@fiodos/cli 0.1.23 → 0.1.26

package/src/wireWeb.js

@@ -27,6 +27,10 @@ const {
   registryRelImport,
   addRegistriesToMountSource,
   addRegistriesToBootstrapSource,
+  addSessionToMountSource,
+  addSessionToBootstrapSource,
+  addScreenToMountSource,
+  addScreenToBootstrapSource,
   buildEntryBootstrapBlock,
   IMPORT_NAME,
   WRAPPER_BASENAME,
@@ -499,6 +503,213 @@ function connectOrbRegistries(appRoot, opts = {}) {
   }
 }
 
+/**
+ * Third pass — connect the generated SESSION module to the mounted orb, so the
+ * agent KNOWS whether the user is signed in (requiresAuth gate) and keys the
+ * conversation memory per user. Mirrors connectOrbRegistries: idempotent,
+ * reversible, never overrides a developer-wired isAuthenticated.
+ */
+function connectOrbSession(appRoot, opts = {}) {
+  const { sessionFileAbs } = opts;
+  if (!sessionFileAbs || !fs.existsSync(sessionFileAbs)) return { status: 'no-session-file' };
+
+  // Only connect the capability getter when the generated module actually
+  // exports it — referencing a missing export would break the app's build.
+  let sessionHasCapabilities = false;
+  try {
+    sessionHasCapabilities = fs
+      .readFileSync(sessionFileAbs, 'utf8')
+      .includes('fyodosGetSessionCapabilities');
+  } catch {
+    sessionHasCapabilities = false;
+  }
+
+  const framework = detectFramework(appRoot);
+  const target = detectTarget(appRoot, framework);
+  if (!target || !target.file) return { status: 'no-target' };
+
+  const bootstrapKinds = new Set(['vue-entry', 'svelte-entry', 'sveltekit-hooks']);
+  if (bootstrapKinds.has(target.kind)) {
+    let source;
+    try {
+      source = fs.readFileSync(target.file, 'utf8');
+    } catch {
+      return { status: 'not-mounted' };
+    }
+    const importPath = registryRelImport(target.file, sessionFileAbs);
+    const fileRel = path.relative(appRoot, target.file);
+    const backups = backupFiles([target.file]);
+    try {
+      const res = addSessionToBootstrapSource(source, importPath, { sessionHasCapabilities });
+      if (!res.changed) {
+        return { status: res.reason === 'already' ? 'already' : res.reason || 'not-mounted', file: fileRel };
+      }
+      fs.writeFileSync(target.file, res.source);
+      return { status: 'connected', file: fileRel };
+    } catch (e) {
+      revertFiles(backups);
+      return { status: 'failed', file: fileRel, error: e };
+    }
+  }
+
+  const reactKinds = new Set(['vite', 'next-pages', 'next-app']);
+  if (!reactKinds.has(target.kind)) return { status: 'unsupported-framework', framework };
+
+  let mountFile = target.file;
+  if (target.kind === 'next-app') {
+    const dir = path.dirname(target.file);
+    mountFile =
+      [path.join(dir, `${WRAPPER_BASENAME}.tsx`), path.join(dir, `${WRAPPER_BASENAME}.jsx`)].find((f) =>
+        fs.existsSync(f),
+      ) || null;
+    if (!mountFile) return { status: 'not-mounted' };
+  }
+
+  let source;
+  try {
+    source = fs.readFileSync(mountFile, 'utf8');
+  } catch {
+    return { status: 'not-mounted' };
+  }
+  if (!/<FiodosAgent\b/.test(source)) return { status: 'not-mounted' };
+
+  const importPath = registryRelImport(mountFile, sessionFileAbs);
+  const fileRel = path.relative(appRoot, mountFile);
+  const backups = backupFiles([mountFile]);
+  try {
+    const res = addSessionToMountSource(source, importPath, { sessionHasCapabilities });
+    if (!res.changed) {
+      return { status: res.reason || 'not-mounted', file: fileRel };
+    }
+    fs.writeFileSync(mountFile, res.source);
+    return { status: 'connected', file: fileRel };
+  } catch (e) {
+    revertFiles(backups);
+    return { status: 'failed', file: fileRel, error: e };
+  }
+}
+
+/**
+ * Fourth pass — connect the generated SCREEN-TRUTH module to the mounted orb,
+ * so the agent knows WHICH SCREEN the user is on even when screens are client
+ * state instead of URLs. Mirrors connectOrbSession: idempotent, reversible,
+ * never overrides a developer-wired getCurrentRoute.
