@mycadet/assistant 0.12.11 → 0.13.0

package/src/runtime/migrations/origin-mode.ts

@@ -1,42 +0,0 @@
-/**
- * Origin-mode derivation for vbundle exports.
- *
- * The vbundle manifest v1 schema's `origin.mode` enum captures the deployment
- * shape that produced the bundle. The runtime's two underlying signals are:
- *
- *   - `getIsCloud()` — true when the daemon runs as a cloud-managed
- *     deployment (`IS_CLOUD`, set only on cloud pods).
- *   - `getIsContainerized()` — true when the daemon runs inside a container
- *     (`IS_CONTAINERIZED`), identifying where the daemon process is running.
- *
- * Deliberately NOT keyed on cloud-proxy prerequisites: any logged-in
- * local assistant holds a cloud URL and `assistant_api_key` (to use the
- * platform LLM proxy), so proxy-prereq presence does not distinguish a
- * managed deployment from a local one. Stamping a local export as
- * "managed" would trip the importer's `secrets_redacted must be true when
- * origin.mode is 'managed'` rule and break local→platform teleport for
- * every logged-in local assistant.
- */
-
-import { getIsCloud, getIsContainerized } from "../../config/env-registry.js";
-
-export type VBundleOriginMode =
-  | "managed"
-  | "self-hosted-remote"
-  | "self-hosted-local";
-
-/**
- * Returns the origin mode for the current daemon.
- *
- * Platform-managed deployments win first; otherwise containerized →
- * "self-hosted-remote", bare-metal → "self-hosted-local".
- */
-export async function getOriginMode(): Promise<VBundleOriginMode> {
-  if (getIsCloud()) {
-    return "managed";
-  }
-  if (getIsContainerized()) {
-    return "self-hosted-remote";
-  }
-  return "self-hosted-local";
-}

package/src/runtime/migrations/rebind-secrets-screen.ts

@@ -1,412 +0,0 @@
-/**
- * Rebind secrets screen -- view model for the rebind-secrets step.
- *
- * Derives display state from the migration wizard state machine for rendering
- * a post-migration task checklist UI. Usable from macOS/iOS web views, CLI,
- * or any TypeScript consumer.
- *
- * After a successful transfer, secrets (API keys, tokens) are redacted in
- * exported bundles and communication channels (Slack, Telegram, etc.) need
- * to be re-bound to the new instance. This screen presents a checklist of
- * tasks the operator must complete before the migration is considered done.
- *
- * View model states:
- *   - disabled: step is not yet accessible (earlier steps incomplete)
- *   - active: checklist is displayed with tasks to complete
- *   - complete: all required tasks are done, migration can be finalized
- *
- * Task categories:
- *   - re-enter-secrets: Re-enter API keys/secrets (redacted in bundles)
- *   - rebind-channels: Re-bind communication channels (Slack, Telegram, etc.)
- *   - reconfigure-auth: Re-configure identity/auth settings
- *   - verify-webhooks: Verify webhook URLs point to new instance
- *
- * Operator notes:
- *   Setup: Ensure the destination instance is running and reachable before
- *     starting the checklist. Secrets must be re-entered manually since
- *     they are never included in export bundles.
- *   Rollback: If a task cannot be completed, navigate back to transfer
- *     to re-import the bundle or start a new migration.
- *   Expected signals: Each task toggles between pending/complete. The
- *     "Complete Migration" action is only available when all required
- *     tasks are marked complete.
