@sealant/mend 0.22.0 → 0.24.0

package/dist/skills.js

@@ -1,134 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-/**
- * Local skill-library scanning for `mend skills push`. Runs on the machine
- * that HAS the skills: the shared agent-skills convention keeps them under
- * `~/.agents/skills/<name>/SKILL.md` (plus support files), and the CLI
- * captures the bundles here and streams them to the server's library. The
- * CLI stays dependency-light by design, so the frontmatter peek below is a
- * few lines of string handling, not a YAML parser — the server re-validates
- * everything.
- */
-/** Where the shared convention keeps user skills, relative to `$HOME`. */
-export const DEFAULT_SKILLS_DIR = ".agents/skills";
-/** The servers' caps, checked here so a mistake fails before the upload. */
-export const MAX_SKILL_FILES = 64;
-export const MAX_SKILL_FILE_BYTES = 512 * 1024;
-const IGNORED_DIRS = new Set([".git", "node_modules", "__pycache__"]);
-const isTextBuffer = (buffer) => !buffer.subarray(0, 8192).includes(0);
-/**
- * Pull `description:` out of a SKILL.md frontmatter block. Single-line plain
- * or quoted scalars only — the common case by far; anything else reads as
- * absent and the server keeps an empty description.
- */
-export const readFrontmatterDescription = (contents) => {
-    if (!contents.startsWith("---\n") && !contents.startsWith("---\r\n"))
-        return "";
-    const end = contents.indexOf("\n---", 3);
-    if (end === -1)
-        return "";
-    for (const line of contents.slice(0, end).split("\n")) {
-        const match = /^description:\s*(.*)$/.exec(line);
-        if (match === null)
-            continue;
-        const raw = (match[1] ?? "").trim();
-        if (raw === "" || raw === "|" || raw === ">" || raw === "|-" || raw === ">-")
-            return "";
-        const quoted = /^(['"])(.*)\1$/.exec(raw);
-        return quoted?.[2] ?? raw;
-    }
-    return "";
-};
-const walkFiles = (root) => {
-    const found = [];
-    const visit = (dir) => {
-        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-            if (IGNORED_DIRS.has(entry.name))
-                continue;
-            const absolute = path.join(dir, entry.name);
-            // stat (not the dirent) so symlinked files and directories both count.
-            let stat;
-            try {
-                stat = fs.statSync(absolute);
-            }
-            catch {
-                continue; // dangling symlink
-            }
-            if (stat.isDirectory())
-                visit(absolute);
-            else if (stat.isFile())
-                found.push(absolute);
-        }
-    };
-    visit(root);
-    return found.toSorted();
-};
-/**
- * Scan a skill library directory: every immediate subdirectory carrying a
- * `SKILL.md` becomes one bundle. Oversized and binary files are skipped with
- * a note; a directory without a SKILL.md is noted and left out entirely.
- */
-export const scanSkillLibrary = (root) => {
-    let entries;
-    try {
-        entries = fs.readdirSync(root, { withFileTypes: true });
-    }
-    catch {
-        return { error: `${root} is not a readable directory` };
-    }
-    const skills = [];
-    const notes = [];
-    for (const entry of entries.toSorted((a, b) => a.name.localeCompare(b.name))) {
-        if (entry.name.startsWith("."))
-            continue;
-        const skillDir = path.join(root, entry.name);
-        let stat;
-        try {
-            stat = fs.statSync(skillDir);
-        }
-        catch {
-            continue;
-        }
-        if (!stat.isDirectory())
-            continue;
-        if (!fs.existsSync(path.join(skillDir, "SKILL.md"))) {
-            notes.push({ skill: entry.name, message: "no SKILL.md — skipped" });
-            continue;
-        }
-        const files = [];
-        let bytes = 0;
-        for (const absolute of walkFiles(skillDir)) {
-            const relative = path.relative(skillDir, absolute).split(path.sep).join("/");
-            const buffer = fs.readFileSync(absolute);
-            if (buffer.byteLength > MAX_SKILL_FILE_BYTES) {
-                notes.push({ skill: entry.name, message: `${relative} is over 512KB — skipped` });
-                continue;
-            }
-            if (!isTextBuffer(buffer)) {
-                notes.push({ skill: entry.name, message: `${relative} is binary — skipped` });
-                continue;
-            }
-            files.push({ path: relative, contents: buffer.toString("utf8") });
-            bytes += buffer.byteLength;
-        }
-        if (files.length > MAX_SKILL_FILES) {
-            notes.push({
-                skill: entry.name,
-                message: `${files.length} files is over the ${MAX_SKILL_FILES}-file cap — skipped`,
-            });
-            continue;
-        }
-        const entryFile = files.find((file) => file.path === "SKILL.md");
-        if (entryFile === undefined) {
-            notes.push({ skill: entry.name, message: "SKILL.md was unreadable — skipped" });
-            continue;
-        }
-        skills.push({
-            name: entry.name.toLowerCase(),
-            description: readFrontmatterDescription(entryFile.contents),
-            files,
-            bytes,
-        });
-    }
-    return { skills, notes };
-};