+ */
+function connectOrbScreen(appRoot, opts = {}) {
+  const { screenFileAbs } = opts;
+  if (!screenFileAbs || !fs.existsSync(screenFileAbs)) return { status: 'no-screen-file' };
+
+  const framework = detectFramework(appRoot);
+  const target = detectTarget(appRoot, framework);
+  if (!target || !target.file) return { status: 'no-target' };
+
+  const bootstrapKinds = new Set(['vue-entry', 'svelte-entry', 'sveltekit-hooks']);
+  if (bootstrapKinds.has(target.kind)) {
+    let source;
+    try {
+      source = fs.readFileSync(target.file, 'utf8');
+    } catch {
+      return { status: 'not-mounted' };
+    }
+    const importPath = registryRelImport(target.file, screenFileAbs);
+    const fileRel = path.relative(appRoot, target.file);
+    const backups = backupFiles([target.file]);
+    try {
+      const res = addScreenToBootstrapSource(source, importPath);
+      if (!res.changed) {
+        return { status: res.reason === 'already' ? 'already' : res.reason || 'not-mounted', file: fileRel };
+      }
+      fs.writeFileSync(target.file, res.source);
+      return { status: 'connected', file: fileRel };
+    } catch (e) {
+      revertFiles(backups);
+      return { status: 'failed', file: fileRel, error: e };
+    }
+  }
+
+  const reactKinds = new Set(['vite', 'next-pages', 'next-app']);
+  if (!reactKinds.has(target.kind)) return { status: 'unsupported-framework', framework };
+
+  let mountFile = target.file;
+  if (target.kind === 'next-app') {
+    const dir = path.dirname(target.file);
+    mountFile =
+      [path.join(dir, `${WRAPPER_BASENAME}.tsx`), path.join(dir, `${WRAPPER_BASENAME}.jsx`)].find((f) =>
+        fs.existsSync(f),
+      ) || null;
+    if (!mountFile) return { status: 'not-mounted' };
+  }
+
+  let source;
+  try {
+    source = fs.readFileSync(mountFile, 'utf8');
+  } catch {
+    return { status: 'not-mounted' };
+  }
+  if (!/<FiodosAgent\b/.test(source)) return { status: 'not-mounted' };
+
+  const importPath = registryRelImport(mountFile, screenFileAbs);
+  const fileRel = path.relative(appRoot, mountFile);
+  const backups = backupFiles([mountFile]);
+  try {
+    const res = addScreenToMountSource(source, importPath);
+    if (!res.changed) {
+      return { status: res.reason || 'not-mounted', file: fileRel };
+    }
+    fs.writeFileSync(mountFile, res.source);
+    return { status: 'connected', file: fileRel };
+  } catch (e) {
+    revertFiles(backups);
+    return { status: 'failed', file: fileRel, error: e };
+  }
+}
+
+function reportScreenConnectResult(result, colors = {}, opts = {}) {
+  const quiet = opts.quiet !== false;
+  if (!result) return;
+  const { blue, cyan, dim, reset } = colors;
+  const tag = `${cyan || ''}◉${reset || ''} ${blue || ''}Fiodos${reset || ''}`;
+  switch (result.status) {
+    case 'connected':
+      console.error(`${tag} · screen truth connected to the orb mount (${result.file})`);
+      break;
+    case 'already':
+      if (!quiet) console.error(`${tag} · ${dim || ''}screen truth already connected to the mount${reset || ''}`);
+      break;
+    case 'dev-wired':
+      if (!quiet) {
+        console.error(`${tag} · ${dim || ''}the mount already has its own getCurrentRoute — left as is${reset || ''}`);
+      }
+      break;
+    default:
+      if (!quiet) console.error(`${tag} · ${dim || ''}screen truth not connected to the mount (${result.status})${reset || ''}`);
+      break;
