@nocville/npc 0.3.0 → 0.4.0

package/README.md

@@ -140,23 +140,24 @@ on your map automatically and despawns when you press Ctrl-C. Once you've run
 #   --debug                  Verbose logging
 ```
 
-| NPC                      | What it does                                               | Example                                                |
-| ------------------------ | ---------------------------------------------------------- | ------------------------------------------------------ |
-| `system-monitor`         | CPU / memory / disk / load with sparklines                 | `nocville-npc system-monitor --cpu-warn=75`            |
-| `internet-connectivity`  | DNS, HTTP and TCP latency checks                           | `nocville-npc internet-connectivity`                   |
-| `process-watcher`        | Watches named processes, calls out deaths                  | `nocville-npc process-watcher --processes=nginx,redis` |
-| `log-watcher`            | Error bursts in log files, last lines on a monitor         | `nocville-npc log-watcher --files=/var/log/app.log`    |
-| `receptionist`           | Lobby greetings, check-ins and front desk jokes            | `nocville-npc receptionist`                            |
-| `security`               | Indoor/outdoor patrols and exterior door watch             | `nocville-npc security`                                |
-| `janitor`                | Mops suspicious spots and complains about bugs everywhere. | `nocville-npc janitor`                                 |
-| `barista`                | Your coffee order is getting a little out of hand.         | `nocville-npc barista`                                 |
-| `office-cat`             | Your desk belongs to the cat now.                          | `nocville-npc office-cat`                              |
-| `office-dog`             | Chief morale officer. Easily distracted.                   | `nocville-npc office-dog`                              |
-| `plant-caretaker`        | Every fern deserves a performance review.                  | `nocville-npc plant-caretaker`                         |
-| `it-technician`          | Have you tried turning it off and on again?                | `nocville-npc it-technician`                           |
-| `out-of-touch-executive` | Big ideas. Long coffee breaks. Your overtime.              | `nocville-npc out-of-touch-executive`                  |
-| `github-watcher`         | New commits on a commit board                              | `nocville-npc github-watcher --repo=owner/name`        |
-| `web-page-watcher`       | A web page rendered as a pixel-art TV                      | `nocville-npc web-page-watcher --url=https://…`        |
+| NPC                         | What it does                                               | Example                                                |
+| --------------------------- | ---------------------------------------------------------- | ------------------------------------------------------ |
+| `system-monitor`            | CPU / memory / disk / load with sparklines                 | `nocville-npc system-monitor --cpu-warn=75`            |
+| `internet-connectivity`     | DNS, HTTP and TCP latency checks                           | `nocville-npc internet-connectivity`                   |
+| `process-watcher`           | Watches named processes, calls out deaths                  | `nocville-npc process-watcher --processes=nginx,redis` |
+| `log-watcher`               | Error bursts in log files, last lines on a monitor         | `nocville-npc log-watcher --files=/var/log/app.log`    |
+| `receptionist`              | Lobby greetings, check-ins and front desk jokes            | `nocville-npc receptionist`                            |
+| `security`                  | Indoor/outdoor patrols and exterior door watch             | `nocville-npc security`                                |
+| `janitor`                   | Mops suspicious spots and complains about bugs everywhere. | `nocville-npc janitor`                                 |
+| `barista`                   | Your coffee order is getting a little out of hand.         | `nocville-npc barista`                                 |
+| `office-cat`                | Your desk belongs to the cat now.                          | `nocville-npc office-cat`                              |
+| `office-dog`                | Chief morale officer. Easily distracted.                   | `nocville-npc office-dog`                              |
+| `plant-caretaker`           | Every fern deserves a performance review.                  | `nocville-npc plant-caretaker`                         |
+| `it-technician`             | Have you tried turning it off and on again?                | `nocville-npc it-technician`                           |
+| `out-of-touch-executive`    | Big ideas. Long coffee breaks. Your overtime.              | `nocville-npc out-of-touch-executive`                  |
+| `slightly-inappropriate-hr` | People skills. Questionable discretion.                    | `nocville-npc slightly-inappropriate-hr`               |
+| `github-watcher`            | New commits on a commit board                              | `nocville-npc github-watcher --repo=owner/name`        |
+| `web-page-watcher`          | A web page rendered as a pixel-art TV                      | `nocville-npc web-page-watcher --url=https://…`        |
 
 Run `nocville-npc --help` to see every flag. Poll intervals below 5 seconds are raised to 5
 seconds. A few notes:
@@ -184,7 +185,7 @@ seconds. A few notes:
   exterior doors for 15–30 seconds. Does not claim a desk. An explicit work-room rule
   still confines its route, so leave it unassigned for office-wide rounds.
