@dreamdata_io/verify-tracking 0.1.0

package/dist/config/preflight.js

@@ -0,0 +1,167 @@
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { delimiter, join } from "node:path";
+import { chromium } from "playwright";
+/**
+ * The one command that installs everything a run needs on a bare machine.
+ * Named in every preflight failure, because each of them is a thing the
+ * installer would have handled — a teammate who hit one of these has a
+ * half-provisioned machine, and re-running this is a shorter path than
+ * following instructions per missing piece.
+ */
+export const INSTALLER_ONE_LINER = "curl -fsSL https://unpkg.com/@dreamdata_io/verify-tracking/scripts/install.sh | sh";
+/**
+ * Where Playwright's `channel: "chrome"` looks for a real Chrome. Playwright
+ * resolves the channel itself at launch and offers no way to ask beforehand,
+ * so the well-known install locations are checked directly. A false negative
+ * only costs a warning — the launch still tries the channel — so this stays a
+ * short list of the default paths rather than an exhaustive search.
+ */
+const CHROME_PATHS = [
+    "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+    "/opt/google/chrome/chrome",
+    "/usr/bin/google-chrome",
+    "/usr/bin/google-chrome-stable",
+    "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe",
+    "C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe",
+];
+function hasBundledChromium() {
+    try {
+        // Returns the path Playwright would launch whether or not it was ever
+        // downloaded, so the path's existence is the actual question.
+        const path = chromium.executablePath();
+        return Boolean(path) && existsSync(path);
+    }
+    catch {
+        return false;
+    }
+}
+export function detectBrowsers() {
+    return {
+        chrome: CHROME_PATHS.some((path) => existsSync(path)),
+        bundledChromium: hasBundledChromium(),
+    };
+}
+/**
+ * The message to show when no browser was found, or null when the run can
+ * proceed. Names both ways out, because installing Chrome is the one a
+ * non-technical teammate can already do.
+ */
+export function browserPreflightError(availability = detectBrowsers()) {
+    if (availability.chrome || availability.bundledChromium)
+        return null;
+    return [
+        "No browser found to drive — this check needs one and does not ship with it.",
+        "",
+        "Re-running the installer downloads one for you:",
+        "",
+        `  ${INSTALLER_ONE_LINER}`,
+        "",
+        "Or do it by hand — install Google Chrome (https://www.google.com/chrome/),",
+        "or fetch Playwright's own Chromium:",
+        "",
+        "  npx playwright install chromium",
+        "",
+    ].join("\n");
+}
+/** Whether an executable of this name sits on the PATH. */
+function isOnPath(command) {
+    return (process.env.PATH ?? "")
+        .split(delimiter)
+        .filter(Boolean)
+        .some((dir) => {
+        try {
+            return existsSync(join(dir, command));
+        }
+        catch {
+            return false;
+        }
+    });
+}
+/**
+ * The message to show when the local-CLI backend names a command this machine
+ * does not have, or null when it does.
+ *
+ * The zero-key backend shells out to an AI CLI, and a missing one is only
+ * discovered after the browser work is finished — minutes in, on a spawn error
+ * naming a binary the operator was never told to install. Checked up front
+ * instead, since with no API key set this is now the default backend rather
+ * than an opt-in.
+ */
+export function cliBackendPreflightError(command) {
+    if (isOnPath(command))
+        return null;
+    return [
+        `The model backend is set to run "${command}", which is not installed on this machine.`,
+        "",
+        "Re-running the installer installs it and walks you through the sign-in:",
+        "",
+        `  ${INSTALLER_ONE_LINER}`,
+        "",
+        `Or install it by hand (the "claude" preset expects the Claude Code CLI:`,
+        "https://claude.com/claude-code), or use a hosted endpoint instead by putting",
+        "an API key in ~/.config/verify-tracking/config.env:",
+        "",
+        "  AI_API_KEY=...",
+        "",
+    ].join("\n");
+}
+/**
+ * Whether the Claude Code CLI on this machine is signed in.
+ *
+ * Installing the CLI and authenticating it are two separate things, and only
+ * the first is a file on disk. A logged-out CLI is on the PATH, answers
+ * `--version`, and then fails the actual call — minutes into the run, with an
+ * exit code and a stderr blob that read like a bug in this tool rather than an
+ * expired session. `auth status --json` is the CLI's own answer to the
+ * question, so it is asked up front.
+ *
+ * Only meaningful for the claude preset: no other backend authenticates this
+ * way, and a custom `--cli-cmd` may not have a notion of sign-in at all.
+ */
+export function isClaudeSignedIn(command) {
+    try {
+        const probe = spawnSync(command, ["auth", "status", "--json"], {
+            encoding: "utf8",
+            // A hung probe must not become a hung run: the check is a convenience,
+            // and its failure mode should be "skip the check", never "never start".
+            timeout: 10_000,
+        });
+        if (probe.error || probe.status !== 0)
+            return false;
+        return /"loggedIn"\s*:\s*true/.test(probe.stdout ?? "");
+    }
+    catch {
+        // An unreadable answer is not evidence of being logged out, and refusing
+        // to run on it would be worse than letting the AI step report the truth.
+        return true;
+    }
+}
+/**
+ * The message to show when the Claude CLI is installed but not signed in, or
+ * null when it is (or when the question does not apply to this backend).
+ *
+ * The sign-in is an OAuth flow through a browser — the one step the installer
+ * cannot complete unattended — so this names the single command that finishes
+ * it rather than sending anyone back to the installer.
+ */
+export function claudeAuthPreflightError(command, preset) {
+    if (preset !== "claude")
+        return null;
+    if (isClaudeSignedIn(command))
+        return null;
+    return [
+        `"${command}" is installed but not signed in, so it cannot answer this run.`,
+        "",
+        "Sign in once on this machine — it opens a browser and takes a moment:",
+        "",
+        `  ${command} auth login`,
+        "",
+        "Then run this again. To use a hosted endpoint instead, put a key in",
+        "~/.config/verify-tracking/config.env:",
+        "",
+        "  AI_API_KEY=...",
+        "",
+    ].join("\n");
+}
+//# sourceMappingURL=preflight.js.map

