wyrm-mcp 7.2.1 → 7.2.2

package/dist/cloud-profile.js

@@ -1,138 +1 @@
-/**
- * v7 F4 (T042) — Cloud parity v2: the cloud-capable subset of the STANDARD tier.
- *
- * Cloud parity v1 (`cloud-tools.json`, contract `wyrm-cloud-memory-v1`) was a
- * HAND-CURATED 9-name list: the memory/search/truth/quest/stats core the
- * mcp.wyrm.ghosts.lk edge first shipped. v2 makes the cloud subset a
- * MEASURABLE PROPERTY of the frozen surface instead of a guess (spec FR-4 /
- * §7 criterion 12, Article V — "per-tool cloudSupported flags generated from
- * the registry, cannot lie; cloud parity is a measurable property").
- *
- * THE v2 RULE (spec.md:334-336):
- *
- *     cloud-capable v2 = STANDARD tier
- *                        − device-local
- *                        − egress
- *                        − subprocess
- *
- * The three exclusion classes below are the tools a STATELESS WORKER cannot
- * honestly serve against a remote D1/KV-backed store:
- *
- *  - SUBPROCESS — spawns a local OS process / long-running loop / index build
- *    on the operator's machine. Meaningless on the edge (no process to spawn,
- *    no local Ollama, no daemon). wyrm_run (the agent run loop) +
- *    wyrm_maintenance (reindex / vector-backfill).
- *
- *  - EGRESS — reaches OUT to another network endpoint (a peer Worker, a third
- *    -party MCP server, a federation peer, a companion model). The edge is the
- *    server, not a client; it must not fan out. wyrm_call_external + wyrm_mcp
- *    (outbound MCP client) + wyrm_replication (peer push/pull) + wyrm_share
- *    (federation egress) + buddy (companion external replies).
- *
- *  - DEVICE-LOCAL — semantically bound to THIS machine / process / on-disk
- *    session, or a multi-action shim with a device-local action that touches
- *    the local filesystem. A stateless Worker has no "this device", no local
- *    agent presence, no per-process OODA loop, no server-self capability report
- *    that matches the edge's surface, no local disk to write SKILL.md to, and no
- *    local tree to scan. wyrm_act + wyrm_presence + wyrm_session +
- *    wyrm_capabilities + wyrm_skill (create/register write SKILL.md) +
- *    wyrm_project (scan walks the tree; sync reads/writes local .wyrm folders).
- *
- * Everything else on the standard tier is a pure local-DB memory op (capture /
- * recall / search / truth / quest / goal / review / entity / reference / audit /
- * causality / design-token / stats / failure / context) — the edge serves these
- * against its remote store with identical semantics. (NOTE: skill and project
- * are NOT in this list — their multi-action surfaces include a device-local FS
- * write/scan, so they are excluded above, not served pure-DB.)
- *
- * The sets are CLOSED over the standard tier: cloud-profile.test.ts asserts
- * every excluded name is a standard-tier member and the three classes are
- * disjoint, so the subtraction can never silently include a legacy/core-only
- * name or double-count. The measured v2 count is whatever this derivation
- * yields — published, never asserted to a magic literal beyond the spec's
- * ~18-22 sanity band.
- *
- * Article V (vendor-neutral): the exclusion is by TOOL CAPABILITY CLASS, never
- * by client/vendor name. Article VI (back-compat): every v1 name still
- * resolves under v2 — the 9 v1 names are either v2 members or aliases whose
- * target is a v2 member (cloudV1ResolvesUnderV2).
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-import { FROZEN_TOOLS } from './tool-profiles.js';
-/** Contract names. v1 stays for back-compat; v2 is the expanded subset. */
-export const CLOUD_CONTRACT_V1 = 'wyrm-cloud-memory-v1';
-export const CLOUD_CONTRACT_V2 = 'wyrm-cloud-memory-v2';
-/**
- * SUBPROCESS — spawns a local process / loop / index build. Cannot run on a
- * stateless edge Worker.
- */
-export const CLOUD_EXCLUDE_SUBPROCESS = new Set([
-    'wyrm_run', // the agent run loop (start|join|status|debrief|end)
-    'wyrm_maintenance', // reindex / vector-backfill — local index build
-]);
-/**
- * EGRESS — reaches out to another network endpoint. The edge is the server,
- * not a fan-out client.