+  }
+}
+
+function reportSessionConnectResult(result, colors = {}, opts = {}) {
+  const quiet = opts.quiet !== false;
+  if (!result) return;
+  const { blue, cyan, dim, reset } = colors;
+  const tag = `${cyan || ''}◉${reset || ''} ${blue || ''}Fiodos${reset || ''}`;
+  switch (result.status) {
+    case 'connected':
+      console.error(`${tag} · session connected to the orb mount (${result.file})`);
+      break;
+    case 'already':
+      if (!quiet) console.error(`${tag} · ${dim || ''}session already connected to the mount${reset || ''}`);
+      break;
+    case 'dev-wired':
+      if (!quiet) {
+        console.error(`${tag} · ${dim || ''}the mount already has its own isAuthenticated — left as is${reset || ''}`);
+      }
+      break;
+    default:
+      if (!quiet) console.error(`${tag} · ${dim || ''}session not connected to the mount (${result.status})${reset || ''}`);
+      break;
+  }
+}
+
 function reportRegistriesResult(result, colors = {}, opts = {}) {
   const quiet = opts.quiet !== false;
   if (!result) return;
@@ -530,6 +741,10 @@ module.exports = {
   reportWireResult,
   connectOrbRegistries,
   reportRegistriesResult,
+  connectOrbSession,
+  reportSessionConnectResult,
+  connectOrbScreen,
+  reportScreenConnectResult,
   detectFramework,
   detectTarget,
 };

package/src/wireWebMount.js

@@ -83,19 +83,45 @@ function insertBlockAfterLastImport(source, block) {
 // FYODOS:ORB markers → idempotent (re-runs strip & rewrite) and reversible.
 const BOOTSTRAP_ALIAS = '__fiodosCreateAgent';
 const BOOTSTRAP_REGISTRY_EXPORT = 'fyodosGeneratedRegistries';
+// Exports of the generated session module (see wireSession.js). Connected to
+// the mount automatically so auth awareness needs NO manual step.
+const SESSION_IS_AUTH_EXPORT = 'fyodosIsAuthenticated';
+const SESSION_USER_ID_EXPORT = 'fyodosGetUserId';
+// Capability flags (audience map) — only connected when the generated session
+// module actually exports it (older generated files do not).
+const SESSION_CAPS_EXPORT = 'fyodosGetSessionCapabilities';
+// Export of the generated screen-truth module (see wireScreen.js). Connected
+// to the mount automatically so state-driven screen awareness needs NO manual step.
+const SCREEN_ROUTE_EXPORT = 'fyodosGetCurrentRoute';
 
 function buildEntryBootstrapBlock(opts = {}) {
-  const { registryImportPath } = opts;
+  const { registryImportPath, sessionImportPath, screenImportPath, sessionHasCapabilities } = opts;
   const lines = [];
   lines.push(ORB_SCRIPT_START);
   lines.push(`import { createFiodosAgent as ${BOOTSTRAP_ALIAS} } from '@fiodos/web-core';`);
   if (registryImportPath) {
     lines.push(`import { ${BOOTSTRAP_REGISTRY_EXPORT} } from '${registryImportPath}';`);
   }
+  if (sessionImportPath) {
+    const sessionNames = [SESSION_IS_AUTH_EXPORT, SESSION_USER_ID_EXPORT];
+    if (sessionHasCapabilities) sessionNames.push(SESSION_CAPS_EXPORT);
+    lines.push(`import { ${sessionNames.join(', ')} } from '${sessionImportPath}';`);
+  }
+  if (screenImportPath) {
+    lines.push(`import { ${SCREEN_ROUTE_EXPORT} } from '${screenImportPath}';`);
+  }
   lines.push(`${BOOTSTRAP_ALIAS}({`);
   lines.push('  apiKey: import.meta.env.VITE_FYODOS_API_KEY,');
   lines.push('  baseUrl: import.meta.env.VITE_FYODOS_API_URL,');
   if (registryImportPath) lines.push(`  registries: ${BOOTSTRAP_REGISTRY_EXPORT},`);
+  if (sessionImportPath) {
