studiograph 1.3.48-next.2 → 1.3.48-next.201

package/dist/cli/commands/admin/backup.js

@@ -0,0 +1,207 @@
+/**
+ * studiograph admin backup — produce a passphrase-wrapped, manifest-aware
+ * snapshot of the entire local workspace.
+ *
+ * Pairs with `admin restore`. Distinct from `clone`:
+ *   - `clone` pulls from a running server; strips machine-specific config
+ *     (r2_config, railway, master-key, JWT secret); good for setting up
+ *     a new dev machine.
+ *   - `admin backup` snapshots the local workspace; includes secrets.db,
+ *     auth.db, r2_config, railway IDs, and a manifest of the Railway env
+ *     vars (master key, JWT secret) the owner provides at backup time;
+ *     good for "server is dead, restore me."
+ *
+ * Bundle contents (encrypted as a single .sgbackup file):
+ *   - manifest.json — env-var values + Railway IDs + workspace name + ts
+ *   - workspace/ — tar of the workspace directory, minus
+ *     node_modules/, .DS_Store, and any *.log files
+ *
+ * Crypto: passphrase → scrypt → key → xchacha20poly1305(tar.gz).
+ * See [src/cli/crypto-bundle.ts] for the wire format.
+ *
+ * Refuses to write the bundle to a destination directory unless it
+ * exists with mode 0700, or is being created (we make it 0700). Bundle
+ * file is written with mode 0600. Defense against world-readable backups
+ * that contain bcrypt hashes from auth.db.
+ */
+import { Command } from 'commander';
+import { intro, outro, log, spinner, password, isCancel, confirm } from '@clack/prompts';
+import { execFileSync } from 'child_process';
+import { existsSync, mkdirSync, writeFileSync, statSync, mkdtempSync, rmSync, readFileSync } from 'fs';
+import { join, resolve } from 'path';
+import { tmpdir } from 'os';
+import { Workspace } from '../../../core/workspace.js';
+import { sealBundle } from '../../crypto-bundle.js';
+export const adminBackupCommand = new Command('backup')
+    .description('Snapshot the local workspace into a passphrase-wrapped bundle')
+    .option('--out <path>', 'Output directory for the .sgbackup file (default: cwd)')
+    .option('--master-key <value>', 'STUDIOGRAPH_MASTER_KEY env value (also reads STUDIOGRAPH_MASTER_KEY env var)')
+    .option('--jwt-secret <value>', 'STUDIOGRAPH_JWT_SECRET env value (also reads STUDIOGRAPH_JWT_SECRET env var)')
+    .option('--passphrase-stdin', 'Read the bundle passphrase from stdin (single line)')
+    .action(async (opts) => {
+    intro('Studiograph workspace backup');
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        outro('Not a Studiograph workspace. Run from your workspace root.');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    // Step 1: gather the env-var manifest. These are NOT in the workspace
+    // dir — they live in Railway's variables. The backup is useless
+    // without them, so we make collecting them an explicit, blocking
+    // step.
+    const masterKey = opts.masterKey?.trim() || process.env.STUDIOGRAPH_MASTER_KEY?.trim();
+    const jwtSecret = opts.jwtSecret?.trim() || process.env.STUDIOGRAPH_JWT_SECRET?.trim();
+    let mk;
+    let jwt;
+    if (masterKey && jwtSecret) {
+        mk = masterKey;
+        jwt = jwtSecret;
+        log.info('Using STUDIOGRAPH_MASTER_KEY + STUDIOGRAPH_JWT_SECRET from flags/env');
+    }
+    else {
+        if (!process.stdout.isTTY) {
+            outro('No TTY. Pass --master-key and --jwt-secret, or set the matching env vars.');
+            process.exit(1);
+            return;
+        }
+        log.message('These two values live in Railway, not in the workspace. Copy them from\n' +
+            '  Railway → your service → Variables → STUDIOGRAPH_MASTER_KEY / STUDIOGRAPH_JWT_SECRET\n' +
+            'Without them the restored workspace cannot decrypt secrets.db or verify any\n' +
+            'existing JWT cookies.');
+        const mkInput = await password({ message: 'STUDIOGRAPH_MASTER_KEY:', validate: (v) => v.trim() ? undefined : 'Required' });
+        if (isCancel(mkInput)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+        const jwtInput = await password({ message: 'STUDIOGRAPH_JWT_SECRET:', validate: (v) => v.trim() ? undefined : 'Required' });
+        if (isCancel(jwtInput)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+        mk = String(mkInput).trim();
+        jwt = String(jwtInput).trim();
+    }
+    // Step 2: passphrase for the bundle.