 - **office characters**: `janitor`, `barista`, `office-cat`, `office-dog`,
-  `plant-caretaker`, `it-technician` and `out-of-touch-executive` run without screens or
+  `plant-caretaker`, `it-technician`, `out-of-touch-executive`, and `slightly-inappropriate-hr` run without screens or
   external service credentials. They share the usual API key, name, service ID and map
   options. Run each as its own process. Their routes and conversation are synchronized by
   the server, and work-room rules apply. Missing furniture or coworkers cause quiet walks
@@ -225,3 +226,22 @@ class MyNPC extends PollingNPC {
 
 `nocville-npc --help` lists every command and flag, and `nocville-npc doctor` checks that your
 key and connection work. More at [nocville.com](https://nocville.com).
+
+## Encrypted Cloudflare workspaces
+
+Download and verify the producer workspace settings in team privacy settings, then:
+
+```sh
+nocville-npc init --workspace=/absolute/path/workspace.json
+# Supply the agent key through NOCVILLE_API_KEY or the existing init prompt.
+nocville-npc system-monitor
+```
+
+`--workspace`, `NOCVILLE_WORKSPACE`, and the saved workspace path are supported in
+that order. Constructor `workspace` overrides them. The first publication displays
+a signing-device fingerprint for the team owner to approve. Approval is shared by
+the local NPCs using this credential, including coding-agent hooks and watchdogs.
+The workspace pins the HTTPS origin and opaque map ID; changing either requires
+matching verified workspace settings. The `doctor` command uses encrypted enrollment
+and an offline probe for these workspaces. The Node SDK README describes private
+profile storage and the encryption boundary.

package/dist/cjs/cli.js

@@ -91,10 +91,12 @@ Monitoring NPC types:
   plant-caretaker         Waters plants and reviews their performance
   it-technician           Inspects tech gear and recommends reboots
   out-of-touch-executive  Interrupts coworkers between long lounge breaks
+  slightly-inappropriate-hr  Desk-based HR with questionable people skills
   github-watcher          Call out new commits on a repo
   web-page-watcher        Render a watched web page as a pixel-art TV
 
 Common Options:
+  --workspace=<file>     Verified producer workspace settings from team privacy settings.
   --api-key=<key>         Team API key (or NOCVILLE_API_KEY env)
   --api-url=<url>         Nocville API URL (or NOCVILLE_API_URL env).
                           Default: https://nocville.com. For local dev use
@@ -417,7 +419,8 @@ async function main() {
         case 'office-dog':
         case 'plant-caretaker':
         case 'it-technician':
-        case 'out-of-touch-executive': {
+        case 'out-of-touch-executive':
+        case 'slightly-inappropriate-hr': {
             if (!config.serviceId)
                 config.serviceId = parsed.command;
             const { OFFICE_CHARACTER_NPCS } = await Promise.resolve().then(() => __importStar(require('./npcs/office-characters/index.js')));
@@ -510,7 +513,20 @@ async function runInit(flags, config) {
     let apiKey = (0, config_js_1.stringFlag)(flags, 'api-key');
     const apiUrl = (0, config_js_1.stringFlag)(flags, 'api-url');
     const map = (0, config_js_1.stringFlag)(flags, 'map');
-    if (!apiKey && !apiUrl && !map) {
+    const workspace = config.workspace;
+    if (workspace)
+        apiKey = apiKey || config.apiKey;
+    if (workspace && !apiKey) {
+        const { resolveApiKey } = await Promise.resolve().then(() => __importStar(require('./core/api-key.js')));
+        const resolved = await resolveApiKey({ flags });
+        if (!resolved.ok) {
+            console.error(resolved.error);
+            process.exitCode = 1;
+            return;
+        }
+        apiKey = resolved.key;
+    }
+    if (!apiKey && !apiUrl && !map && !workspace) {
         const saved = loadUserConfig();
