@controlvector/cv-agent 1.8.0 → 1.9.1

package/dist/bundle.cjs

@@ -3834,18 +3834,84 @@ async function runSetup() {
   console.log(source_default.gray('  Click "Add Integration" \u2192 "Allow" when prompted.'));
   console.log(source_default.gray("  (You can do this later \u2014 setup will continue.)"));
   console.log();
-  const cwd = process.cwd();
-  const isGitRepo = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".git"));
-  const hasCVDir = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".cv"));
-  const hasClaudeMd = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, "CLAUDE.md"));
-  const repoName = (0, import_node_path.basename)(cwd);
+  let cwd = process.cwd();
+  let isGitRepo = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".git"));
+  let repoName = (0, import_node_path.basename)(cwd);
   if (isGitRepo) {
     console.log(source_default.green("  \u2713") + ` Git repo found: ${repoName}`);
   } else {
-    console.log("  Initializing git repository...");
-    (0, import_node_child_process.execSync)("git init && git checkout -b main", { cwd, stdio: "pipe" });
-    console.log(source_default.green("  \u2713") + " Git repo initialized");
+    const readline = await import("node:readline");
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    console.log("  No git repository found in this directory.");
+    console.log();
+    console.log(`    ${source_default.cyan("a")} \u2014 Initialize a new project here: ${cwd}`);
+    console.log(`    ${source_default.cyan("b")} \u2014 Clone an existing repo from CV-Hub`);
+    console.log();
+    const choice = await new Promise((resolve2) => {
+      rl.question("  Choose [a/b]: ", (answer) => {
+        rl.close();
+        resolve2(answer.trim().toLowerCase() || "a");
+      });
+    });
+    if (choice === "b" && token) {
+      try {
+        console.log(source_default.gray("  Fetching your repositories..."));
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 15e3);
+        const res = await fetch(`${hubUrl}/api/v1/repos?limit=50`, {
+          headers: { Authorization: `Bearer ${token}` },
+          signal: controller.signal
+        });
+        clearTimeout(timeout);
+        if (res.ok) {
+          const data = await res.json();
+          const repos = data.repositories || [];
+          if (repos.length === 0) {
+            console.log(source_default.yellow("  No repos found on CV-Hub. Initializing a new project instead."));
+          } else {
+            console.log();
+            console.log("  Your CV-Hub repositories:");
+            const displayRepos = repos.slice(0, 20);
+            displayRepos.forEach((r, i) => {
+              const desc = r.description ? source_default.gray(` \u2014 ${r.description.substring(0, 40)}`) : "";
+              console.log(`    ${source_default.cyan(String(i + 1).padStart(2))}. ${r.slug || r.name}${desc}`);
+            });
+            console.log();
+            const rl2 = readline.createInterface({ input: process.stdin, output: process.stdout });
+            const selection = await new Promise((resolve2) => {
+              rl2.question(`  Select a repo [1-${displayRepos.length}]: `, (answer) => {
+                rl2.close();
+                resolve2(answer.trim());
+              });
+            });
+            const idx = parseInt(selection, 10) - 1;
+            if (idx >= 0 && idx < displayRepos.length) {
+              const repo = displayRepos[idx];
+              const gitHost = "git.hub.controlvector.io";
+              const slug = repo.slug || repo.name;
+              const cloneUrl = `https://${username}:${token}@${gitHost}/${username}/${slug}.git`;
+              console.log(source_default.gray(`  Cloning ${username}/${slug}...`));