package/dist/ssh-setup.js

@@ -1,181 +0,0 @@
-/**
- * `mend ssh`: workspace SSH for this machine (docs/WORKSPACE-SSH.md phase 1).
- *
- * `mend ssh` shows the observed state — the deployment's gateway, this user's registered keys,
- * and whether `~/.ssh/config` carries the managed block. `mend ssh setup` makes this machine
- * ready once: pick a public key (an explicit `--key` path; else the running ssh-agent's first
- * key, so no new key material exists; else an existing dedicated key; else a freshly generated
- * one), offer it to the platform under the signed-in user, and write one static Host block.
- * The workspace id travels in the SSH username, so the block never changes per session:
- * `ssh <prefix>-<workspaceId>@mend-ws` — and the VS Code extension connects the same way.
- */
-import { spawnSync } from "node:child_process";
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-export const SSH_HOST_ALIAS = "mend-ws";
-const BLOCK_BEGIN = "# >>> mend workspace ssh (managed by `mend ssh setup`) >>>";
-const BLOCK_END = "# <<< mend workspace ssh <<<";
-/** The first key a running ssh-agent offers (`ssh-add -L` output), or null. */
-export const firstAgentKey = (output) => {
-    for (const line of output.split("\n")) {
-        const trimmed = line.trim();
-        const parts = trimmed.split(/\s+/);
-        if (parts.length >= 2 && parts[0]?.startsWith("ssh-") === true)
-            return trimmed;
-        if (parts.length >= 2 && parts[0]?.startsWith("ecdsa-") === true)
-            return trimmed;
-    }
-    return null;
-};
-/** The managed Host block. `identityFile` null = the ssh-agent supplies the key. */
-export const managedSshConfigBlock = (input) => [
-    BLOCK_BEGIN,
-    `Host ${SSH_HOST_ALIAS}`,
-    `  HostName ${input.host}`,
-    `  Port ${input.port}`,
-    ...(input.identityFile === null
-        ? []
-        : [`  IdentityFile ${input.identityFile}`, "  IdentitiesOnly yes"]),
-    "  StrictHostKeyChecking accept-new",
-    BLOCK_END,
-    "",
-].join("\n");
-/** Replace the managed block in an ssh config, or append it; everything else stays verbatim. */
-export const upsertManagedBlock = (existing, block) => {
-    const begin = existing.indexOf(BLOCK_BEGIN);
-    const end = existing.indexOf(BLOCK_END);
-    if (begin !== -1 && end !== -1 && end > begin) {
-        const after = existing.slice(end + BLOCK_END.length).replace(/^\n/, "");
-        return `${existing.slice(0, begin)}${block}${after}`;
-    }
-    if (existing === "")
-        return block;
-    return `${existing.replace(/\n*$/, "\n\n")}${block}`;
-};
-/** Whether an ssh config already carries the managed block. */
-export const hasManagedBlock = (config) => config.includes(BLOCK_BEGIN);
-const ansi = (code) => (text) => process.stdout.isTTY === true ? `[${code}m${text}` : text;
-const dim = ansi("2");
-const green = ansi("32");
-const warn = ansi("33");
-const say = (line) => console.log(line);
-const readIfPresent = (file) => {
-    try {
-        return fs.readFileSync(file, "utf8");
-    }
-    catch {
-        return "";
-    }
-};
-/** Resolve the public key to offer, favoring what already exists over creating anything. */
-const pickKey = (cliHome, keyFlag) => {
-    if (keyFlag !== null) {
-        const pubPath = keyFlag.endsWith(".pub") ? keyFlag : `${keyFlag}.pub`;
-        const publicKey = readIfPresent(pubPath).trim();
-        if (publicKey === "")
-            return { error: `no public key at ${pubPath}` };
-        return {
-            publicKey,
-            identityFile: pubPath.endsWith(".pub") ? pubPath.slice(0, -".pub".length) : pubPath,
-            source: "flag",
-        };
-    }
-    if (process.env["SSH_AUTH_SOCK"] !== undefined && process.env["SSH_AUTH_SOCK"] !== "") {
-        const listed = spawnSync("ssh-add", ["-L"], { encoding: "utf8" });
-        if (listed.status === 0) {
-            const key = firstAgentKey(listed.stdout);
-            if (key !== null)
-                return { publicKey: key, identityFile: null, source: "agent" };
-        }
-    }
-    const dedicated = path.join(cliHome, "ssh", "id_ed25519");
