@rudderhq/cli 0.2.10-canary.24 → 0.2.10-canary.26

package/dist/index.js

@@ -723,7 +723,7 @@ var init_organization_intelligence_profile = __esm({
 
 // ../packages/shared/dist/validators/resource.js
 import { z as z7 } from "zod";
-function isValidLibraryRelativePath(locator) {
+function isValidLibraryProjectPath(locator, kind) {
   const trimmed = locator.trim();
   if (!trimmed)
     return false;
@@ -736,7 +736,9 @@ function isValidLibraryRelativePath(locator) {
   const parts = trimmed.split("/");
   if (!parts.every((part) => part.length > 0 && part !== "." && part !== ".."))
     return false;
-  return !PROTECTED_LIBRARY_RESOURCE_ROOTS.has(parts[0] ?? "");
+  if (parts[0] !== "projects")
+    return false;
+  return kind === "directory" ? parts.length >= 2 : parts.length >= 3;
 }
 function validateLibraryResourceContract(value, ctx) {
   if (value.sourceType !== "library")
@@ -748,15 +750,15 @@ function validateLibraryResourceContract(value, ctx) {
       path: ["kind"]
     });
   }
-  if (value.locator !== void 0 && !isValidLibraryRelativePath(value.locator)) {
+  if (value.locator !== void 0 && !isValidLibraryProjectPath(value.locator, value.kind)) {
     ctx.addIssue({
       code: z7.ZodIssueCode.custom,
-      message: "Library resource locator must be a normalized relative path inside the organization Library.",
+      message: "Library resource locator must be a normalized project Library path.",
       path: ["locator"]
     });
   }
 }
-var organizationResourceKindSchema, organizationResourceSourceTypeSchema, projectResourceAttachmentRoleSchema, LIBRARY_PATH_SCHEME_RE, PROTECTED_LIBRARY_RESOURCE_ROOTS, createOrganizationResourceBaseSchema, createOrganizationResourceSchema, updateOrganizationResourceSchema, projectResourceAttachmentInputSchema, updateProjectResourceAttachmentSchema, createProjectInlineResourceSchema;
+var organizationResourceKindSchema, organizationResourceSourceTypeSchema, projectResourceAttachmentRoleSchema, LIBRARY_PATH_SCHEME_RE, createOrganizationResourceBaseSchema, createOrganizationResourceSchema, updateOrganizationResourceSchema, projectResourceAttachmentInputSchema, updateProjectResourceAttachmentSchema, createProjectInlineResourceSchema;
 var init_resource = __esm({
   "../packages/shared/dist/validators/resource.js"() {
     "use strict";
@@ -765,7 +767,6 @@ var init_resource = __esm({
     organizationResourceSourceTypeSchema = z7.enum(ORGANIZATION_RESOURCE_SOURCE_TYPES);
     projectResourceAttachmentRoleSchema = z7.enum(PROJECT_RESOURCE_ATTACHMENT_ROLES);
     LIBRARY_PATH_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
-    PROTECTED_LIBRARY_RESOURCE_ROOTS = /* @__PURE__ */ new Set(["agents", "artifacts", "plans", "skills"]);
     createOrganizationResourceBaseSchema = z7.object({
       name: z7.string().min(1),
       kind: organizationResourceKindSchema,
@@ -4291,10 +4292,10 @@ var init_install = __esm({
     init_home();
     RUNTIME_NPM_PACKAGE_NAME = "@rudderhq/server";
     RUNTIME_METADATA_FILE = "runtime.json";
-    DEFAULT_RUNTIME_CACHE_MAX_ENTRIES = 5;
+    DEFAULT_RUNTIME_CACHE_MAX_ENTRIES = 2;
     DEFAULT_RUNTIME_CACHE_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
     DEFAULT_RUNTIME_CACHE_MAX_BYTES = 2 * 1024 * 1024 * 1024;
-    DEFAULT_RUNTIME_CACHE_KEEP_PREVIOUS = 1;
+    DEFAULT_RUNTIME_CACHE_KEEP_PREVIOUS = 0;
     RUNTIME_NPM_INSTALL_FLAGS = ["--omit=dev", "--include=optional", "--no-audit", "--no-fund"];
     RuntimeInstallError = class extends Error {
       cacheDir;
@@ -6546,7 +6547,7 @@ init_install();
 import { spawn, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash } from "node:crypto";
 import { constants as fsConstants, createWriteStream, mkdirSync, readFileSync as readFileSync2 } from "node:fs";
-import { access, chmod, copyFile, cp, mkdtemp, mkdir as mkdir2, readFile as readFile2, readdir as readdir2, rm as rm2, writeFile as writeFile2 } from "node:fs/promises";
