@starlein/paperclip-plugin-company-wizard 0.6.2 → 0.6.4

package/dist/worker.js

@@ -29352,7 +29352,7 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 var manifest = {
   id: "starlein.paperclip-plugin-company-wizard",
   apiVersion: 1,
-  version: "0.6.2",
+  version: "0.6.4",
   displayName: "Company Wizard",
   description: "AI-powered wizard to bootstrap agent companies from composable templates",
   author: "Sascha Pietrowski <sp@speednetwork.de>",
@@ -29388,7 +29388,7 @@ var manifest = {
       },
       templatesPath: {
         type: "string",
-        description: "Optional operator-managed templates directory. Defaults to templates bundled with this plugin release. Local files are never overwritten by refresh."
+        description: "Optional existing template root containing roles/, modules/, and presets/. Overrides the GitHub URL. Leave empty to use bundled release templates or a custom GitHub source. Refresh never overwrites this directory. For an existing empty directory, the wizard offers an explicit sync from the configured template URL."
       },
       templatesRepoUrl: {
         type: "string",
@@ -29399,7 +29399,7 @@ var manifest = {
         type: "string",
         enum: ["anthropic", "openai"],
         default: "anthropic",
-        description: "AI provider used for company generation. Anthropic uses Claude Opus 5 at max effort; OpenAI uses GPT-5.6 Sol at high reasoning effort."
+        description: "AI provider used for company generation. Anthropic uses Claude Opus 5 at max effort; OpenAI uses GPT-6-Astra at high reasoning effort."
       },
       anthropicApiKey: {
         // Paperclip's secret picker submits an EnvSecretRefBinding object,
@@ -29562,6 +29562,16 @@ function humanizeSkillName(baseName, variant) {
 function hashSkillContent(markdown) {
   return createHash("sha256").update(String(markdown), "utf-8").digest("hex").slice(0, 16);
 }
+function ensureSkillFrontmatter(slug, description, markdown) {
+  const content = String(markdown);
+  if (/^---\r?\n[\s\S]*?\r?\n---(?:\r?\n|$)/.test(content)) return content;
+  return `---
+name: ${slug}
+description: ${JSON.stringify(String(description || slug))}
+---
+
+${content}`;
+}
 function buildCompanySkillSet(records) {
   const byBaseSlug = /* @__PURE__ */ new Map();
   for (const rec of records) {
@@ -29585,13 +29595,14 @@ function buildCompanySkillSet(records) {
     const groups = [...byHash.values()].map((g) => ({ ...g, repRole: [...g.roles].sort()[0] })).sort((a, b) => a.repRole.localeCompare(b.repRole));
     groups.forEach((group, idx) => {
       const slug = idx === 0 ? baseSlug : `${baseSlug}-${group.repRole}`;
+      const markdown = ensureSkillFrontmatter(slug, group.rec.description, group.rec.markdown);
       companySkills.push({
         slug,
         name: group.rec.name,
         description: group.rec.description,
         categories: group.rec.categories,
-        markdown: group.rec.markdown,
-        contentHash: group.hash
+        markdown,
+        contentHash: hashSkillContent(markdown)
       });
       for (const roleName of group.roles) addRoleSlug(roleName, slug);
     });
@@ -31627,19 +31638,25 @@ function copyDirSync(src, dest) {
     const s = path2.join(src, entry.name);
     const d = path2.join(dest, entry.name);
     if (entry.isDirectory()) copyDirSync(s, d);
-    else fs2.copyFileSync(s, d);
+    else if (entry.isFile()) fs2.copyFileSync(s, d);
+    else throw new Error("Template downloads must contain only regular files and directories.");
   }
 }
 function downloadTemplatesFromGithub(destDir, githubUrl) {
-  const match = githubUrl.match(/github\.com\/([^/]+)\/([^/]+)\/tree\/([^/]+)\/(.+)/);
+  const match = githubUrl.match(
+    /^https:\/\/github\.com\/([\w-]+)\/([\w.-]+)\/tree\/([\w.-]+)\/([\w./-]+)$/
+  );
   if (!match) {
     throw new Error(
-      `Unsupported templates URL: ${githubUrl}. Expected https://github.com/{owner}/{repo}/tree/{branch}/{path}`
+      "Unsupported templates URL. Expected https://github.com/{owner}/{repo}/tree/{branch}/{path} (no credentials or query string)."