- */
-export const CLOUD_EXCLUDE_EGRESS = new Set([
-    'wyrm_call_external', // call a registered external MCP tool
-    'wyrm_mcp', // outbound MCP client management (register/list/tools/disable)
-    'wyrm_replication', // peer push/pull + the Live-Memory event mesh
-    'wyrm_share', // cross-device federation share/unshare
-    'buddy', // companion buddy — collects external buddy replies
-]);
-/**
- * DEVICE-LOCAL — bound to THIS machine / process / on-disk session; has no
- * meaning on a stateless Worker.
- */
-export const CLOUD_EXCLUDE_DEVICE_LOCAL = new Set([
-    'wyrm_act', // the per-process OODA-loop dispatcher
-    'wyrm_presence', // local agent presence on this device
-    'wyrm_session', // on-disk session lifecycle (start/update/rehydrate)
-    'wyrm_capabilities', // server-self capability report (matches THIS surface)
-    // Multi-action noun shims whose ADVERTISED surface includes a device-local
-    // action that writes/scans the operator's local filesystem — meaningless on a
-    // stateless edge Worker. Under the COARSE name-level v2 derivation, a tool
-    // whose surface includes ANY device-local action must NOT be declared
-    // cloudSupported, even though some of its other actions are pure-DB. Declaring
-    // them cloud-capable would make the v2 manifest LIE about parity (Article V).
-    'wyrm_skill', // action=create/register writes SKILL.md under WYRM_SKILLS_DIR (skill-author.ts:deploySkill)
-    'wyrm_project', // action=scan walks the local tree; action=sync reads/writes local .wyrm folders
-]);
-/** The union of all three exclusion classes (device-local ∪ egress ∪ subprocess). */
-export const CLOUD_EXCLUDED_FROM_STANDARD = new Set([
-    ...CLOUD_EXCLUDE_SUBPROCESS,
-    ...CLOUD_EXCLUDE_EGRESS,
-    ...CLOUD_EXCLUDE_DEVICE_LOCAL,
-]);
-/**
- * THE cloud-capable v2 set — STANDARD tier minus the three exclusion classes.
- * Computed (never hand-listed) so the manifest cannot lie about parity.
- */
-export const CLOUD_CAPABLE_V2 = new Set([...FROZEN_TOOLS].filter((name) => !CLOUD_EXCLUDED_FROM_STANDARD.has(name)));
-/** Sorted array view (codepoint order) — deterministic iteration / manifests. */
-export const CLOUD_CAPABLE_V2_NAMES = [...CLOUD_CAPABLE_V2].sort();
-/** The measured v2 tool count (whatever the derivation yields). */
-export const CLOUD_CAPABLE_V2_COUNT = CLOUD_CAPABLE_V2.size;
-/**
- * v1 → v2 resolution check (Article VI): every v1 cloud name must still be
- * answered under v2 — either it IS a v2 member, or it is a hidden alias whose
- * routed target is a v2 member. `aliasTargetOf` is injected (the alias spine
- * lives in handlers/aliases.ts; passing it keeps cloud-profile.ts free of a
- * registry import cycle).
- */
-export function cloudV1ResolvesUnderV2(v1Names, aliasTargetOf) {
-    const unresolved = [];
-    for (const name of v1Names) {
-        if (CLOUD_CAPABLE_V2.has(name))
-            continue;
-        const target = aliasTargetOf(name);
-        if (target && CLOUD_CAPABLE_V2.has(target))
-            continue;
-        unresolved.push(name);
-    }
-    return { resolves: unresolved.length === 0, unresolved };
-}
-//# sourceMappingURL=cloud-profile.js.map
+import{FROZEN_TOOLS as s}from"./tool-profiles.js";const E="wyrm-cloud-memory-v1",O="wyrm-cloud-memory-v2",c=new Set(["wyrm_run","wyrm_maintenance"]),C=new Set(["wyrm_call_external","wyrm_mcp","wyrm_replication","wyrm_share","buddy"]),m=new Set(["wyrm_act","wyrm_presence","wyrm_session","wyrm_capabilities","wyrm_skill","wyrm_project"]),w=new Set([...c,...C,...m]),e=new Set([...s].filter(r=>!w.has(r))),p=[...e].sort(),y=e.size;function D(r,_){const t=[];for(const o of r){if(e.has(o))continue;const n=_(o);n&&e.has(n)||t.push(o)}return{resolves:t.length===0,unresolved:t}}export{e as CLOUD_CAPABLE_V2,y as CLOUD_CAPABLE_V2_COUNT,p as CLOUD_CAPABLE_V2_NAMES,E as CLOUD_CONTRACT_V1,O as CLOUD_CONTRACT_V2,w as CLOUD_EXCLUDED_FROM_STANDARD,m as CLOUD_EXCLUDE_DEVICE_LOCAL,C as CLOUD_EXCLUDE_EGRESS,c as CLOUD_EXCLUDE_SUBPROCESS,D as cloudV1ResolvesUnderV2};

package/dist/cloud-sync-entrypoint.js

@@ -1,47 +1 @@
-/**
- * Wyrm Cloud Sync — daemon entrypoint.