-    const existing = readIfPresent(`${dedicated}.pub`).trim();
-    if (existing !== "")
-        return { publicKey: existing, identityFile: dedicated, source: "existing" };
-    fs.mkdirSync(path.dirname(dedicated), { recursive: true, mode: 0o700 });
-    const generated = spawnSync("ssh-keygen", ["-t", "ed25519", "-f", dedicated, "-N", "", "-C", `mend-${os.hostname()}`], { encoding: "utf8" });
-    if (generated.status !== 0) {
-        return { error: `ssh-keygen failed: ${generated.stderr.trim() || "unknown error"}` };
-    }
-    const fresh = readIfPresent(`${dedicated}.pub`).trim();
-    if (fresh === "")
-        return { error: `ssh-keygen reported success but ${dedicated}.pub is missing` };
-    return { publicKey: fresh, identityFile: dedicated, source: "generated" };
-};
-const sshConfigPath = () => path.join(os.homedir(), ".ssh", "config");
-const showStatus = async (api) => {
-    const view = await api("GET", "/workspace-ssh");
-    if (view.gateway === null) {
-        say(`workspace ssh   ${warn("no gateway")} ${dim("· this deployment exposes none")}`);
-        return;
-    }
-    say(`gateway         ${view.gateway.host}:${view.gateway.port} ${dim(`· username ${view.gateway.usernamePrefix}-<workspace-id>`)}`);
-    if (view.keys.length === 0) {
-        say(`keys            ${warn("none registered")} ${dim("· run: mend ssh setup")}`);
-    }
-    else {
-        for (const key of view.keys) {
-            say(`key             ${key.name} ${dim(`· ${key.fingerprint}`)}`);
-        }
-    }
-    const configured = hasManagedBlock(readIfPresent(sshConfigPath()));
-    say(configured
-        ? `ssh config      ${green("●")} Host ${SSH_HOST_ALIAS} ${dim(`· ${sshConfigPath()}`)}`
-        : `ssh config      ${warn("no managed block")} ${dim("· run: mend ssh setup")}`);
-};
-const setup = async (api, cliHome, args) => {
-    const keyFlagIndex = args.indexOf("--key");
-    const keyFlag = keyFlagIndex !== -1 && args[keyFlagIndex + 1] !== undefined
-        ? String(args[keyFlagIndex + 1])
-        : null;
-    const view = await api("GET", "/workspace-ssh");
-    if (view.gateway === null) {
-        say(`mend: this deployment exposes no workspace SSH gateway`);
-        process.exitCode = 1;
-        return;
-    }
-    const picked = pickKey(cliHome, keyFlag);
-    if ("error" in picked) {
-        say(`mend: ${picked.error}`);
-        process.exitCode = 1;
-        return;
-    }
-    const sourceLabel = {
-        flag: "from --key",
-        agent: "from your ssh-agent (nothing new created)",
-        existing: "existing dedicated key",
-        generated: "generated dedicated key",
-    }[picked.source];
-    const registered = await api("POST", "/workspace-ssh/keys", {
-        publicKey: picked.publicKey,
-        name: os.hostname(),
-    });
-    say(`key             ${green("●")} ${registered.fingerprint} ${dim(`· ${sourceLabel}`)}`);
-    const configFile = sshConfigPath();
-    fs.mkdirSync(path.dirname(configFile), { recursive: true, mode: 0o700 });
-    const block = managedSshConfigBlock({
-        host: view.gateway.host,
-        port: view.gateway.port,
-        identityFile: picked.identityFile,
-    });
-    const before = readIfPresent(configFile);
-    fs.writeFileSync(configFile, upsertManagedBlock(before, block), { mode: 0o600 });
-    say(`ssh config      ${green("●")} Host ${SSH_HOST_ALIAS} ${dim(`· ${configFile}`)}`);
-    say("");
-    say(`connect with    ssh ${view.gateway.usernamePrefix}-<workspace-id>@${SSH_HOST_ALIAS} ${dim("· the VS Code extension uses this automatically")}`);
-};
-export const sshCommand = async (args, api, cliHome) => {
-    const [subcommand, ...rest] = args;
-    switch (subcommand) {
-        case undefined:
-        case "status":
-            return showStatus(api);
-        case "setup":
-            return setup(api, cliHome, rest);
-        default:
-            say(`mend: unknown ssh subcommand "${subcommand}" — try: mend ssh · mend ssh setup [--key <path>]`);
-            process.exitCode = 1;
-            return;
-    }
-};

