                const candidate = `${pack.name}:${skill.name}:${trigger.kind}:${String(i)}`;
+                if (candidate === id)
+                    return { row: rowFor(pack, skill, i, disabled), trigger };
+            }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=triggers_state.js.map

package/dist/setup/cli/triggers_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers_state.js","sourceRoot":"","sources":["../../../src/setup/cli/triggers_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AActE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAE3F,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,OAAO,IAAI,GAAG,CACZ,MAAM,iBAAiB,CAAS,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,QAAqB;IAC7E,OAAO,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;YAAE,SAAS;QAChC,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,KAAK,iBAAiB;YACpB,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,IAAU,EACV,KAA6B,EAC7B,KAAa,EACb,QAAqB;IAErB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;IACvC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzE,OAAO;QACL,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAG/B;IACC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,cAAc,CAAC,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;QAClD,eAAe,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,IAAI,GAAiB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,IAA+C;IAE/C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;gBACnC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,IAAI,SAAS,KAAK,EAAE;oBAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/setup/cli/triggers_synth.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Synthetic `Event` construction for `opensquid triggers fire`.
+ *
+ * Split out of `triggers.ts` (file-size budget). The synthetic event keys
+ * its payload on the trigger kind so downstream handlers see the same shape
+ * they would on a real fire (e.g. webhook.path becomes the URL path,
+ * file_changed.paths[0] becomes the changed path).
+ *
+ * `source: 'cli.triggers.fire'` is stamped on each payload so handlers /
+ * audit log consumers can distinguish a manual CLI fire from a real
+ * cron/webhook/watcher event without re-introspecting their context.
+ *
+ * Imports from: runtime/types.
+ * Imported by: src/setup/cli/triggers.ts.
+ */
+import type { Event, Trigger } from '../../runtime/types.js';
+import type { TriggerRow } from './triggers.js';
+export declare function synthFireEvent(row: TriggerRow, trigger: Trigger, now: Date): Event;
+//# sourceMappingURL=triggers_synth.d.ts.map

package/dist/setup/cli/triggers_synth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers_synth.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/triggers_synth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,wBAAgB,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,GAAG,KAAK,CAqDlF"}

package/dist/setup/cli/triggers_synth.js

@@ -0,0 +1,70 @@
+/**
+ * Synthetic `Event` construction for `opensquid triggers fire`.
+ *
+ * Split out of `triggers.ts` (file-size budget). The synthetic event keys
+ * its payload on the trigger kind so downstream handlers see the same shape
+ * they would on a real fire (e.g. webhook.path becomes the URL path,
+ * file_changed.paths[0] becomes the changed path).
+ *
+ * `source: 'cli.triggers.fire'` is stamped on each payload so handlers /
+ * audit log consumers can distinguish a manual CLI fire from a real
+ * cron/webhook/watcher event without re-introspecting their context.
+ *
+ * Imports from: runtime/types.
+ * Imported by: src/setup/cli/triggers.ts.
+ */
+export function synthFireEvent(row, trigger, now) {
+    const iso = now.toISOString();
+    switch (trigger.kind) {
+        case 'schedule':
+            return {
+                kind: 'schedule',
+                scheduleId: row.id,
+                fireTime: iso,
+                triggerPayload: { source: 'cli.triggers.fire' },
+            };
+        case 'webhook':
+            return {
+                kind: 'webhook',
+                subscriptionId: row.id,
+                method: 'POST',
+                headers: { 'x-opensquid-fire': '1' },
+                body: { source: 'cli.triggers.fire' },
+                receivedAt: iso,
+            };
+        case 'inbound_channel':
+            return {
+                kind: 'inbound_channel',
+                channelUri: trigger.channel ?? row.id,
+                sender: 'cli.triggers.fire',
+                text: '',
+                receivedAt: iso,
+            };
+        case 'file_changed':
+            return {
+                kind: 'file_changed',
+                path: trigger.paths?.[0] ?? '',
+                changeKind: 'change',
+                changedAt: iso,
+            };
+        case 'tool_call':
+            return { kind: 'tool_call', tool: 'cli.fire', args: {} };
+        case 'post_tool_call':
+            // T-POSTPUSH POSTPUSH.1 — synthetic post-tool-use fire surfaces a
+            // success exit code so verify-CI-after-push-style skills can be
+            // triggered manually via `opensquid triggers fire`.
+            return { kind: 'post_tool_call', tool: 'cli.fire', args: {}, exit_code: 0 };
+        case 'prompt_submit':
+            return { kind: 'prompt_submit', prompt: '' };
+        case 'session_end':
+            return { kind: 'session_end', sessionId: 'cli.fire' };
+        case 'stop':
+            return { kind: 'stop', assistantText: '' };
+        case 'session_start':
+            // T-HANDOFF-HARDENING HH6.1 — a manual CLI fire models a fresh
+            // session begin (`startup`); the real hook also delivers resume/
+            // clear/compact, but `triggers fire` only needs one representative.
+            return { kind: 'session_start', source: 'startup', sessionId: 'cli.fire' };
+    }
+}
+//# sourceMappingURL=triggers_synth.js.map

