@notis_ai/cli 0.2.0-beta.156.1 → 0.2.0-beta.157.1

package/template/packages/sdk/src/styles.css

@@ -28,8 +28,35 @@
     @apply mx-auto w-full max-w-[var(--portal-page-max-width)] px-4 py-6 md:px-4 md:py-8;
   }
 
+  /* Flat panel. No border, no shadow: the design bar allows a single hairline
+   * between sections and nothing around items. */
   .notis-app-surface {
-    @apply rounded-2xl border border-border bg-card text-card-foreground shadow-sm;
+    @apply rounded-2xl bg-muted text-card-foreground;
+  }
+
+  /* List rows: hover and selection are carried by background tint only. Rows
+   * read as tinted panels on mobile and as transparent rows on desktop. */
+  .list-row {
+    @apply rounded-xl bg-muted px-4 py-3 transition-colors lg:bg-transparent lg:hover:bg-muted/60;
+  }
+
+  .list-row-selected {
+    @apply bg-primary/[0.06] lg:bg-primary/[0.06] lg:hover:bg-primary/[0.06];
+  }
+
+  /* Split (list + detail) pages are full-bleed: use these instead of
+   * .notis-app-shell. The list pane is tinted and carries the one allowed
+   * hairline; the detail pane sits on the plain background. */
+  .notis-app-split {
+    @apply flex h-full min-h-0 w-full max-w-none flex-col lg:flex-row;
+  }
+
+  .notis-app-pane-list {
+    @apply w-full shrink-0 bg-muted/40 lg:w-80 lg:border-r lg:border-border xl:w-96;
+  }
+
+  .notis-app-pane-detail {
+    @apply min-w-0 flex-1 bg-background;
   }
 
   .notis-app-section {

package/src/runtime/app-dev-build-supervisor.js

@@ -1,47 +0,0 @@
-// A separate process retains ownership of the build group if the CLI crashes.
-// IPC disconnect is the lifetime signal; unlike polling a PID it cannot mistake
-// a reused PID for the original owner.
-import { spawn } from 'node:child_process';
-
-if (!process.send) throw new Error('Build supervisor requires an IPC owner');
-let build;
-let stopping = false;
-function stop(code = 0) {
-  if (stopping) return;
-  stopping = true;
-  if (!build?.pid) process.exit(code);
-  if (process.platform === 'win32') {
-    const killer = spawn('taskkill', ['/pid', String(build.pid), '/t', '/f']);
-    killer.once('error', () => process.exit(1));
-    killer.once('exit', () => process.exit(code));
-    return;
-  }
-  const signalGroup = (signal) => {
-    try { process.kill(-build.pid, signal); } catch (error) {
-      if (error.code !== 'ESRCH') throw error;
-    }
-  };
-  signalGroup('SIGTERM');
-  // npm can exit before Vite/esbuild. Keep the supervisor alive until the
-  // entire group has received the fallback signal.
-  setTimeout(() => {
-    signalGroup('SIGKILL');
-    process.exit(code);
-  }, 1000);
-}
-process.on('disconnect', () => stop());
-process.on('SIGTERM', () => stop());
-process.on('SIGINT', () => stop());
-process.once('message', ({ command, args }) => {
-  if (stopping || !process.connected) return;
-  build = spawn(command, args, {
-    detached: process.platform !== 'win32',
-    stdio: 'inherit',
-    env: process.env,
-  });
-  build.once('spawn', () => {
-    if (process.connected) process.send({ pid: build.pid }, () => {});
-  });
-  build.once('error', () => stop(1));
-  build.once('exit', (code) => stop(code || 0));
-});

package/src/runtime/app-dev-build.js

@@ -1,41 +0,0 @@
-import { spawn } from 'node:child_process';
-import { EventEmitter } from 'node:events';
-import { fileURLToPath } from 'node:url';
-
-// Expose the actual npm group identity so Desktop recovery and diagnostics
-// retain their existing ownership contract. The supervisor owns its lifetime.
-export async function startAppDevBuild(cwd, command = 'npm', args = ['run', 'build', '--', '--watch']) {
-  const supervisor = spawn(process.execPath, [fileURLToPath(new URL('./app-dev-build-supervisor.js', import.meta.url))], {
-    cwd,
-    stdio: ['ignore', 'inherit', 'inherit', 'ipc'],
-    env: { ...process.env, ELECTRON_RUN_AS_NODE: '1', NOTIS_DEV: '1' },
-  });
-  const build = new EventEmitter();
-  build.pid = null;
-  build.exitCode = null;
-  build.signalCode = null;
-  build.kill = (signal = 'SIGTERM') => supervisor.kill(signal);
-  await new Promise((resolve, reject) => {
-    supervisor.once('error', reject);
-    supervisor.once('exit', (code, signal) => {
-      build.exitCode = code;
-      build.signalCode = signal;
-      reject(new Error(`Build supervisor exited before startup (${code ?? signal})`));
-      build.emit('exit', code, signal);
-    });
-    supervisor.once('message', ({ pid }) => {
-      build.pid = pid;
-      resolve();
-    });
-    supervisor.send({ command, args }, (error) => { if (error) reject(error); });
-  });
-  return build;
-}
-
-export async function stopAppDevBuild(build) {
-  if (!build || build.exitCode !== null || build.signalCode !== null) return;
-  await new Promise((resolve) => {
-    build.once('exit', resolve);
-    build.kill('SIGTERM');
-  });
-}