- *
- * Spawned by `CloudSyncManager.start()` as a detached child process.
- * Reads R2 credentials from the inherited environment, instantiates the
- * backup client, and runs the sync loop until SIGTERM/SIGINT.
- *
- * Not meant to be invoked directly — go through the `wyrm_cloud_sync`
- * MCP tool which handles PID file management.
- *
- * argv[2] = interval_ms
- * argv[3] = keep_count
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-import { WyrmCloudBackup } from './cloud-backup.js';
-import { CloudSyncDaemon, DEFAULT_INTERVAL_MS, DEFAULT_KEEP_COUNT, DEFAULT_DB_PATH } from './cloud-sync.js';
-async function main() {
-    const intervalMs = Number(process.argv[2]) || DEFAULT_INTERVAL_MS;
-    const keepCount = Number(process.argv[3]) || DEFAULT_KEEP_COUNT;
-    // Configure cloud backup from environment — same code path as index.ts
-    const cloud = new WyrmCloudBackup();
-    if (process.env.WYRM_R2_ENDPOINT &&
-        process.env.WYRM_R2_ACCESS_KEY &&
-        process.env.WYRM_R2_SECRET_KEY) {
-        cloud.configure({
-            endpoint: process.env.WYRM_R2_ENDPOINT,
-            bucket: process.env.WYRM_R2_BUCKET || 'wyrm-backups',
-            accessKeyId: process.env.WYRM_R2_ACCESS_KEY,
-            secretAccessKey: process.env.WYRM_R2_SECRET_KEY,
-        }, process.env.WYRM_ENCRYPTION_KEY);
-    }
-    else {
-        console.error('[cloud-sync-entrypoint] WYRM_R2_* env vars unset — refusing to start');
-        process.exit(2);
-    }
-    const dbPath = process.env.WYRM_DB_PATH || DEFAULT_DB_PATH;
-    const daemon = new CloudSyncDaemon(cloud, dbPath, intervalMs, keepCount);
-    console.log(`[cloud-sync] started · interval=${intervalMs}ms · keep=${keepCount} · db=${dbPath}`);
-    await daemon.run();
-}
-main().catch((e) => {
-    console.error('[cloud-sync-entrypoint] fatal:', e);
-    process.exit(1);
-});
-//# sourceMappingURL=cloud-sync-entrypoint.js.map
+import{WyrmCloudBackup as r}from"./cloud-backup.js";import{CloudSyncDaemon as t,DEFAULT_INTERVAL_MS as _,DEFAULT_KEEP_COUNT as p,DEFAULT_DB_PATH as R}from"./cloud-sync.js";async function E(){const e=Number(process.argv[2])||_,s=Number(process.argv[3])||p,o=new r;process.env.WYRM_R2_ENDPOINT&&process.env.WYRM_R2_ACCESS_KEY&&process.env.WYRM_R2_SECRET_KEY?o.configure({endpoint:process.env.WYRM_R2_ENDPOINT,bucket:process.env.WYRM_R2_BUCKET||"wyrm-backups",accessKeyId:process.env.WYRM_R2_ACCESS_KEY,secretAccessKey:process.env.WYRM_R2_SECRET_KEY},process.env.WYRM_ENCRYPTION_KEY):(console.error("[cloud-sync-entrypoint] WYRM_R2_* env vars unset \u2014 refusing to start"),process.exit(2));const n=process.env.WYRM_DB_PATH||R,c=new t(o,n,e,s);console.log(`[cloud-sync] started \xB7 interval=${e}ms \xB7 keep=${s} \xB7 db=${n}`),await c.run()}E().catch(e=>{console.error("[cloud-sync-entrypoint] fatal:",e),process.exit(1)});

package/dist/cloud-sync.js

@@ -1,309 +1,2 @@
-/**
- * Wyrm Cloud Sync — Phase 2 snapshot-sync daemon.
