spidersan 0.2.2

package/dist/lib/license.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Spidersan License Verification
+ *
+ * Ed25519-based license verification for Pro features.
+ * Public key is embedded; private key is kept by treebird for signing.
+ */
+export declare const FREE_TIER_LIMITS: {
+    maxConcurrentBranches: number;
+};
+export type ProFeature = 'unlimited_branches' | 'mcp_server' | 'conflict_prediction' | 'team_sync';
+export interface LicenseData {
+    email: string;
+    plan: 'free' | 'pro';
+    expiresAt: string;
+    issuedAt: string;
+    features: ProFeature[];
+}
+export interface License {
+    data: LicenseData;
+    isValid: boolean;
+    isExpired: boolean;
+}
+/**
+ * Verify a license string using Ed25519 detached signature
+ */
+export declare function verifyLicense(licenseString: string): License | null;
+/**
+ * Save a license key to disk
+ */
+export declare function saveLicense(licenseString: string): boolean;
+/**
+ * Load the saved license from disk
+ */
+export declare function loadLicense(): License | null;
+/**
+ * Check if user has a valid Pro license
+ */
+export declare function isPro(): boolean;
+/**
+ * Check if a specific Pro feature is enabled
+ */
+export declare function hasFeature(feature: ProFeature): boolean;
+/**
+ * Get license status summary
+ */
+export declare function getLicenseStatus(): {
+    plan: 'free' | 'pro';
+    email?: string;
+    expiresAt?: string;
+    features: ProFeature[];
+    daysRemaining?: number;
+};
+/**
+ * Check branch limit and throw if exceeded (for free tier)
+ */
+export declare function checkBranchLimit(currentBranchCount: number): Promise<void>;
+/**
+ * Print Pro upsell message (soft sell)
+ */
+export declare function printProUpsell(feature: string): void;
+//# sourceMappingURL=license.d.ts.map

package/dist/lib/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/lib/license.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiBH,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAGF,MAAM,MAAM,UAAU,GAChB,oBAAoB,GACpB,YAAY,GACZ,qBAAqB,GACrB,WAAW,CAAC;AAElB,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACtB;AAyBD;;GAEG;AACH,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CA8BnE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,GAAG,IAAI,CAS5C;AAED;;GAEG;AACH,wBAAgB,KAAK,IAAI,OAAO,CAM/B;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAIvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI;IAChC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAqBA;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMpD"}

