@circuitwall/jarela 2.2.1 → 2.4.0

package/lib/utils/source-link.ts

@@ -0,0 +1,45 @@
+/**
+ * Source-link fields for tool results, so an agent can link a reply back to
+ * the email, calendar event, or chat it came from without building URLs.
+ *
+ * `cite_as` is a ready-made markdown link the system prompt tells agents to
+ * paste verbatim. Building it in code keeps the label and URL well-formed:
+ * a stray `]` in a subject or `)` in a URL would otherwise break the link.
+ */
+
+const MAX_LABEL_CHARS = 80;
+
+/** Returns `url` when it is an absolute https URL, otherwise null. */
+export function httpsUrlOrNull(url: string | null | undefined): string | null {
+  if (!url) return null;
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === "https:" ? parsed.href : null;
+  } catch {
+    return null;
+  }
+}
+
+function markdownLabel(label: string | null | undefined, fallback: string): string {
+  const flat = (label ?? "").replace(/\s+/g, " ").trim();
+  const capped = flat.length > MAX_LABEL_CHARS ? `${flat.slice(0, MAX_LABEL_CHARS - 1).trimEnd()}…` : flat;
+  return (capped || fallback).replace(/[\\[\]]/g, (c) => `\\${c}`);
+}
+
+function markdownDestination(url: string): string {
+  return url.replace(/[()\s<>]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`);
+}
+
+/**
+ * Pre-built markdown link for `cite_as`, or null when there is no usable URL.
+ * Only https URLs qualify: the chat renderer drops other schemes.
+ */
+export function citeAs(
+  label: string | null | undefined,
+  url: string | null | undefined,
+  fallbackLabel = "source",
+): string | null {
+  const safe = httpsUrlOrNull(url);
+  if (!safe) return null;
+  return `[${markdownLabel(label, fallbackLabel)}](${markdownDestination(safe)})`;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@circuitwall/jarela",
-  "version": "2.2.1",
-  "description": "Jarela — local chat interface for LangGraph agents (multi-provider, single-process, SQLite-backed).",
+  "version": "2.4.0",
+  "description": "Jarela — local chat interface for LangGraph agents (multi-provider, single-process, SQLite-backed).",
   "license": "Apache-2.0",
   "author": "Andrew Ge Wu",
   "homepage": "https://github.com/CircuitWall/jarela#readme",
@@ -116,6 +116,7 @@
     "check:impact": "node scripts/check-change-impact.mjs",
     "pricing:snapshot": "node scripts/snapshot-pricing.mjs",
     "prompts:dump": "node scripts/dump-prompts.mjs",
+    "release:changeset": "node scripts/release-changeset.mjs",
     "docs:sync-assets": "node scripts/sync-docs-assets.mjs",
     "docs:dev": "npm run docs:sync-assets && mkdocs serve",
     "docs:build": "npm run docs:sync-assets && mkdocs build",
@@ -143,7 +144,6 @@
     "@huggingface/transformers": "^4.3.1",
     "@langchain/cohere": "^1.1.0",
     "@langchain/core": "^1.2.12",
-    "@langchain/deepseek": "^1.1.13",
     "@langchain/google-genai": "^2.3.2",
     "@langchain/langgraph": "^1.4.17",
     "@langchain/langgraph-checkpoint": "^1.1.5",

package/scripts/install-to-system.ps1

@@ -2,10 +2,14 @@
 # %LOCALAPPDATA%\Programs\Jarela so it can run without this dev repo.
 # Re-registers the per-user "Jarela" scheduled task to point at the install dir.
 #
+# Builds and installs the repo's working tree as-is, including uncommitted
+# changes; install.json records the commit with a "-dirty" suffix when the
+# tree had local changes.
+#
 # Data (SQLite, vector DB, OAuth tokens, memory, agents, models, MCP config,
-# whitelist) lives at %USERPROFILE%\.jarela and is shared between the dev
-# repo and the installed copy - so "migration" is automatic: the same user
-# reads the same database.
+# whitelist) lives at %LOCALAPPDATA%\Jarela (ADR-0006) and is shared between
+# the dev repo and the installed copy - so "migration" is automatic: the same
+# user reads the same database.
 #
 # Usage (no admin required):
 #   powershell -ExecutionPolicy Bypass -File scripts\install-to-system.ps1
@@ -16,13 +20,13 @@
 # -Boot (requires elevated PowerShell): registers the scheduled task to start
 # at machine boot instead of at user logon. Uses S4U so no password is stored
 # and the task still runs as the current user (the SQLite DB at
-# %USERPROFILE%\.jarela stays owned by the right account).
+# %LOCALAPPDATA%\Jarela stays owned by the right account).
 #   powershell -ExecutionPolicy Bypass -File scripts\install-to-system.ps1 -Boot
 # Also reachable via: make install-service -Boot
 #
 # Note: if you've set an encryption PIN (lib/crypto/pin-wrap.ts) the server
 # will boot but stay locked until you visit the UI and enter it. With no PIN,
-# the master key is protected only by NTFS ACLs on ~/.jarela.
+# the master key is protected only by NTFS ACLs on %LOCALAPPDATA%\Jarela.
 