+    lines.push(`  isAuthenticated: ${SESSION_IS_AUTH_EXPORT},`);
+    lines.push(`  getUserId: ${SESSION_USER_ID_EXPORT},`);
+    if (sessionHasCapabilities) {
+      lines.push(`  getSessionCapabilities: ${SESSION_CAPS_EXPORT},`);
+    }
+  }
+  if (screenImportPath) lines.push(`  getCurrentRoute: ${SCREEN_ROUTE_EXPORT},`);
   lines.push('  mount: true,');
   lines.push('});');
   lines.push(ORB_SCRIPT_END);
@@ -123,8 +149,70 @@ function addRegistriesToBootstrapSource(source, registryImportPath) {
   if (/\n\s*registries:\s/.test(source.slice(source.indexOf(ORB_SCRIPT_START)))) {
     return { changed: false, source, reason: 'already' };
   }
+  // Preserve session/screen connections previous passes already added.
+  const sessionImportPath = extractBootstrapImportPath(source, SESSION_IS_AUTH_EXPORT);
+  const sessionHasCapabilities = Boolean(extractBootstrapImportPath(source, SESSION_CAPS_EXPORT));
+  const screenImportPath = extractBootstrapImportPath(source, SCREEN_ROUTE_EXPORT);
   const stripped = stripMarkedRegion(source, ORB_SCRIPT_START, ORB_SCRIPT_END).replace(/\n{3,}$/, '\n');
-  const block = buildEntryBootstrapBlock({ registryImportPath });
+  const block = buildEntryBootstrapBlock({
+    registryImportPath,
+    sessionImportPath,
+    screenImportPath,
+    sessionHasCapabilities,
+  });
+  const next = insertBlockAfterLastImport(stripped.trimEnd(), block);
+  return { changed: true, source: next.endsWith('\n') ? next : `${next}\n` };
+}
+
+// Import path of the module that exports `name` inside our bootstrap block (or null).
+function extractBootstrapImportPath(source, name) {
+  const startIdx = source.indexOf(ORB_SCRIPT_START);
+  if (startIdx === -1) return null;
+  const endIdx = source.indexOf(ORB_SCRIPT_END, startIdx);
+  const block = source.slice(startIdx, endIdx === -1 ? undefined : endIdx);
+  const m = block.match(new RegExp(`import\\s*\\{[^}]*\\b${name}\\b[^}]*\\}\\s*from\\s*['"]([^'"]+)['"]`));
+  return m ? m[1] : null;
+}
+
+// Idempotently rewrite an existing entry-bootstrap block to carry the generated
+// SESSION connection (third pass, after session wiring). Preserves the
+// registries the second pass added. Returns { changed, source, reason? }.
+function addSessionToBootstrapSource(source, sessionImportPath, opts = {}) {
+  if (!source.includes(ORB_SCRIPT_START)) return { changed: false, source, reason: 'not-mounted' };
+  if (/\n\s*isAuthenticated:\s/.test(source.slice(source.indexOf(ORB_SCRIPT_START)))) {
+    return { changed: false, source, reason: 'already' };
+  }
+  const registryImportPath = extractBootstrapImportPath(source, BOOTSTRAP_REGISTRY_EXPORT);
+  const screenImportPath = extractBootstrapImportPath(source, SCREEN_ROUTE_EXPORT);
+  const stripped = stripMarkedRegion(source, ORB_SCRIPT_START, ORB_SCRIPT_END).replace(/\n{3,}$/, '\n');
+  const block = buildEntryBootstrapBlock({
+    registryImportPath,
+    sessionImportPath,
+    screenImportPath,
+    sessionHasCapabilities: Boolean(opts.sessionHasCapabilities),
+  });
+  const next = insertBlockAfterLastImport(stripped.trimEnd(), block);
+  return { changed: true, source: next.endsWith('\n') ? next : `${next}\n` };
+}
+
+// Idempotently rewrite an existing entry-bootstrap block to carry the generated
+// SCREEN-TRUTH connection (fourth pass, after screen wiring). Preserves the
+// registries and session earlier passes added. Returns { changed, source, reason? }.