     );
   }
   const [, owner, repo, branch, subpath] = match;
+  if (subpath.split("/").some((part) => !part || part === "." || part === ".." || part.startsWith("-"))) {
+    throw new Error("Unsupported templates URL path.");
+  }
   const cloneUrl = `https://github.com/${owner}/${repo}.git`;
-  const tmpDir = path2.join(os.tmpdir(), `plugin-templates-dl-${Date.now()}`);
+  const tmpDir = fs2.mkdtempSync(path2.join(os.tmpdir(), "plugin-templates-dl-"));
   try {
     execFileSync(
       "git",
@@ -31658,6 +31675,9 @@ function downloadTemplatesFromGithub(destDir, githubUrl) {
     );
     execFileSync("git", ["sparse-checkout", "set", subpath], { cwd: tmpDir, stdio: "pipe" });
     const srcDir = path2.join(tmpDir, subpath);
+    if (fs2.existsSync(srcDir) && (!fs2.lstatSync(srcDir).isDirectory() || !fs2.realpathSync(srcDir).startsWith(`${tmpDir}${path2.sep}`))) {
+      throw new Error("Template source must be a directory inside the downloaded repository.");
+    }
     if (!fs2.existsSync(srcDir)) throw new Error(`Path '${subpath}' not found in ${cloneUrl}`);
     copyDirSync(srcDir, destDir);
   } finally {
@@ -31673,17 +31693,13 @@ function isDockerLayout() {
 async function ensureTemplatesDir(cfg) {
   const repoUrl = cfg.templatesRepoUrl || DEFAULT_TEMPLATES_REPO_URL;
   if (cfg.templatesPath) {
-    if (fs2.existsSync(cfg.templatesPath)) return cfg.templatesPath;
-    throw new Error(`Configured templatesPath does not exist: ${cfg.templatesPath}`);
+    return validateTemplatesDir(cfg.templatesPath, "Configured templatesPath");
   }
   if (!cfg.templatesRepoUrl || cfg.templatesRepoUrl === DEFAULT_TEMPLATES_REPO_URL) {
-    if (fs2.existsSync(BUNDLED_TEMPLATES_DIR)) return BUNDLED_TEMPLATES_DIR;
-    throw new Error(
-      "Bundled templates are missing. Reinstall Company Wizard or configure templatesPath."
-    );
+    return validateTemplatesDir(BUNDLED_TEMPLATES_DIR, "Bundled templates");
   }
   const cacheDir = resolveTemplatesCacheDir(cfg);
-  if (fs2.existsSync(cacheDir)) return cacheDir;
+  if (fs2.existsSync(cacheDir)) return validateTemplatesDir(cacheDir, "Cached templates");
   return refreshTemplatesCache(cfg);
 }
 function resolveTemplatesCacheDir(cfg) {
@@ -31695,14 +31711,12 @@ function resolveTemplatesCacheDir(cfg) {
 }
 function refreshTemplatesCache(cfg, log) {
   if (cfg.templatesPath) {
-    if (!fs2.existsSync(cfg.templatesPath))
-      throw new Error(`Configured templatesPath does not exist: ${cfg.templatesPath}`);
+    validateTemplatesDir(cfg.templatesPath, "Configured templatesPath");
     log?.("Using operator-managed templatesPath; no files overwritten.");
     return cfg.templatesPath;
   }
   if (!cfg.templatesRepoUrl || cfg.templatesRepoUrl === DEFAULT_TEMPLATES_REPO_URL) {
-    if (!fs2.existsSync(BUNDLED_TEMPLATES_DIR))
-      throw new Error("Bundled templates are missing. Reinstall Company Wizard.");
+    validateTemplatesDir(BUNDLED_TEMPLATES_DIR, "Bundled templates");
     log?.(`Using bundled Company Wizard ${CURRENT_PLUGIN_VERSION} templates.`);
     return BUNDLED_TEMPLATES_DIR;
   }
@@ -31713,6 +31727,9 @@ function refreshTemplatesCache(cfg, log) {
   const backupDir = `${stagingDir}-previous`;
   try {
     downloadTemplatesFromGithub(stagingDir, repoUrl);
+    validateTemplatesDir(stagingDir, "Downloaded templates");
+    const { loadErrors } = loadTemplates(stagingDir);
+    if (loadErrors.length > 0) throw new Error(loadErrors.join("\n"));
     if (fs2.existsSync(targetDir)) fs2.renameSync(targetDir, backupDir);
     try {
       fs2.renameSync(stagingDir, targetDir);
@@ -31727,8 +31744,50 @@ function refreshTemplatesCache(cfg, log) {
   log?.(`\u2713 Refreshed templates cache from ${repoUrl} \u2192 ${targetDir}`);
   return targetDir;
 }
+function emptyTemplateSyncOffer(cfg) {
+  try {
+    if (!cfg.templatesPath) return void 0;
+    const stat = fs2.lstatSync(cfg.templatesPath);
+    if (!stat.isDirectory() || fs2.readdirSync(cfg.templatesPath).length) return void 0;
+    const targetDir = fs2.realpathSync(cfg.templatesPath);
+    const token = createHash2("sha256").update(
+      JSON.stringify([
+        cfg.templatesPath,
+        targetDir,
+        cfg.templatesRepoUrl || "",
+        stat.dev,
+        stat.ino
+      ])
+    ).digest("hex");
+    return { targetDir, token, canSync: !!cfg.templatesRepoUrl?.trim() };
+  } catch {
+    return void 0;
+  }
+}
+function syncEmptyTemplates(cfg, confirmation) {
+  const offer = emptyTemplateSyncOffer(cfg);
+  if (!offer?.canSync || confirmation !== offer.token) {
+    throw new Error(
+      "Sync requires confirmation for the current empty templatesPath and a configured templatesRepoUrl. Reload the page and check settings."
