@nemus-cli/nemus 0.2.1

package/sync-permissions.sh

@@ -0,0 +1,137 @@
+#!/bin/bash
+#
+# sync-permissions.sh — Claude Code Stop hook
+#
+# Merges project-level Claude Code permissions into the global
+# ~/.claude/settings.json so they never need re-approval
+# in other workspaces.
+#
+# NOTE: We write to settings.json (not settings.local.json) because
+# Claude Code only reads ~/.claude/settings.json at the user level.
+# The .local.json variant is only recognized at the project level.
+#
+# Called automatically by Claude Code after every response when
+# registered as a Stop hook.
+
+# Claude Code pipes tool results to Stop hook stdin.
+# We must drain it or the hook process may block the parent.
+cat > /dev/null
+
+# Bail if jq is not available
+command -v jq &>/dev/null || exit 0
+
+# Guard against missing HOME
+[ -z "$HOME" ] && exit 0
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-}"
+[ -z "$PROJECT_DIR" ] && exit 0
+
+PROJECT_SETTINGS="$PROJECT_DIR/.claude/settings.local.json"
+GLOBAL_SETTINGS="$HOME/.claude/settings.json"
+
+# Nothing to do if project has no settings
+[ -f "$PROJECT_SETTINGS" ] || exit 0
+
+# Ensure global settings file exists with a valid structure
+if [ ! -f "$GLOBAL_SETTINGS" ]; then
+    mkdir -p "$(dirname "$GLOBAL_SETTINGS")"
+    echo '{}' > "$GLOBAL_SETTINGS"
+fi
+
+LOCK_FILE="$GLOBAL_SETTINGS.lock"
+
+# jq filter that checks if a permission is reusable (no absolute user paths, no heredoc commits).
+# IMPORTANT: Keep in sync with isReusablePermission() in utils/permission-sync.ts.
+IS_REUSABLE='def is_reusable: (test("/Users/|/home/") | not) and (test("cat <<.*EOF") | not);'
+
+# jq filter to compute new allow entries:
+#   project_allow - global_allow - global_deny, filtered for reusability
+COMPUTE_ALLOW='
+  '"$IS_REUSABLE"'
+  ($project.permissions.allow // []) as $pa |
+  ($global.permissions.allow // []) as $ga |
+  ($global.permissions.deny // []) as $gd |
+  [$pa[] | select(is_reusable) | select(. as $e | ($ga | index($e)) | not) | select(. as $e | ($gd | index($e)) | not)]
+'
+
+# jq filter to compute new deny entries:
+#   project_deny - global_deny, filtered for reusability
+COMPUTE_DENY='
+  '"$IS_REUSABLE"'
+  ($project.permissions.deny // []) as $pd |
+  ($global.permissions.deny // []) as $gd |
+  [$pd[] | select(is_reusable) | select(. as $e | ($gd | index($e)) | not)]
+'
+
+# Read project settings once
+PROJECT_JSON=$(cat "$PROJECT_SETTINGS" 2>/dev/null) || exit 0
+
+# Check if there's anything to sync before acquiring the lock
+NEW_ALLOW=$(jq -n --argjson project "$PROJECT_JSON" --argjson global "$(cat "$GLOBAL_SETTINGS")" "$COMPUTE_ALLOW")
+NEW_DENY=$(jq -n --argjson project "$PROJECT_JSON" --argjson global "$(cat "$GLOBAL_SETTINGS")" "$COMPUTE_DENY")
+
+# Exit early if nothing to add
+if [ "$NEW_ALLOW" = "[]" ] && [ "$NEW_DENY" = "[]" ]; then
+    exit 0
+fi
+
+# Use flock for exclusive access during the read-modify-write cycle.
+# macOS doesn't ship flock; fall back to mkdir-based locking.
+acquire_lock() {
+    if command -v flock &>/dev/null; then
+        exec 9>"$LOCK_FILE"
+        flock -w 5 9 || return 1
+    else
+        local attempts=0
+        while ! mkdir "$LOCK_FILE" 2>/dev/null; do
+            attempts=$((attempts + 1))
+            if [ $attempts -ge 50 ]; then
+                # Stale lock — remove and retry once
+                rm -rf "$LOCK_FILE"
+                mkdir "$LOCK_FILE" 2>/dev/null || return 1
+                break
+            fi
+            sleep 0.1
+        done
+    fi
+}
+
+release_lock() {
+    if command -v flock &>/dev/null; then
+        exec 9>&-
+        rm -f "$LOCK_FILE"
+    else
+        rm -rf "$LOCK_FILE"
+    fi
+}
+
+# Clean up lock on exit
+trap release_lock EXIT
+
+acquire_lock || exit 0
+
+# Re-read global settings under the lock (another process may have changed it)
+GLOBAL_JSON=$(cat "$GLOBAL_SETTINGS" 2>/dev/null) || GLOBAL_JSON='{}'
+
+# Recompute with fresh global state
+NEW_ALLOW=$(jq -n --argjson project "$PROJECT_JSON" --argjson global "$GLOBAL_JSON" "$COMPUTE_ALLOW")
+NEW_DENY=$(jq -n --argjson project "$PROJECT_JSON" --argjson global "$GLOBAL_JSON" "$COMPUTE_DENY")
+
+# Exit if nothing to add after re-check
+if [ "$NEW_ALLOW" = "[]" ] && [ "$NEW_DENY" = "[]" ]; then
+    exit 0
+fi
+
+# Build the merge filter
+MERGE_FILTER='
+  .permissions.allow = ((.permissions.allow // []) + $new_allow | unique) |
+  .permissions.deny  = ((.permissions.deny  // []) + $new_deny  | unique)
+'
+
+# Write atomically via temp file
+TEMP_FILE=$(mktemp "${GLOBAL_SETTINGS}.XXXXXX")
+if jq --argjson new_allow "$NEW_ALLOW" --argjson new_deny "$NEW_DENY" "$MERGE_FILTER" <<< "$GLOBAL_JSON" > "$TEMP_FILE" 2>/dev/null; then
+    mv "$TEMP_FILE" "$GLOBAL_SETTINGS"
+else
+    rm -f "$TEMP_FILE"
+fi