         if (saved.apiKey && !process.env['NOCVILLE_API_KEY']?.trim()) {
             console.log('Usage: nocville-npc init --api-key=<key> [--api-url=<url>] [--map=<name>]');
@@ -526,7 +542,12 @@ async function runInit(flags, config) {
         }
         apiKey = resolved.key;
     }
-    const path = saveUserConfig({ apiKey, apiUrl, map });
+    const path = saveUserConfig({
+        apiKey,
+        apiUrl: workspace ? config.apiUrl : apiUrl,
+        map: workspace ? config.map : map,
+        workspace,
+    });
     const saved = loadUserConfig();
     console.log(`✓ Saved ${path} (mode 0600)`);
     console.log(`  API: ${saved.apiUrl ?? 'https://nocville.com'}  key: ${maskKey(saved.apiKey)}`);

package/dist/cjs/core/base-npc.js

@@ -17,6 +17,7 @@ class BaseNPC {
         // We can't access `this.name` here since it's abstract, so use a placeholder
         this.logger = new logger_js_1.Logger('npc', config.debug);
         this.client = new node_1.NocvilleClient({
+            workspace: config.workspace,
             apiUrl: config.apiUrl,
             apiKey: config.apiKey,
             serviceId: config.serviceId,

package/dist/cjs/core/config.js

@@ -6,6 +6,8 @@ exports.stringFlag = stringFlag;
 exports.boolFlag = boolFlag;
 exports.listFlag = listFlag;
 exports.numberFlag = numberFlag;
+const node_1 = require("@nocville/node");
+const node_path_1 = require("node:path");
 const user_config_js_1 = require("./user-config.js");
 /**
  * Simple hand-rolled CLI arg parser.
@@ -56,9 +58,16 @@ function parseArgs(argv) {
  */
 function resolveConfig(flags, overrides) {
     const saved = (0, user_config_js_1.loadUserConfig)();
+    const workspacePath = overrides?.workspace ||
+        stringFlag(flags, 'workspace') ||
+        process.env['NOCVILLE_WORKSPACE'] ||
+        saved.workspace;
+    const workspace = workspacePath ? (0, node_path_1.resolve)(workspacePath) : undefined;
+    const enrollment = workspace ? (0, node_1.loadProducerWorkspace)(workspace) : undefined;
     const apiUrl = overrides?.apiUrl ||
         stringFlag(flags, 'api-url') ||
         process.env['NOCVILLE_API_URL'] ||
+        enrollment?.apiUrl ||
         saved.apiUrl ||
         'https://nocville.com';
     const apiKey = overrides?.apiKey ||
@@ -76,10 +85,23 @@ function resolveConfig(flags, overrides) {
     const map = overrides?.map ||
         stringFlag(flags, 'map') ||
         process.env['NOCVILLE_MAP'] ||
+        enrollment?.encryption.mapId ||
         saved.map ||
         undefined;
     const name = overrides?.name || stringFlag(flags, 'name') || process.env['NOCVILLE_NAME'] || undefined;
-    return { apiUrl, apiKey, serviceId, debug, map, name };
+    if (enrollment && apiUrl.replace(/\/+$/, '') !== enrollment.apiUrl)
+        throw new Error('API origin does not match the verified workspace');
+    if (enrollment && map && map !== enrollment.encryption.mapId)
+        throw new Error('Encrypted producers use the map ID in their workspace settings');
+    return {
+        apiUrl,
+        apiKey,
+        serviceId,
+        debug,
+        map: enrollment?.encryption.mapId ?? map,
+        name,
+        ...(workspace ? { workspace } : {}),
+    };
 }
 function stringFlag(flags, key) {
     const val = flags[key];

package/dist/cjs/core/polling-npc.js

@@ -23,8 +23,10 @@ class PollingNPC extends base_npc_js_1.BaseNPC {
     lastPushed = null;
     lastPushAt = 0;
     pollInterval;
+    onCollection;
     constructor(config) {
         super(config);
+        this.onCollection = config.onCollection;
         const requested = config.pollInterval ?? 15000;
         this.pollInterval = Number.isFinite(requested)
             ? Math.max(exports.MIN_POLL_INTERVAL_MS, requested)
@@ -117,6 +119,12 @@ class PollingNPC extends base_npc_js_1.BaseNPC {
             // Stopped mid-collection: never push after (or race) the offline push.