+    let passphrase;
+    if (opts.passphraseStdin) {
+        passphrase = await readPassphraseStdin();
+    }
+    else if (process.stdout.isTTY) {
+        const pp1 = await password({
+            message: 'Bundle passphrase (min 12 chars):',
+            validate: (v) => (v.length >= 12 ? undefined : 'At least 12 characters'),
+        });
+        if (isCancel(pp1)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+        const pp2 = await password({ message: 'Confirm passphrase:' });
+        if (isCancel(pp2)) {
+            outro('Cancelled');
+            process.exit(0);
+            return;
+        }
+        if (String(pp1) !== String(pp2)) {
+            outro('Passphrases did not match.');
+            process.exit(1);
+            return;
+        }
+        passphrase = String(pp1);
+    }
+    else {
+        outro('No TTY. Pass --passphrase-stdin and pipe the passphrase to stdin.');
+        process.exit(1);
+        return;
+    }
+    // Step 3: validate output directory + file.
+    const outDir = resolve(opts.out ?? process.cwd());
+    if (!existsSync(outDir)) {
+        mkdirSync(outDir, { recursive: true, mode: 0o700 });
+    }
+    else {
+        const dirMode = statSync(outDir).mode & 0o777;
+        if ((dirMode & 0o077) !== 0) {
+            const proceed = await confirm({
+                message: `Output directory ${outDir} is mode 0${dirMode.toString(8)} — group/world readable. Continue anyway?`,
+                initialValue: false,
+            });
+            if (!proceed || isCancel(proceed)) {
+                outro('Cancelled — chmod 700 the directory and retry.');
+                process.exit(0);
+                return;
+            }
+        }
+    }
+    const fileName = `studiograph-backup-${(config.team_name || 'workspace').toLowerCase().replace(/[^a-z0-9]+/g, '-')}-${new Date().toISOString().slice(0, 10)}.sgbackup`;
+    const filePath = join(outDir, fileName);
+    if (existsSync(filePath)) {
+        outro(`Refusing to overwrite ${filePath}. Move or delete the existing bundle and retry.`);
+        process.exit(1);
+        return;
+    }
+    // Step 4: build the bundle. tar the workspace + manifest into a temp
+    // file, encrypt, write. Temp lives in os.tmpdir(); we clean up in
+    // finally even on errors.
+    const tmpRoot = mkdtempSync(join(tmpdir(), 'sg-backup-'));
+    const manifestPath = join(tmpRoot, 'manifest.json');
+    const tarPath = join(tmpRoot, 'bundle.tar.gz');
+    try {
+        const manifest = {
+            workspace_name: config.team_name || 'unknown',
+            created_at: new Date().toISOString(),
+            format_version: 1,
+            env: {
+                STUDIOGRAPH_MASTER_KEY: mk,
+                STUDIOGRAPH_JWT_SECRET: jwt,
+            },
+            railway: config.railway,
+        };
+        writeFileSync(manifestPath, JSON.stringify(manifest, null, 2), { encoding: 'utf-8', mode: 0o600 });
+        const spin = spinner();
+        spin.start('Tarring workspace...');
+        // -C tmpRoot for manifest.json + -C cwd for workspace contents.