package/tsconfig.json

@@ -0,0 +1,20 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "commonjs",
+    "lib": ["ES2020"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "moduleResolution": "node",
+    "types": ["node"],
+    "jsx": "react",
+    "jsxFactory": "React.createElement"
+  },
+  "include": ["src/**/*.ts", "src/**/*.tsx"],
+  "exclude": ["node_modules", "dist", "**/*.test.ts"]
+}

package/uninstall.sh

@@ -0,0 +1,162 @@
+#!/bin/bash
+
+# Nemus - Uninstall Script
+
+set -e
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+CYAN='\033[0;36m'
+NC='\033[0m' # No Color
+
+echo ""
+echo "============================================================"
+echo -e "${CYAN}Nemus - Uninstall${NC}"
+echo "============================================================"
+echo ""
+
+print_success() {
+    echo -e "${GREEN}✓${NC} $1"
+}
+
+print_warning() {
+    echo -e "${YELLOW}⚠${NC} $1"
+}
+
+print_info() {
+    echo -e "${CYAN}ℹ${NC} $1"
+}
+
+# Confirm uninstall
+echo -e "${YELLOW}This will remove:${NC}"
+echo "  • Global nemus/nem command"
+echo "  • npm link"
+echo ""
+echo -e "${YELLOW}This will NOT remove:${NC}"
+echo "  • Your workspaces ($HOME/workspaces/)"
+echo "  • Cache files (~/.workspace-manager-cache/)"
+echo "  • Configuration files (~/.workspace-manager-claude-config.json)"
+echo "  • Shell integration (from .zshrc or .bashrc)"
+echo "  • ghq (if installed)"
+echo ""
+
+read -p "Continue with uninstall? (y/n) " -n 1 -r
+echo ""
+if [[ ! $REPLY =~ ^[Yy]$ ]]; then
+    echo "Uninstall cancelled."
+    exit 0
+fi
+
+# Get the directory where this script is located
+SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+# Remove permission sync hook from Claude Code settings
+PERM_SYNC_JS="$SCRIPT_DIR/dist/utils/permission-sync.js"
+if [ -f "$PERM_SYNC_JS" ]; then
+    print_info "Removing Claude Code permission sync hook..."
+    node -e "require('$PERM_SYNC_JS').uninstallPermissionSyncHook()" 2>/dev/null && \
+        print_success "Permission sync hook removed" || \
+        print_warning "Could not remove permission sync hook (non-critical)"
+    print_info "Removing permission review skill and reminder hook..."
+    node -e "require('$PERM_SYNC_JS').uninstallReviewSkillAndReminder()" 2>/dev/null && \
+        print_success "Permission review skill and reminder hook removed" || \
+        print_warning "Could not remove permission review skill (non-critical)"
+    print_info "Removing Nemus skills..."
+    node -e "require('$PERM_SYNC_JS').uninstallWorkspaceSkills()" 2>/dev/null && \
+        print_success "Nemus skills removed" || \
+        print_warning "Could not remove Nemus skills (non-critical)"
+fi
+
+# Unlink global command
+print_info "Removing global command..."
+cd "$SCRIPT_DIR"
