@prestyj/cli 5.3.0 → 5.4.0

package/dist/core/progress/store.d.ts

@@ -0,0 +1,35 @@
+import type { ProgressFile } from "./types.js";
+export interface ProgressStoreOptions {
+    filePath?: string;
+    backupPath?: string;
+    /** Called when neither the main file nor the backup is usable. */
+    rebuild?: () => Promise<ProgressFile | null>;
+}
+export declare function signProgress(file: ProgressFile): string;
+export declare function verifyProgress(file: ProgressFile): boolean;
+declare function dayKey(now: Date): string;
+export declare function createEmptyProgress(now?: Date): ProgressFile;
+/**
+ * Read-only peek: main file → backup → null. Never writes — safe for fs.watch
+ * reloads that may race an in-flight atomic rename.
+ */
+export declare function peekProgress(opts?: ProgressStoreOptions): Promise<ProgressFile | null>;
+/**
+ * Load progress with the recovery chain: main file → backup → rebuild → empty.
+ * Never silently zeroes a user if any recoverable state exists.
+ */
+export declare function loadProgress(opts?: ProgressStoreOptions): Promise<ProgressFile>;
+/**
+ * Save progress: sign, atomic write under a file lock, and maintain the backup
+ * (written when the level increased — caller passes `levelledUp` — or at most once/day).
+ */
+export declare function saveProgress(file: ProgressFile, opts?: ProgressStoreOptions, levelledUp?: boolean): Promise<void>;
+/**
+ * Read-modify-write under the lock — the safe way for concurrent sidecars to award XP.
+ */
+export declare function updateProgress(mutate: (file: ProgressFile) => Promise<{
+    file: ProgressFile;
+    levelledUp: boolean;
+}>, opts?: ProgressStoreOptions): Promise<ProgressFile>;
+export { dayKey };
+//# sourceMappingURL=store.d.ts.map

package/dist/core/progress/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/core/progress/store.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAK/C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CAC9C;AA2BD,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEvD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAQ1D;AAED,iBAAS,MAAM,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,CAKjC;AAED,wBAAgB,mBAAmB,CAAC,GAAG,OAAa,GAAG,YAAY,CAgBlE;AAmCD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAG5F;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4BrF;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,IAAI,CAAC,EAAE,oBAAoB,EAC3B,UAAU,UAAQ,GACjB,OAAO,CAAC,IAAI,CAAC,CAef;AAWD;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,EACpF,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAyBvB;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/core/progress/store.js