             if (this.state !== 'running')
                 return;
+            try {
+                this.onCollection?.(metrics);
+            }
+            catch {
+                /* Diagnostics cannot stop publishing. */
+            }
             await this.pushMetrics(metrics);
             this.lastPushed = metrics;
             this.lastPushAt = Date.now();

package/dist/cjs/core/user-config.js

@@ -25,6 +25,8 @@ function loadUserConfig(path = userConfigPath()) {
     try {
         const raw = JSON.parse((0, node_fs_1.readFileSync)(path, 'utf-8'));
         const out = {};
+        if (typeof raw['workspace'] === 'string' && raw['workspace'])
+            out.workspace = raw['workspace'];
         if (typeof raw['apiUrl'] === 'string' && raw['apiUrl'])
             out.apiUrl = raw['apiUrl'];
         if (typeof raw['apiKey'] === 'string' && raw['apiKey'])

package/dist/cjs/doctor.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runDoctor = runDoctor;
 exports.hasCodexHookWatcherOverlap = hasCodexHookWatcherOverlap;
+const node_1 = require("@nocville/node");
 const node_crypto_1 = require("node:crypto");
 const node_fs_1 = require("node:fs");
 const liveness_js_1 = require("./npcs/agent-common/liveness.js");
@@ -43,6 +44,24 @@ async function runDoctor(config) {
     if (!hasKey) {
         console.log('  [SKIP] POST /api/v1/status — no --api-key / NOCVILLE_API_KEY set');
     }
+    else if (config.workspace || config.apiKey.includes('.team_')) {
+        // Exercise the locally encrypted path; never send a plaintext probe to a v2 workspace.
+        try {
+            const client = new node_1.NocvilleClient({
+                workspace: config.workspace,
+                apiUrl: config.apiUrl,
+                apiKey: config.apiKey,
+                serviceId: 'nocville-doctor',
+                retries: 0,
+            });
+            const result = await client.pushStatus({ status: 'unknown', offline: true });
+            pushOk = result.success;
+            console.log(`  [${pushOk ? 'OK' : 'FAIL'}] Encrypted producer: ${result.error ?? 'accepted'}`);
+        }
+        catch (error) {
+            console.log(`  [FAIL] Encrypted producer: ${error.message}`);
+        }
+    }
     else {
         const start = Date.now();
         const t = withTimeout(5000);

package/dist/cjs/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ReceptionistNPC = exports.LogWatcherNPC = exports.ProcessWatcherNPC = exports.InternetConnectivityNPC = exports.ensureSessionFilterTemplate = exports.sessionPublishDecision = exports.sessionFilterPath = exports.loadSessionFilter = exports.pixelDevice = exports.pixelArtFromPng = exports.encodePixelArt = exports.userConfigPath = exports.saveUserConfig = exports.loadUserConfig = exports.redactSecrets = exports.shortPath = exports.shortCommand = exports.describeToolUse = exports.CodexWatcher = exports.parseRolloutLine = exports.uninstallCodexHooks = exports.setupCodexHooks = exports.codexTransition = exports.handleCodexHookEvent = exports.handleCodexCommand = exports.claudeTransition = exports.processHookEvent = exports.uninstallHooks = exports.setupHooks = exports.handleHookEvent = exports.handleClaudeCodeCommand = exports.ClaudeCodeNPC = exports.SystemMonitorNPC = exports.pushHistory = exports.statusColor = exports.NpcConfigError = exports.sanitizeText = exports.truncate = exports.moodForStatus = exports.worstStatus = exports.evaluateThreshold = exports.numberFlag = exports.boolFlag = exports.stringFlag = exports.resolveConfig = exports.parseArgs = exports.Logger = exports.EventNPC = exports.PollingNPC = exports.BaseNPC = void 0;