+function addScreenToBootstrapSource(source, screenImportPath) {
+  if (!source.includes(ORB_SCRIPT_START)) return { changed: false, source, reason: 'not-mounted' };
+  if (/\n\s*getCurrentRoute:\s/.test(source.slice(source.indexOf(ORB_SCRIPT_START)))) {
+    return { changed: false, source, reason: 'already' };
+  }
+  const registryImportPath = extractBootstrapImportPath(source, BOOTSTRAP_REGISTRY_EXPORT);
+  const sessionImportPath = extractBootstrapImportPath(source, SESSION_IS_AUTH_EXPORT);
+  const sessionHasCapabilities = Boolean(extractBootstrapImportPath(source, SESSION_CAPS_EXPORT));
+  const stripped = stripMarkedRegion(source, ORB_SCRIPT_START, ORB_SCRIPT_END).replace(/\n{3,}$/, '\n');
+  const block = buildEntryBootstrapBlock({
+    registryImportPath,
+    sessionImportPath,
+    screenImportPath,
+    sessionHasCapabilities,
+  });
   const next = insertBlockAfterLastImport(stripped.trimEnd(), block);
   return { changed: true, source: next.endsWith('\n') ? next : `${next}\n` };
 }
@@ -199,6 +287,74 @@ function addRegistriesToMountSource(source, exportName, importPath) {
   return { changed: true, source: next };
 }
 
+// Idempotently connect the generated SESSION module to the mounted
+// <FiodosAgent/>: adds `isAuthenticated={fyodosIsAuthenticated}` and
+// `getUserId={fyodosGetUserId}` + the import. Skips (never overrides) a mount
+// where the developer already wired their own isAuthenticated. Same
+// reversibility model as addRegistriesToMountSource.
+function addSessionToMountSource(source, importPath, opts = {}) {
+  const withCapabilities = Boolean(opts.sessionHasCapabilities);
+  const tagRe = /([ \t]*)<FiodosAgent\b[\s\S]*?\/>/;
+  const m = source.match(tagRe);
+  if (!m) return { changed: false, source, reason: 'not-mounted' };
+  const tag = m[0];
+  if (new RegExp(`isAuthenticated=\\{${escapeRe(SESSION_IS_AUTH_EXPORT)}\\}`).test(tag)) {
+    return { changed: false, source, reason: 'already' };
+  }
+  if (/\bisAuthenticated=/.test(tag)) {
+    return { changed: false, source, reason: 'dev-wired' };
+  }
+  const baseIndent = m[1] || '';
+  const propMatch = tag.match(/\n([ \t]*)(?:apiKey|api-key|apiUrl|baseUrl|registries)/);
+  const propIndent = propMatch ? propMatch[1] : `${baseIndent}  `;
+  const hasUserId = /\bgetUserId=/.test(tag);
+  const addCaps = withCapabilities && !/\bgetSessionCapabilities=/.test(tag);
+  const props =
+    `\n${propIndent}isAuthenticated={${SESSION_IS_AUTH_EXPORT}}` +
+    (hasUserId ? '' : `\n${propIndent}getUserId={${SESSION_USER_ID_EXPORT}}`) +
+    (addCaps ? `\n${propIndent}getSessionCapabilities={${SESSION_CAPS_EXPORT}}` : '');
+  const newTag = tag.replace(/\n?[ \t]*\/>$/, `${props}\n${baseIndent}/>`);
+  let next = source.replace(tag, newTag);
+  const nameList = [SESSION_IS_AUTH_EXPORT];
+  if (!hasUserId) nameList.push(SESSION_USER_ID_EXPORT);
+  if (addCaps) nameList.push(SESSION_CAPS_EXPORT);
+  const importLine = `import { ${nameList.join(', ')} } from '${importPath}';`;
+  if (!next.includes(importLine)) {
+    next = insertImportAfterLastImport(next, importLine);
+  }
+  return { changed: true, source: next };
+}
+
+// Idempotently connect the generated SCREEN-TRUTH module to the mounted
+// <FiodosAgent/>: adds `getCurrentRoute={fyodosGetCurrentRoute}` + the import.