+import { access, chmod, copyFile, cp, mkdtemp, mkdir as mkdir2, readFile as readFile2, readdir as readdir2, rm as rm2, stat as stat2, utimes, writeFile as writeFile2 } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import path11 from "node:path";
 import { Readable, Transform } from "node:stream";
@@ -6677,6 +6678,10 @@ var DESKTOP_METADATA_FILE = ".rudder-desktop-install.json";
 var DESKTOP_CHECKSUM_ASSET_NAME = "SHASUMS256.txt";
 var DESKTOP_ASSET_CACHE_DIR = "desktop-assets";
 var GITHUB_ASSET_DOWNLOAD_ACCEPT = "application/octet-stream";
+var DEFAULT_DESKTOP_ASSET_CACHE_MAX_ENTRIES = 2;
+var DEFAULT_DESKTOP_ASSET_CACHE_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
+var DEFAULT_DESKTOP_ASSET_CACHE_MAX_BYTES = 768 * 1024 * 1024;
+var DEFAULT_DESKTOP_ASSET_CACHE_KEEP_PREVIOUS = 1;
 function normalizeProgressTotal(totalBytes) {
   return typeof totalBytes === "number" && Number.isFinite(totalBytes) && totalBytes > 0 ? totalBytes : null;
 }
@@ -7141,12 +7146,158 @@ function resolveDesktopAssetCacheDir(assetChecksum, homeDir = resolveRudderHomeD
 function resolveDesktopCachedAssetPath(assetName, assetChecksum, homeDir = resolveRudderHomeDir()) {
   return path11.join(resolveDesktopAssetCacheDir(assetChecksum, homeDir), path11.basename(assetName));
 }
+async function pruneDesktopAssetCache(options = {}) {
+  const homeDir = options.homeDir ?? resolveRudderHomeDir();
+  const entries = await scanDesktopAssetCacheEntries(homeDir);
+  const protectedChecksums = resolveProtectedDesktopAssetChecksums(entries, {
+    protectedChecksums: options.protectedChecksums ?? [],
+    keepPreviousEntries: options.keepPreviousEntries ?? DEFAULT_DESKTOP_ASSET_CACHE_KEEP_PREVIOUS
+  });
+  const protectedSet = new Set(protectedChecksums);
+  const deletions = planDesktopAssetCacheDeletions(entries, {
+    nowMs: (options.now ?? /* @__PURE__ */ new Date()).getTime(),
+    protectedChecksums: protectedSet,
+    maxEntries: options.maxEntries ?? DEFAULT_DESKTOP_ASSET_CACHE_MAX_ENTRIES,
+    maxAgeMs: options.maxAgeMs ?? DEFAULT_DESKTOP_ASSET_CACHE_MAX_AGE_MS,
+    maxTotalBytes: options.maxTotalBytes ?? DEFAULT_DESKTOP_ASSET_CACHE_MAX_BYTES
+  });
+  const deleted = [];
+  const warnings = [];
+  for (const entry of deletions) {
+    try {
+      await rm2(entry.cacheDir, { recursive: true, force: true });
+      deleted.push({
+        cacheDir: entry.cacheDir,
+        checksum: entry.checksum,
+        sizeBytes: entry.sizeBytes
+      });
+    } catch (error) {
+      warnings.push(
+        `Failed to remove Desktop asset cache ${entry.cacheDir}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
+  return {
+    scanned: entries.length,
+    deleted,
+    protectedChecksums,
+    freedBytes: deleted.reduce((total, entry) => total + entry.sizeBytes, 0),
+    warnings
+  };
+}
+async function maybePruneDesktopAssetCache(options) {
+  const result = await pruneDesktopAssetCache(options);
+  return result.deleted.length > 0 || result.warnings.length > 0 ? result : null;
+}
+async function scanDesktopAssetCacheEntries(homeDir) {
+  const cacheRoot = path11.join(homeDir, DESKTOP_ASSET_CACHE_DIR);
+  const dirents = await readdir2(cacheRoot, { withFileTypes: true }).catch(() => null);
+  if (!dirents) return [];
+  const entries = [];
+  for (const dirent of dirents) {
+    if (!dirent.isDirectory()) continue;
+    let checksum;
+    try {
+      checksum = normalizeDesktopAssetChecksum(dirent.name);
+    } catch {
+      continue;
+    }
+    const cacheDir = path11.join(cacheRoot, dirent.name);
+    const stats = await desktopCacheDirectoryStats(cacheDir);
+    entries.push({
+      cacheDir,
+      checksum,
+      lastUsedAtMs: stats.lastUsedAtMs,
+      sizeBytes: stats.sizeBytes
+    });
+  }
+  return entries;
+}
+async function desktopCacheDirectoryStats(targetPath) {
+  const fallbackStat = await stat2(targetPath).catch(() => null);
+  const dirents = await readdir2(targetPath, { withFileTypes: true }).catch(() => null);
+  if (!dirents) {
+    return {
+      sizeBytes: 0,
+      lastUsedAtMs: Number(fallbackStat?.mtimeMs ?? 0)
+    };
+  }
+  let sizeBytes = 0;
+  let lastUsedAtMs = Number(fallbackStat?.mtimeMs ?? 0);
