@aperdomoll90/ledger-ai 1.0.0

package/dist/commands/restore.js

@@ -0,0 +1,72 @@
+import { readFileSync, existsSync } from 'fs';
+import { resolve } from 'path';
+import { confirm } from '../lib/prompt.js';
+export async function restore(config, filePath) {
+    const absPath = resolve(filePath);
+    if (!existsSync(absPath)) {
+        console.error(`File not found: ${absPath}`);
+        process.exit(1);
+    }
+    let notes;
+    try {
+        notes = JSON.parse(readFileSync(absPath, 'utf-8'));
+    }
+    catch {
+        console.error('Invalid JSON file.');
+        process.exit(1);
+    }
+    console.error(`Found ${notes.length} notes in backup.`);
+    // Check current database
+    const { count } = await config.supabase
+        .from('notes')
+        .select('*', { count: 'exact', head: true });
+    if (count && count > 0) {
+        console.error(`Database already has ${count} notes.`);
+        const proceed = await confirm('Restore will add notes (not replace). Continue?');
+        if (!proceed) {
+            console.error('Cancelled.');
+            return;
+        }
+    }
+    console.error('Restoring...\n');
+    let restored = 0;
+    let skipped = 0;
+    for (const note of notes) {
+        // Check for existing note with same upsert_key
+        const upsertKey = note.metadata.upsert_key;
+        if (upsertKey) {
+            const { data: existing } = await config.supabase
+                .from('notes')
+                .select('id')
+                .eq('metadata->>upsert_key', upsertKey)
+                .limit(1)
+                .single();
+            if (existing) {
+                console.error(`  skip "${upsertKey}" (already exists)`);
+                skipped++;
+                continue;
+            }
+        }
+        // Generate embedding
+        const embeddingResponse = await config.openai.embeddings.create({
+            model: 'text-embedding-3-small',
+            input: note.content,
+        });
+        const embedding = embeddingResponse.data[0].embedding;
+        const { error } = await config.supabase
+            .from('notes')
+            .insert({
+            content: note.content,
+            metadata: note.metadata,
+            embedding,
+        });
+        if (error) {
+            console.error(`  error restoring note ${note.id}: ${error.message}`);
+            continue;
+        }
+        const label = upsertKey || `note-${note.id}`;
+        console.error(`  restored "${label}"`);
+        restored++;
+    }
+    console.error(`\nRestore complete: ${restored} restored, ${skipped} skipped (already exist)`);
+}