+        // Two `-C` flags = tar resets the chdir per following path. The
+        // workspace contents land at top-level of the tar so restore is
+        // a single expand. The manifest sits beside them.
+        // Exclusions: node_modules, .DS_Store, *.log keep the bundle lean
+        // without dropping anything load-bearing.
+        execFileSync('tar', [
+            '-czf', tarPath,
+            '--exclude', 'node_modules',
+            '--exclude', '.DS_Store',
+            '--exclude', '*.log',
+            '-C', tmpRoot, 'manifest.json',
+            '-C', process.cwd(), '.',
+        ], { stdio: 'pipe' });
+        spin.stop('Tarred');
+        spin.start('Encrypting (scrypt is intentionally slow)...');
+        const plaintext = readFileSync(tarPath);
+        const ciphertext = sealBundle(plaintext, passphrase);
+        spin.stop('Encrypted');
+        writeFileSync(filePath, ciphertext, { mode: 0o600 });
+        log.success(`Wrote ${filePath} (${(ciphertext.length / 1024).toFixed(1)} KB)`);
+        log.message('Keep this file AND its passphrase separately. The bundle contains\n' +
+            'bcrypt password hashes, encrypted secrets.db, and your Railway env\n' +
+            'vars in plaintext (within the encrypted envelope) — treat it like\n' +
+            'a credential.');
+        outro('Backup complete.');
+    }
+    finally {
+        rmSync(tmpRoot, { recursive: true, force: true });
+    }
+});
+async function readPassphraseStdin() {
+    return new Promise((resolveFn, rejectFn) => {
+        let buf = '';
+        process.stdin.setEncoding('utf-8');
+        process.stdin.on('data', (chunk) => (buf += chunk));
+        process.stdin.on('end', () => resolveFn(buf.replace(/\r?\n$/, '')));
+        process.stdin.on('error', rejectFn);
+    });
+}
+//# sourceMappingURL=backup.js.map

package/dist/cli/commands/admin/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/backup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACvG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAmCpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACpD,WAAW,CAAC,+DAA+D,CAAC;KAC5E,MAAM,CAAC,cAAc,EAAE,wDAAwD,CAAC;KAChF,MAAM,CAAC,sBAAsB,EAAE,8EAA8E,CAAC;KAC9G,MAAM,CAAC,sBAAsB,EAAE,8EAA8E,CAAC;KAC9G,MAAM,CAAC,oBAAoB,EAAE,qDAAqD,CAAC;KACnF,MAAM,CAAC,KAAK,EAAE,IAAgB,EAAE,EAAE;IACjC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAE5C,sEAAsE;IACtE,gEAAgE;IAChE,iEAAiE;IACjE,QAAQ;IACR,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IACvF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IACvF,IAAI,EAAU,CAAC;IACf,IAAI,GAAW,CAAC;IAEhB,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,EAAE,GAAG,SAAS,CAAC;QACf,GAAG,GAAG,SAAS,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,KAAK,CAAC,2EAA2E,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,OAAO,CACT,0EAA0E;YACxE,0FAA0F;YAC1F,+EAA+E;YAC/E,uBAAuB,CAC1B,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3H,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5H,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,qCAAqC;IACrC,IAAI,UAAkB,CAAC;IACvB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC3C,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;YACzB,OAAO,EAAE,mCAAmC;YAC5C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC;SACzE,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,4CAA4C;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;gBAC5B,OAAO,EAAE,oBAAoB,MAAM,aAAa,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,2CAA2C;gBAC9G,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;QAC1H,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC;IACvK,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,yBAAyB,QAAQ,iDAAiD,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,0BAA0B;IAC1B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAmB;YAC/B,cAAc,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;YAC7C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,CAAC;YACjB,GAAG,EAAE;gBACH,sBAAsB,EAAE,EAAE;gBAC1B,sBAAsB,EAAE,GAAG;aAC5B;YACD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QACF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEnG,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACnC,gEAAgE;QAChE,gEAAgE;QAChE,gEAAgE;QAChE,kDAAkD;QAClD,kEAAkE;QAClE,0CAA0C;QAC1C,YAAY,CACV,KAAK,EACL;YACE,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