@brainervirus/workit-cursor 0.6.1 → 0.8.0

package/dist/cursor-session-start.js

@@ -0,0 +1,351 @@
+#!/usr/bin/env node
+
+// packages/workit-cursor/hooks/session-start.ts
+import { existsSync, readFileSync } from "node:fs";
+import path2 from "node:path";
+import { fileURLToPath } from "node:url";
+
+// packages/workit-core/src/core/logger.ts
+import { appendFileSync, mkdirSync, readdirSync, unlinkSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+var REDACTED = "[REDACTED]";
+var DEFAULT_MAX_RATE = 20;
+var DEFAULT_RATE_WINDOW_MS = 1000;
+var DEFAULT_MAX_FIELD_LENGTH = 200;
+var DEFAULT_MAX_STACK_LINES = 30;
+var DAY_FILE = /^workit-\d{4}-\d{2}-\d{2}\.jsonl$/;
+var RETAINED_DAYS = 7;
+var SECRET_VALUE = /\b(?:Bearer|Basic|Digest|Token)\s+\S+/gi;
+var KEY_EQ_VALUE = /\b([A-Za-z0-9_-]*(?:token|secret|password|passwd|apikey|api[_-]?key|authorization|credential|bearer)[A-Za-z0-9_-]*)([:=]\s*).+/gi;
+var URL_QUERY = /(https?:\/\/[^?#\s]+)\?[^#\s]*/g;
+var splitKey = (key) => key.split(/[_-]+|(?<=[a-z0-9])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/).map((word) => word.toLowerCase());
+var SENSITIVE_WORDS = new Set([
+  "token",
+  "secret",
+  "password",
+  "passwd",
+  "authorization",
+  "credential",
+  "credentials",
+  "cookie",
+  "api",
+  "apikey",
+  "apitoken",
+  "accesstoken",
+  "clientsecret",
+  "refreshtoken",
+  "key",
+  "bearer",
+  "prompt",
+  "message",
+  "messages",
+  "content",
+  "body",
+  "args",
+  "argument",
+  "result",
+  "results",
+  "output",
+  "issue",
+  "description",
+  "summary",
+  "payload",
+  "script",
+  "command",
+  "text",
+  "query"
+]);
+var STACK_WORDS = new Set(["stack", "stacktrace", "trace"]);
+var escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+var resolveStateDir = () => {
+  const override = process.env.WORKFLOW_TOOLKIT_STATE;
+  if (override)
+    return override;
+  const home = os.homedir();
+  if (process.env.XDG_STATE_HOME)
+    return path.join(process.env.XDG_STATE_HOME, "workit");
+  switch (os.platform()) {
+    case "darwin":
+      return path.join(home, "Library", "Application Support", "workit");
+    case "win32":
+      return path.join(process.env.LOCALAPPDATA ?? path.join(home, "AppData", "Local"), "workit");
+    default:
+      return path.join(process.env.HOME ?? home, ".local", "state", "workit");
+  }
+};
+var homePattern = new RegExp(`${escapeRegExp(os.homedir())}(?=[/\\\\]|$)|\\$HOME(?=[/\\\\]|$)`, "g");
+var applyPatterns = (value) => {
+  let out = value;
+  out = out.replace(SECRET_VALUE, REDACTED);
+  out = out.replace(KEY_EQ_VALUE, "$1$2[REDACTED]");
+  out = out.replace(URL_QUERY, "$1?[REDACTED]");
+  out = out.replace(homePattern, "~");
+  if (process.platform === "win32")
+    out = out.replace(/\\/g, "/");
+  return out;
+};
+var redactString = (value, options) => {
+  const out = applyPatterns(value);
+  if (out.length > options.maxFieldLength) {
+    return `${out.slice(0, options.maxFieldLength)}…`;
+  }
+  return out;
+};
+var boundStack = (value, options) => {
+  if (typeof value !== "string")
+    return redact(value, options);
+  const lines = value.split(`
+`);
+  const kept = lines.slice(0, options.maxStackLines).map(applyPatterns);
+  const dropped = lines.length - kept.length;
+  const body = dropped > 0 ? [...kept, `    ... ${dropped} more`] : kept;
+  return body.join(`
+`);
+};
+var redact = (value, options = DEFAULT_OPTIONS) => {
+  if (value === null || value === undefined)
+    return null;
+  if (typeof value === "boolean" || typeof value === "number")
+    return value;
+  if (typeof value === "string")
+    return redactString(value, options);
+  if (value instanceof Date)
+    return value.toISOString();
+  if (Array.isArray(value))
+    return value.map((entry) => redact(entry, options));
+  if (typeof value === "object") {
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+      const words = splitKey(key);
+      if (words.some((word) => STACK_WORDS.has(word)))
+        out[key] = boundStack(entry, options);
+      else if (words.some((word) => SENSITIVE_WORDS.has(word)))
+        out[key] = REDACTED;
+      else