+              (0, import_node_child_process.execSync)(`git clone ${cloneUrl} ${slug}`, { cwd, stdio: "pipe", timeout: 6e4 });
+              cwd = (0, import_node_path.join)(cwd, slug);
+              process.chdir(cwd);
+              repoName = slug;
+              isGitRepo = true;
+              console.log(source_default.green("  \u2713") + ` Cloned ${username}/${slug}`);
+            }
+          }
+        }
+      } catch (err) {
+        console.log(source_default.yellow(`  Could not fetch repos: ${err.message}. Initializing instead.`));
+      }
+    }
+    if (!isGitRepo) {
+      console.log("  Initializing git repository...");
+      (0, import_node_child_process.execSync)("git init && git checkout -b main", { cwd, stdio: "pipe" });
+      console.log(source_default.green("  \u2713") + " Git repo initialized");
+    }
   }
+  const hasClaudeMd = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, "CLAUDE.md"));
+  const hasCVDir = (0, import_node_fs.existsSync)((0, import_node_path.join)(cwd, ".cv"));
   if (!hasClaudeMd) {
     const template = `# ${repoName}
 
@@ -3933,16 +3999,76 @@ async function runSetup() {
     }
   }
   console.log();
+  let agentStatus = "";
+  const pidFile = (0, import_node_path.join)((0, import_node_os2.homedir)(), ".config", "controlvector", "agent.pid");
+  let agentRunning = false;
+  try {
+    const pid = parseInt((0, import_node_fs.readFileSync)(pidFile, "utf-8").trim(), 10);
+    if (pid > 0) {
+      process.kill(pid, 0);
+      agentRunning = true;
+      agentStatus = `running (PID ${pid})`;
+      console.log(source_default.green("  \u2713") + ` Agent already running (PID ${pid})`);
+    }
+  } catch {
+  }
+  if (!agentRunning) {
+    const readline = await import("node:readline");
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await new Promise((resolve2) => {
+      rl.question("  Start the CV-Agent daemon? (Y/n): ", (a) => {
+        rl.close();
+        resolve2(a.trim().toLowerCase() || "y");
+      });
+    });
+    if (answer === "y" || answer === "yes" || answer === "") {
+      const machName = (0, import_node_os2.hostname)().toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-");
+      console.log(source_default.gray(`  Starting agent as "${machName}"...`));
+      try {
+        const { spawn: spawnChild } = await import("node:child_process");
+        const child = spawnChild("cva", [
+          "agent",
+          "--auto-approve",
+          "--machine",
+          machName,
+          "--working-dir",
+          cwd
+        ], {
+          detached: true,
+          stdio: "ignore",
+          env: { ...process.env }
+        });
+        child.unref();
+        if (child.pid) {
+          (0, import_node_fs.mkdirSync)((0, import_node_path.join)((0, import_node_os2.homedir)(), ".config", "controlvector"), { recursive: true });
+          (0, import_node_fs.writeFileSync)(pidFile, String(child.pid), { mode: 384 });
+          agentStatus = `running (PID ${child.pid})`;
+          console.log(source_default.green("  \u2713") + ` Agent started (PID ${child.pid}) \u2014 executor "${machName}"`);
+        }
+      } catch (err) {
+        console.log(source_default.yellow(`  Could not start agent: ${err.message}`));
+        console.log(source_default.gray("  Start manually with: cva agent --auto-approve"));
+        agentStatus = "not started";
+      }
+    } else {
+      agentStatus = "not started";
+      console.log(source_default.gray("  Start anytime with: cva agent --auto-approve"));
+    }
+  }
+  console.log();
   console.log(source_default.bold("  Setup Complete"));
   console.log(source_default.gray("  " + "\u2500".repeat(40)));
   console.log(`  ${source_default.green("\u2713")} Authenticated as: ${source_default.cyan(username)}`);
   console.log(`  ${source_default.green("\u2713")} Repository: ${source_default.cyan(repoName)}`);
