npm - @commandgarden/cli - Versions diffs - 2.5.0 → 2.6.0 - Mend

@commandgarden/cli 2.5.0 → 2.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (21) hide show

package/node_modules/@commandgarden/app/dist/client/index.html CHANGED Viewed

@@ -10,8 +10,8 @@
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
   <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet" />
   <title>commandGarden</title>
-  <script type="module" crossorigin src="/assets/index-DCptfmmK.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-qunCIeG9.css">
+  <script type="module" crossorigin src="/assets/index-tVkaaa2g.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-Dm4TTmUS.css">
 </head>
 <body>
   <div id="root"></div>

package/node_modules/@commandgarden/app/dist/server/journal/sources/git.source.d.ts CHANGED Viewed

@@ -15,7 +15,7 @@ export declare class GitSource {
     private readonly repos;
     private readonly author;
     constructor(daemon: DaemonClient, config: JournalConfig);
-    fetch(weekStart: string, weekEnd: string): Promise<GitData>;
+    fetch(_weekStart: string, _weekEnd: string): Promise<GitData>;
     /** Fetch a single repo's commits+PRs via the daemon connector. */
     private fetchRepo;
 }

package/node_modules/@commandgarden/app/dist/server/journal/sources/git.source.js CHANGED Viewed

@@ -17,10 +17,10 @@ export class GitSource {
         this.repos = config.azureDevOps.repos;
         this.author = config.author;
     }
-    async fetch(weekStart, weekEnd) {
+    async fetch(_weekStart, _weekEnd) {
         try {
             // Call the ado/git-commits connector once per configured repo via daemon
-            const results = await Promise.all(this.repos.map((r) => this.fetchRepo(r.project, r.repo, weekStart, weekEnd)));
+            const results = await Promise.all(this.repos.map((r) => this.fetchRepo(r.project, r.repo, _weekStart, _weekEnd)));
             // Aggregate daily commits across all repos
             const dailyMap = new Map();
             const repoActivity = [];

package/node_modules/@commandgarden/app/dist/server/journal/sources/meetings.source.d.ts CHANGED Viewed

@@ -1,21 +1,20 @@
 /**
- * Meetings data source — DISABLED for v1.
+ * Meetings data source — fetches the user's calendar via the
+ * outlook/my-meetings connector through the daemon API.
  *
- * The Outlook connector is blocked by the corporate MCAS proxy
- * (outlook.cloud.microsoft.mcas.ms) which prevents all standard auth patterns:
- * - OWA REST API: X-OWA-CANARY cookie is HttpOnly (JS can't read it)
- * - Graph API: no Graph-scoped MSAL token available in MCAS session storage
- * - Response interception: eval script installs after OWA's initial data fetch
+ * The connector uses CDP Scheduling Assistant + getSchedule interception
+ * to bypass the MCAS proxy (see docs/ado-git-commits-fix.md for the
+ * Runtime.evaluate CSP bypass that also applies here).
  *
- * Returns null immediately — the journal renders without meeting data
- * (graceful degradation). Git + Jira provide a strong 2-source story.
- *
- * TODO: Revisit post-demo with MCAS-specific auth investigation.
+ * Calls the connector once per weekday in the date range, then
+ * aggregates into MeetingsData (totalCount, totalHours, daily, entries).
  */
 import type { DaemonClient } from '@commandgarden/shared';
 import type { MeetingsData } from '../journal.types.js';
 export declare class MeetingsSource {
-    private readonly _daemon;
-    constructor(_daemon: DaemonClient);
-    fetch(_weekStart: string, _weekEnd: string): Promise<MeetingsData | null>;
+    private readonly daemon;
+    constructor(daemon: DaemonClient);
+    fetch(weekStart: string, weekEnd: string): Promise<MeetingsData | null>;
+    /** Fetch a single day's meetings via the daemon connector. */
+    private fetchDay;
 }

package/node_modules/@commandgarden/app/dist/server/journal/sources/meetings.source.js CHANGED Viewed