+        out[key] = redact(entry, options);
+    }
+    return out;
+  }
+  return null;
+};
+var DEFAULT_OPTIONS = {
+  maxFieldLength: DEFAULT_MAX_FIELD_LENGTH,
+  maxStackLines: DEFAULT_MAX_STACK_LINES
+};
+var dailyFileName = (date) => {
+  const y = date.getFullYear();
+  const m = String(date.getMonth() + 1).padStart(2, "0");
+  const d = String(date.getDate()).padStart(2, "0");
+  return `workit-${y}-${m}-${d}.jsonl`;
+};
+var pruneOldFiles = (dir) => {
+  try {
+    const files = readdirSync(dir).filter((name) => DAY_FILE.test(name)).sort().reverse();
+    for (const file of files.slice(RETAINED_DAYS)) {
+      try {
+        unlinkSync(path.join(dir, file));
+      } catch {}
+    }
+  } catch {}
+};
+var createLogger = (options = {}) => {
+  const stateDir = options.stateDir ?? resolveStateDir();
+  const logDir = path.join(stateDir, "logs");
+  const now = options.now ?? (() => new Date);
+  const maxRate = options.maxRate ?? DEFAULT_MAX_RATE;
+  const rateWindowMs = options.rateWindowMs ?? DEFAULT_RATE_WINDOW_MS;
+  const redactOptions = {
+    maxFieldLength: options.maxFieldLength ?? DEFAULT_MAX_FIELD_LENGTH,
+    maxStackLines: options.maxStackLines ?? DEFAULT_MAX_STACK_LINES
+  };
+  let windowStart = 0;
+  const windowCounts = { debug: 0, info: 0, warn: 0, error: 0 };
+  const emit = (level, message, context) => {
+    const date = now();
+    const elapsed = date.getTime() - windowStart;
+    if (elapsed >= rateWindowMs || windowStart === 0) {
+      windowStart = date.getTime();
+      windowCounts.debug = 0;
+      windowCounts.info = 0;
+      windowCounts.warn = 0;
+      windowCounts.error = 0;
+    }
+    windowCounts[level] += 1;
+    if (windowCounts[level] > maxRate)
+      return;
+    let event = null;
+    try {
+      event = {
+        level,
+        time: date.toISOString(),
+        message: redactString(message, redactOptions),
+        context: redact(context ?? {}, redactOptions)
+      };
+      const line = `${JSON.stringify(event)}
+`;
+      mkdirSync(logDir, { recursive: true, mode: 448 });
+      appendFileSync(path.join(logDir, dailyFileName(date)), line, { mode: 384 });
+      pruneOldFiles(logDir);
+    } catch {
+      try {
+        event = {
+          level,
+          time: date.toISOString(),
+          message: redactString(message, redactOptions),
+          context: { redaction_failed: true }
+        };
+        mkdirSync(logDir, { recursive: true, mode: 448 });
+        appendFileSync(path.join(logDir, dailyFileName(date)), `${JSON.stringify(event)}
+`, {
+          mode: 384
+        });
+      } catch {}
+    }
+    for (const sink of [options.appLog, options.stderr]) {
+      if (!sink)
+        continue;
+      if (!event)
+        continue;
+      try {
+        sink(event);
+      } catch {}
+    }
+  };
+  return {
+    debug: (message, context) => emit("debug", message, context),
+    info: (message, context) => emit("info", message, context),
+    warn: (message, context) => emit("warn", message, context),
+    error: (message, context) => emit("error", message, context),
+    guard: (name, fn) => {
+      try {
+        return fn();
+      } catch (err) {
+        emit("warn", "detector_failed", {
+          detector: name,
+          error: err instanceof Error ? err.message : String(err)
+        });
+        return;
+      }
+    }
+  };
+};
+
+// packages/workit-core/src/core/boundary.ts
+var EVENT = {
+  initialization: "initialization",
+  provenance: "provenance",
+  assets: "assets",
+  configurationSource: "configuration_source",
+  hooks: "hooks",
+  mcpConnection: "mcp_connection",
+  migration: "migration",
+  installSteps: "install_steps",
+  uncaughtFailure: "uncaught_failure",
+  toolsFailed: "tools_failed",
+  doctor: "doctor"
+};
+var errorDetail = (err) => {
+  if (err instanceof Error) {
+    return { error_name: err.name, error: err.message };
+  }
+  return { error_name: "unknown", error: String(err) };
+};
+
+// packages/workit-core/src/core/config.ts
+var diagnosticLogger;
+var setDiagnosticLogger = (logger) => {
+  diagnosticLogger = logger;
+};
+var PRESETS = {
+  gitflow: {