package/dist/setup/cli/triggers_synth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers_synth.js","sourceRoot":"","sources":["../../../src/setup/cli/triggers_synth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,UAAU,cAAc,CAAC,GAAe,EAAE,OAAgB,EAAE,GAAS;IACzE,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC9B,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU;YACb,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,GAAG,CAAC,EAAE;gBAClB,QAAQ,EAAE,GAAG;gBACb,cAAc,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAChD,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE;gBACpC,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBACrC,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,UAAU,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE;gBACrC,MAAM,EAAE,mBAAmB;gBAC3B,IAAI,EAAE,EAAE;gBACR,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC9B,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC3D,KAAK,gBAAgB;YACnB,kEAAkE;YAClE,gEAAgE;YAChE,oDAAoD;YACpD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC9E,KAAK,eAAe;YAClB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/C,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACxD,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAC7C,KAAK,eAAe;YAClB,+DAA+D;YAC/D,iEAAiE;YACjE,oEAAoE;YACpE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/setup/cli/webhooks.d.ts

@@ -0,0 +1,42 @@
+/**
+ * CLI.3 — `opensquid webhooks list|subscribe|unsubscribe|test|rotate`.
+ *
+ * Thin commander wiring. Verb bodies live in `./webhooks_actions.ts`;
+ * persistence + secret-gen + URL helpers in `./webhooks_state.ts`. This
+ * file ONLY routes commander options/args into the action functions and
+ * resolves default paths from `OPENSQUID_HOME()` + the daemon webhook
+ * port default.
+ *
+ * Verb semantics (locked):
+ *
+ *   list        — kubectl-style table; SECRET column is ALWAYS [REDACTED].
+ *   subscribe   — `--skill <name>` XOR `--deliver-only` (mutex enforced
+ *                 with an explicit error message; neither + both both exit
+ *                 1). Generates 32-byte HMAC via `crypto.randomBytes`,
+ *                 stores as `literal:<hex>` URI, prints URL + secret on
+ *                 stdout (the ONE place a secret is intentionally surfaced).
+ *   unsubscribe — confirms unless `--yes`; non-TTY without `--yes` exits 1.
+ *   test        — signs `--payload` (default `{}`) with the subscription
+ *                 secret + POSTs to `http://localhost:<port>/webhook/<id>`.
+ *   rotate      — atomic: webhooks.yaml rewritten BEFORE the new secret is
+ *                 emitted on stdout. Old secret is invalidated by the same
+ *                 atomic file rename.
+ *
+ * Imports from: commander, ./webhooks_actions, ./webhooks_state.
+ * Imported by: src/cli.ts.
+ */
+import { type WebhookFetch } from './webhooks_actions.js';
+import type { Command } from 'commander';
+export type { WebhookFetch } from './webhooks_actions.js';
+export { renderListTable } from './webhooks_actions.js';
+export interface WebhooksCliDeps {
+    webhooksPath?: string;
+    port?: number;
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+    isTty?: () => boolean;
+    now?: () => Date;
+    fetch?: WebhookFetch;
+}
+export declare function registerWebhooks(parent: Command, deps?: WebhooksCliDeps): Command;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/setup/cli/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/setup/cli/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EASL,KAAK,YAAY,EAClB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAmBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAmCrF"}