package/dist/lib/license.js

@@ -0,0 +1,171 @@
+/**
+ * Spidersan License Verification
+ *
+ * Ed25519-based license verification for Pro features.
+ * Public key is embedded; private key is kept by treebird for signing.
+ */
+import nacl from 'tweetnacl';
+import util from 'tweetnacl-util';
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+// License storage location
+const LICENSE_DIR = join(homedir(), '.spidersan');
+const LICENSE_FILE = join(LICENSE_DIR, 'license.key');
+// Treebird's public key for license verification (Ed25519)
+// This is the ONLY key that can sign valid licenses
+const TREEBIRD_PUBLIC_KEY = 'XqIqSlybZGKkKemgLKKl8P9MepnObhcJcxxZHtgG8/o=';
+// Free tier limits
+export const FREE_TIER_LIMITS = {
+    maxConcurrentBranches: 5,
+};
+/**
+ * Ensure license directory exists
+ */
+function ensureLicenseDir() {
+    if (!existsSync(LICENSE_DIR)) {
+        mkdirSync(LICENSE_DIR, { recursive: true });
+    }
+}
+/**
+ * Parse a license string into components
+ * Format: LICENSE_V1.BASE64_DATA.BASE64_SIGNATURE
+ */
+function parseLicenseString(licenseString) {
+    const parts = licenseString.trim().split('.');
+    if (parts.length !== 3)
+        return null;
+    const [version, data, signature] = parts;
+    if (version !== 'LICENSE_V1')
+        return null;
+    return { version, data, signature };
+}
+/**
+ * Verify a license string using Ed25519 detached signature
+ */
+export function verifyLicense(licenseString) {
+    try {
+        const parsed = parseLicenseString(licenseString);
+        if (!parsed)
+            return null;
+        const dataBytes = util.decodeBase64(parsed.data);
+        // Production mode - verify detached Ed25519 signature
+        const publicKey = util.decodeBase64(TREEBIRD_PUBLIC_KEY);
+        const signatureBytes = util.decodeBase64(parsed.signature);
+        // Verify the detached signature
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const isValid = nacl.sign.detached.verify(dataBytes, signatureBytes, publicKey);
+        if (!isValid)
+            return null;
+        const dataString = util.encodeUTF8(dataBytes);
+        const data = JSON.parse(dataString);
+        const expiresAt = new Date(data.expiresAt);
+        const isExpired = expiresAt < new Date();
+        return {
+            data,
+            isValid: true,
+            isExpired,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save a license key to disk
+ */
+export function saveLicense(licenseString) {
+    try {
+        ensureLicenseDir();
+        writeFileSync(LICENSE_FILE, licenseString.trim(), { mode: 0o600 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Load the saved license from disk
+ */
+export function loadLicense() {
+    if (!existsSync(LICENSE_FILE))
+        return null;
+    try {
+        const licenseString = readFileSync(LICENSE_FILE, 'utf-8');
+        return verifyLicense(licenseString);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if user has a valid Pro license
+ */
+export function isPro() {
+    const license = loadLicense();
+    if (!license)
+        return false;
+    if (!license.isValid)
+        return false;
+    if (license.isExpired)
+        return false;
+    return license.data.plan === 'pro';
+}
+/**
+ * Check if a specific Pro feature is enabled
+ */
+export function hasFeature(feature) {
+    const license = loadLicense();
+    if (!license || !license.isValid || license.isExpired)
+        return false;
+    return license.data.features.includes(feature);
+}
+/**
+ * Get license status summary
+ */
+export function getLicenseStatus() {
+    const license = loadLicense();
+    if (!license || !license.isValid || license.isExpired) {
+        return {
+            plan: 'free',
+            features: [],
+        };
+    }
+    const expiresAt = new Date(license.data.expiresAt);
+    const now = new Date();
+    const daysRemaining = Math.ceil((expiresAt.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+    return {
+        plan: license.data.plan,
+        email: license.data.email,
+        expiresAt: license.data.expiresAt,
+        features: license.data.features,
+        daysRemaining,
+    };
+}
+/**
+ * Check branch limit and throw if exceeded (for free tier)
+ */
+export async function checkBranchLimit(currentBranchCount) {
+    if (isPro())
+        return; // Pro has unlimited
+    if (currentBranchCount >= FREE_TIER_LIMITS.maxConcurrentBranches) {
+        console.error(`\n🕷️ Free tier limit reached: ${currentBranchCount}/${FREE_TIER_LIMITS.maxConcurrentBranches} branches`);
+        console.error('');
+        console.error('   Options:');
+        console.error('   • Clean up: spidersan merged <branch> or spidersan abandon <branch>');
+        console.error('   • Upgrade:  spidersan.dev/pro for unlimited branches');
+        console.error('');
+        process.exit(1);
+    }
+}
+/**
+ * Print Pro upsell message (soft sell)
+ */
+export function printProUpsell(feature) {
+    if (isPro())
+        return;
+    console.log('');
+    console.log(`💎 Pro tip: Upgrade for ${feature}`);
+    console.log('   spidersan.dev/pro');
+}
+//# sourceMappingURL=license.js.map