@@ -1,25 +1,78 @@
 /**
- * Meetings data source — DISABLED for v1.
+ * Meetings data source — fetches the user's calendar via the
+ * outlook/my-meetings connector through the daemon API.
  *
- * The Outlook connector is blocked by the corporate MCAS proxy
- * (outlook.cloud.microsoft.mcas.ms) which prevents all standard auth patterns:
- * - OWA REST API: X-OWA-CANARY cookie is HttpOnly (JS can't read it)
- * - Graph API: no Graph-scoped MSAL token available in MCAS session storage
- * - Response interception: eval script installs after OWA's initial data fetch
+ * The connector uses CDP Scheduling Assistant + getSchedule interception
+ * to bypass the MCAS proxy (see docs/ado-git-commits-fix.md for the
+ * Runtime.evaluate CSP bypass that also applies here).
  *
- * Returns null immediately — the journal renders without meeting data
- * (graceful degradation). Git + Jira provide a strong 2-source story.
- *
- * TODO: Revisit post-demo with MCAS-specific auth investigation.
+ * Calls the connector once per weekday in the date range, then
+ * aggregates into MeetingsData (totalCount, totalHours, daily, entries).
  */
 export class MeetingsSource {
-    _daemon;
-    constructor(_daemon) {
-        this._daemon = _daemon;
+    daemon;
+    constructor(daemon) {
+        this.daemon = daemon;
+    }
+    async fetch(weekStart, weekEnd) {
+        try {
+            // Fetch meetings for each weekday in the range.
+            // The connector opens the Scheduling Assistant per call, so we
+            // batch weekdays sequentially to avoid multiple browser tabs.
+            const allEntries = [];
+            const cursor = new Date(weekStart);
+            const end = new Date(weekEnd);
+            while (cursor <= end) {
+                const day = cursor.getDay();
+                // Only fetch weekdays (Mon–Fri) to avoid unnecessary calls
+                if (day >= 1 && day <= 5) {
+                    const dateStr = cursor.toISOString().slice(0, 10);
+                    const rows = await this.fetchDay(dateStr);
+                    for (const r of rows) {
+                        allEntries.push({
+                            date: r.date,
+                            subject: r.subject,
+                            start: r.start,
+                            end: r.end,
+                            durationMin: r.durationMin,
+                        });
+                    }
+                }
+                cursor.setDate(cursor.getDate() + 1);
+            }
+            if (allEntries.length === 0)
+                return null;
+            // Aggregate daily stats
+            const dailyMap = new Map();
+            for (const e of allEntries) {
+                const d = dailyMap.get(e.date) ?? { date: e.date, count: 0, hours: 0 };
+                d.count += 1;
+                d.hours += e.durationMin / 60;
+                dailyMap.set(e.date, d);
+            }
+            const daily = [...dailyMap.values()].sort((a, b) => a.date.localeCompare(b.date));
+            const totalCount = allEntries.length;
+            const totalMin = allEntries.reduce((s, e) => s + e.durationMin, 0);
+            const totalHours = Math.round((totalMin / 60) * 100) / 100;
+            const avgDurationMin = Math.round(totalMin / totalCount);
+            return { totalCount, totalHours, avgDurationMin, daily, entries: allEntries };
+        }
+        catch (e) {
+            console.error('[meetings] fetch error:', e);
+            return null;
+        }
     }
-    async fetch(_weekStart, _weekEnd) {
-        // Disabled for v1 — MCAS proxy blocks all standard auth patterns.
-        // Returns null so the journal renders without meeting data.
-        return null;
+    /** Fetch a single day's meetings via the daemon connector. */
+    async fetchDay(date) {
+        try {
+            const result = await this.daemon.post('/api/run', {
+                connector: 'outlook/my-meetings',
+                args: { date },
+            });
+            return result.ok && result.data ? result.data : [];
+        }
+        catch {
+            return [];
+        }
     }
 }