package/dist/commands/setup.js

@@ -0,0 +1,159 @@
+import { writeFileSync, readFileSync, copyFileSync, mkdirSync, existsSync, chmodSync } from 'fs';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
+import { execFileSync } from 'child_process';
+import { homedir } from 'os';
+import { loadConfig, loadConfigFile, getLedgerDir } from '../lib/config.js';
+import { fetchCachedNotes } from '../lib/notes.js';
+import { generateClaudeMd } from '../lib/generators.js';
+import { ask } from '../lib/prompt.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function verifyInit() {
+    const envPath = resolve(getLedgerDir(), '.env');
+    if (!existsSync(envPath)) {
+        console.error('Ledger not initialized. Run `ledger init` first.');
+        process.exit(1);
+    }
+}
+export async function setupClaudeCode() {
+    verifyInit();
+    const config = loadConfig();
+    const configFile = loadConfigFile();
+    const hooks = configFile.hooks || {};
+    console.error('Setting up Claude Code...\n');
+    // 1. Register MCP server
+    const mcpServerPath = resolve(__dirname, '../mcp-server.js');
+    const envPath = resolve(getLedgerDir(), '.env');
+    console.error('Registering MCP server...');
+    try {
+        // Remove existing registration first (idempotent)
+        try {
+            execFileSync('claude', ['mcp', 'remove', 'ledger', '-s', 'user'], { stdio: 'pipe' });
+        }
+        catch {
+            // Not registered yet — fine
+        }
+        execFileSync('claude', [
+            'mcp', 'add', '-s', 'user',
+            '-e', `DOTENV_CONFIG_PATH=${envPath}`,
+            '--', 'ledger', 'node', mcpServerPath,
+        ], { stdio: 'pipe' });
+        console.error('  MCP server registered.\n');
+    }
+    catch {
+        console.error('  Failed to register MCP. Is Claude Code installed?');
+        console.error('  Install: npm install -g @anthropic-ai/claude-code');
+        process.exit(1);
+    }
+    // 2. Install hooks
+    const claudeHooksDir = resolve(homedir(), '.claude/hooks');
+    mkdirSync(claudeHooksDir, { recursive: true });
+    const hooksSourceDir = resolve(__dirname, '../hooks');
+    const hookFiles = [
+        { src: 'block-env.sh', enabled: hooks.envBlocking !== false },
+        { src: 'post-write-ledger.sh', enabled: hooks.writeInterception !== false },
+        { src: 'session-end-check.sh', enabled: hooks.sessionEndCheck !== false },
+    ];
+    console.error('Installing hooks...');
+    for (const hook of hookFiles) {
+        if (!hook.enabled) {
+            console.error(`  skip ${hook.src} (disabled in config)`);
+            continue;
+        }
+        const dest = resolve(claudeHooksDir, hook.src);
+        copyFileSync(resolve(hooksSourceDir, hook.src), dest);
+        chmodSync(dest, 0o755);
+        console.error(`  installed ${hook.src}`);
+    }
+    // 3. Update settings.json
+    const settingsPath = resolve(homedir(), '.claude/settings.json');
+    let settings = {};
+    if (existsSync(settingsPath)) {
+        try {
+            settings = JSON.parse(readFileSync(settingsPath, 'utf-8'));
+        }
+        catch {
+            settings = {};
+        }
+    }
+    settings.hooks = buildHookSettings(hooks);
+    writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+    console.error('  Updated ~/.claude/settings.json\n');
+    // 4. Pull
+    console.error('Pulling notes from Ledger...');
+    try {
+        execFileSync('ledger', ['pull', '--force'], { stdio: 'inherit' });
+    }
+    catch {
+        console.error('  Pull failed. You can run `ledger pull --force` manually.');
+    }
+    console.error('\nClaude Code is ready. Start a new session.');
+}
+export async function setupOpenclaw(path) {
+    verifyInit();
+    const config = loadConfig();
+    let targetPath = path;
+    if (!targetPath) {
+        targetPath = await ask('Where is your OpenClaw workspace? ');
+    }
+    targetPath = resolve(targetPath);
+    if (!existsSync(targetPath)) {
+        console.error(`Directory not found: ${targetPath}`);
+        process.exit(1);
+    }
+    console.error(`Setting up OpenClaw at ${targetPath}...\n`);
+    const notes = await fetchCachedNotes(config.supabase);
+    const userNotes = notes.filter(n => n.metadata.type === 'user-preference');
+    const feedbackNotes = notes.filter(n => n.metadata.type === 'feedback');
+    // Generate SOUL.md (communication/behavior rules)
+    const soulContent = feedbackNotes.map(n => n.content).join('\n\n---\n\n');
+    writeFileSync(resolve(targetPath, 'SOUL.md'), soulContent + '\n');
+    console.error('  wrote SOUL.md');
+    // Generate USER.md (user profile)
+    const userContent = userNotes.map(n => n.content).join('\n\n---\n\n');
+    writeFileSync(resolve(targetPath, 'USER.md'), userContent + '\n');
+    console.error('  wrote USER.md');
+    console.error(`\nOpenClaw persona written. Sync via \`ledger\` CLI.`);
+}
+export async function setupChatgpt() {
+    verifyInit();
+    const config = loadConfig();
+    const notes = await fetchCachedNotes(config.supabase);
+    const feedbackNotes = notes.filter(n => n.metadata.type === 'feedback');
+    const prompt = generateClaudeMd(feedbackNotes);
+    console.error('WARNING: This is a snapshot, not a live connection.');
+    console.error('Run `ledger setup chatgpt` again to regenerate after changes.\n');
+    console.error('Copy the text below into ChatGPT > Settings > Custom Instructions:\n');
+    console.error('---\n');
+    console.log(prompt);
+    console.error('---');
+}
+function buildHookSettings(hooks) {
+    const result = {
+        SessionStart: [
+            {
+                matcher: '',
+                hooks: [{ type: 'command', command: 'ledger pull --quiet' }],
+            },
+        ],
+    };
+    const preToolUse = [];
+    const postToolUse = [];
+    const stop = [];
+    if (hooks.envBlocking !== false || hooks.mcpJsonBlocking !== false) {
+        preToolUse.push({ matcher: 'Read', hooks: [{ type: 'command', command: '~/.claude/hooks/block-env.sh', timeout: 5 }] }, { matcher: 'Edit|Write', hooks: [{ type: 'command', command: '~/.claude/hooks/block-env.sh', timeout: 5 }] });
+    }
+    if (hooks.writeInterception !== false) {
+        postToolUse.push({ matcher: 'Edit|Write', hooks: [{ type: 'command', command: '~/.claude/hooks/post-write-ledger.sh', timeout: 10 }] });
+    }
+    if (hooks.sessionEndCheck !== false) {
+        stop.push({ matcher: '', hooks: [{ type: 'command', command: '~/.claude/hooks/session-end-check.sh', timeout: 15 }] });
+    }
+    if (preToolUse.length > 0)
+        result.PreToolUse = preToolUse;
+    if (postToolUse.length > 0)
+        result.PostToolUse = postToolUse;
+    if (stop.length > 0)
+        result.Stop = stop;
+    return result;
+}