package/dist/terminal.js

@@ -1,8 +0,0 @@
-import { spawn } from "node:child_process";
-/** Open a Mend web surface without keeping the terminal process alive. */
-export const openUrl = (target) => {
-    const opener = process.platform === "darwin" ? "open" : "xdg-open";
-    const child = spawn(opener, [target], { detached: true, stdio: "ignore" });
-    child.on("error", () => undefined);
-    child.unref();
-};

package/dist/tui-theme.js

@@ -1,41 +0,0 @@
-/**
- * The TUI's theme: a drawn interface with NO painted background — the
- * terminal's own ground shows through everything, and the borders alone
- * draw the panes. The only fills left are the ones that state something:
- * the selection row and the diff add/delete washes. Chrome is near-mono;
- * color appears only where it is a fact. Component code imports semantic
- * names from here; this file is the CLI's single color authority.
- */
-/** Primary text. */
-export const INK = "#eeece8";
-/** Secondary text. */
-export const INK_2 = "#c9c7c2";
-/** Tertiary text — labels, meta. */
-export const MUTED = "#a3a09a";
-/** The quietest legible step; anything darker reads as broken. */
-export const FAINT = "#807d76";
-/** Hairlines and panel borders — visible, not vanishing. */
-export const RULE = "#37374a";
-/**
- * Interaction and selection — the ONE accent, and the only place chrome is
- * allowed color: the focused pane border and the selection gutter bar.
- */
-export const COBALT = "#6f96f5";
-/** The selection wash: a neutral lifted row — visible, not colorful. */
-export const WASH = "#2c2c35";
-/**
- * The one exception to the no-painted-background rule: a floating modal
- * must occlude the content beneath it, so it owns its ground.
- */
-export const SURFACE = "#17171d";
-export const AMBER = "#e2ab42";
-export const GREEN = "#69c189";
-export const RED = "#e87f76";
-/** Diff line washes — strong enough to scan, never louder than the ink. */
-export const ADD_WASH = "#20362a";
-export const DELETE_WASH = "#3c2b2e";
-/** Syntax colors are centralized too; they are subordinate to semantic UI color. */
-export const SYNTAX_KEYWORD = "#cda6f2";
-export const SYNTAX_STRING = "#98cfa8";
-export const SYNTAX_NUMBER = "#e6c37e";
-export const SYNTAX_FUNCTION = "#94bdf7";