-exports.OFFICE_CHARACTER_NPCS = exports.OutOfTouchExecutiveNPC = exports.ITTechnicianNPC = exports.PlantCaretakerNPC = exports.OfficeDogNPC = exports.OfficeCatNPC = exports.BaristaNPC = exports.JanitorNPC = exports.SecurityNPC = exports.normalizeCursorEvent = exports.isCursorInvocation = exports.CURSOR_HOOK_EVENTS = exports.installCursorHooksInto = exports.uninstallCursorHooks = exports.setupCursorHooks = exports.handleCursorHookEvent = exports.cursorServiceId = exports.CURSOR_ADAPTER = exports.CURSOR_DEFAULTS = exports.GEMINI_HOOK_EVENTS = exports.installGeminiHooksInto = exports.uninstallGeminiHooks = exports.setupGeminiHooks = exports.handleGeminiHookEvent = exports.geminiServiceId = exports.geminiTransition = exports.GEMINI_ADAPTER = exports.GEMINI_DEFAULTS = exports.WebPageWatcherNPC = exports.GitHubWatcherNPC = void 0;
+exports.OFFICE_CHARACTER_NPCS = exports.SlightlyInappropriateHRNPC = exports.OutOfTouchExecutiveNPC = exports.ITTechnicianNPC = exports.PlantCaretakerNPC = exports.OfficeDogNPC = exports.OfficeCatNPC = exports.BaristaNPC = exports.JanitorNPC = exports.SecurityNPC = exports.normalizeCursorEvent = exports.isCursorInvocation = exports.CURSOR_HOOK_EVENTS = exports.installCursorHooksInto = exports.uninstallCursorHooks = exports.setupCursorHooks = exports.handleCursorHookEvent = exports.cursorServiceId = exports.CURSOR_ADAPTER = exports.CURSOR_DEFAULTS = exports.GEMINI_HOOK_EVENTS = exports.installGeminiHooksInto = exports.uninstallGeminiHooks = exports.setupGeminiHooks = exports.handleGeminiHookEvent = exports.geminiServiceId = exports.geminiTransition = exports.GEMINI_ADAPTER = exports.GEMINI_DEFAULTS = exports.WebPageWatcherNPC = exports.GitHubWatcherNPC = void 0;
 // Core
 var base_npc_js_1 = require("./core/base-npc.js");
 Object.defineProperty(exports, "BaseNPC", { enumerable: true, get: function () { return base_npc_js_1.BaseNPC; } });
@@ -110,5 +110,6 @@ Object.defineProperty(exports, "OfficeDogNPC", { enumerable: true, get: function
 Object.defineProperty(exports, "PlantCaretakerNPC", { enumerable: true, get: function () { return index_js_13.PlantCaretakerNPC; } });
 Object.defineProperty(exports, "ITTechnicianNPC", { enumerable: true, get: function () { return index_js_13.ITTechnicianNPC; } });
 Object.defineProperty(exports, "OutOfTouchExecutiveNPC", { enumerable: true, get: function () { return index_js_13.OutOfTouchExecutiveNPC; } });
+Object.defineProperty(exports, "SlightlyInappropriateHRNPC", { enumerable: true, get: function () { return index_js_13.SlightlyInappropriateHRNPC; } });
 Object.defineProperty(exports, "OFFICE_CHARACTER_NPCS", { enumerable: true, get: function () { return index_js_13.OFFICE_CHARACTER_NPCS; } });
 //# sourceMappingURL=index.js.map

package/dist/cjs/npcs/agent-common/session.js

@@ -263,6 +263,7 @@ function buildAgentPayload(adapter, state, config) {
 }
 async function defaultPush(config, serviceId, payload, timeoutMs) {
     const client = new node_1.NocvilleClient({
+        workspace: config.workspace,
         apiUrl: config.apiUrl,
         apiKey: config.apiKey,
         serviceId,
@@ -381,6 +382,8 @@ function spawnDetachedAgent(adapter, config, args, cliPath = process.argv[1]) {
     if (!cliPath)
         return undefined;
     const env = { ...process.env };
+    if (config.workspace)
+        env['NOCVILLE_WORKSPACE'] = config.workspace;
     env['NOCVILLE_API_URL'] = config.apiUrl;
     env['NOCVILLE_API_KEY'] = config.apiKey;
     if (config.map)

package/dist/cjs/npcs/codex/watcher.js

@@ -339,6 +339,7 @@ class CodexWatcher {
             let client = this.clients.get(serviceId);
             if (!client) {
                 client = new node_1.NocvilleClient({
+                    workspace: this.config.workspace,
                     apiUrl: this.config.apiUrl,
                     apiKey: this.config.apiKey,
                     serviceId,

package/dist/cjs/npcs/github-watcher/github.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchCommits = fetchCommits;
+exports.commitsWithin = commitsWithin;
+exports.relativeTime = relativeTime;
+exports.newCommitsSince = newCommitsSince;
+function toNum(v) {
+    if (v === null)
+        return null;
+    const n = Number(v);
+    return Number.isNaN(n) ? null : n;
+}
+/**
+ * Fetch recent commits from the GitHub REST API using conditional requests.