@@ -0,0 +1,200 @@
+// Durable progress persistence: locked atomic writes, HMAC signing, backup + recovery chain.
+//
+// The HMAC key ships in the app bundle, so this is a tamper *deterrent*, not tamper-proof —
+// real integrity would need server-side recomputation (leaderboard phase).
+import fs from "node:fs/promises";
+import path from "node:path";
+import crypto from "node:crypto";
+import { getAppPaths, withFileLock } from "@prestyj/core";
+const HMAC_KEY = "ezcoder-progress-v1-9f2c4e7a1b8d3f6c";
+const PATCH_ID_CAP = 500;
+function resolvePaths(opts) {
+    const paths = getAppPaths();
+    return {
+        filePath: opts?.filePath ?? paths.progressFile,
+        backupPath: opts?.backupPath ?? paths.progressBackupFile,
+    };
+}
+/** Stable-key JSON of the file minus `sig`, for signing. */
+function canonicalJson(file) {
+    const clone = { ...file };
+    delete clone.sig;
+    return stableStringify(clone);
+}
+function stableStringify(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(",")}]`;
+    const keys = Object.keys(value).sort();
+    const parts = keys.map((k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`);
+    return `{${parts.join(",")}}`;
+}
+export function signProgress(file) {
+    return crypto.createHmac("sha256", HMAC_KEY).update(canonicalJson(file)).digest("hex");
+}
+export function verifyProgress(file) {
+    if (typeof file.sig !== "string" || file.sig.length === 0)
+        return false;
+    const expected = signProgress(file);
+    try {
+        return crypto.timingSafeEqual(Buffer.from(file.sig, "hex"), Buffer.from(expected, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+function dayKey(now) {
+    const y = now.getFullYear();
+    const m = String(now.getMonth() + 1).padStart(2, "0");
+    const d = String(now.getDate()).padStart(2, "0");
+    return `${y}-${m}-${d}`;
+}
+export function createEmptyProgress(now = new Date()) {
+    const file = {
+        v: 1,
+        xp: 0,
+        createdAt: now.toISOString(),
+        totals: { prompts: 0, commits: 0, linesShipped: 0, projects: [] },
+        xpBySource: { prompts: 0, commits: 0, streakBonus: 0 },
+        streak: { current: 0, best: 0, lastActiveDay: "" },
+        rolling: { promptTimes: [], commitTimes: [], dayXp: 0, dayKey: dayKey(now) },
+        repos: {},
+        patchIds: [],
+        lastEvent: null,
+        sig: "",
+    };
+    file.sig = signProgress(file);
+    return file;
+}
+function isValidShape(file) {
+    if (typeof file !== "object" || file === null)
+        return false;
+    const f = file;
+    return (f.v === 1 &&
+        typeof f.xp === "number" &&
+        typeof f.createdAt === "string" &&
+        typeof f.totals === "object" &&
+        typeof f.streak === "object" &&
+        typeof f.rolling === "object" &&
+        typeof f.sig === "string");
+}
+async function readFileIfValid(filePath) {
+    try {
+        const raw = await fs.readFile(filePath, "utf-8");
+        const parsed = JSON.parse(raw);
+        if (!isValidShape(parsed))
+            return null;
+        if (!verifyProgress(parsed))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+async function atomicWrite(filePath, contents) {
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    const tmp = `${filePath}.tmp`;
+    await fs.writeFile(tmp, contents, "utf-8");
+    await fs.rename(tmp, filePath);
+}
+/**
+ * Read-only peek: main file → backup → null. Never writes — safe for fs.watch
+ * reloads that may race an in-flight atomic rename.
+ */
+export async function peekProgress(opts) {
+    const { filePath, backupPath } = resolvePaths(opts);
+    return (await readFileIfValid(filePath)) ?? (await readFileIfValid(backupPath));
+}
+/**
+ * Load progress with the recovery chain: main file → backup → rebuild → empty.
+ * Never silently zeroes a user if any recoverable state exists.
+ */
+export async function loadProgress(opts) {
+    const { filePath, backupPath } = resolvePaths(opts);
+    const main = await readFileIfValid(filePath);
+    if (main)
+        return main;
+    const backup = await readFileIfValid(backupPath);
+    if (backup) {
+        // Restore the main file from backup.
+        await saveProgress(backup, opts).catch(() => { });
+        return backup;
+    }
+    if (opts?.rebuild) {
+        try {
+            const rebuilt = await opts.rebuild();
+            if (rebuilt) {
+                rebuilt.sig = signProgress(rebuilt);
+                await saveProgress(rebuilt, opts).catch(() => { });
+                return rebuilt;
+            }
+        }
+        catch {
+            // fall through to empty
+        }
+    }
+    const empty = createEmptyProgress();
+    await saveProgress(empty, opts).catch(() => { });
+    return empty;
+}
+/**
+ * Save progress: sign, atomic write under a file lock, and maintain the backup
+ * (written when the level increased — caller passes `levelledUp` — or at most once/day).
+ */
+export async function saveProgress(file, opts, levelledUp = false) {
+    const { filePath, backupPath } = resolvePaths(opts);
+    // Keep the patch-id ring buffer bounded.
+    if (file.patchIds.length > PATCH_ID_CAP) {
+        file.patchIds = file.patchIds.slice(-PATCH_ID_CAP);
+    }
+    file.sig = signProgress(file);
+    const contents = JSON.stringify(file, null, 2);
+    await withFileLock(filePath, async () => {
+        await atomicWrite(filePath, contents);
+        if (levelledUp || (await backupIsStale(backupPath))) {
+            await atomicWrite(backupPath, contents).catch(() => { });
+        }
+    });
+}
+async function backupIsStale(backupPath) {
+    try {
+        const stat = await fs.stat(backupPath);
+        return Date.now() - stat.mtimeMs > 24 * 60 * 60 * 1000;
+    }
+    catch {
+        return true; // missing → write it
+    }
+}
+/**
+ * Read-modify-write under the lock — the safe way for concurrent sidecars to award XP.
+ */
+export async function updateProgress(mutate, opts) {
+    const { filePath, backupPath } = resolvePaths(opts);
+    return withFileLock(filePath, async () => {
+        // Do the recovery read inside the SAME lock used by saveProgress, without
+        // calling loadProgress/saveProgress recursively. That keeps multi-sidecar
+        // read-modify-write atomic instead of racing a plain save on another lock.
+        let current = (await readFileIfValid(filePath)) ?? (await readFileIfValid(backupPath));
+        if (!current && opts?.rebuild) {
+            current = await opts.rebuild().catch(() => null);
+            if (current)
+                current.sig = signProgress(current);
+        }
+        current ??= createEmptyProgress();
+        const { file, levelledUp } = await mutate(current);
+        if (file.patchIds.length > PATCH_ID_CAP) {
+            file.patchIds = file.patchIds.slice(-PATCH_ID_CAP);
+        }
+        file.sig = signProgress(file);
+        const contents = JSON.stringify(file, null, 2);
+        await atomicWrite(filePath, contents);
+        if (levelledUp || (await backupIsStale(backupPath))) {
+            await atomicWrite(backupPath, contents).catch(() => { });
+        }
+        return file;
+    });
+}
+export { dayKey };
+//# sourceMappingURL=store.js.map