+    allowed: ["feature/*", "bugfix/*", "hotfix/*", "release/*"],
+    protected: ["main", "develop", "master", "prod", "production"]
+  },
+  "github-flow": { allowed: ["*"], protected: ["main"] },
+  "trunk-based": { allowed: ["*"], protected: ["main"] },
+  custom: { allowed: [], protected: [] }
+};
+var DEFAULTS = {
+  locale: "en",
+  localeOptions: ["en", "es-CL", "es-MX", "es-AR", "pt-BR"],
+  timezone: "America/Santiago",
+  branchPolicy: {
+    preset: "gitflow",
+    allowed: [...PRESETS.gitflow.allowed],
+    protected: [...PRESETS.gitflow.protected]
+  }
+};
+
+// packages/workit-cursor/hooks/session-start.ts
+var logger = createLogger({
+  stderr: (event) => process.stderr.write(`${JSON.stringify(event)}
+`)
+});
+var hookDir = path2.dirname(fileURLToPath(import.meta.url));
+var pluginDir = path2.resolve(hookDir, "..");
+var marker = path2.join(pluginDir, ".workflow-toolkit-root");
+setDiagnosticLogger(logger);
+logger.info(EVENT.initialization, { host: "cursor-hook", hook_dir: hookDir });
+var resolveRepoRoot = () => {
+  if (process.env.WORKFLOW_TOOLKIT_ROOT && existsSync(path2.join(process.env.WORKFLOW_TOOLKIT_ROOT, "templates"))) {
+    return process.env.WORKFLOW_TOOLKIT_ROOT;
+  }
+  if (existsSync(marker)) {
+    return readFileSync(marker, "utf8").replace(/\n+$/, "");
+  }
+  const ownAssets = path2.join(pluginDir, "assets");
+  if (existsSync(path2.join(ownAssets, "templates"))) {
+    return ownAssets;
+  }
+  return path2.resolve(hookDir, "../../workit-core");
+};
+var body = null;
+var repoRoot = resolveRepoRoot();
+try {
+  const contract = path2.join(repoRoot, "templates", "superpowers-doc-contract.md");
+  if (existsSync(contract))
+    body = readFileSync(contract, "utf8");
+} catch (err) {
+  logger.error(EVENT.hooks, { boundary: "session-start", root: repoRoot, ...errorDetail(err) });
+  body = null;
+}
+if (body === null) {
+  process.stdout.write(`{}
+`);
+  process.exit(0);
+}
+var context = `<workflow-toolkit-askquestion-hard-gate>
+HARD-GATE: Any user choice with options → call Cursor AskQuestion directly with workflow-specific copy. NEVER A/B/C in chat. Overrides Superpowers brainstorming conversational options.
+</workflow-toolkit-askquestion-hard-gate>
+
+<workflow-toolkit-visual-companion>
+HARD-GATE: NEVER offer Superpowers visual companion or open a browser tab. For UI wireframes use workflow_present_ascii; for flows use workflow_present_flow. Overrides Superpowers brainstorming visual companion offer.
+</workflow-toolkit-visual-companion>
+
+<workflow-toolkit-no-worktrees>
+HARD-GATE: NEVER using-git-worktrees or git worktree. In-place feature/* or bugfix/* checkout only via workflow_resolve_branch + workflow_branch_setup. Dirty tree → native AskQuestion before checkout.
+</workflow-toolkit-no-worktrees>
+
+<workflow-toolkit-sdd-path>
+HARD-GATE: NEVER .superpowers/sdd. ALWAYS workflow_sdd_context with plan_path first — resolves canonical docs/<slug>/sdd/ and creates nothing (no empty ledger; progress.md appears only on the first confirmed append). workflow_sdd_task_brief, workflow_sdd_review_package, workflow_sdd_append_progress only.
+</workflow-toolkit-sdd-path>
+
+<workflow-toolkit-todowrite>
+HARD-GATE: After workflow_sdd_context, call Cursor TodoWrite with returned todos (merge: false). SDD ledger is persistence — TodoWrite is the native task list UI. Keep in_progress/completed in sync each task.
+</workflow-toolkit-todowrite>
+
+<workflow-toolkit-superpowers-doc-contract>
+${body}
+</workflow-toolkit-superpowers-doc-contract>
+
+<workflow-toolkit-reminder>
+HARD-GATE: Bounded user choices → call Cursor AskQuestion directly (never A/B/C or 1/2/3 lists in prose). After a plan is approved → AskQuestion menu with: Subagent-driven, Inline, Handoff (new session only), Review spec first, Review plan first. Tools with confirmed → call them; never fabricate results.
+Delivering docs → clickable markdown link (docs/<slug>/spec.md) + 3-5 bullet summary.
+</workflow-toolkit-reminder>`;
+process.stdout.write(JSON.stringify({ additional_context: context }, null, 2) + `
+`);
+process.exit(0);
+export {
+  logger
+};