   console.log(`  ${source_default.green("\u2713")} CLAUDE.md: present`);
+  if (agentStatus.startsWith("running")) {
+    console.log(`  ${source_default.green("\u2713")} Agent daemon: ${source_default.cyan(agentStatus)}`);
+  }
   console.log(source_default.gray("  " + "\u2500".repeat(40)));
   console.log();
   console.log("  What's next:");
-  console.log(`    ${source_default.cyan("cva agent --auto-approve")}  \u2014 Start listening for tasks`);
-  console.log(`    Or open Claude.ai and dispatch a task to this repo.`);
+  console.log("    Open Claude.ai and try:");
+  console.log(source_default.cyan(`    "Create a task in ${repoName} to add a hello world index.html"`));
   console.log();
   console.log(source_default.gray(`  Dashboard: ${appUrl}`));
   console.log();
@@ -4432,11 +4558,78 @@ async function writeConfig(config) {
 
 // src/commands/git-safety.ts
 var import_node_child_process3 = require("node:child_process");
+var import_node_fs2 = require("node:fs");
+var import_node_path2 = require("node:path");
+var import_node_os3 = require("node:os");
+var DANGEROUS_PATTERNS = [
+  ".claude/",
+  ".claude.json",
+  ".credentials",
+  ".zsh_history",
+  ".bash_history",
+  ".zsh_sessions/",
+  ".ssh/",
+  ".gnupg/",
+  ".npm/",
+  ".config/",
+  ".CFUserTextEncoding",
+  "Library/",
+  "Applications/",
+  ".Trash/",
+  ".DS_Store",
+  "node_modules/",
+  ".env",
+  ".env.local",
+  ".env.production"
+];
 function git(cmd, cwd) {
   return (0, import_node_child_process3.execSync)(cmd, { cwd, encoding: "utf8", timeout: 3e4 }).trim();
 }
+function checkWorkspaceSafety(workspaceRoot) {
+  const resolved = (0, import_node_path2.resolve)(workspaceRoot);
+  const home = (0, import_node_path2.resolve)((0, import_node_os3.homedir)());
+  if (resolved === home) {
+    return `Workspace is user HOME directory (${home}). Refusing to auto-commit to prevent indexing personal files.`;
+  }
+  if (home.startsWith(resolved + "/")) {
+    return `Workspace (${resolved}) is a parent of HOME. Refusing to auto-commit.`;
+  }
+  if (!(0, import_node_fs2.existsSync)((0, import_node_path2.join)(resolved, ".git"))) {
+    return `No .git directory in ${resolved}. Not a git repository.`;
+  }
+  return null;
+}
+function filterDangerousFiles(statusLines) {
+  const safe = [];
+  const blocked = [];
+  for (const line of statusLines) {
+    const filePath = line.substring(3).trim();
+    const isDangerous = DANGEROUS_PATTERNS.some(
+      (pattern) => filePath.startsWith(pattern) || filePath.includes("/" + pattern)
+    );
+    if (isDangerous) {
+      blocked.push(filePath);
+    } else {
+      safe.push(line);
+    }
+  }
+  return { safe, blocked };
+}
 function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
   const targetBranch = branch || "main";
+  const safetyError = checkWorkspaceSafety(workspaceRoot);
+  if (safetyError) {
+    console.log(`  [git-safety] BLOCKED: ${safetyError}`);
+    return {
+      hadChanges: false,
+      filesAdded: 0,
+      filesModified: 0,
+      filesDeleted: 0,
+      pushed: false,
+      skipped: true,
+      skipReason: safetyError
+    };
+  }
   try {
     let statusOutput;
     try {
@@ -4444,8 +4637,8 @@ function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
     } catch {
       return { hadChanges: false, filesAdded: 0, filesModified: 0, filesDeleted: 0, pushed: false, error: "git status failed" };
     }
-    const lines = statusOutput.split("\n").filter(Boolean);
-    if (lines.length === 0) {
+    const allLines = statusOutput.split("\n").filter(Boolean);
+    if (allLines.length === 0) {
       try {
         const unpushed = git(`git log origin/${targetBranch}..HEAD --oneline 2>/dev/null`, workspaceRoot);
         if (unpushed) {
@@ -4457,8 +4650,16 @@ function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