package/dist/core/progress/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/core/progress/store.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,EAAE;AACF,4FAA4F;AAC5F,2EAA2E;AAE3E,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG1D,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,YAAY,GAAG,GAAG,CAAC;AASzB,SAAS,YAAY,CAAC,IAA2B;IAC/C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,OAAO;QACL,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC,YAAY;QAC9C,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,KAAK,CAAC,kBAAkB;KACzD,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,SAAS,aAAa,CAAC,IAAkB;IACvC,MAAM,KAAK,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC;IACjB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAE,KAAiC,CAAC,CAAC,CAAC,CAAC,EAAE,CACxF,CAAC;IACF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAS;IACvB,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IAClD,MAAM,IAAI,GAAiB;QACzB,CAAC,EAAE,CAAC;QACJ,EAAE,EAAE,CAAC;QACL,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;QACjE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;QACtD,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE;QAClD,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;QAC5E,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,EAAE;KACR,CAAC;IACF,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,CAAC,GAAG,IAA6B,CAAC;IACxC,OAAO,CACL,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,QAAgB;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,QAAQ,MAAM,CAAC;IAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAA2B;IAC5D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAA2B;IAC5D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,qCAAqC;QACrC,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAClD,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAkB,EAClB,IAA2B,EAC3B,UAAU,GAAG,KAAK;IAElB,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpD,yCAAyC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE/C,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACpC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAoF,EACpF,IAA2B;IAE3B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,YAAY,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QACvC,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,OAAO,GAAG,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,OAAO,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,mBAAmB,EAAE,CAAC;QAElC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/core/progress/store.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=store.test.d.ts.map

package/dist/core/progress/store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.test.d.ts","sourceRoot":"","sources":["../../../src/core/progress/store.test.ts"],"names":[],"mappings":""}