- */
-
-import type { MigrationWizardState } from "./migration-wizard.js";
-import {
-  completeRebindSecrets,
-  goBackTo,
-  isStepAccessible,
-} from "./migration-wizard.js";
-
-// ---------------------------------------------------------------------------
-// View model types
-// ---------------------------------------------------------------------------
-
-/** Unique identifier for each rebind task. */
-export type RebindTaskId =
-  | "re-enter-secrets"
-  | "rebind-channels"
-  | "reconfigure-auth"
-  | "verify-webhooks";
-
-/** Status of an individual checklist task. */
-export type RebindTaskStatus = "pending" | "complete";
-
-/** A single task in the rebind checklist. */
-export interface RebindTask {
-  id: RebindTaskId;
-  title: string;
-  description: string;
-  status: RebindTaskStatus;
-  required: boolean;
-  helpText?: string;
-}
-
-/** Snapshot of which tasks have been marked complete. */
-export type RebindTaskCompletionState = Record<RebindTaskId, boolean>;
-
-/**
- * Discriminated union representing the current display state of the
- * rebind secrets screen.
- */
-export type RebindSecretsScreenState =
-  | { phase: "disabled" }
-  | {
-      phase: "active";
-      tasks: RebindTask[];
-      allRequiredComplete: boolean;
-      completedCount: number;
-      totalCount: number;
-      requiredCount: number;
-      requiredCompletedCount: number;
-    }
-  | {
-      phase: "complete";
-      tasks: RebindTask[];
-    };
-
-// ---------------------------------------------------------------------------
-// Task definitions
-// ---------------------------------------------------------------------------
-
-interface TaskDefinition {
-  id: RebindTaskId;
-  title: string;
-  description: string;
-  required: boolean;
-  helpText?: string;
-}
-
-const TASK_DEFINITIONS: readonly TaskDefinition[] = [
-  {
-    id: "re-enter-secrets",
-    title: "Re-enter API keys and secrets",
-    description:
-      "Secrets are redacted in export bundles for security. Re-enter all API keys, tokens, and credentials in the destination instance.",
-    required: true,
-    helpText:
-      "Navigate to Settings > Models & Services to re-enter provider API keys (e.g., Anthropic, OpenAI). Check Settings > Models & Services for any custom secrets used by skills.",
-  },
-  {
-    id: "rebind-channels",
-    title: "Re-bind communication channels",
-    description:
-      "Communication channel bindings (Slack, Telegram, etc.) are instance-specific. Re-configure each channel to point to the new instance.",
-    required: true,
-    helpText:
-      "For Slack: re-install the Slack app in your workspace. For Telegram: update the bot webhook URL.",
-  },
-  {
-    id: "reconfigure-auth",
-    title: "Re-configure identity and auth settings",
-    description:
-      "Authentication settings, OAuth tokens, and identity provider configurations may need to be re-established on the new instance.",
-    required: true,
-    helpText:
-      "Check guardian settings, OAuth app registrations, and any SSO configurations. Re-authorize connected services if needed.",
-  },
-  {
-    id: "verify-webhooks",
-    title: "Verify webhook URLs",
-    description:
-      "Ensure all webhook URLs registered with external services point to the new instance's public ingress URL.",
-    required: false,
-    helpText:
-      "Review the public ingress URL in Settings > Developer. Update any external services (GitHub, calendar providers, etc.) that send webhooks to this assistant.",
-  },
-] as const;
-
-// ---------------------------------------------------------------------------
-// Task completion state management
-// ---------------------------------------------------------------------------
-
-/**
- * Create a fresh task completion state with all tasks pending.
- */
-export function createTaskCompletionState(): RebindTaskCompletionState {
-  const state = {} as RebindTaskCompletionState;
-  for (const def of TASK_DEFINITIONS) {
-    state[def.id] = false;
-  }
-  return state;
-}
-
-/**
- * Toggle a task's completion status.
- *
- * Returns a new state object (immutable update).
- */
-export function toggleTaskCompletion(
-  state: RebindTaskCompletionState,
-  taskId: RebindTaskId,
-): RebindTaskCompletionState {
-  return { ...state, [taskId]: !state[taskId] };
-}
-
-/**
- * Mark a specific task as complete.
- *
- * Returns a new state object (immutable update).