package/dist/lib/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../src/lib/license.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,gBAAgB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,2BAA2B;AAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAClD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAEtD,2DAA2D;AAC3D,oDAAoD;AACpD,MAAM,mBAAmB,GAAG,8CAA8C,CAAC;AAE3E,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,qBAAqB,EAAE,CAAC;CAC3B,CAAC;AAuBF;;GAEG;AACH,SAAS,gBAAgB;IACrB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,aAAqB;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACzC,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAE1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,aAAqB;IAC/C,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjD,sDAAsD;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE3D,gCAAgC;QAChC,8DAA8D;QAC9D,MAAM,OAAO,GAAI,IAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAgB,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAEzC,OAAO;YACH,IAAI;YACJ,OAAO,EAAE,IAAI;YACb,SAAS;SACZ,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,aAAqB;IAC7C,IAAI,CAAC;QACD,gBAAgB,EAAE,CAAC;QACnB,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACvB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,IAAI,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,aAAa,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,KAAK;IACjB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAmB;IAC1C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAO5B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO;YACH,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,EAAE;SACf,CAAC;IACN,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAE/F,OAAO;QACH,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;QACvB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;QACjC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;QAC/B,aAAa;KAChB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,kBAA0B;IAC7D,IAAI,KAAK,EAAE;QAAE,OAAO,CAAC,oBAAoB;IAEzC,IAAI,kBAAkB,IAAI,gBAAgB,CAAC,qBAAqB,EAAE,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,kCAAkC,kBAAkB,IAAI,gBAAgB,CAAC,qBAAqB,WAAW,CAAC,CAAC;QACzH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC1C,IAAI,KAAK,EAAE;QAAE,OAAO;IAEpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AACxC,CAAC"}

package/dist/lib/security.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Spidersan Security Utilities
+ *
+ * Input validation and sanitization for shell command safety.
+ * Prevents command injection attacks via agent IDs, branch names, etc.
+ *
+ * @module security
+ */
+/**
+ * Validate agent ID (e.g., "sherlocksan", "watsan-1", "agent_01")
+ * @throws Error if invalid
+ */
+export declare function validateAgentId(agentId: string): string;
+/**
+ * Validate git branch name
+ * @throws Error if invalid
+ */
+export declare function validateBranchName(branch: string): string;
+/**
+ * Validate task ID (for torrent/task commands)
+ * @throws Error if invalid
+ */
+export declare function validateTaskId(taskId: string): string;
+/**
+ * Validate file path (basic safety check)
+ * @throws Error if invalid
+ */
+export declare function validateFilePath(filePath: string): string;
+/**
+ * Sanitize free-form text by removing shell metacharacters
+ * Use for message bodies, subjects, etc.
+ */
+export declare function sanitizeText(text: string): string;
+/**
+ * Sanitize an array of file paths
+ */
+export declare function sanitizeFilePaths(files: string[]): string[];
+/**
+ * Escape a string for safe use in git commands (minimal escaping)
+ */
+export declare function escapeGitArg(arg: string): string;
+export declare const patterns: {
+    VALID_AGENT_ID: RegExp;
+    VALID_BRANCH_NAME: RegExp;
+    VALID_TASK_ID: RegExp;
+    VALID_FILE_PATH: RegExp;
+    SHELL_METACHARACTERS: RegExp;
+};
+export declare const sanitizeAgentId: typeof validateAgentId;
+export declare const sanitizeBranchName: typeof validateBranchName;
+export declare const sanitizeFilePath: typeof validateFilePath;
+export declare function isValidMessageId(messageId: string): boolean;
+//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQzD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQrD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAYzD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAU3D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIhD;AAGD,eAAO,MAAM,QAAQ;;;;;;CAMpB,CAAA;AAGD,eAAO,MAAM,eAAe,wBAAkB,CAAC;AAC/C,eAAO,MAAM,kBAAkB,2BAAqB,CAAC;AACrD,eAAO,MAAM,gBAAgB,yBAAmB,CAAC;AAIjD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D"}