+  for (const dirent of dirents) {
+    if (dirent.isSymbolicLink()) continue;
+    const entryPath = path11.join(targetPath, dirent.name);
+    const entryStat = await stat2(entryPath).catch(() => null);
+    if (!entryStat) continue;
+    lastUsedAtMs = Math.max(lastUsedAtMs, Number(entryStat.mtimeMs ?? 0));
+    if (dirent.isDirectory()) {
+      const nested = await desktopCacheDirectoryStats(entryPath);
+      sizeBytes += nested.sizeBytes;
+      lastUsedAtMs = Math.max(lastUsedAtMs, nested.lastUsedAtMs);
+      continue;
+    }
+    sizeBytes += Number(entryStat.size ?? 0);
+  }
+  return { sizeBytes, lastUsedAtMs };
+}
+function resolveProtectedDesktopAssetChecksums(entries, options) {
+  const protectedChecksums = /* @__PURE__ */ new Set();
+  for (const checksum of options.protectedChecksums) {
+    try {
+      protectedChecksums.add(normalizeDesktopAssetChecksum(checksum));
+    } catch {
+      continue;
+    }
+  }
+  const previousEntries = [...entries].filter((entry) => !protectedChecksums.has(entry.checksum)).sort((a, b) => b.lastUsedAtMs - a.lastUsedAtMs);
+  for (const entry of previousEntries.slice(0, Math.max(0, options.keepPreviousEntries))) {
+    protectedChecksums.add(entry.checksum);
+  }
+  return [...protectedChecksums].sort();
+}
+function planDesktopAssetCacheDeletions(entries, options) {
+  const deletions = /* @__PURE__ */ new Set();
+  const oldestFirst = [...entries].sort((a, b) => a.lastUsedAtMs - b.lastUsedAtMs);
+  const canDelete = (entry) => !options.protectedChecksums.has(entry.checksum) && !deletions.has(entry.cacheDir);
+  const mark = (entry) => {
+    if (canDelete(entry)) deletions.add(entry.cacheDir);
+  };
+  if (options.maxAgeMs >= 0) {
+    for (const entry of oldestFirst) {
+      if (options.nowMs - entry.lastUsedAtMs > options.maxAgeMs) mark(entry);
+    }
+  }
+  if (options.maxEntries > 0) {
+    for (const entry of oldestFirst) {
+      if (entries.length - deletions.size <= options.maxEntries) break;
+      mark(entry);
+    }
+  }
+  if (options.maxTotalBytes > 0) {
+    let remainingBytes = entries.reduce((total, entry) => total + entry.sizeBytes, 0) - [...deletions].reduce((total, cacheDir) => total + (entries.find((entry) => entry.cacheDir === cacheDir)?.sizeBytes ?? 0), 0);
+    for (const entry of oldestFirst) {
+      if (remainingBytes <= options.maxTotalBytes) break;
+      if (!canDelete(entry)) continue;
+      deletions.add(entry.cacheDir);
+      remainingBytes -= entry.sizeBytes;
+    }
+  }
+  return entries.filter((entry) => deletions.has(entry.cacheDir));
+}
+async function touchDesktopCachedAsset(cachePath) {
+  try {
+    const now = /* @__PURE__ */ new Date();
+    await utimes(cachePath, now, now);
+  } catch {
+  }
+}
 async function downloadDesktopAssetWithCache(asset, expectedChecksum, options = {}) {
   const normalizedChecksum = normalizeDesktopAssetChecksum(expectedChecksum);
   const cachePath = resolveDesktopCachedAssetPath(asset.name, normalizedChecksum, options.homeDir);
   if (await pathExists(cachePath)) {
     try {
       const checksum = assertChecksumMatch(cachePath, normalizedChecksum);
+      await touchDesktopCachedAsset(cachePath);
       return { path: cachePath, checksum, cacheStatus: "hit" };
     } catch {
       await rm2(cachePath, { force: true });
@@ -7753,6 +7904,17 @@ async function startCommand(opts) {
       );
       await writeInstallMetadata(installPaths, releaseTag, selectedAsset.name, checksum, selectedAssetKind);
     }
+    const desktopAssetPrune = await maybePruneDesktopAssetCache({
+      protectedChecksums: [expectedChecksum]
+    });
+    if (desktopAssetPrune) {
+      if (desktopAssetPrune.deleted.length > 0) {
+        p13.log.success(
+          `Pruned ${desktopAssetPrune.deleted.length} old Desktop asset cache(s), freed ${formatBytes(desktopAssetPrune.freedBytes)}.`
+        );
+      }
+      for (const warning of desktopAssetPrune.warnings) p13.log.warn(warning);
+    }
     if (opts.open !== false) {
       await runStartPhase(