+npm unlink || true
+print_success "Global command removed"
+
+# Optionally clean up shell integration
+echo ""
+read -p "Remove shell integration from .zshrc/.bashrc? (y/n) " -n 1 -r
+echo ""
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+    # Remove from .zshrc
+    if [ -f "$HOME/.zshrc" ]; then
+        if grep -q "# Nemus - Shell Integration" "$HOME/.zshrc"; then
+            # Create backup
+            cp "$HOME/.zshrc" "$HOME/.zshrc.backup.$(date +%Y%m%d_%H%M%S)"
+            # Remove the function
+            sed -i.bak '/# Nemus - Shell Integration/,/^}$/d' "$HOME/.zshrc"
+            print_success "Removed from .zshrc (backup created)"
+        fi
+    fi
+
+    # Remove from .bashrc
+    if [ -f "$HOME/.bashrc" ]; then
+        if grep -q "# Nemus - Shell Integration" "$HOME/.bashrc"; then
+            # Create backup
+            cp "$HOME/.bashrc" "$HOME/.bashrc.backup.$(date +%Y%m%d_%H%M%S)"
+            # Remove the function
+            sed -i.bak '/# Nemus - Shell Integration/,/^}$/d' "$HOME/.bashrc"
+            print_success "Removed from .bashrc (backup created)"
+        fi
+    fi
+fi
+
+# Optionally remove cache
+echo ""
+read -p "Remove cache files? (y/n) " -n 1 -r
+echo ""
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+    rm -rf "$HOME/.workspace-manager-cache"
+    print_success "Cache removed"
+fi
+
+# Optionally remove config
+echo ""
+read -p "Remove configuration files? (y/n) " -n 1 -r
+echo ""
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+    rm -f "$HOME/.workspace-manager-claude-config.json"
+    rm -f "$HOME/.workspace-templates.json"
+    rm -f "$HOME/.workspace-last-created"
+    print_success "Configuration files removed"
+fi
+
+# Ask about workspaces
+echo ""
+echo -e "${YELLOW}Your workspaces are still at:${NC}"
+echo "  $HOME/workspaces/"
+echo ""
+read -p "Remove ALL workspaces? (THIS CANNOT BE UNDONE) (y/n) " -n 1 -r
+echo ""
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+    read -p "Are you ABSOLUTELY sure? Type 'DELETE' to confirm: " CONFIRM
+    if [ "$CONFIRM" = "DELETE" ]; then
+        rm -rf $HOME/workspaces
+        print_success "All workspaces removed"
+    else
+        print_info "Workspace removal cancelled (keeping workspaces)"
+    fi
+else
+    print_info "Keeping workspaces"
+fi
+
+echo ""
+echo "============================================================"
+echo -e "${GREEN}Uninstall Complete${NC}"
+echo "============================================================"
+echo ""
+
+echo "What was removed:"
+print_success "Global nemus/nem command unlinked"
+echo ""
+
+echo "To completely remove the source code:"
+echo "  rm -rf $SCRIPT_DIR"
+echo ""
+
+echo "To reinstall:"
+echo "  cd $SCRIPT_DIR"
+echo "  ./install.sh"
+echo ""