- */
-export function markTaskComplete(
-  state: RebindTaskCompletionState,
-  taskId: RebindTaskId,
-): RebindTaskCompletionState {
-  return { ...state, [taskId]: true };
-}
-
-/**
- * Mark a specific task as pending (incomplete).
- *
- * Returns a new state object (immutable update).
- */
-export function markTaskPending(
-  state: RebindTaskCompletionState,
-  taskId: RebindTaskId,
-): RebindTaskCompletionState {
-  return { ...state, [taskId]: false };
-}
-
-// ---------------------------------------------------------------------------
-// State derivation
-// ---------------------------------------------------------------------------
-
-/**
- * Build the task list from definitions and completion state.
- *
- * When credential import results are provided:
- * - If all credentials were imported successfully, the re-enter-secrets task
- *   is marked as auto-completed with an updated description.
- * - If some credentials failed, the description is updated to list only the
- *   failed credentials that need manual re-entry.
- * - If no credentials were in the bundle (legacy), the original behavior is kept.
- */
-function buildTasks(
-  completionState: RebindTaskCompletionState,
-  credentialsImported?: MigrationWizardState["credentialsImported"],
-): RebindTask[] {
-  return TASK_DEFINITIONS.map((def) => {
-    // Apply credential import awareness to the re-enter-secrets task
-    if (def.id === "re-enter-secrets" && credentialsImported) {
-      if (credentialsImported.failed === 0 && credentialsImported.total > 0) {
-        // All credentials imported successfully — auto-complete this task
-        return {
-          id: def.id,
-          title: "API keys and secrets transferred",
-          description: `All ${credentialsImported.total} credential(s) were automatically imported from the bundle. No manual re-entry needed.`,
-          status: "complete" as const,
-          required: def.required,
-          helpText:
-            "Credentials were securely transferred as part of the migration bundle. You can verify them in Settings > Models & Services.",
-        };
-      }
-
-      if (credentialsImported.failed > 0) {
-        // Partial failure — show only the failed credentials
-        const failedList = credentialsImported.failedAccounts
-          .map((a) => `"${a}"`)
-          .join(", ");
-        return {
-          id: def.id,
-          title: "Re-enter failed credentials",
-          description: `${credentialsImported.succeeded} of ${credentialsImported.total} credential(s) were imported automatically. The following failed and need manual re-entry: ${failedList}.`,
-          status: completionState[def.id]
-            ? ("complete" as const)
-            : ("pending" as const),
-          required: def.required,
-          helpText: `Navigate to Settings > Models & Services to re-enter the failed credential(s): ${failedList}.`,
-        };
-      }
-    }
-
-    return {
-      id: def.id,
-      title: def.title,
-      description: def.description,
-      status: completionState[def.id]
-        ? ("complete" as const)
-        : ("pending" as const),
-      required: def.required,
-      ...(def.helpText !== undefined ? { helpText: def.helpText } : {}),
-    };
-  });
-}
-
-/**
- * Check whether all required tasks are complete.
- */
-export function areAllRequiredTasksComplete(
-  completionState: RebindTaskCompletionState,
-): boolean {
-  return TASK_DEFINITIONS.filter((d) => d.required).every(
-    (d) => completionState[d.id],
-  );
-}
-
-/**
- * Derive the current rebind secrets screen state from the wizard state
- * and the local task completion state.
- *
- * This is a pure function -- no side effects. Call it whenever the wizard
- * state or task completion state changes to get the latest display state.
- *
- * The `completionState` parameter tracks which tasks the operator has
- * marked complete. It is managed separately from the wizard state because
- * individual task toggles are a UI concern, not a wizard transition.
- */
-export function deriveRebindSecretsScreenState(
-  wizardState: MigrationWizardState,
-  completionState: RebindTaskCompletionState,
-): RebindSecretsScreenState {
-  const rebindStep = wizardState.steps["rebind-secrets"];
-  const credInfo = wizardState.credentialsImported;
-
-  // Not yet accessible -- earlier steps incomplete
-  if (
-    wizardState.currentStep !== "rebind-secrets" &&
-    rebindStep.status !== "success"
-  ) {
-    if (!isStepAccessible(wizardState, "rebind-secrets")) {
-      return { phase: "disabled" };
-    }
-  }
-
-  // Apply credential-aware completion state: if all credentials imported
-  // successfully, treat re-enter-secrets as auto-completed.