,cAAc;YAC3B,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,OAAO;YACpB,IAAI,EAAE,OAAO,EAAE,eAAe;YAC9B,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG;SACzB,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpB,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEvB,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,SAAS,QAAQ,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/E,GAAG,CAAC,OAAO,CACT,qEAAqE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,eAAe,CAClB,CAAC;QACF,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,KAAK,UAAU,mBAAmB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;QACzC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/admin/folder.d.ts

@@ -0,0 +1,11 @@
+/**
+ * studiograph folder command
+ *
+ * Subcommands:
+ *   studiograph folder add <name>     — create a new folder
+ *   studiograph folder list           — list all folders with entity counts
+ *   studiograph folder rename <old> <new> — rename a folder
+ *   studiograph folder remove <name>  — remove a folder (with confirmation)
+ */
+import { Command } from 'commander';
+export declare const folderCommand: Command;

package/dist/cli/commands/admin/folder.js

@@ -0,0 +1,186 @@
+/**
+ * studiograph folder command
+ *
+ * Subcommands:
+ *   studiograph folder add <name>     — create a new folder
+ *   studiograph folder list           — list all folders with entity counts
+ *   studiograph folder rename <old> <new> — rename a folder
+ *   studiograph folder remove <name>  — remove a folder (with confirmation)
+ */
+import { Command } from 'commander';
+import { log, confirm } from '@clack/prompts';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { Workspace } from '../../../core/workspace.js';
+import { BaseGraphManager } from '../../../core/graph.js';
+function requireWorkspace() {
+    const workspace = new Workspace();
+    if (!workspace.isWorkspace()) {
+        console.error('Not a Studiograph workspace. Run `studiograph init` first.');
+        return null;
+    }
+    return workspace;
+}
+// ─── add ──────────────────────────────────────────────────────────────────────
+const addCommand = new Command('add')
+    .description('Create a new folder')
+    .argument('<name>', 'Folder name (kebab-case)')
+    .option('-d, --description <desc>', 'Folder description')
+    .action(async (name, opts) => {
+    const workspace = requireWorkspace();
+    if (!workspace) {
+        process.exit(1);
+        return;
+    }
+    // Validate name is kebab-case
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(name)) {
+        log.error('Folder name must be kebab-case (e.g., "client-projects")');
+        process.exit(1);
+        return;
+    }
+    try {
+        const repo = await workspace.registerRepo({
+            name,
+            description: opts.description,
+        });
+        log.success(`Folder "${repo.name}" created at ${repo.path}/`);
+    }
+    catch (err) {
+        log.error(err instanceof Error ? err.message : 'Unknown error');
+        process.exit(1);
+    }
+});
+// ─── list ─────────────────────────────────────────────────────────────────────
+const listCommand = new Command('list')
+    .description('List all folders with entity counts')
+    .action(async () => {
+    const workspace = requireWorkspace();
+    if (!workspace) {
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repos = config.repos;
+    if (repos.length === 0) {
+        log.info('No folders. Run `studiograph folder add <name>` to create one.');
+        return;
+    }
+    console.log('\nFolders\n');
+    console.log('  Name                          Entities  Description');
+    console.log('  ' + '\u2500'.repeat(72));
+    for (const repo of repos) {
+        let entityCount = 0;
+        const repoPath = join(workspace.getWorkspacePath(), repo.path);
+        if (existsSync(repoPath)) {
+            try {
+                const graph = new BaseGraphManager({
+                    repoPath,
+                    repoName: repo.name,
+                    gitUser: { id: 'cli', name: 'cli', email: 'cli@studiograph.local' },
+                });
+                entityCount = graph.list().length;
+            }
+            catch { /* non-fatal */ }
+        }
+        const rname = repo.name.padEnd(30);
+        const count = String(entityCount).padStart(4);