package/dist/core/progress/store.test.js

@@ -0,0 +1,108 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { createEmptyProgress, loadProgress, saveProgress, signProgress, updateProgress, verifyProgress, } from "./store.js";
+let dir;
+let opts;
+beforeEach(async () => {
+    dir = await fs.mkdtemp(path.join(os.tmpdir(), "gg-progress-"));
+    opts = {
+        filePath: path.join(dir, "progress.json"),
+        backupPath: path.join(dir, "progress.backup.json"),
+    };
+});
+afterEach(async () => {
+    await fs.rm(dir, { recursive: true, force: true });
+});
+describe("HMAC signing", () => {
+    it("round-trips sign + verify", () => {
+        const file = createEmptyProgress();
+        expect(verifyProgress(file)).toBe(true);
+    });
+    it("rejects tampered XP", () => {
+        const file = createEmptyProgress();
+        file.xp = 999_999;
+        expect(verifyProgress(file)).toBe(false);
+    });
+    it("rejects a missing sig", () => {
+        const file = createEmptyProgress();
+        file.sig = "";
+        expect(verifyProgress(file)).toBe(false);
+    });
+});
+describe("save + load", () => {
+    it("round-trips through disk", async () => {
+        const file = createEmptyProgress();
+        file.xp = 1234;
+        await saveProgress(file, opts);
+        const loaded = await loadProgress(opts);
+        expect(loaded.xp).toBe(1234);
+    });
+    it("writes a backup on first save", async () => {
+        await saveProgress(createEmptyProgress(), opts);
+        const backup = JSON.parse(await fs.readFile(opts.backupPath, "utf-8"));
+        expect(verifyProgress(backup)).toBe(true);
+    });
+    it("restores from backup when main file is deleted", async () => {
+        const file = createEmptyProgress();
+        file.xp = 777;
+        await saveProgress(file, opts);
+        await fs.unlink(opts.filePath);
+        const loaded = await loadProgress(opts);
+        expect(loaded.xp).toBe(777);
+        // Main file restored too.
+        const raw = JSON.parse(await fs.readFile(opts.filePath, "utf-8"));
+        expect(raw.xp).toBe(777);
+    });
+    it("restores from backup when main file is hand-edited (bad HMAC)", async () => {
+        const file = createEmptyProgress();
+        file.xp = 500;
+        await saveProgress(file, opts);
+        const tampered = JSON.parse(await fs.readFile(opts.filePath, "utf-8"));
+        tampered.xp = 999_999;
+        await fs.writeFile(opts.filePath, JSON.stringify(tampered));
+        const loaded = await loadProgress(opts);
+        expect(loaded.xp).toBe(500);
+    });
+    it("rebuilds when both main and backup are gone", async () => {
+        const rebuilt = createEmptyProgress();
+        rebuilt.xp = 4242;
+        rebuilt.sig = signProgress(rebuilt);
+        const loaded = await loadProgress({ ...opts, rebuild: async () => rebuilt });
+        expect(loaded.xp).toBe(4242);
+    });
+    it("falls back to empty when nothing is recoverable", async () => {
+        const loaded = await loadProgress(opts);
+        expect(loaded.xp).toBe(0);
+        expect(loaded.v).toBe(1);
+    });
+    it("survives corrupt JSON in the main file", async () => {
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(opts.filePath, "{not json!!");
+        const loaded = await loadProgress(opts);
+        expect(loaded.xp).toBe(0);
+    });
+});
+describe("updateProgress", () => {
+    it("applies a read-modify-write and re-signs", async () => {
+        await saveProgress(createEmptyProgress(), opts);
+        const updated = await updateProgress(async (f) => {
+            f.xp += 100;
+            return { file: f, levelledUp: false };
+        }, opts);
+        expect(updated.xp).toBe(100);
+        expect(verifyProgress(updated)).toBe(true);
+        const loaded = await loadProgress(opts);
+        expect(loaded.xp).toBe(100);
+    });
+    it("caps the patch-id ring buffer at 500", async () => {
+        const updated = await updateProgress(async (f) => {
+            f.patchIds = Array.from({ length: 600 }, (_, i) => `pid-${i}`);
+            return { file: f, levelledUp: false };
+        }, opts);
+        expect(updated.patchIds).toHaveLength(500);
+        expect(updated.patchIds[0]).toBe("pid-100");
+    });
+});
+//# sourceMappingURL=store.test.js.map

package/dist/core/progress/store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.test.js","sourceRoot":"","sources":["../../../src/core/progress/store.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,GAEf,MAAM,YAAY,CAAC;AAGpB,IAAI,GAAW,CAAC;AAChB,IAAI,IAA0B,CAAC;AAE/B,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG;QACL,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC;QACzC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;KACnD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC;QAClB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,YAAY,CAAC,mBAAmB,EAAE,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAW,EAAE,OAAO,CAAC,CAAiB,CAAC;QACxF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC;QACd,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAS,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAS,EAAE,OAAO,CAAC,CAAiB,CAAC;QACnF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC;QACd,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAS,EAAE,OAAO,CAAC,CAAiB,CAAC;QACxF,QAAQ,CAAC,EAAE,GAAG,OAAO,CAAC;QACtB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;QAClB,OAAO,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAS,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,YAAY,CAAC,mBAAmB,EAAE,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC/C,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC;YACZ,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC/C,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/progress/types.d.ts