- *
- * Wraps `WyrmCloudBackup` (Phase 1) with a periodic upload + bootstrap
- * restore so a single operator can switch between machines with R2 as
- * the rendezvous point. Conflict policy: last-write-wins by mtime.
- * Not CRDT — designed for one operator on one machine at a time.
- *
- * Architecture is documented in docs/CLOUD-SYNC.md.
- *
- * @copyright 2026 Ghost Protocol (Pvt) Ltd.
- * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
- */
-import { spawn } from 'child_process';
-import { existsSync, readFileSync, writeFileSync, statSync, mkdirSync, openSync, closeSync, unlinkSync, renameSync, } from 'fs';
-import { createHash } from 'crypto';
-import { homedir, hostname } from 'os';
-import { join } from 'path';
-// ==================== CONSTANTS ====================
-const WYRM_DIR = join(homedir(), '.wyrm');
-const PID_FILE = join(WYRM_DIR, 'wyrm-cloud-sync.pid');
-const LOG_FILE = join(WYRM_DIR, 'wyrm-cloud-sync.log');
-const STATE_FILE = join(WYRM_DIR, 'wyrm-cloud-sync.state');
-const DEFAULT_DB_PATH = join(homedir(), '.copilot', 'session-store.db');
-const DEFAULT_INTERVAL_MS = 10 * 60 * 1000; // 10 min
-const DEFAULT_KEEP_COUNT = 20;
-const DRIFT_MS = 60_000; // 1 min clock-skew tolerance
-const LOG_ROTATE_BYTES = 1_000_000; // 1 MB
-const PROCESS_LIVENESS_SIGNAL = 0; // ping with signal 0 — check only
-// ==================== DAEMON ====================
-/**
- * Long-running daemon. One instance per machine.
- *
- * Lifecycle:
- *   bootstrap() once on start — restore from R2 if remote is newer
- *   tick() every interval — hash local DB, upload if changed, prune
- *   shutdown() on SIGTERM — final tick to capture pending writes
- */
-export class CloudSyncDaemon {
-    cloud;
-    dbPath;
-    intervalMs;
-    keepCount;
-    constructor(cloud, dbPath = DEFAULT_DB_PATH, intervalMs = DEFAULT_INTERVAL_MS, keepCount = DEFAULT_KEEP_COUNT) {
-        this.cloud = cloud;
-        this.dbPath = dbPath;
-        this.intervalMs = intervalMs;
-        this.keepCount = keepCount;
-        ensureWyrmDir();
-    }
-    /**
-     * On startup, compare latest cloud snapshot vs local DB mtime.
-     * If cloud is newer (beyond clock-skew drift), restore it.
-     */
-    async bootstrap() {
-        if (!this.cloud.isConfigured()) {
-            return { action: 'no-config', reason: 'WYRM_R2_* env vars unset' };
-        }
-        let remote;
-        try {
-            remote = await this.cloud.listBackupsWithKeys();
-        }
-        catch (e) {
-            return { action: 'no-remote', reason: e.message ?? String(e) };
-        }
-        if (remote.length === 0) {
-            return { action: 'no-op', reason: 'no remote snapshots yet' };
-        }
-        // listBackupsWithKeys returns newest first
-        const latest = remote[0];
-        const remoteMs = Date.parse(latest.metadata.timestamp);
-        const localMs = existsSync(this.dbPath) ? statSync(this.dbPath).mtimeMs : 0;
-        if (remoteMs > localMs + DRIFT_MS) {
-            await this.cloud.restore(latest.key, this.dbPath);
-            this.patchState({ last_restored_key: latest.key });
-            return { action: 'restored', key: latest.key };
-        }
-        return { action: 'no-op', reason: 'local DB is current' };
-    }
-    /**
-     * One sync tick. Cheap when nothing changed (just a SHA-256 of the DB).