+ * Passing the previous ETag yields a 304 (which does not count against the
+ * unauthenticated 60/hour limit) when nothing has changed. Never throws —
+ * network errors surface as `status: 0`.
+ */
+async function fetchCommits(repo, opts = {}) {
+    const perPage = opts.perPage ?? 10;
+    const url = `https://api.github.com/repos/${repo}/commits?per_page=${perPage}`;
+    const headers = {
+        Accept: 'application/vnd.github+json',
+        'User-Agent': 'nocville-npc',
+        'X-GitHub-Api-Version': '2022-11-28',
+    };
+    if (opts.token)
+        headers['Authorization'] = `Bearer ${opts.token}`;
+    if (opts.etag)
+        headers['If-None-Match'] = opts.etag;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 5000);
+    try {
+        const res = await fetch(url, { headers, signal: controller.signal });
+        const rateRemaining = toNum(res.headers.get('x-ratelimit-remaining'));
+        const etag = res.headers.get('etag');
+        if (res.status === 304) {
+            return { notModified: true, commits: [], etag: opts.etag ?? null, rateRemaining, status: 304 };
+        }
+        if (!res.ok) {
+            // Drain the body so the socket can be reused.
+            await res.text().catch(() => undefined);
+            return { notModified: false, commits: [], etag, rateRemaining, status: res.status };
+        }
+        const body = (await res.json());
+        const commits = body.map((c) => parseCommit(c));
+        return { notModified: false, commits, etag, rateRemaining, status: res.status };
+    }
+    catch {
+        return { notModified: false, commits: [], etag: null, rateRemaining: null, status: 0 };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function parseCommit(c) {
+    const commit = c['commit'] ?? {};
+    const commitAuthor = commit['author'] ?? {};
+    const ghAuthor = c['author'] ?? {};
+    const message = String(commit['message'] ?? '').split('\n')[0] ?? '';
+    return {
+        sha: String(c['sha'] ?? ''),
+        author: String(commitAuthor['name'] ?? ghAuthor['login'] ?? 'unknown'),
+        message,
+        date: String(commitAuthor['date'] ?? ''),
+    };
+}
+/** Count how many commits landed within the last `hours`. */
+function commitsWithin(commits, hours, now = Date.now()) {
+    const cutoff = now - hours * 3600_000;
+    return commits.filter((c) => {
+        const t = Date.parse(c.date);
+        return Number.isFinite(t) && t >= cutoff;
+    }).length;
+}
+/** Short relative-time string like "3m ago", "2h ago", "1d ago". */
+function relativeTime(iso, now = Date.now()) {
+    const t = Date.parse(iso);
+    if (!Number.isFinite(t))
+        return 'unknown';
+    const secs = Math.max(0, Math.round((now - t) / 1000));
+    if (secs < 60)
+        return `${secs}s ago`;
+    const mins = Math.round(secs / 60);
+    if (mins < 60)
+        return `${mins}m ago`;
+    const hrs = Math.round(mins / 60);
+    if (hrs < 24)
+        return `${hrs}h ago`;
+    const days = Math.round(hrs / 24);
+    return `${days}d ago`;
+}
+/**
+ * Return the commits newer than `lastSeenSha`, newest-first. When the sha isn't
+ * present in the window (more than a page of new commits, or rewritten history)
+ * every fetched commit is treated as new. An undefined sha means "not seeded
+ * yet" — returns empty so the caller can seed without a spurious announcement.