 [CmdletBinding()]
 param(
@@ -93,14 +97,43 @@ foreach ($c in $busy) {
 Start-Sleep -Milliseconds 500
 
 # ── 2. Build (standalone) ──────────────────────────────────────────────────
+# Always builds the working tree as it is on disk — committed or not — so
+# `make install-service` installs exactly the code you are looking at.
+function Get-SourceState {
+  try {
+    $head = (& git -C $RepoRoot rev-parse --short HEAD 2>$null)
+    if (-not $head) { return 'unknown' }
+    $head = $head.Trim()
+    $dirty = (& git -C $RepoRoot status --porcelain --untracked-files=normal 2>$null)
+    if ($dirty) { "$head-dirty" } else { $head }
+  } catch { 'unknown' }
+}
+$commit = Get-SourceState
+
 if (-not $SkipBuild) {
   Push-Location $RepoRoot
   try {
-    if (-not (Test-Path (Join-Path $RepoRoot 'node_modules'))) {
+    Info ("source: working tree at " + $commit)
+    # Re-sync dependencies when package-lock.json changed since the last
+    # install, so an uncommitted dependency change is built against the right
+    # packages. Compares a content hash recorded after `npm ci` (mtime alone
+    # trips on every branch switch); falls back to npm's own stamp the first
+    # time.
+    $lockFile = Join-Path $RepoRoot 'package-lock.json'
+    $installedLock = Join-Path $RepoRoot 'node_modules\.package-lock.json'
+    $lockStamp = Join-Path $RepoRoot 'node_modules\.jarela-lock.sha256'
+    $lockHash = (Get-FileHash -Algorithm SHA256 $lockFile).Hash.ToLowerInvariant()
+    $needsDeps = if (-not (Test-Path $installedLock)) { $true }
+      elseif (Test-Path $lockStamp) { (Get-Content -Raw $lockStamp).Trim() -ne $lockHash }
+      else { (Get-Item $lockFile).LastWriteTimeUtc -gt (Get-Item $installedLock).LastWriteTimeUtc }
+    if ($needsDeps) {
       Step "Installing build dependencies (npm ci)"
       & $npm ci
       if ($LASTEXITCODE -ne 0) { throw "npm ci failed" }
     }
+    if (-not (Test-Path $lockStamp) -or $needsDeps) {
+      [IO.File]::WriteAllText($lockStamp, $lockHash)
+    }
     Step "Building production bundle (next build, output=standalone)"
     # PowerShell 7's $PSNativeCommandUseErrorActionPreference treats any
     # stderr line from a native command as a terminating error when
@@ -242,11 +275,6 @@ Copy-Item -Path (Join-Path $RepoRoot 'scripts\installed-launcher.vbs') `
           -Destination (Join-Path $InstallDir 'launcher.vbs') -Force
 
 # Stamp a version marker so we know which commit produced this install.
-$commit = try {
-  $head = (& git -C $RepoRoot rev-parse --short HEAD).Trim()
-  $dirty = (& git -C $RepoRoot status --porcelain --untracked-files=normal).Trim()
-  if ($dirty) { "$head-dirty" } else { $head }
-} catch { 'unknown' }
 @{
   installedAt   = (Get-Date).ToString('o')
   commit        = $commit

package/scripts/install-to-system.sh

@@ -3,6 +3,10 @@
 # Installs Jarela as a standalone app under ~/Library/Application Support/Jarela
 # and registers a per-user LaunchAgent so it auto-starts at login.
 #
+# Builds and installs the repo's working tree as-is, including uncommitted
+# changes; install.json records the commit with a "-dirty" suffix when the
+# tree had local changes.
+#
 # Data (SQLite, vector DB, OAuth tokens, memory, agents, models, MCP config,
 # whitelist) lives at ~/.jarela and is shared between the dev repo and the
 # installed copy — same DB, no migration step.
@@ -36,7 +40,7 @@ while [[ $# -gt 0 ]]; do
     --skip-optional-packages) SKIP_OPTIONAL_PACKAGES=1; shift ;;
     --no-start)    NO_START=1; shift ;;
     -h|--help)
-      sed -n '2,16p' "$0"
+      sed -n '2,18p' "$0"
       exit 0
       ;;
     *) echo "unknown arg: $1" >&2; exit 2 ;;
@@ -54,6 +58,11 @@ step() { printf '\033[36m==> %s\033[0m\n' "$*"; }
 info() { printf '    %s\n' "$*"; }
 