       }
       return { hadChanges: false, filesAdded: 0, filesModified: 0, filesDeleted: 0, pushed: false };
     }
+    const { safe: safeLines, blocked } = filterDangerousFiles(allLines);
+    if (blocked.length > 0) {
+      console.log(`  [git-safety] Blocked ${blocked.length} sensitive file(s) from staging: ${blocked.slice(0, 5).join(", ")}${blocked.length > 5 ? "..." : ""}`);
+    }
+    if (safeLines.length === 0) {
+      console.log(`  [git-safety] All ${allLines.length} changed files were blocked by safety filter`);
+      return { hadChanges: false, filesAdded: 0, filesModified: 0, filesDeleted: 0, pushed: false };
+    }
     let added = 0, modified = 0, deleted = 0;
-    for (const line of lines) {
+    for (const line of safeLines) {
       const code = line.substring(0, 2);
       if (code.includes("?")) added++;
       else if (code.includes("D")) deleted++;
@@ -4466,9 +4667,15 @@ function gitSafetyNet(workspaceRoot, taskTitle, taskId, branch) {
       else added++;
     }
     console.log(
-      `  [git-safety] ${lines.length} uncommitted changes (${added} new, ${modified} modified, ${deleted} deleted) \u2014 committing now`
+      `  [git-safety] ${safeLines.length} safe changes (${added} new, ${modified} modified, ${deleted} deleted) \u2014 committing now`
     );
-    git("git add -A", workspaceRoot);
+    for (const line of safeLines) {
+      const filePath = line.substring(3).trim();
+      try {
+        git(`git add -- ${JSON.stringify(filePath)}`, workspaceRoot);
+      } catch {
+      }
+    }
     const shortId = taskId.substring(0, 8);
     const commitMsg = `task: ${taskTitle} [${shortId}]
 
@@ -4529,8 +4736,8 @@ Files: ${added} added, ${modified} modified, ${deleted} deleted`;
 
 // src/commands/deploy-manifest.ts
 var import_node_child_process4 = require("node:child_process");
-var import_node_fs2 = require("node:fs");
-var import_node_path2 = require("node:path");
+var import_node_fs3 = require("node:fs");
+var import_node_path3 = require("node:path");
 function exec(cmd, cwd, timeoutMs = 3e5, env2) {
   try {
     const stdout = (0, import_node_child_process4.execSync)(cmd, {
@@ -4573,10 +4780,10 @@ function getHeadCommit(cwd) {
   }
 }
 function loadDeployManifest(workspaceRoot) {
-  const manifestPath = (0, import_node_path2.join)(workspaceRoot, ".cva", "deploy.json");
-  if (!(0, import_node_fs2.existsSync)(manifestPath)) return null;
+  const manifestPath = (0, import_node_path3.join)(workspaceRoot, ".cva", "deploy.json");
+  if (!(0, import_node_fs3.existsSync)(manifestPath)) return null;
   try {
-    const raw = (0, import_node_fs2.readFileSync)(manifestPath, "utf8");
+    const raw = (0, import_node_fs3.readFileSync)(manifestPath, "utf8");
     const manifest = JSON.parse(raw);
     if (!manifest.version || manifest.version < 1) {
       console.log("  [deploy] Invalid manifest version");
@@ -4601,7 +4808,7 @@ async function postTaskDeploy(workspaceRoot, taskId, log) {
       console.log(`  [deploy] Building: ${buildStep.name}`);
       log("lifecycle", `Building: ${buildStep.name}`);
       const start = Date.now();
-      const cwd = (0, import_node_path2.join)(workspaceRoot, buildStep.working_dir || ".");
+      const cwd = (0, import_node_path3.join)(workspaceRoot, buildStep.working_dir || ".");
       const timeoutMs = (buildStep.timeout_seconds || 300) * 1e3;
       const result = exec(buildStep.command, cwd, timeoutMs);
       if (!result.ok) {
@@ -4692,7 +4899,7 @@ async function rollback(workspaceRoot, targetCommit, manifest, log) {
   }
   if (manifest.build?.steps) {
     for (const step of manifest.build.steps) {
-      exec(step.command, (0, import_node_path2.join)(workspaceRoot, step.working_dir || "."), (step.timeout_seconds || 300) * 1e3);