+        const desc = repo.description || '';
+        const suffix = repo.personal ? ' (personal)' : '';
+        console.log(`  ${rname}  ${count}  ${desc}${suffix}`);
+    }
+    console.log('');
+});
+// ─── rename ───────────────────────────────────────────────────────────────────
+const renameCommand = new Command('rename')
+    .description('Rename a folder')
+    .argument('<old-name>', 'Current folder name')
+    .argument('<new-name>', 'New folder name (kebab-case)')
+    .action(async (oldName, newName) => {
+    const workspace = requireWorkspace();
+    if (!workspace) {
+        process.exit(1);
+        return;
+    }
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(newName)) {
+        log.error('New name must be kebab-case (e.g., "client-projects")');
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repo = config.repos.find(r => r.name === oldName);
+    if (!repo) {
+        log.error(`Folder "${oldName}" not found.`);
+        process.exit(1);
+        return;
+    }
+    if (config.repos.some(r => r.name === newName)) {
+        log.error(`Folder "${newName}" already exists.`);
+        process.exit(1);
+        return;
+    }
+    const oldPath = join(workspace.getWorkspacePath(), repo.path);
+    const newPath = join(workspace.getWorkspacePath(), newName);
+    // Rename directory
+    if (existsSync(oldPath)) {
+        const { renameSync } = await import('fs');
+        renameSync(oldPath, newPath);
+    }
+    // Update config
+    repo.name = newName;
+    repo.path = newName;
+    workspace.writeConfig(config);
+    // Update .studiograph marker in the repo
+    const markerPath = join(newPath, '.studiograph');
+    if (existsSync(markerPath)) {
+        const { writeFileSync } = await import('fs');
+        writeFileSync(markerPath, JSON.stringify({ repo_name: newName }, null, 2), 'utf-8');
+    }
+    log.success(`Folder renamed: "${oldName}" → "${newName}"`);
+});
+// ─── remove ───────────────────────────────────────────────────────────────────
+const removeCommand = new Command('remove')
+    .description('Remove a folder from the workspace')
+    .argument('<name>', 'Folder name to remove')
+    .option('--delete-files', 'Also delete the folder directory from disk')
+    .action(async (name, opts) => {
+    const workspace = requireWorkspace();
+    if (!workspace) {
+        process.exit(1);
+        return;
+    }
+    const config = await workspace.loadConfig();
+    const repoIndex = config.repos.findIndex(r => r.name === name);
+    if (repoIndex === -1) {
+        log.error(`Folder "${name}" not found.`);
+        process.exit(1);
+        return;
+    }
+    const repo = config.repos[repoIndex];
+    const repoPath = join(workspace.getWorkspacePath(), repo.path);
+    const yes = await confirm({
+        message: opts.deleteFiles
+            ? `Remove folder "${name}" and delete all files at ${repo.path}/?`
+            : `Remove folder "${name}" from workspace config? (files at ${repo.path}/ will be kept)`,
+    });
+    if (!yes || typeof yes === 'symbol')
+        return;
+    // Remove from config
+    config.repos.splice(repoIndex, 1);
+    workspace.writeConfig(config);
+    if (opts.deleteFiles && existsSync(repoPath)) {
+        const { rmSync } = await import('fs');
+        rmSync(repoPath, { recursive: true, force: true });
+        log.success(`Folder "${name}" removed and files deleted.`);
+    }
+    else {
+        log.success(`Folder "${name}" removed from config. Files at ${repo.path}/ were kept.`);
+    }
+});
+// ─── parent command ───────────────────────────────────────────────────────────
+export const folderCommand = new Command('folder')
+    .description('Manage workspace folders')
+    .addCommand(addCommand)
+    .addCommand(listCommand)
+    .addCommand(renameCommand)
+    .addCommand(removeCommand);
+//# sourceMappingURL=folder.js.map

