@agentuity/cli 1.0.41 → 1.0.43

package/src/cmd/coder/tui-init.ts

@@ -0,0 +1,75 @@
+import { hubFetchHeaders } from './hub-url';
+
+export type TuiInitProbeResult =
+	| { ok: true }
+	| {
+			ok: false;
+			code: 'unauthorized' | 'http_error' | 'invalid_response' | 'network_error';
+			message: string;
+	  };
+
+function normalizeErrorMessage(payload: unknown, fallback: string): string {
+	if (
+		payload &&
+		typeof payload === 'object' &&
+		typeof (payload as { error?: unknown }).error === 'string'
+	) {
+		return (payload as { error: string }).error;
+	}
+	return fallback;
+}
+
+export async function probeTuiInitAccess(
+	hubHttpUrl: string,
+	fetchImpl: typeof fetch = fetch
+): Promise<TuiInitProbeResult> {
+	try {
+		const response = await fetchImpl(`${hubHttpUrl}/api/hub/tui/init`, {
+			headers: hubFetchHeaders({ accept: 'application/json' }),
+			signal: AbortSignal.timeout(5_000),
+		});
+
+		let payload: unknown;
+		try {
+			payload = await response.json();
+		} catch {
+			payload = undefined;
+		}
+
+		if (response.status === 401 || response.status === 403) {
+			return {
+				ok: false,
+				code: 'unauthorized',
+				message: normalizeErrorMessage(payload, `${response.status} ${response.statusText}`),
+			};
+		}
+
+		if (!response.ok) {
+			return {
+				ok: false,
+				code: 'http_error',
+				message: normalizeErrorMessage(payload, `${response.status} ${response.statusText}`),
+			};
+		}
+
+		if (
+			!payload ||
+			typeof payload !== 'object' ||
+			(payload as { type?: unknown }).type !== 'init'
+		) {
+			return {
+				ok: false,
+				code: 'invalid_response',
+				message: 'Hub init endpoint did not return an init payload',
+			};
+		}
+
+		return { ok: true };
+	} catch (error) {
+		return {
+			ok: false,
+			code: 'network_error',
+			message: error instanceof Error ? error.message : String(error),
+		};
+	}
+}

package/src/config.ts

@@ -10,7 +10,7 @@ import {
 	APIClient as ServerAPIClient,
 } from '@agentuity/server';
 import { YAML } from 'bun';
-import JSON5 from 'json5';
+import { parseJSONC } from './utils/jsonc';
 import { z } from 'zod';
 import { clearProfileCache } from './cache';
 import { getCatalystUrl } from './catalyst';
@@ -265,8 +265,19 @@ function formatYAML(obj: unknown, indent = 0): string {
 		} else if (typeof value === 'string') {
 			if (value === '') {
 				lines.push(`${spaces}${key}: ""`);
-			} else if (value.includes(':') || value.includes('#') || value.includes(' ')) {
-				lines.push(`${spaces}${key}: "${value}"`);
+			} else if (
+				value.includes(':') ||
+				value.includes('#') ||
+				value.includes(' ') ||
+				value.includes('\\')
+			) {
+				// Use single quotes to avoid YAML escape-sequence processing.
+				// Double-quoted YAML strings interpret backslash sequences (\n, \t, etc.),
+				// which breaks Windows paths like C:\Users\... where \U would be invalid.
+				// Single-quoted strings treat backslashes literally.
+				// Escape any embedded single quotes by doubling them (YAML spec).
+				const escaped = value.replace(/'/g, "''");
+				lines.push(`${spaces}${key}: '${escaped}'`);
 			} else {
 				lines.push(`${spaces}${key}: ${value}`);
 			}
@@ -602,7 +613,7 @@ export async function loadProjectConfig(
 		throw new ProjectConfigNotFoundException({ message: 'project config not found' });
 	}
 	const text = await file.text();
-	const parsedConfig = JSON5.parse(text);
+	const parsedConfig = parseJSONC(text);
 	const result = ProjectSchema.safeParse(parsedConfig);
 	if (!result.success) {
 		tui.error(`Invalid project config at ${configPath}:`);
@@ -707,7 +718,7 @@ export async function updateProjectConfig(
 	}
 