+    );
+  }
+  const stagingDir = fs2.mkdtempSync(`${offer.targetDir}-sync-`);
+  try {
+    downloadTemplatesFromGithub(stagingDir, cfg.templatesRepoUrl);
+    validateTemplatesDir(stagingDir, "Downloaded templates");
+    const { loadErrors } = loadTemplates(stagingDir);
+    if (loadErrors.length) throw new Error("Downloaded template metadata is invalid.");
+    if (emptyTemplateSyncOffer(cfg)?.token !== offer.token) {
+      throw new Error("Template directory changed during sync. No existing files were replaced.");
+    }
+    fs2.renameSync(stagingDir, offer.targetDir);
+    return offer.targetDir;
+  } finally {
+    fs2.rmSync(stagingDir, { recursive: true, force: true });
+  }
+}
 var ANTHROPIC_AI_MODEL = "claude-opus-5";
-var OPENAI_AI_MODEL = "gpt-5.6-sol";
+var OPENAI_AI_MODEL = "gpt-6-astra";
 function isLikelyAnthropicApiKey(value) {
   return value.startsWith("sk-ant-");
 }
@@ -31878,7 +31937,11 @@ function loadJsonFiles(dir, filename) {
     const fp = path2.join(fullDir, filename);
     if (!fs2.existsSync(fp)) continue;
     try {
-      items.push(JSON.parse(fs2.readFileSync(fp, "utf-8")));
+      const item = JSON.parse(fs2.readFileSync(fp, "utf-8"));
+      if (!item || typeof item !== "object" || Array.isArray(item) || typeof item.name !== "string" || !item.name.trim()) {
+        throw new Error("Template metadata must be an object with a non-empty name");
+      }
+      items.push(item);
     } catch (err) {
       errors.push(`Failed to parse ${fp}: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -31909,6 +31972,23 @@ function loadTemplates(templatesDir) {
     loadErrors: [...presetLoad.errors, ...moduleLoad.errors, ...roleLoad.errors]
   };
 }
+function validateTemplatesDir(dir, source) {
+  try {
+    if (!fs2.existsSync(dir)) throw new Error("directory does not exist");
+    if (!fs2.statSync(dir).isDirectory()) throw new Error("path is not a directory");
+    const templates = loadTemplates(dir);
+    if (!templates.roles.some((role) => role.name === "ceo" && role._base)) {
+      throw new Error(
+        'No base CEO template found. Expected roles/ceo/role.meta.json with name "ceo" and base: true.' + (templates.loadErrors.length ? ` ${templates.loadErrors.join(" ")}` : "")
+      );
+    }
+    return dir;
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    const guidance = source === "Configured templatesPath" ? "Point templatesPath to the template root (containing roles/, modules/, presets/), or clear templatesPath to use bundled templates / the configured GitHub source. templatesPath overrides templatesRepoUrl; refresh never populates or overwrites local files." : "Reinstall Company Wizard for bundled templates, or refresh the configured custom GitHub source.";
+    throw new Error(`${source} "${dir}": ${detail} ${guidance}`);
+  }
+}
 function resolvePaperclipCredentials(cfg) {
   return {
     url: cfg.paperclipUrl || process.env.PAPERCLIP_PUBLIC_URL || "http://localhost:3100",
@@ -32084,13 +32164,14 @@ async function provisionCompanySkills(client, companyId, companySkills, log) {
     }
   }
   for (const skill of companySkills) {
+    const markdown = ensureSkillFrontmatter(skill.slug, skill.description, skill.markdown);
     const found = bySlug.get(skill.slug);
     if (!found) {
       const created = await client.createCompanySkill(companyId, {
-        name: skill.name,
+        name: skill.slug,
         slug: skill.slug,
         description: skill.description,
-        markdown: skill.markdown,
+        markdown,
         categories: skill.categories
       });
       slugToKey.set(skill.slug, created?.key || created?.slug || skill.slug);
@@ -32099,16 +32180,16 @@ async function provisionCompanySkills(client, companyId, companySkills, log) {