package/dist/cli/commands/admin/folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/folder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,SAAS,gBAAgB;IACvB,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAClC,WAAW,CAAC,qBAAqB,CAAC;KAClC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;KAC9C,MAAM,CAAC,0BAA0B,EAAE,oBAAoB,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA8B,EAAE,EAAE;IAC7D,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,8BAA8B;IAC9B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC;YACxC,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KACpC,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAE3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC;oBACjC,QAAQ;oBACR,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;iBACpE,CAAC,CAAC;gBACH,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACxC,WAAW,CAAC,iBAAiB,CAAC;KAC9B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;KAC7C,QAAQ,CAAC,YAAY,EAAE,8BAA8B,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,OAAe,EAAE,EAAE;IACjD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,CAAC,WAAW,OAAO,cAAc,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,WAAW,OAAO,mBAAmB,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5D,mBAAmB;IACnB,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACpB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;IACpB,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9B,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,oBAAoB,OAAO,QAAQ,OAAO,GAAG,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACxC,WAAW,CAAC,oCAAoC,CAAC;KACjD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KAC3C,MAAM,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;KACtE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA+B,EAAE,EAAE;IAC9D,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC/D,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;QACxB,OAAO,EAAE,IAAI,CAAC,WAAW;YACvB,CAAC,CAAC,kBAAkB,IAAI,6BAA6B,IAAI,CAAC,IAAI,IAAI;YAClE,CAAC,CAAC,kBAAkB,IAAI,sCAAsC,IAAI,CAAC,IAAI,iBAAiB;KAC3F,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO;IAE5C,qBAAqB;IACrB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAClC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9B,IAAI,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,8BAA8B,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,mCAAmC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;IACzF,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,0BAA0B,CAAC;KACvC,UAAU,CAAC,UAAU,CAAC;KACtB,UAAU,CAAC,WAAW,CAAC;KACvB,UAAU,CAAC,aAAa,CAAC;KACzB,UAAU,CAAC,aAAa,CAAC,CAAC"}

package/dist/cli/commands/admin/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * studiograph admin — owner-only ops surface.
+ *
+ * Subcommands accumulate here as Phase A lands:
+ *   - admin token        (A4)
+ *   - admin migrate      (A5)
+ *   - admin backup       (A6)
+ *   - admin restore      (A6)
+ *   - admin transfer-ownership   (A8)
+ *   - admin audit-workspace      (A8)
+ *
+ * In Phase D, the existing top-level user/folder/secrets/settings/audit
+ * commands also move under this parent.
+ */
+import { Command } from 'commander';
+export declare const adminCommand: Command;

package/dist/cli/commands/admin/index.js

@@ -0,0 +1,46 @@
+/**
+ * studiograph admin — owner-only ops surface.
+ *
+ * Subcommands accumulate here as Phase A lands:
+ *   - admin token        (A4)
+ *   - admin migrate      (A5)
+ *   - admin backup       (A6)
+ *   - admin restore      (A6)
+ *   - admin transfer-ownership   (A8)
+ *   - admin audit-workspace      (A8)
+ *
+ * In Phase D, the existing top-level user/folder/secrets/settings/audit
+ * commands also move under this parent.
+ */
+import { Command } from 'commander';
+import { adminTokenCommand } from './token.js';
+import { adminMigrateCommand } from './migrate.js';
+import { adminMigrateAssetsCommand } from './migrate-assets.js';
+import { adminBackupCommand } from './backup.js';
+import { adminRestoreCommand } from './restore.js';
+import { adminTransferOwnershipCommand } from './transfer-ownership.js';
+import { adminAuditWorkspaceCommand } from './audit-workspace.js';
+import { userCommand } from './user.js';
+import { folderCommand } from './folder.js';
+import { secretsCommand } from './secrets.js';
+import { settingsCommand } from './settings.js';
+import { auditCommand } from './audit.js';
+export const adminCommand = new Command('admin').description('Owner-only administrative commands');
+// Phase D1: the five workspace-management subcommands (user, folder,
+// secrets, settings, audit) moved from top-level into admin/. Top-level
+// aliases stay for one release — see src/cli/index.ts argv shim. The
+// next release drops the shim and these become admin-only.