package/dist/lib/security.js

@@ -0,0 +1,122 @@
+/**
+ * Spidersan Security Utilities
+ *
+ * Input validation and sanitization for shell command safety.
+ * Prevents command injection attacks via agent IDs, branch names, etc.
+ *
+ * @module security
+ */
+// Validation patterns
+const VALID_AGENT_ID = /^[a-z0-9][a-z0-9_-]{0,30}$/i;
+const VALID_BRANCH_NAME = /^[a-zA-Z0-9][a-zA-Z0-9/_.-]{0,99}$/;
+const VALID_TASK_ID = /^[a-z0-9][a-z0-9_-]{0,50}$/i;
+const VALID_FILE_PATH = /^[./a-zA-Z0-9][a-zA-Z0-9/_.@-]{0,200}$/;
+// Shell metacharacters to remove from text
+const SHELL_METACHARACTERS = /[`$(){}[\]|;&<>\\]/g;
+/**
+ * Validate agent ID (e.g., "sherlocksan", "watsan-1", "agent_01")
+ * @throws Error if invalid
+ */
+export function validateAgentId(agentId) {
+    if (!agentId || typeof agentId !== 'string') {
+        throw new Error('Agent ID is required');
+    }
+    if (!VALID_AGENT_ID.test(agentId)) {
+        throw new Error(`Invalid agent ID: "${agentId.slice(0, 20)}..." (must be alphanumeric with - or _)`);
+    }
+    return agentId;
+}
+/**
+ * Validate git branch name
+ * @throws Error if invalid
+ */
+export function validateBranchName(branch) {
+    if (!branch || typeof branch !== 'string') {
+        throw new Error('Branch name is required');
+    }
+    if (!VALID_BRANCH_NAME.test(branch)) {
+        throw new Error(`Invalid branch name: "${branch.slice(0, 20)}..."`);
+    }
+    return branch;
+}
+/**
+ * Validate task ID (for torrent/task commands)
+ * @throws Error if invalid
+ */
+export function validateTaskId(taskId) {
+    if (!taskId || typeof taskId !== 'string') {
+        throw new Error('Task ID is required');
+    }
+    if (!VALID_TASK_ID.test(taskId)) {
+        throw new Error(`Invalid task ID: "${taskId.slice(0, 20)}..." (must be alphanumeric with - or _)`);
+    }
+    return taskId;
+}
+/**
+ * Validate file path (basic safety check)
+ * @throws Error if invalid
+ */
+export function validateFilePath(filePath) {
+    if (!filePath || typeof filePath !== 'string') {
+        throw new Error('File path is required');
+    }
+    // Block path traversal
+    if (filePath.includes('..')) {
+        throw new Error('Path traversal not allowed');
+    }
+    if (!VALID_FILE_PATH.test(filePath)) {
+        throw new Error(`Invalid file path: "${filePath.slice(0, 20)}..."`);
+    }
+    return filePath;
+}
+/**
+ * Sanitize free-form text by removing shell metacharacters
+ * Use for message bodies, subjects, etc.
+ */
+export function sanitizeText(text) {
+    if (!text || typeof text !== 'string') {
+        return '';
+    }
+    return text.replace(SHELL_METACHARACTERS, '');
+}
+/**
+ * Sanitize an array of file paths
+ */
+export function sanitizeFilePaths(files) {
+    return files.filter(f => {
+        try {
+            validateFilePath(f);
+            return true;
+        }
+        catch {
+            console.warn(`⚠️ Skipping invalid file path: ${f.slice(0, 30)}...`);
+            return false;
+        }
+    });
+}
+/**
+ * Escape a string for safe use in git commands (minimal escaping)
+ */
+export function escapeGitArg(arg) {
+    // For use with execFileSync where no shell is invoked
+    // Just basic validation, no escaping needed
+    return arg;
+}
+// Export validation patterns for testing
+export const patterns = {
+    VALID_AGENT_ID,
+    VALID_BRANCH_NAME,
+    VALID_TASK_ID,
+    VALID_FILE_PATH,
+    SHELL_METACHARACTERS,
+};
+// Test-compatible aliases for vitest security tests
+export const sanitizeAgentId = validateAgentId;
+export const sanitizeBranchName = validateBranchName;
+export const sanitizeFilePath = validateFilePath;
+// Message ID validation (for mycmail commands)
+const VALID_MESSAGE_ID = /^[a-z0-9][a-z0-9_-]{0,64}$/i;
+export function isValidMessageId(messageId) {
+    return typeof messageId === 'string' && VALID_MESSAGE_ID.test(messageId);
+}
+//# sourceMappingURL=security.js.map