 # ── Sanity checks ──────────────────────────────────────────────────────────
+if [[ "$(uname -s)" != Darwin ]]; then
+  echo "install-to-system.sh registers a macOS LaunchAgent and only runs on macOS." >&2
+  echo "On Linux, run 'npm run build' and supervise .next/standalone/server.js yourself (see docs/INSTALL.md)." >&2
+  exit 1
+fi
 [[ -f "$REPO_ROOT/package.json" ]] || { echo "package.json not found at $REPO_ROOT" >&2; exit 1; }
 command -v npm  >/dev/null || { echo "npm not on PATH"  >&2; exit 1; }
 command -v node >/dev/null || { echo "node not on PATH" >&2; exit 1; }
@@ -71,6 +80,8 @@ step "Stopping existing LaunchAgent (if loaded)"
 # when the plist is valid. bootout itself may exit non-zero if the
 # service isn't currently loaded — that's fine, we proceed anyway.
 launchctl bootout "gui/$(id -u)" "$PLIST" 2>/dev/null || true
+# Clear any "disabled" flag a prior failed bootstrap may have left behind.
+launchctl enable "gui/$(id -u)/$LABEL" 2>/dev/null || true
 # Belt-and-braces: kill anything still on :4312.
 if lsof -nP -iTCP:$PORT -sTCP:LISTEN -t >/dev/null 2>&1; then
   info "killing process on :$PORT"
@@ -79,12 +90,36 @@ fi
 sleep 1
 
 # ── 2. Build ──────────────────────────────────────────────────────────────
+# Always builds the working tree as it is on disk — committed or not — so
+# `make install-service` installs exactly the code you are looking at.
+COMMIT="$(git -C "$REPO_ROOT" rev-parse --short HEAD 2>/dev/null || echo unknown)"
+if [[ "$COMMIT" != unknown && -n "$(git -C "$REPO_ROOT" status --porcelain --untracked-files=normal 2>/dev/null)" ]]; then
+  COMMIT="$COMMIT-dirty"
+fi
+
 if [[ $SKIP_BUILD -eq 0 ]]; then
   pushd "$REPO_ROOT" >/dev/null
-  if [[ ! -d node_modules ]]; then
+  info "source: working tree at $COMMIT"
+  # Re-sync dependencies when package-lock.json changed since the last
+  # install, so an uncommitted dependency change is built against the right
+  # packages. Compares a content hash recorded after `npm ci` (mtime alone
+  # trips on every branch switch); falls back to npm's own stamp the first
+  # time.
+  LOCK_HASH="$(node -e "process.stdout.write(require('crypto').createHash('sha256').update(require('fs').readFileSync('package-lock.json')).digest('hex'))")"
+  LOCK_STAMP=node_modules/.jarela-lock.sha256
+  NEEDS_DEPS=0
+  if [[ ! -f node_modules/.package-lock.json ]]; then
+    NEEDS_DEPS=1
+  elif [[ -f "$LOCK_STAMP" ]]; then
+    [[ "$(cat "$LOCK_STAMP")" == "$LOCK_HASH" ]] || NEEDS_DEPS=1
+  elif [[ package-lock.json -nt node_modules/.package-lock.json ]]; then
+    NEEDS_DEPS=1
+  fi
+  if [[ $NEEDS_DEPS -eq 1 ]]; then
     step "Installing build dependencies (npm ci)"
     npm ci
   fi
+  printf '%s' "$LOCK_HASH" > "$LOCK_STAMP"
   step "Building production bundle (next build, output=standalone)"
   npm run build
   popd >/dev/null
@@ -125,7 +160,6 @@ cp -R "$STATIC_SRC" "$INSTALL_DIR/.next/static"
 cp -R "$PUBLIC_SRC" "$INSTALL_DIR/public"
 
 # ── 5. Stamp install.json ─────────────────────────────────────────────────
-COMMIT="$(git -C "$REPO_ROOT" rev-parse --short HEAD 2>/dev/null || echo unknown)"
 INSTALLED_AT="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
 cat > "$INSTALL_DIR/install.json" <<JSON
 {