+      exec(step.command, (0, import_node_path3.join)(workspaceRoot, step.working_dir || "."), (step.timeout_seconds || 300) * 1e3);
     }
   }
   if (manifest.service?.restart_command) {
@@ -4928,7 +5135,7 @@ async function launchAutoApproveMode(prompt, options) {
   let fullOutput = "";
   let lastProgressBytes = 0;
   const runOnce = (inputPrompt, isContinue) => {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const args = isContinue ? ["-p", inputPrompt, "--continue", "--allowedTools", ...ALLOWED_TOOLS] : ["-p", inputPrompt, "--allowedTools", ...ALLOWED_TOOLS];
       if (sessionId && !isContinue) {
         args.push("--session-id", sessionId);
@@ -5027,7 +5234,7 @@ ${source_default.red("!")} Claude Code auth failure (stderr): "${authError}"`);
       });
       child.on("close", (code, signal) => {
         _activeChild = null;
-        resolve({
+        resolve2({
           exitCode: signal === "SIGKILL" ? 137 : code ?? 1,
           stderr,
           output: fullOutput,
@@ -5066,7 +5273,7 @@ ${source_default.red("!")} Claude Code auth failure (stderr): "${authError}"`);
   return result;
 }
 async function launchRelayMode(prompt, options) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const child = (0, import_node_child_process5.spawn)("claude", [], {
       cwd: options.cwd,
       stdio: ["pipe", "pipe", "pipe"],
@@ -5259,9 +5466,9 @@ ${source_default.red("!")} Claude Code auth failure (stderr): "${authError}"`);
     child.on("close", (code, signal) => {
       _activeChild = null;
       if (signal === "SIGKILL") {
-        resolve({ exitCode: 137, stderr, output: fullOutput, authFailure });
+        resolve2({ exitCode: 137, stderr, output: fullOutput, authFailure });
       } else {
-        resolve({ exitCode: code ?? 1, stderr, output: fullOutput, authFailure });
+        resolve2({ exitCode: code ?? 1, stderr, output: fullOutput, authFailure });
       }
     });
     child.on("error", (err) => {
@@ -5362,14 +5569,45 @@ async function runAgent(options) {
     console.log();
     process.exit(1);
   }
+  if (process.env.CV_DEBUG) {
+    console.log(source_default.gray(`   PATH: ${process.env.PATH}`));
+    console.log(source_default.gray(`   HOME: ${process.env.HOME}`));
+    console.log(source_default.gray(`   SHELL: ${process.env.SHELL}`));
+  }
+  let claudeBinary = "claude";
   try {
     (0, import_node_child_process5.execSync)("claude --version", { stdio: "pipe", timeout: 5e3 });
   } catch {
-    console.log();
-    console.log(source_default.red("Claude Code CLI not found.") + " Install it first:");
-    console.log(`   ${source_default.cyan("npm install -g @anthropic-ai/claude-code")}`);
-    console.log();
-    process.exit(1);
+    const candidates = [
+      "/usr/local/bin/claude",
+      "/opt/homebrew/bin/claude",
+      `${process.env.HOME}/.npm-global/bin/claude`,
+      `${process.env.HOME}/.nvm/versions/node/*/bin/claude`
+    ];
+    let found = false;
+    for (const candidate of candidates) {
+      try {
+        const resolved = (0, import_node_child_process5.execSync)(`ls ${candidate} 2>/dev/null | head -1`, { encoding: "utf8", timeout: 3e3 }).trim();
+        if (resolved) {
+          (0, import_node_child_process5.execSync)(`${resolved} --version`, { stdio: "pipe", timeout: 5e3 });
+          claudeBinary = resolved;
+          found = true;
+          console.log(source_default.yellow("!") + ` Claude Code found at ${resolved} (not on PATH)`);
+          break;
+        }
+      } catch {
+      }
+    }
+    if (!found) {
+      console.log();
+      console.log(source_default.red("Claude Code CLI not found.") + " Install it first:");
+      console.log(`   ${source_default.cyan("npm install -g @anthropic-ai/claude-code")}`);
+      console.log();
+      console.log(source_default.gray(`   Current PATH: ${process.env.PATH}`));