package/dist/lib/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sBAAsB;AACtB,MAAM,cAAc,GAAG,6BAA6B,CAAC;AACrD,MAAM,iBAAiB,GAAG,oCAAoC,CAAC;AAC/D,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,eAAe,GAAG,wCAAwC,CAAC;AAEjE,2CAA2C;AAC3C,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC7C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC7C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,uBAAuB;IACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACpB,IAAI,CAAC;YACD,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACpC,sDAAsD;IACtD,4CAA4C;IAC5C,OAAO,GAAG,CAAC;AACf,CAAC;AAED,yCAAyC;AACzC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACpB,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,oBAAoB;CACvB,CAAA;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,+CAA+C;AAC/C,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAC9C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC"}

package/dist/lib/update-check.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Update Check Module
+ *
+ * Checks npm registry for newer versions and displays update notification.
+ * Non-blocking, fails silently.
+ */
+/**
+ * Check for updates (non-blocking)
+ */
+export declare function checkForUpdates(): Promise<void>;
+//# sourceMappingURL=update-check.d.ts.map

package/dist/lib/update-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.d.ts","sourceRoot":"","sources":["../../src/lib/update-check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuEH;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAkCrD"}

package/dist/lib/update-check.js

@@ -0,0 +1,113 @@
+/**
+ * Update Check Module
+ *
+ * Checks npm registry for newer versions and displays update notification.
+ * Non-blocking, fails silently.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+const CONFIG_DIR = join(homedir(), '.spidersan');
+const UPDATE_CACHE = join(CONFIG_DIR, 'update-cache.json');
+const PACKAGE_NAME = 'spidersan';
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000; // 24 hours
+/**
+ * Get current installed version
+ */
+function getCurrentVersion() {
+    try {
+        const packagePath = new URL('../../package.json', import.meta.url);
+        const pkg = JSON.parse(readFileSync(packagePath, 'utf-8'));
+        return pkg.version;
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+/**
+ * Load update cache
+ */
+function loadCache() {
+    try {
+        if (existsSync(UPDATE_CACHE)) {
+            return JSON.parse(readFileSync(UPDATE_CACHE, 'utf-8'));
+        }
+    }
+    catch {
+        // Ignore
+    }
+    return { lastCheck: 0, latestVersion: null };
+}
+/**
+ * Save update cache
+ */
+function saveCache(cache) {
+    try {
+        if (!existsSync(CONFIG_DIR)) {
+            mkdirSync(CONFIG_DIR, { recursive: true });
+        }
+        writeFileSync(UPDATE_CACHE, JSON.stringify(cache));
+    }
+    catch {
+        // Ignore
+    }
+}
+/**
+ * Compare semantic versions
+ */
+function isNewerVersion(current, latest) {
+    const currentParts = current.split('.').map(Number);
+    const latestParts = latest.split('.').map(Number);
+    for (let i = 0; i < 3; i++) {
+        if ((latestParts[i] || 0) > (currentParts[i] || 0))
+            return true;
+        if ((latestParts[i] || 0) < (currentParts[i] || 0))
+            return false;
+    }
+    return false;
+}
+/**
+ * Check for updates (non-blocking)
+ */
+export async function checkForUpdates() {
+    try {
+        const cache = loadCache();
+        const now = Date.now();
+        // Only check once per day
+        if (now - cache.lastCheck < CHECK_INTERVAL_MS && cache.latestVersion) {
+            showUpdateNotification(cache.latestVersion);
+            return;
+        }
+        // Fetch latest version from npm (with timeout)
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 3000);
+        const response = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, { signal: controller.signal });
+        clearTimeout(timeout);
+        if (!response.ok)
+            return;
+        const data = await response.json();
+        const latestVersion = data.version;
+        // Update cache
+        saveCache({ lastCheck: now, latestVersion });
+        // Show notification if newer
+        showUpdateNotification(latestVersion);
+    }
+    catch {
+        // Silent fail - don't interrupt user
+    }
+}
+/**
+ * Display update notification if newer version available
+ */
+function showUpdateNotification(latestVersion) {
+    const currentVersion = getCurrentVersion();
+    if (isNewerVersion(currentVersion, latestVersion)) {
+        console.log('');
+        console.log('╭─────────────────────────────────────────────╮');
+        console.log(`│  🕷️ Update available: ${currentVersion} → ${latestVersion.padEnd(10)}    │`);
+        console.log('│  Run: npm install -g spidersan              │');
+        console.log('╰─────────────────────────────────────────────╯');
+        console.log('');
+    }
+}
+//# sourceMappingURL=update-check.js.map