package/dist/config/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/config/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAC9B,oFAAoF,CAAC;AAmBvF;;;;;;GAMG;AACH,MAAM,YAAY,GAAG;IACnB,8DAA8D;IAC9D,2BAA2B;IAC3B,wBAAwB;IACxB,+BAA+B;IAC/B,4DAA4D;IAC5D,kEAAkE;CACnE,CAAC;AAEF,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrD,eAAe,EAAE,kBAAkB,EAAE;KACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAAoC,cAAc,EAAE;IACxF,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO;QACL,6EAA6E;QAC7E,EAAE;QACF,iDAAiD;QACjD,EAAE;QACF,KAAK,mBAAmB,EAAE;QAC1B,EAAE;QACF,4EAA4E;QAC5E,qCAAqC;QACrC,EAAE;QACF,mCAAmC;QACnC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SAC5B,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACZ,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,oCAAoC,OAAO,4CAA4C;QACvF,EAAE;QACF,yEAAyE;QACzE,EAAE;QACF,KAAK,mBAAmB,EAAE;QAC1B,EAAE;QACF,yEAAyE;QACzE,8EAA8E;QAC9E,qDAAqD;QACrD,EAAE;QACF,kBAAkB;QAClB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,uEAAuE;YACvE,wEAAwE;YACxE,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,yEAAyE;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,MAA0B;IAClF,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,gBAAgB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO;QACL,IAAI,OAAO,iEAAiE;QAC5E,EAAE;QACF,uEAAuE;QACvE,EAAE;QACF,KAAK,OAAO,aAAa;QACzB,EAAE;QACF,qEAAqE;QACrE,uCAAuC;QACvC,EAAE;QACF,kBAAkB;QAClB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/config/user-config.js

@@ -0,0 +1,79 @@
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+/**
+ * Where a distributed binary looks for its settings.
+ *
+ * `bun run src/cli.ts` gets the project's `.env` for free — Bun loads it from
+ * the working directory before the process starts. A compiled binary keeps
+ * that behaviour, which is the problem: a teammate who runs the binary from
+ * their home directory or Downloads folder has no `.env` there, and the run
+ * fails at the AI step with an authentication error that says nothing about
+ * the missing file. So the binary reads a fixed path in the user's config
+ * directory as well, set up once and independent of where they run from.
+ */
+export const USER_CONFIG_PATH = join(homedir(), ".config", "verify-tracking", "config.env");
+/**
+ * The directory the default report and evidence writes are rooted at, relative
+ * to the working directory unless given as an absolute path.
+ *
+ * Installed globally, this CLI is run from wherever the operator happens to be,
+ * and the default grows a `verification/` tree there. That is right for a run
+ * inside this repo — the review dashboard reads exactly those paths — and
+ * unwelcome in someone's home directory, so it stays the default and becomes
+ * overridable rather than moving.
+ *
+ * Resolved on call, not at import: `loadUserConfig()` runs inside main(), long
+ * after this module's imports have been evaluated, so a value read at module
+ * scope would freeze the default before the config file was ever seen.
+ */
+export const DEFAULT_OUTPUT_ROOT = "verification";
+export function outputRoot() {
+    const fromEnv = process.env.VERIFY_TRACKING_OUTPUT_DIR?.trim();
+    return fromEnv && fromEnv.length > 0 ? fromEnv : DEFAULT_OUTPUT_ROOT;
+}
+/** A `KEY=value` line, minus `export`, comments, and surrounding quotes. */
+function parseLine(line) {
+    const trimmed = line.trim().replace(/^export\s+/, "");
+    if (!trimmed || trimmed.startsWith("#"))
+        return null;
+    const eq = trimmed.indexOf("=");
+    if (eq <= 0)
+        return null;
+    const key = trimmed.slice(0, eq).trim();
+    const raw = trimmed.slice(eq + 1).trim();
+    const value = /^(".*"|'.*')$/s.test(raw) ? raw.slice(1, -1) : raw;
+    return [key, value];
+}
+/**
+ * Loads the user config file into `process.env`, without overwriting anything
+ * already set. That order makes the precedence match the flags: an explicit
+ * `AI_MODEL=… verify-tracking` or a project `.env` still wins over the file a
+ * teammate wrote once and forgot, so the file is a default and never a
+ * surprise override.
+ *
+ * Returns the path when one was read, so the CLI can name it in diagnostics.
+ */
+export function loadUserConfig(path = USER_CONFIG_PATH) {
+    if (!existsSync(path))
+        return null;
+    let contents;
+    try {
+        contents = readFileSync(path, "utf8");
+    }
+    catch {
+        // An unreadable config is not worth failing the run over: the flags and
+        // the environment may well carry everything the run needs.
+        return null;
+    }
+    for (const line of contents.split(/\r?\n/)) {
+        const entry = parseLine(line);
+        if (!entry)
+            continue;
+        const [key, value] = entry;
+        if (process.env[key] === undefined)
+            process.env[key] = value;
+    }
+    return path;
+}
+//# sourceMappingURL=user-config.js.map

package/dist/config/user-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.js","sourceRoot":"","sources":["../../src/config/user-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;AAE5F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAElD,MAAM,UAAU,UAAU;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAC/D,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACvE,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,gBAAgB;IAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}