+      console.log(source_default.gray("   If running via Launch Agent, ensure PATH includes the directory where claude is installed."));
+      console.log();
+      process.exit(1);
+    }
   }
   const { env: claudeEnv, usingApiKey } = await getClaudeEnv();
   const authCheck = await checkClaudeAuth();
@@ -5410,6 +5648,64 @@ async function runAgent(options) {
       console.log();
     }
   }
+  {
+    const isGitRepo = require("fs").existsSync(require("path").join(workingDir, ".git"));
+    if (!isGitRepo) {
+      console.log(source_default.gray("   Bootstrap: initializing git repo..."));
+      try {
+        (0, import_node_child_process5.execSync)("git init && git checkout -b main", { cwd: workingDir, stdio: "pipe" });
+      } catch {
+      }
+    }
+    const claudeMdPath = require("path").join(workingDir, "CLAUDE.md");
+    if (!require("fs").existsSync(claudeMdPath)) {
+      const name = require("path").basename(workingDir);
+      const template = `# ${name}
+
+## Overview
+[Describe your project here]
+
+## Build & Run
+[How to build and run this project]
+`;
+      try {
+        require("fs").writeFileSync(claudeMdPath, template);
+        console.log(source_default.gray("   Bootstrap: created CLAUDE.md"));
+      } catch {
+      }
+    }
+    const cvDir = require("path").join(workingDir, ".cv");
+    if (!require("fs").existsSync(cvDir)) {
+      try {
+        require("fs").mkdirSync(cvDir, { recursive: true });
+      } catch {
+      }
+    }
+    if (creds.CV_HUB_PAT) {
+      try {
+        const existing = (0, import_node_child_process5.execSync)('git remote get-url cv-hub 2>/dev/null || echo ""', {
+          cwd: workingDir,
+          encoding: "utf8",
+          timeout: 5e3
+        }).trim();
+        if (!existing) {
+          const name = require("path").basename(workingDir);
+          const gitHost = "git.hub.controlvector.io";
+          let user = "user";
+          try {
+            const sharedPath = require("path").join(require("os").homedir(), ".config", "controlvector", "credentials.json");
+            const shared = JSON.parse(require("fs").readFileSync(sharedPath, "utf-8"));
+            if (shared.username) user = shared.username;
+          } catch {
+          }
+          const remoteUrl = `https://${gitHost}/${user}/${name}.git`;
+          (0, import_node_child_process5.execSync)(`git remote add cv-hub ${remoteUrl}`, { cwd: workingDir, stdio: "pipe" });
+          console.log(source_default.gray(`   Bootstrap: remote cv-hub \u2192 ${remoteUrl}`));
+        }
+      } catch {
+      }
+    }
+  }
   let detectedRepoId;
   try {
     const remoteUrl = (0, import_node_child_process5.execSync)("git remote get-url origin 2>/dev/null", {
@@ -5865,7 +6161,7 @@ async function promptForToken() {
     input: process.stdin,
     output: process.stdout
   });
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     rl.question("Enter your CV-Hub PAT token: ", (answer) => {
       rl.close();
       const token = answer.trim();
@@ -5873,7 +6169,7 @@ async function promptForToken() {
         console.log(source_default.red("No token provided."));
         process.exit(1);
       }
-      resolve(token);
+      resolve2(token);
     });
   });
 }
@@ -6152,7 +6448,7 @@ function statusCommand() {
 
 // src/index.ts
 var program2 = new Command();
-program2.name("cva").description('CV-Hub Agent \u2014 bridges Claude Code with CV-Hub task dispatch.\n\nRun "cva setup" to get started.').version(true ? "1.8.0" : "1.6.0");
+program2.name("cva").description('CV-Hub Agent \u2014 bridges Claude Code with CV-Hub task dispatch.\n\nRun "cva setup" to get started.').version(true ? "1.9.1" : "1.6.0");
 program2.addCommand(setupCommand());
 program2.addCommand(agentCommand());
 program2.addCommand(authCommand());