-  let effectiveCompletion = completionState;
-  if (credInfo && credInfo.total > 0 && credInfo.failed === 0) {
-    effectiveCompletion = markTaskComplete(completionState, "re-enter-secrets");
-  }
-
-  // Already completed (viewing from a later step or after completion)
-  if (rebindStep.status === "success") {
-    const tasks = buildTasks(effectiveCompletion, credInfo);
-    return { phase: "complete", tasks };
-  }
-
-  // Active -- show the checklist
-  if (wizardState.currentStep === "rebind-secrets") {
-    const tasks = buildTasks(effectiveCompletion, credInfo);
-    const requiredTasks = tasks.filter((t) => t.required);
-    const completedTasks = tasks.filter((t) => t.status === "complete");
-    const requiredCompletedTasks = requiredTasks.filter(
-      (t) => t.status === "complete",
-    );
-
-    return {
-      phase: "active",
-      tasks,
-      allRequiredComplete: areAllRequiredTasksComplete(effectiveCompletion),
-      completedCount: completedTasks.length,
-      totalCount: tasks.length,
-      requiredCount: requiredTasks.length,
-      requiredCompletedCount: requiredCompletedTasks.length,
-    };
-  }
-
-  return { phase: "disabled" };
-}
-
-// ---------------------------------------------------------------------------
-// Actions -- delegate to wizard state machine
-// ---------------------------------------------------------------------------
-
-/**
- * Complete the rebind-secrets step and advance to the complete step.
- *
- * This should only be called when all required tasks are marked complete.
- * Throws if called when required tasks are incomplete.
- */
-export function completeMigration(
-  wizardState: MigrationWizardState,
-  completionState: RebindTaskCompletionState,
-): MigrationWizardState {
-  // Apply credential-aware effective completion: if all credentials were
-  // imported successfully, treat re-enter-secrets as auto-completed
-  // (mirrors the logic in deriveRebindSecretsScreenState).
-  let effectiveCompletion = completionState;
-  const credInfo = wizardState?.credentialsImported;
-  if (credInfo && credInfo.total > 0 && credInfo.failed === 0) {
-    effectiveCompletion = { ...completionState, "re-enter-secrets": true };
-  }
-  if (!areAllRequiredTasksComplete(effectiveCompletion)) {
-    throw new Error(
-      "Cannot complete migration: not all required tasks are done",
-    );
-  }
-  return completeRebindSecrets(wizardState);
-}
-
-/**
- * Navigate back to the transfer step and reset the rebind checklist.
- *
- * Returns both the rewound wizard state and a fresh completion state so
- * callers clear stale task progress from a previous transfer attempt.
- */
-export function goBackToTransfer(state: MigrationWizardState): {
-  wizardState: MigrationWizardState;
-  completionState: RebindTaskCompletionState;
-} {
-  return {
-    wizardState: goBackTo(state, "transfer"),
-    completionState: createTaskCompletionState(),
-  };
-}
-
-// ---------------------------------------------------------------------------
-// Query helpers
-// ---------------------------------------------------------------------------
-
-/**
- * Check if the rebind secrets screen is accessible from the current state.
- */
-export function isRebindSecretsScreenAccessible(
-  state: MigrationWizardState,
-): boolean {
-  return (
-    isStepAccessible(state, "rebind-secrets") ||
-    state.currentStep === "rebind-secrets"
-  );
-}
-
-/**
- * Get the list of all task IDs in display order.
- */
-export function getTaskIds(): readonly RebindTaskId[] {
-  return TASK_DEFINITIONS.map((d) => d.id);
-}
-
-/**
- * Get the count of required tasks.