+ */
+function newCommitsSince(commits, lastSeenSha) {
+    if (!lastSeenSha)
+        return [];
+    const idx = commits.findIndex((c) => c.sha === lastSeenSha);
+    if (idx === 0)
+        return []; // newest is already seen
+    if (idx === -1)
+        return commits; // fell out of the window — treat all as new
+    return commits.slice(0, idx);
+}
+//# sourceMappingURL=github.js.map

package/dist/cjs/npcs/office-characters/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OFFICE_CHARACTER_NPCS = exports.OutOfTouchExecutiveNPC = exports.ITTechnicianNPC = exports.PlantCaretakerNPC = exports.OfficeDogNPC = exports.OfficeCatNPC = exports.BaristaNPC = exports.JanitorNPC = void 0;
+exports.OFFICE_CHARACTER_NPCS = exports.SlightlyInappropriateHRNPC = exports.OutOfTouchExecutiveNPC = exports.ITTechnicianNPC = exports.PlantCaretakerNPC = exports.OfficeDogNPC = exports.OfficeCatNPC = exports.BaristaNPC = exports.JanitorNPC = void 0;
 const polling_npc_js_1 = require("../../core/polling-npc.js");
 /** Quiet heartbeats; the authoritative server drives routines and conversation. */
 class OfficeCharacterNPC extends polling_npc_js_1.PollingNPC {
@@ -80,6 +80,15 @@ class OutOfTouchExecutiveNPC extends OfficeCharacterNPC {
     }
 }
 exports.OutOfTouchExecutiveNPC = OutOfTouchExecutiveNPC;
+class SlightlyInappropriateHRNPC extends OfficeCharacterNPC {
+    get name() {
+        return 'slightly-inappropriate-hr';
+    }
+    get defaultDisplayName() {
+        return 'Slightly Inappropriate HR';
+    }
+}
+exports.SlightlyInappropriateHRNPC = SlightlyInappropriateHRNPC;
 exports.OFFICE_CHARACTER_NPCS = {
     janitor: JanitorNPC,
     barista: BaristaNPC,
@@ -88,5 +97,6 @@ exports.OFFICE_CHARACTER_NPCS = {
     'plant-caretaker': PlantCaretakerNPC,
     'it-technician': ITTechnicianNPC,
     'out-of-touch-executive': OutOfTouchExecutiveNPC,
+    'slightly-inappropriate-hr': SlightlyInappropriateHRNPC,
 };
 //# sourceMappingURL=index.js.map

package/dist/cjs/npcs/web-page-watcher/basic.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractTitle = extractTitle;
+exports.statusFromHttp = statusFromHttp;
+exports.basicCheck = basicCheck;
+exports.hostnameOf = hostnameOf;
+/** Extract the <title> text from an HTML string (empty if none). */
+function extractTitle(html) {
+    const m = html.match(/<title[^>]*>([\s\S]*?)<\/title>/i);
+    return m ? m[1].replace(/\s+/g, ' ').trim().slice(0, 80) : '';
+}
+/** Map an HTTP status to NPC status: 2xx/3xx ok, 4xx/timeout warn, 5xx/refused crit. */
+function statusFromHttp(code, timedOut = false) {
+    if (code >= 200 && code < 400)
+        return 'healthy';
+    if (code >= 400 && code < 500)
+        return 'warning';
+    if (code >= 500)
+        return 'critical';
+    return timedOut ? 'warning' : 'critical'; // 0 = network error
+}
+/** Fetch a page and extract HTTP status + <title> (basic, no browser). */
+async function basicCheck(url, timeoutMs = 8000) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const res = await fetch(url, {
+            signal: controller.signal,
+            headers: { 'User-Agent': 'nocville-npc' },
+            redirect: 'follow',
+        });
+        let title = '';
+        try {
+            title = extractTitle(await res.text());
+        }
+        catch {
+            // body unavailable; leave title blank
+        }
+        return { status: res.status, title, ok: res.ok, timedOut: false };
+    }
+    catch (err) {
+        const timedOut = err instanceof Error && err.name === 'AbortError';
+        return { status: 0, title: '', ok: false, timedOut };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** Best-effort hostname for a URL, falling back to the raw string. */
+function hostnameOf(url) {
+    try {
+        return new URL(url).hostname;
+    }
+    catch {
+        return url.slice(0, 40);
+    }
+}
+//# sourceMappingURL=basic.js.map

package/dist/cjs/npcs/web-page-watcher/capture.js

@@ -5,6 +5,7 @@ exports.chromeArgs = chromeArgs;
 exports.runningAsRoot = runningAsRoot;