package/src/runtime/app-dev-consumers.js

@@ -1,154 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import {
-  existsSync,
-  lstatSync,
-  mkdirSync,
-  readFileSync,
-  renameSync,
-  rmSync,
-  writeFileSync,
-} from 'node:fs';
-import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-
-export const DEFAULT_APP_DEV_CONSUMERS_FILE = join(homedir(), '.notis', 'app-dev-consumers.json');
-export const APP_DEV_CONSUMER_EXPIRES_AFTER_MS = 10_000;
-const waitArray = new Int32Array(new SharedArrayBuffer(4));
-const CONSUMER_LOCK_STALE_AFTER_MS = 30_000;
-
-function processIsRunning(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (error) {
-    return error?.code !== 'ESRCH';
-  }
-}
-
-function reclaimConsumerLock(lockPath) {
-  const stat = lstatSync(lockPath);
-  if (!stat.isDirectory() || stat.isSymbolicLink()) {
-    throw new Error(`Refusing unsafe app development consumer lock: ${lockPath}`);
-  }
-  let ownerPid = null;
-  try {
-    const owner = readFileSync(join(lockPath, 'owner'), 'utf8').trim();
-    const parsed = Number.parseInt(owner.split('.')[0] || '', 10);
-    ownerPid = Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
-  } catch {
-    // An interrupted owner write is reclaimed after the bounded stale window.
-  }
-  if (ownerPid !== null) return !processIsRunning(ownerPid);
-  return Date.now() - stat.mtimeMs >= CONSUMER_LOCK_STALE_AFTER_MS;
-}
-
-function withLock(filePath, callback) {
-  mkdirSync(dirname(filePath), { recursive: true, mode: 0o700 });
-  const lockPath = `${filePath}.lock`;
-  const owner = `${process.pid}.${randomUUID()}`;
-  const startedAt = Date.now();
-  while (true) {
-    try {
-      mkdirSync(lockPath, { mode: 0o700 });
-      writeFileSync(join(lockPath, 'owner'), owner, { mode: 0o600 });
-      break;
-    } catch (error) {
-      if (error?.code !== 'EEXIST') throw error;
-      try {
-        if (reclaimConsumerLock(lockPath)) {
-          rmSync(lockPath, { recursive: true, force: true });
-          continue;
-        }
-      } catch (lockError) {
-        if (lockError?.code === 'ENOENT') continue;
-        throw lockError;
-      }
-      if (Date.now() - startedAt > 2_000) {
-        throw new Error('App development consumer registry is busy.');
-      }
-      Atomics.wait(waitArray, 0, 0, 10);
-    }
-  }
-  try {
-    return callback();
-  } finally {
-    try {
-      if (readFileSync(join(lockPath, 'owner'), 'utf8').trim() === owner) {
-        rmSync(lockPath, { recursive: true, force: true });
-      }
-    } catch {
-      // A replaced lock belongs to another writer.
-    }
-  }
-}
-
-function normalize(value, now) {
-  const raw = value && typeof value === 'object' && Array.isArray(value.consumers)
-    ? value.consumers
-    : [];
-  return raw.filter((lease) => {
-    const heartbeat = Date.parse(String(lease?.lastHeartbeatAt || ''));
-    return typeof lease?.instanceId === 'string'
-      && typeof lease?.userId === 'string'
-      && typeof lease?.apiBase === 'string'
-      && Number.isSafeInteger(lease?.pid)
-      && Number.isFinite(heartbeat)
-      && now - heartbeat <= APP_DEV_CONSUMER_EXPIRES_AFTER_MS;
-  });
-}
-
-export function readAppDevConsumers(filePath = DEFAULT_APP_DEV_CONSUMERS_FILE, now = Date.now()) {
-  if (!existsSync(filePath)) return [];
-  try {
-    return normalize(JSON.parse(readFileSync(filePath, 'utf8')), now);
-  } catch {
-    return [];
-  }
-}
-
-function writeAppDevConsumers(filePath, consumers) {
-  mkdirSync(dirname(filePath), { recursive: true, mode: 0o700 });
-  const temporary = `${filePath}.${process.pid}.${randomUUID()}.tmp`;
-  writeFileSync(temporary, JSON.stringify({ version: 1, consumers }, null, 2), { mode: 0o600 });
-  renameSync(temporary, filePath);
-}
-
-export function heartbeatAppDevConsumer(
-  lease,
-  filePath = DEFAULT_APP_DEV_CONSUMERS_FILE,
-) {
-  return withLock(filePath, () => {
-    const now = Date.now();
-    const next = readAppDevConsumers(filePath, now)
-      .filter((entry) => entry.instanceId !== lease.instanceId);
-    next.push({
-      ...lease,
-      apiBase: lease.apiBase.replace(/\/$/, ''),
-      lastHeartbeatAt: new Date(now).toISOString(),
-    });
-    writeAppDevConsumers(filePath, next);
-    return next;
-  });
-}
-
-export function removeAppDevConsumer(
-  instanceId,
-  filePath = DEFAULT_APP_DEV_CONSUMERS_FILE,
-) {
-  return withLock(filePath, () => {
-    const next = readAppDevConsumers(filePath)
-      .filter((entry) => entry.instanceId !== instanceId);
-    writeAppDevConsumers(filePath, next);
-    return next;
-  });
-}
-
-export function hasAppDevConsumer(consumers, { mode, userId, apiBase }) {
-  if (mode === 'machine') return consumers.length > 0;
-  if (mode !== 'environment') return true;
-  const normalizedApiBase = String(apiBase || '').replace(/\/$/, '');
-  return consumers.some((consumer) => (
-    consumer.userId === userId
-    && consumer.apiBase.replace(/\/$/, '') === normalizedApiBase
-  ));
-}