package/dist/commands/show.js

@@ -0,0 +1,34 @@
+import { writeFileSync, mkdirSync } from 'fs';
+import { resolve } from 'path';
+import { execFileSync } from 'child_process';
+import { searchNotes } from '../lib/notes.js';
+import { fatal, ExitCode } from '../lib/errors.js';
+const VIEW_DIR = '/tmp/ledger-view';
+export async function show(config, query, options = {}) {
+    // Fetch more if filtering
+    const fetchLimit = (options.type || options.project) ? 10 : 1;
+    let results = await searchNotes(config.supabase, config.openai, query, 0.3, fetchLimit);
+    if (options.type) {
+        results = results.filter(n => n.metadata.type === options.type);
+    }
+    if (options.project) {
+        results = results.filter(n => n.metadata.project === options.project);
+    }
+    if (results.length === 0) {
+        fatal('No matching notes found.', ExitCode.NOTE_NOT_FOUND);
+    }
+    const note = results[0];
+    const upsertKey = note.metadata.upsert_key || `note-${note.id}`;
+    const filename = `${upsertKey}.md`;
+    mkdirSync(VIEW_DIR, { recursive: true });
+    const filePath = resolve(VIEW_DIR, filename);
+    writeFileSync(filePath, note.content + '\n', 'utf-8');
+    console.log(`Match: "${upsertKey}" (similarity: ${note.similarity.toFixed(3)})`);
+    console.log(filePath);
+    try {
+        execFileSync('code', [filePath], { stdio: 'ignore' });
+    }
+    catch {
+        // VS Code not available — path already printed
+    }
+}