 	const text = await file.text();
-	const existing = JSON5.parse(text);
+	const existing = parseJSONC(text) as Record<string, unknown>;
 	const updated = { ...existing, ...updates };
 
 	const result = ProjectSchema.safeParse(updated);

package/src/utils/jsonc.ts

@@ -0,0 +1,67 @@
+/**
+ * Parse JSON with Comments (JSONC).
+ *
+ * Strips single-line (`//`) and block (`/* *​/`) comments as well as trailing
+ * commas that appear before `}` or `]`, then delegates to the built-in
+ * `JSON.parse`.  This covers the comment syntax used by `tsconfig.json` and
+ * similar config files without pulling in a full JSON5 parser.
+ *
+ * String literals are respected — comments and trailing commas inside quoted
+ * strings are left untouched.
+ */
+export function parseJSONC(text: string): unknown {
+	let result = '';
+	let i = 0;
+	const len = text.length;
+
+	while (i < len) {
+		const ch = text[i];
+
+		// --- quoted string: copy verbatim, including any escape sequences ---
+		if (ch === '"') {
+			const start = i;
+			i++; // skip opening quote
+			while (i < len) {
+				if (text[i] === '\\') {
+					i += i + 1 < len ? 2 : 1; // skip escaped character (guard end-of-input)
+				} else if (text[i] === '"') {
+					i++; // skip closing quote
+					break;
+				} else {
+					i++;
+				}
+			}
+			result += text.slice(start, i);
+			continue;
+		}
+
+		// --- single-line comment: skip to end of line ---
+		if (ch === '/' && text[i + 1] === '/') {
+			i += 2;
+			while (i < len && text[i] !== '\n') {
+				i++;
+			}
+			continue;
+		}
+
+		// --- block comment: skip to closing *​/ ---
+		if (ch === '/' && text[i + 1] === '*') {
+			i += 2;
+			while (i < len && !(text[i] === '*' && text[i + 1] === '/')) {
+				i++;
+			}
+			if (i < len) {
+				i += 2; // skip closing */
+			}
+			continue;
+		}
+
+		result += ch;
+		i++;
+	}
+
+	// Strip trailing commas before } or ] (with optional whitespace between).
+	result = result.replace(/,(\s*[}\]])/g, '$1');
+
+	return JSON.parse(result);
+}

package/src/utils/route-migration.ts

@@ -697,7 +697,8 @@ export function performMigration(rootDir: string, routeFiles: string[]): Migrati
  * Show the migration notice and optionally perform migration.
  *
  * Called during `dev` and `build` after dependency upgrades.
- * Shows a banner the first time, then a shorter reminder on subsequent runs.
+ * Only prompts in interactive TTY sessions and only once — if the user
+ * dismisses the prompt, it won't be shown again.
  *
  * @returns true if migration was performed, false otherwise
  */
@@ -707,6 +708,12 @@ export async function promptRouteMigration(
 	options?: { interactive?: boolean }
 ): Promise<boolean> {
 	const interactive = options?.interactive ?? process.stdin.isTTY;
+
+	// Only show the interactive migration prompt in TTY sessions
+	if (!interactive) {
+		return false;
+	}
+
 	const eligibility = checkMigrationEligibility(rootDir);
 
 	if (!eligibility.available) {
@@ -715,48 +722,30 @@ export async function promptRouteMigration(
 
 	const { routeFiles, alreadyNotified } = eligibility;
 
-	// Non-interactive mode (CI, piped, AI agent): just log a notice
-	if (!interactive) {
-		if (!alreadyNotified) {
-			logger.info(
-				'[migration] This project uses file-based routing with %d route files in src/api/. ' +
-					'Agentuity is moving to explicit routing, which will become the default in the next major release. ' +
-					'Run `agentuity dev --migrate-routes` to migrate.',
-				routeFiles.length
-			);
-			writeMigrationState(rootDir, 'notified');
-		}
+	// Only prompt once — if the user has already been notified or dismissed, don't ask again
+	if (alreadyNotified) {
 		return false;
 	}
 