+adminCommand.addCommand(userCommand);
+adminCommand.addCommand(folderCommand);
+adminCommand.addCommand(secretsCommand);
+adminCommand.addCommand(settingsCommand);
+adminCommand.addCommand(auditCommand);
+// New admin verbs added through Phase A.
+adminCommand.addCommand(adminTokenCommand);
+adminCommand.addCommand(adminMigrateCommand);
+adminCommand.addCommand(adminMigrateAssetsCommand);
+adminCommand.addCommand(adminBackupCommand);
+adminCommand.addCommand(adminRestoreCommand);
+adminCommand.addCommand(adminTransferOwnershipCommand);
+adminCommand.addCommand(adminAuditWorkspaceCommand);
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/commands/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;AAEnG,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,2DAA2D;AAC3D,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACrC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AACvC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACxC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACzC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAEtC,yCAAyC;AACzC,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAC3C,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAC7C,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;AACnD,YAAY,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AAC5C,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAC7C,YAAY,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;AACvD,YAAY,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC"}

package/dist/cli/commands/admin/migrate-assets.d.ts

@@ -0,0 +1,53 @@
+/**
+ * studiograph admin migrate-assets — one-time re-key of legacy asset URLs.
+ *
+ * Rewrites every legacy `/api/assets/{type}/{id}/{filename}` reference (in
+ * entity bodies AND `asset_url` frontmatter) to the immutable-key scheme
+ * `/api/assets/{assetId}/{filename}`, copying the blob old→new and recording
+ * authoritative ownership in assets.db. After this runs (and the legacy route
+ * is dropped), renaming/retyping an entity can never orphan its images.
+ *
+ * Safety:
+ *   - `--dry-run` (default OFF): reports counts + missing blobs, writes nothing.
+ *   - Idempotent: a `migration_ledger` keyed by (repo, oldKey) means a re-run
+ *     reuses the same assetId (no duplicate blobs). New-scheme (2-segment) URLs
+ *     never match the extractor, so already-migrated content is skipped.
+ *   - Refuses if a target repo has uncommitted changes (catches half-edits).
+ *   - Copies (never moves) blobs, so the legacy route keeps serving until the
+ *     separate old-blob cleanup step runs. Missing source blobs are reported
+ *     and their URL left legacy (rewriting would just relocate the 404).
+ *   - One commit per repo.
+ *
+ * This is code only — running it against production is a deliberate, backed-up
+ * step (see ~/.claude/plans/rename-carries-assets.md §6).
+ */
+import { Command } from 'commander';
+import { type AssetService } from '../../../services/assets/index.js';
+import type { AssetIndexService } from '../../../services/assets/asset-index-service.js';
+export interface AssetMigrationReport {
+    totalUrls: number;
+    migrated: number;
+    missing: number;
+    filesChanged: number;
+    missingKeys: string[];
+}
+export interface AssetMigrationDeps {
+    cwd: string;
+    repos: Array<{
+        name: string;
+        path: string;
+    }>;
+    assetService: AssetService;
+    assetIndex: AssetIndexService;
+    dryRun: boolean;
+    /** Per-repo commit hook (omit in dry-run / tests). */
+    commit?: (repoName: string, message: string) => void;
+    /** Progress callback (spinner in the CLI). */
+    onRepo?: (repoName: string, changedFiles: number) => void;
+}
+/**
+ * Core migration loop — decoupled from clack/Workspace so it's unit-testable
+ * with a real local AssetService + AssetIndexService over a temp workspace.
+ */
+export declare function runAssetMigration(deps: AssetMigrationDeps): Promise<AssetMigrationReport>;
+export declare const adminMigrateAssetsCommand: Command;