package/dist/hooks/block-env.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# Block reading or writing sensitive files
+INPUT=$(cat)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+if [[ -z "$FILE_PATH" ]]; then
+  exit 0
+fi
+
+FILENAME=$(basename "$FILE_PATH")
+
+# Block .env files (all variants)
+if [[ "$FILENAME" =~ ^\.env($|\.) ]]; then
+  echo "BLOCKED: .env files must never be read or written. Check existence with 'test -f .env' or 'wc -l .env'." >&2
+  exit 2
+fi
+
+# Block credential/secret files
+case "$FILENAME" in
+  credentials.json|service-account.json|token.json|secrets.json|auth.json)
+    echo "BLOCKED: $FILENAME contains credentials. Do not read or write directly." >&2
+    exit 2
+    ;;
+  .npmrc|.netrc)
+    echo "BLOCKED: $FILENAME may contain auth tokens. Do not read or write directly." >&2
+    exit 2
+    ;;
+  mcp.json)
+    echo "BLOCKED: Do not edit mcp.json directly. Use 'claude mcp add -s user <name> -- <command>' instead." >&2
+    exit 2
+    ;;
+esac
+
+# Block by extension (keys, certs)
+case "$FILENAME" in
+  *.pem|*.key|*.p12|*.pfx)
+    echo "BLOCKED: $FILENAME is a key/certificate file. Do not read or write." >&2
+    exit 2
+    ;;
+esac
+
+# Block SSH keys
+if [[ "$FILE_PATH" =~ /.ssh/ ]] && [[ "$FILENAME" == id_* || "$FILENAME" == *.pub ]]; then
+  echo "BLOCKED: SSH keys must never be read. Check existence with 'test -f'." >&2
+  exit 2
+fi
+
+# Block AWS credentials
+if [[ "$FILE_PATH" =~ /.aws/credentials ]]; then
+  echo "BLOCKED: AWS credentials must never be read directly." >&2
+  exit 2
+fi
+
+exit 0

package/dist/hooks/hooks/block-env.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# Block reading or writing sensitive files
+INPUT=$(cat)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+if [[ -z "$FILE_PATH" ]]; then
+  exit 0
+fi
+
+FILENAME=$(basename "$FILE_PATH")
+
+# Block .env files (all variants)
+if [[ "$FILENAME" =~ ^\.env($|\.) ]]; then
+  echo "BLOCKED: .env files must never be read or written. Check existence with 'test -f .env' or 'wc -l .env'." >&2
+  exit 2
+fi
+
+# Block credential/secret files
+case "$FILENAME" in
+  credentials.json|service-account.json|token.json|secrets.json|auth.json)
+    echo "BLOCKED: $FILENAME contains credentials. Do not read or write directly." >&2
+    exit 2
+    ;;
+  .npmrc|.netrc)
+    echo "BLOCKED: $FILENAME may contain auth tokens. Do not read or write directly." >&2
+    exit 2
+    ;;
+  mcp.json)
+    echo "BLOCKED: Do not edit mcp.json directly. Use 'claude mcp add -s user <name> -- <command>' instead." >&2
+    exit 2
+    ;;
+esac
+
+# Block by extension (keys, certs)
+case "$FILENAME" in
+  *.pem|*.key|*.p12|*.pfx)
+    echo "BLOCKED: $FILENAME is a key/certificate file. Do not read or write." >&2
+    exit 2
+    ;;
+esac
+
+# Block SSH keys
+if [[ "$FILE_PATH" =~ /.ssh/ ]] && [[ "$FILENAME" == id_* || "$FILENAME" == *.pub ]]; then
+  echo "BLOCKED: SSH keys must never be read. Check existence with 'test -f'." >&2
+  exit 2
+fi
+
+# Block AWS credentials
+if [[ "$FILE_PATH" =~ /.aws/credentials ]]; then
+  echo "BLOCKED: AWS credentials must never be read directly." >&2
+  exit 2
+fi
+
+exit 0

package/dist/hooks/hooks/post-write-ledger.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# PostToolUse hook for Write/Edit
+# If a .md file is written to the memory directory, auto-ingest it to Ledger.
+HOME_PROJECT=$(echo "$HOME" | sed 's|/|-|g')
+MEMORY_DIR="$HOME/.claude/projects/$HOME_PROJECT/memory"
+INPUT=$(cat)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+if [[ -z "$FILE_PATH" ]]; then
+  exit 0
+fi
+
+# Check if it's a ledger-view temp file — auto-push back to Ledger
+VIEW_DIR="/tmp/ledger-view"
+if [[ "$FILE_PATH" == "$VIEW_DIR/"* ]]; then
+  ledger push "$FILE_PATH" 2>&1
+  exit 0
+fi
+
+# Only intercept writes to memory directory
+if [[ "$FILE_PATH" != "$MEMORY_DIR/"* ]]; then
+  exit 0
+fi
+
+FILENAME=$(basename "$FILE_PATH")
+
+# Skip generated files
+if [[ "$FILENAME" == "MEMORY.md" ]]; then
+  exit 0
+fi
+
+# Only .md files
+if [[ "$FILENAME" != *.md ]]; then
+  exit 0
+fi
+
+# Auto-ingest: send to Ledger, delete local
+ledger ingest "$FILE_PATH" --auto 2>&1
+
+exit 0