-	// First time: show full banner
-	if (!alreadyNotified) {
-		tui.newline();
-		tui.banner(
-			'✨ Migrate to Explicit Routing',
-			'Agentuity is moving to explicit routing, which will become the\n' +
-				'default in the next major release. File-based route discovery\n' +
-				'will be deprecated.\n' +
-				'\n' +
-				`Your project has ${routeFiles.length} route files in src/api/ that are\n` +
-				'auto-discovered at build time. Explicit routing gives you a single\n' +
-				'src/api/index.ts that imports and mounts all sub-routers — just\n' +
-				'like a standard Hono application.\n' +
-				'\n' +
-				`${tui.muted('Before:')} ${routeFiles.length} files auto-discovered from src/api/**/*.ts\n` +
-				`${tui.muted('After:')}  One src/api/index.ts that imports and mounts them\n` +
-				'\n' +
-				'Your existing route files are not modified. Your app.ts will be\n' +
-				'updated to import the router and pass it to createApp({ router }).',
-			{ centerTitle: false }
-		);
-	} else {
-		// Subsequent runs: shorter reminder
-		tui.newline();
-		tui.info(
-			`${tui.bold('Explicit routing migration available')} — run with ${tui.muted('--migrate-routes')} or choose below.`
-		);
-	}
+	tui.newline();
+	tui.banner(
+		'✨ Migrate to Explicit Routing',
+		'Agentuity is moving to explicit routing, which will become the\n' +
+			'default in the next major release. File-based route discovery\n' +
+			'will be deprecated.\n' +
+			'\n' +
+			`Your project has ${routeFiles.length} route files in src/api/ that are\n` +
+			'auto-discovered at build time. Explicit routing gives you a single\n' +
+			'src/api/index.ts that imports and mounts all sub-routers — just\n' +
+			'like a standard Hono application.\n' +
+			'\n' +
+			`${tui.muted('Before:')} ${routeFiles.length} files auto-discovered from src/api/**/*.ts\n` +
+			`${tui.muted('After:')}  One src/api/index.ts that imports and mounts them\n` +
+			'\n' +
+			'Your existing route files are not modified. Your app.ts will be\n' +
+			'updated to import the router and pass it to createApp({ router }).',
+		{ centerTitle: false }
+	);
 
 	tui.newline();
 

package/src/utils/zip.ts

@@ -1,3 +1,4 @@
+import { readFileSync, lstatSync } from 'node:fs';
 import { relative } from 'node:path';
 import { Glob } from 'bun';
 import AdmZip from 'adm-zip';
@@ -11,7 +12,7 @@ interface Options {
 export async function zipDir(dir: string, outdir: string, options?: Options) {
 	const zip = new AdmZip();
 	const files = await Array.fromAsync(
-		new Glob('**/*').scan({ cwd: dir, absolute: true, dot: true })
+		new Glob('**/*').scan({ cwd: dir, absolute: true, dot: true, followSymlinks: false })
 	);
 	const total = files.length;
 	let count = 0;
@@ -24,7 +25,21 @@ export async function zipDir(dir: string, outdir: string, options?: Options) {
 			}
 		}
 		if (!skip) {
-			zip.addLocalFile(file, undefined, rel);
+			try {
+				// Skip symlinks and directories — symlinks are workspace artefacts
+				// (e.g. bun's node_modules links) that cannot be resolved portably
+				// across machines and would cause EISDIR errors on extraction.
+				const stat = lstatSync(file);
+				if (!stat.isSymbolicLink() && !stat.isDirectory()) {
+					// Use addFile with explicit Unix permissions (0o644) instead of addLocalFile.
+					// On Windows, addLocalFile relies on OS file stats which may produce zip entries
+					// with incorrect Unix permission bits, causing EACCES errors when extracted on Linux.
+					const data = readFileSync(file);
+					zip.addFile(rel, data, '', 0o644);
+				}
+			} catch (err) {
+				throw new Error(`Failed to add file to zip: ${rel} (${file})`, { cause: err });
+			}
 		}
 		count++;
 		if (options?.progress) {