package/dist/setup/cli/webhooks.js

@@ -0,0 +1,77 @@
+/**
+ * CLI.3 — `opensquid webhooks list|subscribe|unsubscribe|test|rotate`.
+ *
+ * Thin commander wiring. Verb bodies live in `./webhooks_actions.ts`;
+ * persistence + secret-gen + URL helpers in `./webhooks_state.ts`. This
+ * file ONLY routes commander options/args into the action functions and
+ * resolves default paths from `OPENSQUID_HOME()` + the daemon webhook
+ * port default.
+ *
+ * Verb semantics (locked):
+ *
+ *   list        — kubectl-style table; SECRET column is ALWAYS [REDACTED].
+ *   subscribe   — `--skill <name>` XOR `--deliver-only` (mutex enforced
+ *                 with an explicit error message; neither + both both exit
+ *                 1). Generates 32-byte HMAC via `crypto.randomBytes`,
+ *                 stores as `literal:<hex>` URI, prints URL + secret on
+ *                 stdout (the ONE place a secret is intentionally surfaced).
+ *   unsubscribe — confirms unless `--yes`; non-TTY without `--yes` exits 1.
+ *   test        — signs `--payload` (default `{}`) with the subscription
+ *                 secret + POSTs to `http://localhost:<port>/webhook/<id>`.
+ *   rotate      — atomic: webhooks.yaml rewritten BEFORE the new secret is
+ *                 emitted on stdout. Old secret is invalidated by the same
+ *                 atomic file rename.
+ *
+ * Imports from: commander, ./webhooks_actions, ./webhooks_state.
+ * Imported by: src/cli.ts.
+ */
+import { actList, actRotate, actSubscribe, actTest, actUnsubscribe, } from './webhooks_actions.js';
+import { defaultWebhookPort, defaultWebhooksPath } from './webhooks_state.js';
+export { renderListTable } from './webhooks_actions.js';
+const defaultIsTty = () => process.stdout.isTTY === true;
+function buildDeps(deps) {
+    const actionDeps = {
+        paths: {
+            webhooksPath: deps.webhooksPath ?? defaultWebhooksPath(),
+            port: deps.port ?? defaultWebhookPort(),
+        },
+        out: deps.stdout ?? ((s) => process.stdout.write(s)),
+        err: deps.stderr ?? ((s) => process.stderr.write(s)),
+        isTty: deps.isTty ?? defaultIsTty,
+        now: deps.now ?? (() => new Date()),
+    };
+    if (deps.fetch !== undefined)
+        actionDeps.fetch = deps.fetch;
+    return actionDeps;
+}
+export function registerWebhooks(parent, deps = {}) {
+    const ad = buildDeps(deps);
+    const w = parent.command('webhooks').description('Manage webhook subscriptions');
+    w.command('list')
+        .description('List all webhook subscriptions (secret column is always redacted)')
+        .action(() => actList(ad));
+    w.command('subscribe <id>')
+        .description('Create a webhook subscription (--skill XOR --deliver-only required)')
+        .requiredOption('--pack <pack>', 'pack id that owns this subscription')
+        .option('--skill <skill>', 'route inbound to this skill (skill mode)')
+        .option('--deliver-only', 'zero-LLM template render mode (SCHED.2)')
+        .option('--deliver <channel>', 'abstract channel name (alerts|audit_log|...) — deliver-only')
+        .option('--template <text>', 'Mustache template — deliver-only')
+        .option('--severity <tier>', 'critical|error|warning|info — deliver-only')
+        .option('--rate-limit <spec>', 'e.g. "60/minute"')
+        .action((id, opts) => actSubscribe(ad, id, opts));
+    w.command('unsubscribe <id>')
+        .description('Remove a webhook subscription (confirms unless --yes)')
+        .option('--yes', 'skip confirmation', false)
+        .action((id, opts) => actUnsubscribe(ad, id, opts));
+    w.command('test <id>')
+        .description('Simulate inbound POST with --payload (signs with the subscription secret)')
+        .option('--payload <json>', 'JSON payload string (default "{}")')
+        .action((id, opts) => actTest(ad, id, opts));
+    w.command('rotate <id>')
+        .description('Rotate the HMAC secret (atomic; old secret invalidated by file rename)')
+        .option('--yes', 'skip confirmation', false)
+        .action((id, opts) => actRotate(ad, id, opts));
+    return w;
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/setup/cli/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/setup/cli/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,OAAO,EACP,SAAS,EACT,YAAY,EACZ,OAAO,EACP,cAAc,GAKf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAK9E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAYxD,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AAElE,SAAS,SAAS,CAAC,IAAqB;IACtC,MAAM,UAAU,GAAe;QAC7B,KAAK,EAAE;YACL,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE;YACxD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,kBAAkB,EAAE;SACxC;QACD,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY;QACjC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;KAC1C,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,OAAwB,EAAE;IAC1E,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;IAEjF,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;SACxB,WAAW,CAAC,qEAAqE,CAAC;SAClF,cAAc,CAAC,eAAe,EAAE,qCAAqC,CAAC;SACtE,MAAM,CAAC,iBAAiB,EAAE,0CAA0C,CAAC;SACrE,MAAM,CAAC,gBAAgB,EAAE,yCAAyC,CAAC;SACnE,MAAM,CAAC,qBAAqB,EAAE,6DAA6D,CAAC;SAC5F,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;SAC/D,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;SACzE,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;SACjD,MAAM,CAAC,CAAC,EAAU,EAAE,IAAmB,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAE3E,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAC1B,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,CAAC,EAAU,EAAE,IAAsB,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAEhF,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;SACnB,WAAW,CAAC,2EAA2E,CAAC;SACxF,MAAM,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;SAChE,MAAM,CAAC,CAAC,EAAU,EAAE,IAAc,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAEjE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;SACrB,WAAW,CAAC,wEAAwE,CAAC;SACrF,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,CAAC,EAAU,EAAE,IAAsB,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAE3E,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/setup/cli/webhooks_actions.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Action implementations for CLI.3 — `opensquid webhooks …`.
+ *
+ * Split out of `webhooks.ts` (file-size budget). Each exported function is a
+ * single verb's body; `webhooks.ts` wires commander to these via thin
+ * `.action(opts => action(...))` bridges. Functions take all I/O via
+ * explicit deps (`paths`, `out`, `err`, `isTty`, `now`, optional `fetch`)
+ * so they're testable independently.
+ *
+ * Verb semantics (locked):
+ *
+ *   list        — `subscriptions:` from `~/.opensquid/webhooks.yaml`; the
+ *                 secret column is ALWAYS rendered as `[REDACTED]`. Never
+ *                 prints raw secrets at any log level. Subscribe is the
+ *                 ONLY verb that emits the freshly-generated secret on
+ *                 stdout (by design — the user needs it to configure the
+ *                 upstream sender).
+ *   subscribe   — generate HMAC, compose record, atomic write, print URL +
+ *                 secret. Requires `--skill <name>` XOR `--deliver-only`;
+ *                 errors with explicit message on neither / both.
+ *   unsubscribe — confirm (`--yes` to bypass), filter list, atomic write.
+ *                 Non-TTY context without `--yes` exits 1.
+ *   test        — simulate POST against the running daemon at the canonical
+ *                 URL. Signs body with the subscription's secret + emits the
+ *                 HTTP status. `--payload <json>` overrides the default `{}`.
+ *   rotate      — atomicity-critical. Generates new secret, writes the new
+ *                 record set to `webhooks.yaml` FIRST (rename = atomic on
+ *                 POSIX). Only AFTER the rename succeeds do we print the
+ *                 new secret to stdout. If the process dies between
+ *                 generate-secret and rename, NO state changed. If it dies
+ *                 between rename and stdout-print, the new secret is on
+ *                 disk and the user can `list` to see the rotation
+ *                 happened (re-print is not possible by design — the user
+ *                 must rotate again to see a fresh secret).
+ *
+ * Imports from: node:crypto, node:http, node:readline/promises,
+ *   ./webhooks_state.
+ * Imported by: src/setup/cli/webhooks.ts.
+ */
+import { type SubscriptionRecord } from './webhooks_state.js';
+export interface WebhooksPaths {
+    webhooksPath: string;
+    port: number;
+}
+/** Test-injectable `fetch` analogue. `undefined` falls back to global fetch. */
+export type WebhookFetch = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+}) => Promise<{
+    status: number;
+    text: () => Promise<string>;
+}>;
+export interface ActionDeps {
+    paths: WebhooksPaths;
+    out: (s: string) => void;
+    err: (s: string) => void;
+    isTty: () => boolean;
+    now: () => Date;
+    fetch?: WebhookFetch;
+}
+export declare function renderListTable(rows: readonly SubscriptionRecord[], port: number): string;
+export declare function actList(deps: ActionDeps): Promise<void>;
+export interface SubscribeOpts {
+    pack: string;
+    skill?: string;
+    deliverOnly?: boolean;
+    deliver?: string;
+    template?: string;
+    severity?: string;
+    rateLimit?: string;
+}
+/** Mode-mutex evidence: returns the error message if invalid; null otherwise. */
+export declare function checkModeMutex(opts: SubscribeOpts): string | null;
+export declare function actSubscribe(deps: ActionDeps, id: string, opts: SubscribeOpts): Promise<void>;
+export declare function actUnsubscribe(deps: ActionDeps, id: string, opts: {
+    yes: boolean;
+}): Promise<void>;
+export interface TestOpts {
+    payload?: string;
+}
+export declare function actTest(deps: ActionDeps, id: string, opts: TestOpts): Promise<void>;
+export declare function actRotate(deps: ActionDeps, id: string, opts: {
+    yes: boolean;
+}): Promise<void>;
+//# sourceMappingURL=webhooks_actions.d.ts.map