     }
     slugToKey.set(skill.slug, found.key || skill.slug);
     let updated = false;
-    if ((found.markdown ?? "") !== skill.markdown) {
+    if ((found.markdown ?? "") !== markdown) {
       await client.updateCompanySkillFile(companyId, found.id, {
         path: "SKILL.md",
-        content: skill.markdown
+        content: markdown
       });
       updated = true;
     }
-    if ((found.name ?? "") !== skill.name) {
+    if ((found.name ?? "") !== skill.slug) {
       const renamed = await client.renameCompanySkill(companyId, found.id, {
-        name: skill.name,
+        name: skill.slug,
         slug: found.slug
       });
       if (renamed == null) {
@@ -32369,14 +32450,23 @@ ${moduleNames.length > 0 ? moduleNames.map((mod) => `- ${mod}`).join("\n") : "-
 var plugin = definePlugin({
   async setup(ctx) {
     ctx.data.register("templates", async () => {
-      const cfg = await ctx.config.get() ?? {};
-      const templates = loadTemplates(await ensureTemplatesDir(cfg));
-      if (templates.loadErrors.length > 0) {
-        for (const err of templates.loadErrors) {
-          ctx.logger.info(`\u26A0 Template load warning: ${err}`);
+      try {
+        const cfg = await ctx.config.get() ?? {};
+        const syncOffer = emptyTemplateSyncOffer(cfg);
+        if (syncOffer) {
+          const error61 = `Configured templatesPath "${syncOffer.targetDir}" is empty. ` + (syncOffer.canSync ? "Confirm sync from the configured template URL to populate it." : "Set templatesRepoUrl in plugin settings to enable sync, or clear templatesPath to use bundled templates.");
+          return { presets: [], modules: [], roles: [], loadErrors: [error61], error: error61, syncOffer };
+        }
+        const templates = loadTemplates(await ensureTemplatesDir(cfg));
+        for (const warning of templates.loadErrors) {
+          ctx.logger.info(`\u26A0 Template load warning: ${warning}`);
         }
+        return templates;
+      } catch (err) {
+        const error61 = err instanceof Error ? err.message : String(err);
+        ctx.logger.info(`Template load failed: ${error61}`);
+        return { presets: [], modules: [], roles: [], loadErrors: [error61], error: error61 };
       }
-      return templates;
     });
     ctx.actions.register("refresh-templates", async () => {
       try {
@@ -32387,6 +32477,19 @@ var plugin = definePlugin({
         return { ok: false, error: err instanceof Error ? err.message : String(err) };
       }
     });
+    ctx.actions.register("sync-empty-templates", async (params) => {
+      try {
+        const cfg = await ctx.config.get() ?? {};
+        const targetDir = syncEmptyTemplates(cfg, params.confirmation);
+        ctx.logger.info("Synced empty configured template directory.");
+        return { ok: true, targetDir };
+      } catch {
+        return {
+          ok: false,
+          error: "Template sync failed. Check the configured GitHub tree URL, permissions, and that the directory is still empty. Existing files were not overwritten. Reload to retry."
+        };
+      }
+    });
     ctx.actions.register("check-update", async () => {
       try {
         const latestVersion = await fetchLatestPluginVersion();
@@ -33551,6 +33654,8 @@ var plugin = definePlugin({
   async onValidateConfig(config2) {
     const paperclipUrl = config2.paperclipUrl || process.env.PAPERCLIP_PUBLIC_URL || "http://localhost:3100";
     try {
+      const templates = loadTemplates(await ensureTemplatesDir(config2));
+      if (templates.loadErrors.length > 0) return { ok: false, errors: templates.loadErrors };
       const client = new PaperclipClient(paperclipUrl, {
         email: config2.paperclipEmail || "",
         password: config2.paperclipPassword || ""