package/dist/hooks/hooks/session-end-check.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# Session end: run hash-based sync check + temp file alert
+
+OUTPUT=$(ledger check 2>/dev/null)
+
+# Only show output if there are issues (not "All synced.")
+if ! echo "$OUTPUT" | grep -q "All synced"; then
+  echo "$OUTPUT"
+fi
+
+# Check for leftover temp view files
+VIEW_DIR="/tmp/ledger-view"
+if [[ -d "$VIEW_DIR" ]]; then
+  COUNT=$(find "$VIEW_DIR" -name "*.md" 2>/dev/null | wc -l)
+  if [[ "$COUNT" -gt 0 ]]; then
+    echo "TEMP_VIEW_FILES:$COUNT files in /tmp/ledger-view/"
+    ls "$VIEW_DIR"/*.md 2>/dev/null | while read f; do
+      echo "  $(basename "$f")"
+    done
+  fi
+fi
+
+exit 0

package/dist/hooks/post-write-ledger.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# PostToolUse hook for Write/Edit
+# If a .md file is written to the memory directory, auto-ingest it to Ledger.
+HOME_PROJECT=$(echo "$HOME" | sed 's|/|-|g')
+MEMORY_DIR="$HOME/.claude/projects/$HOME_PROJECT/memory"
+INPUT=$(cat)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+if [[ -z "$FILE_PATH" ]]; then
+  exit 0
+fi
+
+# Check if it's a ledger-view temp file — auto-push back to Ledger
+VIEW_DIR="/tmp/ledger-view"
+if [[ "$FILE_PATH" == "$VIEW_DIR/"* ]]; then
+  ledger push "$FILE_PATH" 2>&1
+  exit 0
+fi
+
+# Only intercept writes to memory directory
+if [[ "$FILE_PATH" != "$MEMORY_DIR/"* ]]; then
+  exit 0
+fi
+
+FILENAME=$(basename "$FILE_PATH")
+
+# Skip generated files
+if [[ "$FILENAME" == "MEMORY.md" ]]; then
+  exit 0
+fi
+
+# Only .md files
+if [[ "$FILENAME" != *.md ]]; then
+  exit 0
+fi
+
+# Auto-ingest: send to Ledger, delete local
+ledger ingest "$FILE_PATH" --auto 2>&1
+
+exit 0

package/dist/hooks/session-end-check.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# Session end: run hash-based sync check + temp file alert
+
+OUTPUT=$(ledger check 2>/dev/null)
+
+# Only show output if there are issues (not "All synced.")
+if ! echo "$OUTPUT" | grep -q "All synced"; then
+  echo "$OUTPUT"
+fi
+
+# Check for leftover temp view files
+VIEW_DIR="/tmp/ledger-view"
+if [[ -d "$VIEW_DIR" ]]; then
+  COUNT=$(find "$VIEW_DIR" -name "*.md" 2>/dev/null | wc -l)
+  if [[ "$COUNT" -gt 0 ]]; then
+    echo "TEMP_VIEW_FILES:$COUNT files in /tmp/ledger-view/"
+    ls "$VIEW_DIR"/*.md 2>/dev/null | while read f; do
+      echo "  $(basename "$f")"
+    done
+  fi
+fi
+
+exit 0