-     */
-    async tick() {
-        if (!this.cloud.isConfigured()) {
-            return { action: 'error', reason: 'WYRM_R2_* env vars unset' };
-        }
-        if (!existsSync(this.dbPath)) {
-            return { action: 'no-db' };
-        }
-        const hash = sha256(this.dbPath);
-        const state = this.readState();
-        this.patchState({ last_check_ts: Date.now() });
-        if (hash === state.last_uploaded_hash) {
-            return { action: 'unchanged', hash };
-        }
-        try {
-            const { key } = await this.cloud.backup(this.dbPath);
-            this.patchState({
-                last_uploaded_hash: hash,
-                last_uploaded_ts: Date.now(),
-                last_uploaded_key: key,
-            });
-            await this.cloud.pruneBackups(this.keepCount);
-            return { action: 'uploaded', key, hash };
-        }
-        catch (e) {
-            return { action: 'error', reason: e.message ?? String(e) };
-        }
-    }
-    /**
-     * Long-running loop. Should be spawned as a detached child via Manager.
-     * Logs to STDOUT (which the spawn redirects to LOG_FILE).
-     */
-    async run() {
-        const bootstrapResult = await this.bootstrap();
-        log(`bootstrap: ${JSON.stringify(bootstrapResult)}`);
-        const timer = setInterval(async () => {
-            try {
-                const result = await this.tick();
-                if (result.action !== 'unchanged') {
-                    log(`tick: ${JSON.stringify(result)}`);
-                }
-            }
-            catch (e) {
-                log(`tick error: ${e.message ?? e}`);
-            }
-        }, this.intervalMs);
-        const shutdown = async (signal) => {
-            clearInterval(timer);
-            log(`${signal} — final tick before exit`);
-            try {
-                const final = await this.tick();
-                log(`final tick: ${JSON.stringify(final)}`);
-            }
-            catch (e) {
-                log(`final tick error: ${e.message ?? e}`);
-            }
-            process.exit(0);
-        };
-        process.on('SIGTERM', () => void shutdown('SIGTERM'));
-        process.on('SIGINT', () => void shutdown('SIGINT'));
-    }
-    readState() {
-        return readState();
-    }
-    patchState(patch) {
-        patchState(patch);
-    }
-}
-// ==================== MANAGER ====================
-/**
- * Spawn/stop/status for the daemon — used by the MCP tool handler.
- * Guarantees single-instance via PID file + liveness check.
- */
-export class CloudSyncManager {
-    daemonEntrypoint;
-    constructor(daemonEntrypoint) {
-        this.daemonEntrypoint = daemonEntrypoint;
-        ensureWyrmDir();
-    }
-    start(opts = {}) {
-        if (this.isAlive()) {
-            return { ok: false, pid: this.readPid(), reason: 'already running' };
-        }
-        rotateLogIfBig();
-        const intervalMs = (opts.interval_minutes ?? DEFAULT_INTERVAL_MS / 60_000) * 60_000;
-        const keepCount = opts.keep_count ?? DEFAULT_KEEP_COUNT;
-        const out = openSync(LOG_FILE, 'a');
-        const err = openSync(LOG_FILE, 'a');
-        const child = spawn(process.execPath, [
-            this.daemonEntrypoint,
-            String(intervalMs),
-            String(keepCount),
-        ], {
-            detached: true,
-            stdio: ['ignore', out, err],
-            env: { ...process.env },
-        });
-        child.unref();
-        closeSync(out);
-        closeSync(err);
-        if (typeof child.pid !== 'number') {
-            return { ok: false, reason: 'spawn returned no pid' };
-        }
-        writeFileSync(PID_FILE, String(child.pid));
-        return { ok: true, pid: child.pid };
-    }
-    stop() {
-        if (!this.isAlive()) {
-            this.cleanPid();
-            return { ok: false, reason: 'not running' };
-        }
-        const pid = this.readPid();
-        if (!pid) {
-            return { ok: false, reason: 'pid file unreadable' };
-        }
-        try {
-            process.kill(pid, 'SIGTERM');
-            // Give it up to 5s to exit cleanly. Caller can poll status().