 exports.loadPuppeteer = loadPuppeteer;
 exports.browserConnected = browserConnected;
+const node_path_1 = require("node:path");
 const node_fs_1 = require("node:fs");
 const node_child_process_1 = require("node:child_process");
 const MAC_PATHS = [
@@ -50,6 +51,25 @@ function findChrome(explicit) {
                 return p;
         return null;
     }
+    if (process.platform === 'win32') {
+        const roots = [
+            process.env['LOCALAPPDATA'],
+            process.env['PROGRAMFILES'],
+            process.env['PROGRAMFILES(X86)'],
+        ].filter((p) => !!p);
+        for (const root of roots)
+            for (const relative of [
+                ['Google', 'Chrome', 'Application', 'chrome.exe'],
+                ['Microsoft', 'Edge', 'Application', 'msedge.exe'],
+                ['Chromium', 'Application', 'chrome.exe'],
+                ['BraveSoftware', 'Brave-Browser', 'Application', 'brave.exe'],
+            ]) {
+                const path = (0, node_path_1.join)(root, ...relative);
+                if ((0, node_fs_1.existsSync)(path))
+                    return path;
+            }
+        return null;
+    }
     if (process.platform === 'linux') {
         for (const bin of LINUX_BINARIES) {
             const resolved = which(bin);
@@ -83,6 +103,12 @@ function runningAsRoot() {
  */
 async function loadPuppeteer() {
     try {
+        // Prefer CommonJS in bundled runtimes so Electron resolves through its
+        // ASAR loader. Native ESM installations use the optional dynamic import below.
+        if (typeof require === 'function') {
+            const mod = require('puppeteer-core');
+            return mod.default ?? mod;
+        }
         const dynImport = new Function('m', 'return import(m)');
         const mod = await dynImport('puppeteer-core');
         return (mod.default ?? mod);

package/dist/cjs/npcs/web-page-watcher/chrome.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findChrome = findChrome;
+exports.loadPuppeteer = loadPuppeteer;
+exports.browserConnected = browserConnected;
+const node_fs_1 = require("node:fs");
+const CHROME_PATHS = {
+    darwin: [
+        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+        '/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary',
+        '/Applications/Chromium.app/Contents/MacOS/Chromium',
+        '/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
+    ],
+    linux: [
+        '/usr/bin/google-chrome',
+        '/usr/bin/google-chrome-stable',
+        '/usr/bin/chromium',
+        '/usr/bin/chromium-browser',
+        '/usr/bin/microsoft-edge',
+        '/snap/bin/chromium',
+    ],
+};
+/** Find a usable Chrome/Chromium executable: explicit path → env → known paths. */
+function findChrome(explicit) {
+    const envPath = process.env['CHROME_PATH'];
+    const candidates = [
+        ...(explicit ? [explicit] : []),
+        ...(envPath ? [envPath] : []),
+        ...(CHROME_PATHS[process.platform] ?? []),
+    ];
+    for (const p of candidates) {
+        if (p && (0, node_fs_1.existsSync)(p))
+            return p;
+    }
+    return null;
+}
+/**
+ * Load the optional `puppeteer-core` peer dependency without a static import,
+ * so the package builds and runs when it isn't installed. Returns null if the
+ * module is absent.
+ */
+async function loadPuppeteer() {
+    try {
+        // Indirect dynamic import so TypeScript/bundlers don't require the module
+        // at build time.
+        const dynImport = new Function('m', 'return import(m)');
+        const mod = await dynImport('puppeteer-core');
+        return (mod.default ?? mod);
+    }
+    catch {
+        return null;
+    }
+}
+/** True if the browser reports a live connection. */
+function browserConnected(browser) {
+    if (typeof browser.connected === 'boolean')
+        return browser.connected;
+    if (typeof browser.isConnected === 'function')
+        return browser.isConnected();
+    return true;
+}
+//# sourceMappingURL=chrome.js.map