package/dist/lib/config.js

@@ -0,0 +1,63 @@
+import dotenv from 'dotenv';
+import { createClient } from '@supabase/supabase-js';
+import OpenAI from 'openai';
+import { resolve } from 'path';
+import { homedir } from 'os';
+import { existsSync, readFileSync } from 'fs';
+import { fatal, ExitCode } from './errors.js';
+// --- Defaults ---
+const LEDGER_DIR = resolve(homedir(), '.ledger');
+const LEDGER_DOTENV = resolve(LEDGER_DIR, '.env');
+// Claude Code encodes the working directory as folder name: /home/user → -home-user
+const HOME_PROJECT_DIR = homedir().replace(/\//g, '-');
+const DEFAULT_MEMORY_DIR = resolve(homedir(), `.claude/projects/${HOME_PROJECT_DIR}/memory`);
+const DEFAULT_CLAUDE_MD_PATH = resolve(homedir(), 'CLAUDE.md');
+const CONFIG_FILE = resolve(LEDGER_DIR, 'config.json');
+// --- Helpers ---
+export function getLedgerDir() {
+    return LEDGER_DIR;
+}
+export function loadConfigFile() {
+    if (existsSync(CONFIG_FILE)) {
+        try {
+            return JSON.parse(readFileSync(CONFIG_FILE, 'utf-8'));
+        }
+        catch {
+            return {};
+        }
+    }
+    return {};
+}
+export function getDefaultConfig() {
+    return {
+        memoryDir: DEFAULT_MEMORY_DIR,
+        claudeMdPath: DEFAULT_CLAUDE_MD_PATH,
+        hooks: {
+            envBlocking: true,
+            mcpJsonBlocking: true,
+            writeInterception: true,
+            sessionEndCheck: true,
+        },
+    };
+}
+// --- Load Config ---
+export function loadConfig() {
+    // Priority: env vars > DOTENV_CONFIG_PATH > ~/.ledger/.env
+    const dotenvPath = process.env.DOTENV_CONFIG_PATH
+        || (existsSync(LEDGER_DOTENV) ? LEDGER_DOTENV : undefined);
+    if (dotenvPath)
+        dotenv.config({ path: dotenvPath, quiet: true });
+    if (!process.env.SUPABASE_URL || !process.env.SUPABASE_SERVICE_ROLE_KEY) {
+        fatal('Missing SUPABASE_URL or SUPABASE_SERVICE_ROLE_KEY. Run `ledger init` or check your .env file.', ExitCode.GENERAL_ERROR);
+    }
+    if (!process.env.OPENAI_API_KEY) {
+        fatal('Missing OPENAI_API_KEY. Run `ledger init` or check your .env file.', ExitCode.GENERAL_ERROR);
+    }
+    const fileConfig = loadConfigFile();
+    return {
+        memoryDir: process.env.LEDGER_MEMORY_DIR || fileConfig.memoryDir || DEFAULT_MEMORY_DIR,
+        claudeMdPath: process.env.LEDGER_CLAUDE_MD_PATH || fileConfig.claudeMdPath || DEFAULT_CLAUDE_MD_PATH,
+        supabase: createClient(process.env.SUPABASE_URL, process.env.SUPABASE_SERVICE_ROLE_KEY),
+        openai: new OpenAI({ apiKey: process.env.OPENAI_API_KEY }),
+    };
+}

package/dist/lib/errors.js

@@ -0,0 +1,23 @@
+export class LedgerError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'LedgerError';
+    }
+}
+export var ExitCode;
+(function (ExitCode) {
+    ExitCode[ExitCode["SUCCESS"] = 0] = "SUCCESS";
+    ExitCode[ExitCode["GENERAL_ERROR"] = 1] = "GENERAL_ERROR";
+    ExitCode[ExitCode["FILE_NOT_FOUND"] = 2] = "FILE_NOT_FOUND";
+    ExitCode[ExitCode["NOTE_NOT_FOUND"] = 3] = "NOTE_NOT_FOUND";
+    ExitCode[ExitCode["SUPABASE_ERROR"] = 4] = "SUPABASE_ERROR";
+    ExitCode[ExitCode["EMBEDDING_ERROR"] = 5] = "EMBEDDING_ERROR";
+    ExitCode[ExitCode["CONFLICT"] = 6] = "CONFLICT";
+    ExitCode[ExitCode["INVALID_INPUT"] = 7] = "INVALID_INPUT";
+})(ExitCode || (ExitCode = {}));
+export function fatal(message, code = ExitCode.GENERAL_ERROR) {
+    console.error(message);
+    process.exit(code);
+}