@@ -0,0 +1,108 @@
+/** Rank-up event embedded in the file so watcher-side sidecars can re-broadcast it once. */
+export interface LevelUpEvent {
+    from: number;
+    to: number;
+    rankName: string;
+}
+/** Last award event marker — nonce lets other windows dedupe celebrations. */
+export interface ProgressLastEvent {
+    nonce: string;
+    levelUp: LevelUpEvent | null;
+}
+/** Durable on-disk progress file (~/.ezcoder/progress.json), versioned + HMAC-signed. */
+export interface ProgressFile {
+    v: 1;
+    xp: number;
+    createdAt: string;
+    totals: {
+        prompts: number;
+        commits: number;
+        linesShipped: number;
+        /** Hashed project cwds the user has earned XP in. */
+        projects: string[];
+    };
+    xpBySource: {
+        prompts: number;
+        commits: number;
+        streakBonus: number;
+    };
+    streak: {
+        current: number;
+        best: number;
+        /** Local calendar day (YYYY-MM-DD) of the last XP event. */
+        lastActiveDay: string;
+    };
+    rolling: {
+        /** Epoch-ms timestamps of prompt awards in the last hour. */
+        promptTimes: number[];
+        /** Epoch-ms timestamps of XP-earning commits in the last hour. */
+        commitTimes: number[];
+        /** XP earned so far today (for the daily soft cap). */
+        dayXp: number;
+        /** Local calendar day (YYYY-MM-DD) dayXp belongs to. */
+        dayKey: string;
+    };
+    /** Per-repo last seen HEAD, keyed by repo-root hash. */
+    repos: Record<string, {
+        lastHead: string;
+    }>;
+    /** Ring buffer of git patch-ids already scored (cap 500). */
+    patchIds: string[];
+    lastEvent: ProgressLastEvent | null;
+    /** HMAC-SHA256 of canonical JSON minus this field. */
+    sig: string;
+}
+/** One rung of the 50-rank ladder, as sent to the webview. */
+export interface RankLadderEntry {
+    level: number;
+    name: string;
+    tier: number;
+    tierName: string;
+    effectId: string;
+    /** Cumulative XP required to reach this level. */
+    xpRequired: number;
+}
+/** What the sidecar broadcasts/serves — the webview renders this verbatim. */
+export interface ProgressSnapshot {
+    level: number;
+    rankName: string;
+    tier: number;
+    tierName: string;
+    tierGlyph: string;
+    effectId: string;
+    xp: number;
+    xpIntoLevel: number;
+    xpForLevel: number;
+    /** 0–100 percent toward the next level. */
+    percent: number;
+    streak: {
+        current: number;
+        best: number;
+    };
+    totals: {
+        prompts: number;
+        commits: number;
+        linesShipped: number;
+        projects: number;
+    };
+    xpBySource: {
+        prompts: number;
+        commits: number;
+        streakBonus: number;
+    };
+    memberSince: string;
+    ladder: RankLadderEntry[];
+    levelUp: LevelUpEvent | null;
+    /** Nonce of the award event this snapshot was produced by (for celebration dedupe). */
+    eventNonce: string | null;
+    /** True only on the SSE frame sent to the window whose run earned the XP.
+     *  Gates window-local feedback (sounds, XP chips); absent on GET /progress. */
+    origin?: boolean;
+}
+/** A commit that passed detection filters and is ready to be scored. */
+export interface ScoredCommit {
+    sha: string;
+    patchId: string;
+    linesChanged: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/progress/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/progress/types.ts"],"names":[],"mappings":"AAEA,4FAA4F;AAC5F,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CAC9B;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,CAAC,CAAC;IACL,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,qDAAqD;QACrD,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,4DAA4D;QAC5D,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACP,6DAA6D;QAC7D,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,kEAAkE;QAClE,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,uDAAuD;QACvD,KAAK,EAAE,MAAM,CAAC;QACd,wDAAwD;QACxD,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5C,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,uFAAuF;IACvF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;mFAC+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/core/progress/types.js

