@bongos/core 1.19.883 → 1.19.885

package/modules/dev-box/app/src/preload.js

@@ -1,29 +0,0 @@
-// devbox-app/src/preload.js — the renderer's ONLY door into the main process.
-// Sandboxed + contextIsolated; every capability is a named verb (no raw URLs,
-// no arbitrary IPC) so a compromised renderer can do nothing the panel UI
-// couldn't already do.
-
-const { contextBridge, ipcRenderer } = require('electron');
-
-contextBridge.exposeInMainWorld('otb', {
-  getState: () => ipcRenderer.invoke('state:get'),
-  signIn: () => ipcRenderer.invoke('auth:signIn'),
-  cancelPairing: () => ipcRenderer.invoke('auth:cancelPairing'),
-  signOut: () => ipcRenderer.invoke('auth:signOut'),
-  boxOn: () => ipcRenderer.invoke('box:on'),
-  boxOff: () => ipcRenderer.invoke('box:off'),
-  claimable: () => ipcRenderer.invoke('tasks:claimable'),
-  pickTask: (taskId) => ipcRenderer.invoke('tasks:pick', taskId),
-  openTerminal: () => ipcRenderer.invoke('open:terminal'),
-  openHall: () => ipcRenderer.invoke('open:hall'),
-  openPairPage: () => ipcRenderer.invoke('open:pairPage'),
-  openUpdate: () => ipcRenderer.invoke('open:update'),
-  copy: (what) => ipcRenderer.invoke('copy', what),
-  installSettings: () => ipcRenderer.invoke('settings:install'),
-  retryHostKeys: () => ipcRenderer.invoke('hostkeys:retry'),
-  retryKey: () => ipcRenderer.invoke('key:retry'),
-  hide: () => ipcRenderer.invoke('panel:hide'),
-  onState: (cb) => {
-    ipcRenderer.on('state', (_e, payload) => cb(payload));
-  },
-});

package/modules/dev-box/app/src/session-store.js

@@ -1,82 +0,0 @@
-// devbox-app/src/session-store.js — the app shares the GDS CLI's session file.
-//
-// ~/.config/<instance>/bongos-session.json is the same file scripts/gds/cli-lib.js and
-// paste-token.js read/write: { token, builder, api_base, ... }. Sharing it is
-// a deliberate UX decision (ADR 0045): pairing the app also signs in every
-// /builder-* skill on this machine, and a builder who already ran
-// /builder-setup opens the app already signed in. Writes are merge-preserving
-// (unknown fields like gemini_api_key survive, mirroring paste-token.js) and
-// 0600 like the CLI's.
-
-const fs = require('node:fs');
-const path = require('node:path');
-const os = require('node:os');
-const brand = require('./brand');
-
-// The instance's CLI config dir (branding configDir) — so the app shares the
-// exact session file the /builder-* CLI uses on this machine.
-const DIR = path.join(os.homedir(), '.config', brand.CONFIG_DIR);
-const FILE = path.join(DIR, 'bongos-session.json');
-// Read-side legacy names only — accepted on read, never written to, so the app
-// keeps working on a machine whose CLI has not yet re-authenticated. Newest
-// first, mirroring SESSION_FILENAMES in src/instance-config.js; this app ships as
-// its own bundle (own brand module, no core imports), so the list is duplicated
-// rather than imported, and pinned against the real one by
-// tests/session_rename_fallback.mjs (task 1003704).
-const FILES_LEGACY = [
-  path.join(DIR, 'gds-session.json'),
-  path.join(DIR, 'pms-session.json'),
-];
-const FILES_READ = [FILE, ...FILES_LEGACY];
-
-function read() {
-  for (const f of FILES_READ) {
-    try {
-      const data = JSON.parse(fs.readFileSync(f, 'utf8'));
-      if (data && typeof data.token === 'string' && data.token) return data;
-    } catch { /* missing or unparsable → keep looking */ }
-  }
-  return null;
-}
-
-function write({ token, builder, apiBase }) {
-  const existing = read() || {};
-  const next = {
-    ...existing,
-    token,
-    builder: builder ?? existing.builder ?? null,
-    api_base: apiBase ?? existing.api_base ?? null,
-  };
-  fs.mkdirSync(DIR, { recursive: true });
-  fs.writeFileSync(FILE, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
-  // Re-assert the mode for pre-existing files (chmod is a no-op on Windows,
-  // where the home-dir ACL is the protection — same posture as the CLI).
-  try { fs.chmodSync(FILE, 0o600); } catch { /* best-effort */ }
-  return next;
-}
-
-// Sign-out: drop ONLY our credential fields; preserve everything else
-// (gemini_api_key etc.) so the app never destroys CLI-adjacent config.
-//
-// Strips EVERY accepted filename, not just the current one. read() falls through
-// to an older name when the current file carries no token, so clearing FILE alone
-// would leave a live token in a superseded file and the very next read would sign
-// the builder straight back in. That was survivable while the only legacy name was
-// the long-dead `pms-session.json`; with `gds-session.json` now on the read list
-// it is the common case on every machine that has not re-authenticated yet
-// (task 1003704).
-function clear() {
-  for (const target of FILES_READ) {
-    let existing = null;
-    try {
-      existing = JSON.parse(fs.readFileSync(target, 'utf8'));
-    } catch {
-      continue; // missing or unparsable → nothing to strip
-    }
-    if (!existing || typeof existing !== 'object') continue;
-    const { token: _t, builder: _b, ...rest } = existing;
-    fs.writeFileSync(target, `${JSON.stringify(rest, null, 2)}\n`, { mode: 0o600 });
-  }
-}
-
-module.exports = { read, write, clear, FILE };