-            return { ok: true };
-        }
-        catch (e) {
-            return { ok: false, reason: e.message ?? String(e) };
-        }
-    }
-    status() {
-        const running = this.isAlive();
-        return {
-            running,
-            pid: running ? this.readPid() ?? undefined : undefined,
-            state: existsSync(STATE_FILE) ? safeReadState() : undefined,
-        };
-    }
-    async forceSync(daemon) {
-        return daemon.tick();
-    }
-    isAlive() {
-        if (!existsSync(PID_FILE))
-            return false;
-        const pid = this.readPid();
-        if (!pid)
-            return false;
-        try {
-            process.kill(pid, PROCESS_LIVENESS_SIGNAL);
-            return true;
-        }
-        catch {
-            return false;
-        }
-    }
-    readPid() {
-        try {
-            const raw = readFileSync(PID_FILE, 'utf8').trim();
-            const n = Number(raw);
-            return Number.isFinite(n) && n > 0 ? n : undefined;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    cleanPid() {
-        try {
-            unlinkSync(PID_FILE);
-        }
-        catch { /* idempotent */ }
-    }
-}
-// ==================== HELPERS ====================
-function ensureWyrmDir() {
-    if (!existsSync(WYRM_DIR))
-        mkdirSync(WYRM_DIR, { recursive: true });
-}
-function sha256(filePath) {
-    // For typical Wyrm DBs (<100MB) a single readFileSync is fine.
-    // If DBs grow much larger this should switch to a streaming hash.
-    return createHash('sha256').update(readFileSync(filePath)).digest('hex');
-}
-function emptyState() {
-    return {
-        last_uploaded_hash: '',
-        last_uploaded_ts: 0,
-        last_uploaded_key: null,
-        last_restored_key: null,
-        last_check_ts: 0,
-        machine: hostname(),
-    };
-}
-function readState() {
-    return safeReadState() ?? emptyState();
-}
-function safeReadState() {
-    try {
-        const parsed = JSON.parse(readFileSync(STATE_FILE, 'utf8'));
-        return { ...emptyState(), ...parsed };
-    }
-    catch {
-        return undefined;
-    }
-}
-function patchState(patch) {
-    const cur = readState();
-    writeFileSync(STATE_FILE, JSON.stringify({ ...cur, ...patch, machine: hostname() }, null, 2));
-}
-function log(msg) {
-    const line = `[${new Date().toISOString()}] ${msg}\n`;
-    // Daemon's stdout/stderr is already redirected to LOG_FILE by the spawn().
-    // When tick() is called from the MCP tool (not daemon), the message is dropped — that's fine.
-    process.stdout.write(line);
-}
-function rotateLogIfBig() {
-    if (!existsSync(LOG_FILE))
-        return;
-    try {
-        const size = statSync(LOG_FILE).size;
-        if (size > LOG_ROTATE_BYTES) {
-            const rotated = `${LOG_FILE}.1`;
-            try {
-                unlinkSync(rotated);
-            }
-            catch { /* ignore */ }
-            renameSync(LOG_FILE, rotated);
-        }
-    }
-    catch { /* non-fatal */ }
-}
-// ==================== EXPORTS ====================
-export { ensureWyrmDir, readState, sha256 };
-export { DEFAULT_DB_PATH, DEFAULT_INTERVAL_MS, DEFAULT_KEEP_COUNT };
-//# sourceMappingURL=cloud-sync.js.map