package/node_modules/@commandgarden/chrome/dist/service-worker.js CHANGED Viewed

@@ -7140,7 +7140,10 @@ var RealChromeAdapter = class {
       this.debuggerAttached = true;
       await chrome.debugger.sendCommand({ tabId }, "Network.enable");
       await chrome.debugger.sendCommand({ tabId }, "Fetch.enable", {
-        patterns: [{ urlPattern: "*graphql*", requestStage: "Response" }]
+        patterns: [
+          { urlPattern: "*graphql*", requestStage: "Response" },
+          { urlPattern: "*_apis/*", requestStage: "Response" }
+        ]
       }).catch(() => {
       });
       this.startCapture(tabId);
@@ -7165,7 +7168,10 @@ var RealChromeAdapter = class {
       await chrome.debugger.attach({ targetId: swTarget.id }, "1.3");
       await chrome.debugger.sendCommand({ targetId: swTarget.id }, "Network.enable");
       await chrome.debugger.sendCommand({ targetId: swTarget.id }, "Fetch.enable", {
-        patterns: [{ urlPattern: "*graphql*", requestStage: "Response" }]
+        patterns: [
+          { urlPattern: "*graphql*", requestStage: "Response" },
+          { urlPattern: "*_apis/*", requestStage: "Response" }
+        ]
       }).catch(() => {
       });
       const captureTabId = this.tabId;
@@ -7197,6 +7203,19 @@ var RealChromeAdapter = class {
     }
   }
   _swTargetId = null;
+  /** Inject an ADO API response body into the page's globalThis.__cdpCapture array.
+   *  Used by ado/git-commits and similar connectors that need CDP-intercepted data. */
+  injectCdpCapture(tabId, body) {
+    chrome.scripting.executeScript({
+      target: { tabId },
+      world: "MAIN",
+      args: [body],
+      func: (data) => {
+        if (!globalThis.__cdpCapture) globalThis.__cdpCapture = [];
+        globalThis.__cdpCapture.push(data);
+      }
+    });
+  }
   /** Inject a getSchedule response body into the page's globalThis.__rfb array. */
   injectRfb(tabId, body) {
     chrome.scripting.executeScript({
@@ -7221,6 +7240,9 @@ var RealChromeAdapter = class {
       if (body.includes("getSchedule") && body.includes("availabilityView")) {
         this.injectRfb(tabId, body);
       }
+      if (body.includes("commitId") || body.includes("pushId") || body.includes("workItems")) {
+        this.injectCdpCapture(tabId, body);
+      }
     }).catch(() => {
     }).finally(() => {
       if (isFetchDomain) {
@@ -7260,7 +7282,35 @@ var RealChromeAdapter = class {
     if (!response.ok) throw new Error(response.error ?? "Content script error");
     return response.data;
   }
+  /**
+   * Run eval.js code via CDP Runtime.evaluate — bypasses CSP because it
+   * executes at the debugger level (like typing in DevTools console).
+   * Required for sites like ADO that use strict-dynamic CSP with nonces,
+   * which blocks new AsyncFunction() / eval() from chrome.scripting.
+   */
+  async evaluateViaCdp(tabId, code) {
+    const expression = `
+      Promise.race([
+        (async () => { ${code} })(),
+        new Promise((_, rej) => setTimeout(() => rej(new Error('js_evaluate timed out (90s)')), 90000))
+      ])
+    `;
+    const result = await chrome.debugger.sendCommand(
+      { tabId },
+      "Runtime.evaluate",
+      { expression, awaitPromise: true, returnByValue: true }
+    );
+    const r = result;
+    if (r.exceptionDetails) {
+      const errMsg = r.exceptionDetails.exception?.description || r.exceptionDetails.text;
+      throw new Error(errMsg);
+    }
+    return r.result?.value;
+  }
   async evaluateInPage(tabId, code) {
+    if (this.debuggerAttached) {
+      return this.evaluateViaCdp(tabId, code);
+    }
     const nonce = "__cg_" + Math.random().toString(36).slice(2);
     await chrome.scripting.executeScript({
       target: { tabId },
@@ -7268,19 +7318,24 @@ var RealChromeAdapter = class {
       args: [code, nonce],
       func: (codeStr, key) => {
         globalThis[key] = { pending: true };
-        const AsyncFunction = Object.getPrototypeOf(async function() {
-        }).constructor;
-        new AsyncFunction(codeStr)().then(
-          (r) => {
-            globalThis[key] = { ok: true, result: r };
-          },
-          (e) => {
-            globalThis[key] = { ok: false, error: e.message || String(e) };
-          }
-        );
+        try {
+          const AsyncFunction = Object.getPrototypeOf(async function() {
+          }).constructor;
+          new AsyncFunction(codeStr)().then(
+            (r) => {
+              globalThis[key] = { ok: true, result: r };
+            },
+            (e) => {
+              globalThis[key] = { ok: false, error: e.message || String(e) };
+            }
+          );
+        } catch (syncErr) {
+          const msg = syncErr instanceof Error ? syncErr.message : String(syncErr);
+          globalThis[key] = { ok: false, error: "[sync] " + msg };
+        }
       }
     });
-    const deadline = Date.now() + 9e4;
+    const deadline = Date.now() + 28e4;
     while (Date.now() < deadline) {
       const [poll] = await chrome.scripting.executeScript({
         target: { tabId },