         "Launching Rudder Desktop...",
@@ -8858,7 +9020,7 @@ function registerContextCommands(program) {
 }
 
 // src/commands/client/company.ts
-import { mkdir as mkdir3, readdir as readdir3, readFile as readFile3, stat as stat2, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir as mkdir3, readdir as readdir3, readFile as readFile3, stat as stat3, writeFile as writeFile3 } from "node:fs/promises";
 import path15 from "node:path";
 import * as p15 from "@clack/prompts";
 import pc14 from "picocolors";
@@ -9593,7 +9755,7 @@ function normalizeGithubImportSource(input, refOverride) {
 }
 async function pathExists2(inputPath) {
   try {
-    await stat2(path15.resolve(inputPath));
+    await stat3(path15.resolve(inputPath));
     return true;
   } catch {
     return false;
@@ -9616,7 +9778,7 @@ async function collectPackageFiles(root, current, files) {
 }
 async function resolveInlineSourceFromPath(inputPath) {
   const resolved = path15.resolve(inputPath);
-  const resolvedStat = await stat2(resolved);
+  const resolvedStat = await stat3(resolved);
   if (resolvedStat.isFile() && path15.extname(resolved).toLowerCase() === ".zip") {
     const archive = await readZipArchive(await readFile3(resolved));
     const filteredFiles = Object.fromEntries(
@@ -9652,7 +9814,7 @@ async function writeExportToFolder(outDir, exported) {
 }
 async function confirmOverwriteExportDirectory(outDir) {
   const root = path15.resolve(outDir);
-  const stats = await stat2(root).catch(() => null);
+  const stats = await stat3(root).catch(() => null);
   if (!stats) return;
   if (!stats.isDirectory()) {
     throw new Error(`Export output path ${root} exists and is not a directory.`);
@@ -10079,7 +10241,7 @@ ${organizationUrl}`);
 
 // src/commands/client/issue.ts
 init_dist();
-import { readFile as readFile4, stat as stat3 } from "node:fs/promises";
+import { readFile as readFile4, stat as stat4 } from "node:fs/promises";
 import path16 from "node:path";
 
 // src/agent-v1-registry.ts
@@ -10436,7 +10598,7 @@ var AGENT_CLI_CAPABILITIES = [
     id: "issue.documents.put",
     command: "rudder issue documents put <issue> <key> --body-file <path>",
     category: "issue",
-    description: "Legacy create or update of a DB-backed issue document; prefer `rudder library file put` for new docs.",
+    description: "Legacy create or update of a DB-backed issue document; prefer `rudder library file put` for durable project files.",
     mutating: true,
     contract: "compat",
     requiresOrgId: false,
@@ -11199,7 +11361,7 @@ ${imageBlock}` : imageBlock;
 }
 async function uploadIssueCommentImage(ctx, issue, imagePath) {
   const resolvedPath = path16.resolve(process.cwd(), imagePath);
-  const stats = await stat3(resolvedPath).catch((err) => {
+  const stats = await stat4(resolvedPath).catch((err) => {
     throw new Error(`Unable to read image ${imagePath}: ${err instanceof Error ? err.message : String(err)}`);
   });
   if (!stats.isFile()) {
@@ -11446,15 +11608,11 @@ var RUDDER_AGENT_OPERATING_CONTRACT = [
   "- Personal skills live under `$AGENT_HOME/skills`.",
   "- Shared organization workspace root lives under `$RUDDER_ORG_WORKSPACE_ROOT`.",
   "- Shared organization skills live under `$RUDDER_ORG_SKILLS_DIR`.",
-  "- Shared organization plans live under `$RUDDER_ORG_PLANS_DIR`.",
-  "- Shared organization artifacts live under `$RUDDER_ORG_ARTIFACTS_DIR`.",
-  '- Library-backed project resources use `sourceType: "library"`; their `locator` is a safe path relative to `$RUDDER_ORG_WORKSPACE_ROOT`, usually under `docs/`, so read them from `$RUDDER_ORG_WORKSPACE_ROOT/<locator>` when that root is available. Rudder does not use protected system roots such as `agents/`, `artifacts/`, `plans/`, or `skills/` as project Library resources.',
-  "- Project Context is explicit operator-curated context, not the whole knowledge boundary. When it is insufficient, inspect broader Library docs and org workspace know-how before concluding context is missing.",