@@ -0,0 +1,3 @@
+// Progress ("Ranks") system — shared types for the XP engine, store, and broadcast snapshot.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/progress/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/progress/types.ts"],"names":[],"mappings":"AAAA,6FAA6F"}

package/dist/core/project-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-discovery.d.ts","sourceRoot":"","sources":["../../src/core/project-discovery.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA6BrE;AAsSD,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAczF"}
+{"version":3,"file":"project-discovery.d.ts","sourceRoot":"","sources":["../../src/core/project-discovery.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA6BrE;AAsUD,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAczF"}

package/dist/core/project-discovery.js

@@ -50,8 +50,12 @@ function mergeSources(a, b) {
 }
 /**
  * Scan ~/.ezcoder/sessions/. Each session directory's name is the encoded cwd
- * (slashes → underscores); we decode it back and verify the directory still
- * exists on disk.
+ * (slashes → underscores), but that encoding is lossy: any real path segment
+ * containing a literal underscore round-trips wrong (e.g. `my_app` decodes to
+ * `.../my/app`, which doesn't exist, so the project silently vanished from the
+ * picker). So — like Claude Code discovery — we read the real cwd out of the
+ * session header (`{"type":"session",...,"cwd":"/abs"}`) and only fall back to
+ * decoding the directory name when no header carries a cwd.
  */
 async function discoverGgcoderProjects() {
     const sessionsDir = getAppPaths().sessionsDir;
@@ -68,15 +72,17 @@ async function discoverGgcoderProjects() {
         const mtime = await maxJsonlMtime(dir);
         if (mtime === null)
             continue;
-        // Normalize so paths containing traversal segments (e.g. an agent launched
-        // with cwd `.../src-tauri/../..`) collapse to their real directory and the
-        // basename isn't a stray "..". Deduped against other entries downstream.
-        const decoded = path.resolve("/" + entry.replace(/_/g, "/"));
-        if (!(await isDirectory(decoded)))
+        const rawCwd = (await readFirstFromJsonlDir(dir, ezcoderCwdExtractor)) ?? fallbackUnderscoreDecode(entry);
+        if (!rawCwd)
+            continue;
+        // Normalize traversal segments (e.g. an agent launched with cwd
+        // `.../src-tauri/../..`) so the basename isn't a stray "..".
+        const cwd = path.resolve(rawCwd);
+        if (!(await isDirectory(cwd)))
             continue;
         results.push({
-            name: path.basename(decoded),
-            path: decoded,
+            name: path.basename(cwd),
+            path: cwd,
             lastActiveMs: mtime,
             lastActiveDisplay: formatRelativeTime(mtime),
             sources: ["ezcoder"],
@@ -84,6 +90,15 @@ async function discoverGgcoderProjects() {
     }
     return results;
 }
+/**
+ * Best-effort decode of a ezcoder session directory name back to a cwd, used
+ * only when the session files carry no `cwd` header. Lossy by design (literal
+ * underscores are indistinguishable from separators); the caller still verifies
+ * the result is an existing directory.
+ */
+function fallbackUnderscoreDecode(entry) {
+    return "/" + entry.replace(/_/g, "/");
+}
 /**
  * Scan ~/.claude/projects/. Claude Code's directory encoding replaces every
  * "/" with "-", which is genuinely ambiguous — a real dash in a path component
@@ -225,6 +240,22 @@ const claudeCwdExtractor = (line) => {
     }
     return null;
 };
+// ezcoder session files open with a `{"type":"session",...,"cwd":"/abs"}` header
+// that stores the real cwd verbatim. Prefer it over decoding the directory name,
+// whose slash→underscore encoding is lossy for paths containing literal
+// underscores (e.g. `my_app` would wrongly decode to `.../my/app`).
+const ezcoderCwdExtractor = (line) => {
+    try {
+        const parsed = JSON.parse(line);
+        if (parsed.type === "session" && typeof parsed.cwd === "string" && parsed.cwd.startsWith("/")) {
+            return parsed.cwd;
+        }
+    }
+    catch {
+        // skip malformed
+    }
+    return null;
+};
 const CODEX_CWD_RE = /<cwd>([^<]+)<\/cwd>/;
 const codexCwdExtractor = (line) => {
     // Current format (openai/codex protocol.rs, late-2025+): RolloutLine wraps