package/dist/lib/update-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.js","sourceRoot":"","sources":["../../src/lib/update-check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACjD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAC3D,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AAO1D;;GAEG;AACH,SAAS,iBAAiB;IACtB,IAAI,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,OAAO,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,OAAO,CAAC;IACnB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,SAAS;IACd,IAAI,CAAC;QACD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,SAAS;IACb,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,KAAkB;IACjC,IAAI,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACL,SAAS;IACb,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,MAAc;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACjC,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,0BAA0B;QAC1B,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,iBAAiB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACnE,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5C,OAAO;QACX,CAAC;QAED,+CAA+C;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CACxB,8BAA8B,YAAY,SAAS,EACnD,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAChC,CAAC;QACF,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QAEzB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;QAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;QAEnC,eAAe;QACf,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;QAE7C,6BAA6B;QAC7B,sBAAsB,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACL,qCAAqC;IACzC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,aAAqB;IACjD,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAE3C,IAAI,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,4BAA4B,cAAc,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;AACL,CAAC"}

package/dist/storage/adapter.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Storage Adapter Interface
+ *
+ * Abstract interface for branch registry storage.
+ * Implementations: LocalStorage (JSON), SupabaseStorage (Pro)
+ */
+export interface Branch {
+    name: string;
+    files: string[];
+    registeredAt: Date;
+    agent?: string;
+    status: 'active' | 'completed' | 'abandoned';
+    description?: string;
+}
+export interface BranchRegistry {
+    branches: Record<string, Branch>;
+    version: string;
+    projectId?: string;
+}
+export interface StorageAdapter {
+    /**
+     * Initialize the storage (create directories, connect to DB, etc.)
+     */
+    init(): Promise<void>;
+    /**
+     * Check if storage is initialized
+     */
+    isInitialized(): Promise<boolean>;
+    /**
+     * Get all registered branches
+     */
+    list(): Promise<Branch[]>;
+    /**
+     * Register a new branch
+     */
+    register(branch: Omit<Branch, 'registeredAt'>): Promise<Branch>;
+    /**
+     * Update an existing branch
+     */
+    update(name: string, updates: Partial<Branch>): Promise<Branch | null>;
+    /**
+     * Unregister a branch
+     */
+    unregister(name: string): Promise<boolean>;
+    /**
+     * Get a specific branch by name
+     */
+    get(name: string): Promise<Branch | null>;
+    /**
+     * Find branches that touch specific files
+     */
+    findByFiles(files: string[]): Promise<Branch[]>;
+    /**
+     * Clean up old branches
+     */
+    cleanup(olderThan: Date): Promise<number>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/storage/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/storage/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,MAAM;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC3B;;OAEG;IACH,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtB;;OAEG;IACH,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAElC;;OAEG;IACH,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhE;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEvE;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3C;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhD;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7C"}

package/dist/storage/adapter.js

@@ -0,0 +1,8 @@
+/**
+ * Storage Adapter Interface
+ *
+ * Abstract interface for branch registry storage.
+ * Implementations: LocalStorage (JSON), SupabaseStorage (Pro)
+ */
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/storage/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/storage/adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/storage/factory.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Storage factory - selects the right storage backend
+ */
+import type { StorageAdapter } from './adapter.js';
+export declare function getStorage(): Promise<StorageAdapter>;
+//# sourceMappingURL=factory.d.ts.map

package/dist/storage/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/storage/factory.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGnD,wBAAsB,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,CAiB1D"}