-  "- Durable generated Markdown documents, plans, design docs, and decision notes should be written under `$RUDDER_ORG_WORKSPACE_ROOT/docs/` when available, preferably through `rudder library file put docs/<file>.md --body-file <path> --json`.",
-  "- Durable generated assets such as screenshots, images, mockups, reports, CSVs, handoff logs, and other user-visible non-doc files should be written under `$RUDDER_ORG_ARTIFACTS_DIR` when available.",
-  "- Use `/tmp` only for transient scratch files and temporary verification artifacts; do not put durable work product there.",
+  '- Library-backed project resources use `sourceType: "library"`; their `locator` points into `library:projects/<project-name>/`.',
+  "- Project Context is explicit operator-curated context, not the whole knowledge boundary. When it is insufficient, inspect broader Library and org workspace know-how before concluding context is missing.",
+  "- Durable generated project work files should be written under `library:projects/<project-name>/`.",
+  "- Use `/tmp` only for transient scratch files and temporary verification files; do not put durable work product there.",
   "- Local trusted runtimes may expose the host operator home as `$RUDDER_OPERATOR_HOME`; use it only when a local skill or script intentionally needs operator-owned desktop app or CLI state. Do not replace `$HOME` with it.",
-  "- Durable shared work output should prefer these managed workspace paths instead of ad-hoc top-level `projects/` folders.",
   "",
   "When you create or copy a skill under `$AGENT_HOME/skills/<slug>/`, check the agent's Skills snapshot before claiming it will load in future runs. If it is installed but not enabled, say exactly that future runs will not load it until enabled, and offer to enable it with `rudder agent skills enable <agent-id> <selection-ref>` when you have permission.",
   "",
@@ -11464,9 +11622,9 @@ var RUDDER_AGENT_OPERATING_CONTRACT = [
   "",
   "When an issue comment, done comment, or blocker comment cites visual evidence from a local screenshot/image path, attach the image with the Rudder CLI `--image <path>` option instead of leaving only the filesystem path in the text.",
   "",
-  "## Memory and Planning",
+  "## Memory and Shared Work Notes",
   "",
-  "You MUST use the `para-memory-files` skill for all memory operations: storing facts, writing daily notes, creating entities, running weekly synthesis, recalling past context, and managing plans. The skill defines your three-layer memory system (knowledge graph, daily notes, tacit knowledge), the PARA folder structure, atomic fact schemas, memory decay rules, and recall/planning conventions.",
+  "You MUST use the `para-memory-files` skill for all memory operations: storing facts, writing daily notes, creating entities, running weekly synthesis, recalling past context, and managing shared work notes. The skill defines your three-layer memory system (knowledge graph, daily notes, tacit knowledge), the PARA folder structure, atomic fact schemas, memory decay rules, and recall conventions.",
   "",
   "Keep stable preferences and operating lessons in `$AGENT_HOME/instructions/MEMORY.md`. Use `$AGENT_HOME/memory/YYYY-MM-DD.md` for daily notes and `$AGENT_HOME/life/` for structured long-term memory; those files are not auto-loaded.",
   "",
@@ -12383,7 +12541,7 @@ function registerLibraryCommands(program) {
   const library = program.command("library").description("Library file operations");
   const file = library.command("file").description("Path-based Library file operations");
   addCommonClientOptions(
-    file.command("list").description(getAgentCliCapabilityById("library.file.list").description).argument("[directoryPath]", "Library directory path", "docs").action(async (directoryPath, opts) => {
+    file.command("list").description(getAgentCliCapabilityById("library.file.list").description).argument("[directoryPath]", "Library directory path", "projects").action(async (directoryPath, opts) => {
       try {
         const ctx = resolveCommandContext(opts, { requireCompany: true });
         const search = new URLSearchParams();