package/dist/version.js

@@ -1,48 +0,0 @@
-import * as fs from "node:fs";
-/**
- * `mend version`: this CLI's version, then the server's when it answers.
- * The two drift apart in practice — an npm install on one machine, a cluster
- * roll on another — and "which one am I on" is the first question any bug
- * report needs answered. The server line is best-effort: a missing server is
- * a fact to print, never an error.
- */
-/** The published version, read from the package this file ships in (dist/ and src/ sit one level under it). */
-export const cliVersion = () => {
-    const raw = fs.readFileSync(new URL("../package.json", import.meta.url), "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed === "object" && parsed !== null && "version" in parsed) {
-        const version = parsed.version;
-        if (typeof version === "string")
-            return version;
-    }
-    return "unknown";
-};
-/** Ask the server's health route, briefly; a slow or absent server is `null`. */
-export const fetchServerVersion = async (url, timeoutMs = 2_000) => {
-    try {
-        const response = await fetch(`${url}/api/health`, {
-            signal: AbortSignal.timeout(timeoutMs),
-        });
-        if (!response.ok)
-            return { url, version: null };
-        const body = await response.json();
-        const version = typeof body === "object" && body !== null && "version" in body ? body.version : null;
-        return { url, version: typeof version === "string" ? version : null };
-    }
-    catch {
-        return { url, version: null };
-    }
-};
-/** The lines `mend version` prints — terse facts, no verdict beyond the mismatch note. */
-export const versionLines = (cli, server) => {
-    const lines = [`mend ${cli}`];
-    if (server.version === null) {
-        lines.push(`server · unreachable · ${server.url}`);
-    }
-    else {
-        lines.push(`server ${server.version} · ${server.url}`);
-        if (server.version !== cli)
-            lines.push("versions differ — the server's API wins");
-    }
-    return lines;
-};

package/dist/workbench-events.js

@@ -1,72 +0,0 @@
-/**
- * The dashboard's side of `/api/events` (the same SSE stream the web app
- * reads): parse frames out of the byte stream, drop the `: ping` heartbeats,
- * and map each pointer event to the query families it can actually stale —
- * mirroring apps/web/src/lib/workbench-events.ts, reduced to the TUI's two
- * cache families. Pure functions; dashboard.tsx owns the socket and the
- * QueryClient.
- */
-/**
- * An incremental SSE frame splitter: feed decoded text chunks, get back the
- * `data:` payloads of every frame completed so far. Comment-only frames (the
- * heartbeat) produce nothing.
- */
-export const createSseParser = () => {
-    let buffer = "";
-    return {
-        push: (chunk) => {
-            buffer += chunk;
-            const payloads = [];
-            for (;;) {
-                const boundary = buffer.indexOf("\n\n");
-                if (boundary === -1)
-                    break;
-                const frame = buffer.slice(0, boundary);
-                buffer = buffer.slice(boundary + 2);
-                const data = frame
-                    .split("\n")
-                    .filter((line) => line.startsWith("data:"))
-                    .map((line) => line.slice("data:".length).replace(/^ /, ""))
-                    .join("\n");
-                if (data !== "")
-                    payloads.push(data);
-            }
-            return payloads;
-        },
-    };
-};
-/**
- * Which families one event payload stales. `session-progress` is deliberately
- * nothing — it fires per record line while an agent works, and the dashboard
- * renders no live lines; treating it as a pointer refetched the entire
- * workbench on a 250ms loop for as long as a session was busy. Unknown types
- * are also nothing, like the web: every state change the TUI renders emits
- * one of the types below, and `r` remains the manual override.
- */
-export const eventFamilies = (payload) => {
-    let parsed;
-    try {
-        parsed = JSON.parse(payload);
-    }
-    catch {
-        return [];
-    }
-    if (typeof parsed !== "object" || parsed === null || !("type" in parsed))
-        return [];
-    switch (parsed.type) {
-        case "project":
-        case "worktree":
-        case "session-process":
-            return ["workbench"];
-        // Session facts feed both surfaces: rows and annotations on the
-        // dashboard; status and the follow-up banner inside a review.
-        case "session":
-        case "agent-conversation":
-        // A comment moves the review AND the dashboard's open-comment counts.
-        case "session-change":
-        case "review-comment":
-            return ["workbench", "review"];
-        default:
-            return [];
-    }
-};