+import{spawn as D}from"child_process";import{existsSync as a,readFileSync as p,writeFileSync as k,statSync as g,mkdirSync as N,openSync as E,closeSync as b,unlinkSync as v,renameSync as A}from"fs";import{createHash as L}from"crypto";import{homedir as w,hostname as I}from"os";import{join as u}from"path";const d=u(w(),".wyrm"),h=u(d,"wyrm-cloud-sync.pid"),o=u(d,"wyrm-cloud-sync.log"),f=u(d,"wyrm-cloud-sync.state"),P=u(w(),".copilot","session-store.db"),y=600*1e3,S=20,O=6e4,C=1e6,F=0;class Y{cloud;dbPath;intervalMs;keepCount;constructor(t,e=P,n=y,r=S){this.cloud=t,this.dbPath=e,this.intervalMs=n,this.keepCount=r,_()}async bootstrap(){if(!this.cloud.isConfigured())return{action:"no-config",reason:"WYRM_R2_* env vars unset"};let t;try{t=await this.cloud.listBackupsWithKeys()}catch(i){return{action:"no-remote",reason:i.message??String(i)}}if(t.length===0)return{action:"no-op",reason:"no remote snapshots yet"};const e=t[0],n=Date.parse(e.metadata.timestamp),r=a(this.dbPath)?g(this.dbPath).mtimeMs:0;return n>r+O?(await this.cloud.restore(e.key,this.dbPath),this.patchState({last_restored_key:e.key}),{action:"restored",key:e.key}):{action:"no-op",reason:"local DB is current"}}async tick(){if(!this.cloud.isConfigured())return{action:"error",reason:"WYRM_R2_* env vars unset"};if(!a(this.dbPath))return{action:"no-db"};const t=T(this.dbPath),e=this.readState();if(this.patchState({last_check_ts:Date.now()}),t===e.last_uploaded_hash)return{action:"unchanged",hash:t};try{const{key:n}=await this.cloud.backup(this.dbPath);return this.patchState({last_uploaded_hash:t,last_uploaded_ts:Date.now(),last_uploaded_key:n}),await this.cloud.pruneBackups(this.keepCount),{action:"uploaded",key:n,hash:t}}catch(n){return{action:"error",reason:n.message??String(n)}}}async run(){const t=await this.bootstrap();c(`bootstrap: ${JSON.stringify(t)}`);const e=setInterval(async()=>{try{const r=await this.tick();r.action!=="unchanged"&&c(`tick: ${JSON.stringify(r)}`)}catch(r){c(`tick error: ${r.message??r}`)}},this.intervalMs),n=async r=>{clearInterval(e),c(`${r} \u2014 final tick before exit`);try{const i=await this.tick();c(`final tick: ${JSON.stringify(i)}`)}catch(i){c(`final tick error: ${i.message??i}`)}process.exit(0)};process.on("SIGTERM",()=>{n("SIGTERM")}),process.on("SIGINT",()=>{n("SIGINT")})}readState(){return m()}patchState(t){x(t)}}class z{daemonEntrypoint;constructor(t){this.daemonEntrypoint=t,_()}start(t={}){if(this.isAlive())return{ok:!1,pid:this.readPid(),reason:"already running"};$();const e=(t.interval_minutes??y/6e4)*6e4,n=t.keep_count??S,r=E(o,"a"),i=E(o,"a"),l=D(process.execPath,[this.daemonEntrypoint,String(e),String(n)],{detached:!0,stdio:["ignore",r,i],env:{...process.env}});return l.unref(),b(r),b(i),typeof l.pid!="number"?{ok:!1,reason:"spawn returned no pid"}:(k(h,String(l.pid)),{ok:!0,pid:l.pid})}stop(){if(!this.isAlive())return this.cleanPid(),{ok:!1,reason:"not running"};const t=this.readPid();if(!t)return{ok:!1,reason:"pid file unreadable"};try{return process.kill(t,"SIGTERM"),{ok:!0}}catch(e){return{ok:!1,reason:e.message??String(e)}}}status(){const t=this.isAlive();return{running:t,pid:t?this.readPid()??void 0:void 0,state:a(f)?R():void 0}}async forceSync(t){return t.tick()}isAlive(){if(!a(h))return!1;const t=this.readPid();if(!t)return!1;try{return process.kill(t,F),!0}catch{return!1}}readPid(){try{const t=p(h,"utf8").trim(),e=Number(t);return Number.isFinite(e)&&e>0?e:void 0}catch{return}}cleanPid(){try{v(h)}catch{}}}function _(){a(d)||N(d,{recursive:!0})}function T(s){return L("sha256").update(p(s)).digest("hex")}function M(){return{last_uploaded_hash:"",last_uploaded_ts:0,last_uploaded_key:null,last_restored_key:null,last_check_ts:0,machine:I()}}function m(){return R()??M()}function R(){try{const s=JSON.parse(p(f,"utf8"));return{...M(),...s}}catch{return}}function x(s){const t=m();k(f,JSON.stringify({...t,...s,machine:I()},null,2))}function c(s){const t=`[${new Date().toISOString()}] ${s}
+`;process.stdout.write(t)}function $(){if(a(o))try{if(g(o).size>C){const t=`${o}.1`;try{v(t)}catch{}A(o,t)}}catch{}}export{Y as CloudSyncDaemon,z as CloudSyncManager,P as DEFAULT_DB_PATH,y as DEFAULT_INTERVAL_MS,S as DEFAULT_KEEP_COUNT,_ as ensureWyrmDir,m as readState,T as sha256};