package/src/runtime/app-dev-host-lock.js

@@ -1,80 +0,0 @@
-import { createHash, randomUUID } from 'node:crypto';
-import { lstatSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-
-const DEFAULT_LOCK_ROOT = join(homedir(), '.notis', 'app-dev-host-locks');
-const OWNER_FILE = 'owner.json';
-
-function processIsRunning(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (error) {
-    return error?.code !== 'ESRCH';
-  }
-}
-
-function lockName(identity, apiBase, projectDir) {
-  return createHash('sha256').update(`${identity}\0${apiBase}\0${projectDir}`).digest('hex');
-}
-
-function readOwner(path) {
-  try {
-    const value = JSON.parse(readFileSync(join(path, OWNER_FILE), 'utf8'));
-    return Number.isSafeInteger(value?.pid) && typeof value?.ownerId === 'string'
-      ? { pid: value.pid, ownerId: value.ownerId }
-      : null;
-  } catch {
-    return null;
-  }
-}
-
-function reclaimable(path, now, staleAfterMs) {
-  const stat = lstatSync(path);
-  if (!stat.isDirectory() || stat.isSymbolicLink()) {
-    throw new Error(`Refusing unsafe app development host lock: ${path}`);
-  }
-  const owner = readOwner(path);
-  if (owner) return !processIsRunning(owner.pid);
-  return now - stat.mtimeMs >= staleAfterMs;
-}
-
-export function tryAcquireAppDevHostLock(options) {
-  const lockRoot = options.lockRoot || DEFAULT_LOCK_ROOT;
-  mkdirSync(lockRoot, { recursive: true, mode: 0o700 });
-  const path = join(lockRoot, lockName(options.identity, options.apiBase, options.projectDir));
-  const ownerId = `${process.pid}.${randomUUID()}`;
-  for (let attempt = 0; attempt < 2; attempt += 1) {
-    try {
-      mkdirSync(path, { mode: 0o700 });
-      try {
-        writeFileSync(join(path, OWNER_FILE), JSON.stringify({ pid: process.pid, ownerId }), {
-          mode: 0o600,
-        });
-      } catch (error) {
-        rmSync(path, { recursive: true, force: true });
-        throw error;
-      }
-      return { path, ownerId };
-    } catch (error) {
-      if (error?.code !== 'EEXIST') throw error;
-      if (reclaimable(path, options.now ?? Date.now(), options.staleAfterMs ?? 60_000)) {
-        rmSync(path, { recursive: true, force: true });
-        continue;
-      }
-      return null;
-    }
-  }
-  return null;
-}
-
-export function releaseAppDevHostLock(lock) {
-  try {
-    if (readOwner(lock.path)?.ownerId === lock.ownerId) {
-      rmSync(lock.path, { recursive: true, force: true });
-    }
-  } catch {
-    // A replaced lock belongs to another process.
-  }
-}