- */
-export function getRequiredTaskCount(): number {
-  return TASK_DEFINITIONS.filter((d) => d.required).length;
-}
-
-/**
- * Get the count of total tasks.
- */
-export function getTotalTaskCount(): number {
-  return TASK_DEFINITIONS.length;
-}

package/src/runtime/migrations/staged-import-path.ts

@@ -1,116 +0,0 @@
-/**
- * Resolve a caller-supplied staged-bundle path for local restore.
- *
- * The daemon only opens files that realpath into
- * `${workspaceDir}/.restore-staging/`. Absolute host paths, `..`
- * traversal, and symlink escapes are rejected.
- */
-
-import { existsSync, lstatSync, realpathSync, statSync } from "node:fs";
-import { relative, resolve, sep } from "node:path";
-
-export const RESTORE_STAGING_DIRNAME = ".restore-staging";
-
-export type StagedImportPathErrorCode =
-  | "empty"
-  | "not_found"
-  | "not_file"
-  | "symlink"
-  | "outside"
-  | "extension";
-
-export class StagedImportPathError extends Error {
-  public readonly code: StagedImportPathErrorCode;
-
-  constructor(code: StagedImportPathErrorCode, message: string) {
-    super(message);
-    this.name = "StagedImportPathError";
-    this.code = code;
-  }
-}
-
-/**
- * Resolve `requestedPath` to a regular `.vbundle` file inside the
- * workspace restore-staging directory.
- */
-export function resolveStagedImportPath(
-  requestedPath: string,
-  workspaceDir: string,
-): string {
-  if (typeof requestedPath !== "string" || requestedPath.trim().length === 0) {
-    throw new StagedImportPathError("empty", "Staged bundle path is empty");
-  }
-  if (requestedPath.includes("\0")) {
-    throw new StagedImportPathError(
-      "empty",
-      "Staged bundle path is not a valid file path",
-    );
-  }
-
-  if (!existsSync(workspaceDir)) {
-    throw new StagedImportPathError(
-      "not_found",
-      "Staged bundle file not found",
-    );
-  }
-
-  const workspaceReal = realpathSync(workspaceDir);
-  const stagingRoot = resolve(workspaceReal, RESTORE_STAGING_DIRNAME);
-  const candidate = requestedPath.startsWith("/")
-    ? resolve(requestedPath)
-    : resolve(workspaceReal, requestedPath);
-
-  if (!existsSync(candidate)) {
-    throw new StagedImportPathError(
-      "not_found",
-      "Staged bundle file not found",
-    );
-  }
-
-  const linkStat = lstatSync(candidate);
-  if (linkStat.isSymbolicLink()) {
-    throw new StagedImportPathError(
-      "symlink",
-      "Staged bundle path must not be a symlink",
-    );
-  }
-
-  const realFile = realpathSync(candidate);
-  if (!existsSync(stagingRoot)) {
-    throw new StagedImportPathError(
-      "outside",
-      "Staged bundle path is not inside the restore staging directory",
-    );
-  }
-
-  const realStaging = realpathSync(stagingRoot);
-  const rel = relative(realStaging, realFile);
-  if (
-    rel === "" ||
-    rel.startsWith(`..${sep}`) ||
-    rel === ".." ||
-    rel.split(sep).includes("..")
-  ) {
-    throw new StagedImportPathError(
-      "outside",
-      "Staged bundle path is not inside the restore staging directory",
-    );
-  }
-
-  const fileStat = statSync(realFile);
-  if (!fileStat.isFile()) {
-    throw new StagedImportPathError(
-      "not_file",
-      "Staged bundle path is not a file",
-    );
-  }
-
-  if (!realFile.endsWith(".vbundle")) {
-    throw new StagedImportPathError(
-      "extension",
-      "Staged bundle must be a .vbundle file",
-    );
-  }
-
-  return realFile;
-}