+// Skips (never overrides) a mount where the developer already wired their own
+// getCurrentRoute. Same reversibility model as addSessionToMountSource.
+function addScreenToMountSource(source, importPath) {
+  const tagRe = /([ \t]*)<FiodosAgent\b[\s\S]*?\/>/;
+  const m = source.match(tagRe);
+  if (!m) return { changed: false, source, reason: 'not-mounted' };
+  const tag = m[0];
+  if (new RegExp(`getCurrentRoute=\\{${escapeRe(SCREEN_ROUTE_EXPORT)}\\}`).test(tag)) {
+    return { changed: false, source, reason: 'already' };
+  }
+  if (/\bgetCurrentRoute=/.test(tag)) {
+    return { changed: false, source, reason: 'dev-wired' };
+  }
+  const baseIndent = m[1] || '';
+  const propMatch = tag.match(/\n([ \t]*)(?:apiKey|api-key|apiUrl|baseUrl|registries)/);
+  const propIndent = propMatch ? propMatch[1] : `${baseIndent}  `;
+  const newTag = tag.replace(
+    /\n?[ \t]*\/>$/,
+    `\n${propIndent}getCurrentRoute={${SCREEN_ROUTE_EXPORT}}\n${baseIndent}/>`,
+  );
+  let next = source.replace(tag, newTag);
+  const importLine = `import { ${SCREEN_ROUTE_EXPORT} } from '${importPath}';`;
+  if (!next.includes(importLine)) {
+    next = insertImportAfterLastImport(next, importLine);
+  }
+  return { changed: true, source: next };
+}
+
 /**
  * Assess whether we can inject safely. Returns { ok, reason?, strategy, files, rel }.
  */
@@ -601,13 +757,15 @@ function writeConsentDoc(appRoot, plan) {
     'Edits sit between `FYODOS:ORB:START` / `FYODOS:ORB:END` markers. Remove those',
     'blocks (and the Fiodos import) to revert.',
     '',
-    '## Apps with login (connect auth + screen — the only manual step)',
+    '## Apps with login (auth + identity — wired AUTOMATICALLY)',
+    '',
+    'For apps with login the installer also detects WHERE your session state lives',
+    'and connects it on its own: it generates `src/fyodos/session.generated.*` and',
+    'adds `isAuthenticated={fyodosIsAuthenticated}` / `getUserId={fyodosGetUserId}`',
+    'to the mount (see `src/fyodos/FYODOS_SESSION.md`). Nothing to do by hand.',
     '',
-    'The orb runs with just `apiKey`/`apiUrl`. But only YOUR app knows whether the',
-    'user is signed in and which screen they are on, so for apps with login you',
-    'connect that in one place. Without it the agent can loop ("do you want to sign',
-    "in?\") and can't tell it already signed you in. Add these props to",
-    '`<FiodosAgent/>` (a commented scaffold is already next to the mount):',
+    'ONLY if the installer reported it could not verify your session source (or you',
+    'want to override it), wire the props yourself:',
     '',
     '```tsx',
     '<FiodosAgent',
@@ -653,7 +811,12 @@ module.exports = {
   registryRelImport,
   addRegistriesToMountSource,
   addRegistriesToBootstrapSource,
+  addSessionToMountSource,
+  addSessionToBootstrapSource,
+  addScreenToMountSource,
+  addScreenToBootstrapSource,
   buildEntryBootstrapBlock,
   IMPORT_NAME,
   WRAPPER_BASENAME,
+  SESSION_CAPS_EXPORT,
 };