sandstream-kit 1.1.0 → 1.2.0

package/dist/status.js

@@ -0,0 +1,119 @@
+/**
+ * kit status — a deterministic "where you are + what to do next" view across kit.
+ *
+ * Pure facts + rule-based next steps (never LLM advice). Each signal is checked
+ * against real local state: the config file, the vault declaration, the agent
+ * managed block, the memory store, the installed hooks. Designed to grow: add a
+ * StatusItem per subsystem (prescan drift, supply-chain, elevation, …).
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { loadConfig } from "./config.js";
+import { KIT_BLOCK_BEGIN } from "./agent-config.js";
+import { checkGitignore } from "./check-gitignore.js";
+import { openMemoryDb, getStats } from "./memory/db.js";
+import { getClaudeSettingsPath } from "./memory/install.js";
+// Dependency allowlist file (kept as a literal here, matching security-policy.ts
+// + post-pull-audit.ts — the convention isn't exported).
+const ALLOWLIST_FILE = ".kit-allowlist.json";
+function fileIncludes(path, needle) {
+    if (!existsSync(path))
+        return false;
+    try {
+        return readFileSync(path, "utf8").includes(needle);
+    }
+    catch {
+        return false; // unreadable — treat as absent
+    }
+}
+export async function gatherStatus(cwd = process.cwd()) {
+    const items = [];
+    const configPath = join(cwd, ".kit.toml");
+    const hasConfig = existsSync(configPath);
+    items.push({
+        key: "config",
+        label: ".kit.toml",
+        ok: hasConfig,
+        detail: hasConfig ? "present" : "missing",
+        hint: hasConfig ? undefined : "run `kit init`",
+    });
+    if (hasConfig) {
+        try {
+            const cfg = await loadConfig(configPath);
+            const hasVault = !!(cfg.secrets &&
+                (cfg.secrets.store || (cfg.secrets.keys && Object.keys(cfg.secrets.keys).length > 0)));
+            items.push({
+                key: "vault",
+                label: "secrets vault",
+                ok: hasVault,
+                detail: hasVault ? `store: ${cfg.secrets?.store ?? "keys"}` : "none configured",
+                hint: hasVault ? undefined : "configure [secrets] + `kit secrets`",
+            });
+            const toolCount = cfg.tools ? Object.keys(cfg.tools).length : 0;
+            items.push({
+                key: "tools",
+                label: "tools",
+                ok: toolCount > 0,
+                detail: `${toolCount} declared`,
+                hint: toolCount > 0 ? undefined : "declare [tools] in .kit.toml",
+            });
+        }
+        catch {
+            // malformed config — skip the derived checks rather than crash
+        }
+    }
+    // Secret hygiene — does .gitignore cover the sensitive paths kit cares about?
+    const ignore = await checkGitignore(cwd);
+    items.push({
+        key: "gitignore",
+        label: "gitignore hygiene",
+        ok: ignore.missingPatterns.length === 0,
+        detail: ignore.missingPatterns.length === 0
+            ? "sensitive paths covered"
+            : `${ignore.missingPatterns.length} sensitive path(s) unignored`,
+        hint: ignore.missingPatterns.length === 0 ? undefined : "run `kit security check-gitignore --fix`",
+    });
+    // Supply chain — is there a dependency allowlist to enforce on install?
+    const hasAllowlist = existsSync(join(cwd, ALLOWLIST_FILE));
+    items.push({
+        key: "dep-policy",
+        label: "dependency policy",
+        ok: hasAllowlist,
+        detail: hasAllowlist ? "allowlist present" : "no allowlist",
+        hint: hasAllowlist ? undefined : "run `kit security policy init`",
+    });
+    const wired = fileIncludes(join(cwd, "CLAUDE.md"), KIT_BLOCK_BEGIN);
+    items.push({
+        key: "agent-config",
+        label: "agent wired",
+        ok: wired,
+        detail: wired ? "CLAUDE.md kit block present" : "not wired",
+        hint: wired ? undefined : "run `kit agent-config`",
+    });
+    let messages = 0;
+    try {
+        const db = openMemoryDb();
+        messages = getStats(db).messages;
+        db.close();
+    }
+    catch {
+        // memory store unavailable — reported as 0
+    }
+    items.push({
+        key: "memory",
+        label: "memory indexed",
+        ok: messages > 0,
+        detail: `${messages} messages`,
+        hint: messages > 0 ? undefined : "run `kit memory index`",
+    });
+    const hooked = fileIncludes(getClaudeSettingsPath(), "kit memory hook");
+    items.push({
+        key: "memory-hooks",
+        label: "memory hooks",
+        ok: hooked,
+        detail: hooked ? "installed" : "not installed",
+        hint: hooked ? undefined : "run `kit memory install`",
+    });
+    return items;
+}
+//# sourceMappingURL=status.js.map

package/dist/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,iFAAiF;AACjF,yDAAyD;AACzD,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAW7C,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC5D,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC;QACT,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,WAAW;QAClB,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACzC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;KAC/C,CAAC,CAAC;IAEH,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,CACjB,GAAG,CAAC,OAAO;gBACX,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CACtF,CAAC;YACF,KAAK,CAAC,IAAI,CAAC;gBACT,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,eAAe;gBACtB,EAAE,EAAE,QAAQ;gBACZ,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,iBAAiB;gBAC/E,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qCAAqC;aACnE,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC;gBACT,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,OAAO;gBACd,EAAE,EAAE,SAAS,GAAG,CAAC;gBACjB,MAAM,EAAE,GAAG,SAAS,WAAW;gBAC/B,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC;QACT,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,mBAAmB;QAC1B,EAAE,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QACvC,MAAM,EACJ,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YACjC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,8BAA8B;QACpE,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0CAA0C;KACnG,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC;QACT,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,mBAAmB;QAC1B,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc;QAC3D,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC;KAClE,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC;QACT,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,aAAa;QACpB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,WAAW;QAC3D,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB;KACnD,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;QAC1B,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;QACjC,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,gBAAgB;QACvB,EAAE,EAAE,QAAQ,GAAG,CAAC;QAChB,MAAM,EAAE,GAAG,QAAQ,WAAW;QAC9B,IAAI,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB;KAC1D,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC;QACT,GAAG,EAAE,cAAc;QACnB,KAAK,EAAE,cAAc;QACrB,EAAE,EAAE,MAAM;QACV,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;QAC9C,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;KACtD,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandstream-kit",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "developer kit. zero LLM, local-first, multi-vault. one command from git clone to working dev environment.",
   "license": "MIT",
   "type": "module",