package/src/runtime/app-dev-process-identity.js

@@ -1,111 +0,0 @@
-import { execFileSync } from 'node:child_process';
-import { readlinkSync, realpathSync } from 'node:fs';
-
-export const NOTIS_APP_BUILD_COMMAND_FINGERPRINT = 'npm:run-build:watch:v1';
-export const NOTIS_APPS_DEV_HOST_COMMAND_FINGERPRINT = 'notis:apps-dev:v1';
-
-function normalizePath(value) {
-  if (typeof value !== 'string' || !value.trim()) return null;
-  try {
-    return realpathSync(value.trim());
-  } catch {
-    return null;
-  }
-}
-
-export function isExpectedNotisBuildCommand(command) {
-  if (typeof command !== 'string') return false;
-  return /(?:^|[/\s])npm(?:\s|$)/.test(command)
-    && /\brun\s+build\b/.test(command)
-    && /(?:^|\s)--watch(?:\s|$)/.test(command);
-}
-
-export function isExpectedNotisAppsDevHostCommand(command) {
-  return typeof command === 'string'
-    && /(?:notis(?:\.js)?|@notis_ai[/\\]cli)/.test(command)
-    && /\bapps\s+dev\b/.test(command);
-}
-
-function readDarwinProcessCwd(pid, execute) {
-  const output = execute('lsof', ['-a', '-p', String(pid), '-d', 'cwd', '-Fn'], {
-    encoding: 'utf8',
-    stdio: ['ignore', 'pipe', 'ignore'],
-  });
-  const line = output.split('\n').find((entry) => entry.startsWith('n'));
-  return line ? line.slice(1) : null;
-}
-
-export function inspectAppDevWatcherProcess(pid, {
-  platform = process.platform,
-  execute = execFileSync,
-  readLink = readlinkSync,
-} = {}) {
-  if (!Number.isSafeInteger(pid) || pid <= 0 || platform === 'win32') return null;
-  try {
-    const ps = (field) => execute('ps', ['-o', `${field}=`, '-p', String(pid)], {
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'ignore'],
-    }).trim();
-    const processGroupPid = Number.parseInt(ps('pgid'), 10);
-    const startIdentity = ps('lstart').replace(/\s+/g, ' ').trim();
-    const command = ps('command');
-    const cwd = platform === 'linux'
-      ? readLink(`/proc/${pid}/cwd`)
-      : readDarwinProcessCwd(pid, execute);
-    const projectDir = normalizePath(cwd);
-    if (!Number.isSafeInteger(processGroupPid) || processGroupPid <= 0) return null;
-    if (!startIdentity || !command || !projectDir) return null;
-    return { pid, processGroupPid, startIdentity, command, projectDir };
-  } catch {
-    return null;
-  }
-}
-
-export function captureDesktopWatcherOwnership({
-  pid,
-  projectDir,
-  desktopOwnerId,
-  desktopOwnerScope,
-  inspect = inspectAppDevWatcherProcess,
-} = {}) {
-  const owner = typeof desktopOwnerId === 'string' ? desktopOwnerId.trim() : '';
-  const ownerScope = typeof desktopOwnerScope === 'string' ? desktopOwnerScope.trim() : '';
-  const expectedProjectDir = normalizePath(projectDir);
-  if (!owner || !ownerScope || !expectedProjectDir) return null;
-  const identity = inspect(pid);
-  if (
-    !identity
-    || identity.processGroupPid !== pid
-    || identity.projectDir !== expectedProjectDir
-    || !isExpectedNotisBuildCommand(identity.command)
-  ) {
-    return null;
-  }
-  return {
-    desktopOwnerId: owner,
-    desktopOwnerScope: ownerScope,
-    watcherProcessGroupPid: identity.processGroupPid,
-    watcherStartIdentity: identity.startIdentity,
-    watcherProjectDir: identity.projectDir,
-    watcherCommandFingerprint: NOTIS_APP_BUILD_COMMAND_FINGERPRINT,
-  };
-}
-
-export function captureDesktopHostOwnership({
-  pid = process.pid,
-  desktopOwnerId,
-  desktopOwnerScope,
-  inspect = inspectAppDevWatcherProcess,
-} = {}) {
-  const owner = typeof desktopOwnerId === 'string' ? desktopOwnerId.trim() : '';
-  const ownerScope = typeof desktopOwnerScope === 'string' ? desktopOwnerScope.trim() : '';
-  if (!owner || !ownerScope) return null;
-  const identity = inspect(pid);
-  if (!identity || !isExpectedNotisAppsDevHostCommand(identity.command)) return null;
-  return {
-    desktopOwnerId: owner,
-    desktopOwnerScope: ownerScope,
-    desktopHostStartIdentity: identity.startIdentity,
-    desktopHostCommandFingerprint: NOTIS_APPS_DEV_HOST_COMMAND_FINGERPRINT,
-  };
-}