@tenyokjs/devdevian-cli 0.1.0-alpha.1 → 0.3.0-alpha.1

package/README.md

@@ -4,12 +4,52 @@ An official terminal client for [Devdevian](https://devdevian.vercel.app), the o
 
 ```sh
 npm install -g @tenyokjs/devdevian-cli@alpha
-devdevian login
-devdevian
+devdevian open     # a separate terminal window
+# or: devdevian tui  (the current terminal)
 ```
 
 Login opens a browser. Compare the code shown in the terminal, sign in to Devdevian, then authorize the terminal. Google, GitHub and email login happen on the website; no provider credentials are collected by this package. Use `--no-open` to open the printed address yourself, including when connecting over SSH.
 
+## Live workspace
+
+The default `devdevian` command and `devdevian tui` open an alternate terminal screen. Navigation, conversations, inline forms, previews and search update in that screen; exiting restores your normal terminal. The blue and purple layout adapts to the terminal size, with compact navigation below 90 columns. Minimum size: 60 columns × 18 rows.
+
+- **Tab** switches between navigation, content and the command bar. **↑/↓** select; **Enter** opens; **Esc** goes back.
+- **/** focuses search and commands: `/feed`, `/inbox`, `/search query`, `/open 142`, `/ask`, `/review`, `/drafts`, `/communities`, `/devices`, `/help`, `/logout`, `/quit`.
+- **←/→** switch conversation tabs; **Space** reads the selected reply/remark in full. **[ / ]** paginate; **Page Up/Down** scroll.
+- **N** creates a conversation (a community on the Communities screen); **A** asks a question; **R** replies inside a conversation; **Shift+R** refreshes.
+- **C** comments on snippet lines; **E/D** edit/delete your own feedback; **S** resolves/reopens a code remark as the publication author; **!** reports selected code feedback.
+- In forms, **Tab/Shift+Tab** change fields, arrows choose options or move the text cursor, **Enter** adds a line, **Ctrl+S** opens the preview. Publication requires a separate confirmation; Escape asks before discarding a draft. Drafts auto-save locally after a short pause and can be restored from **Local drafts** or `/drafts`.
+- **Ctrl+C** exits. With an unsent draft, confirm saving and leaving or press Ctrl+C again to force exit.
+
+`devdevian open` launches Terminal on macOS, Windows Terminal on Windows, or GNOME Terminal/Konsole/xterm on a Linux desktop. A graphical desktop and an installed supported terminal are required; over SSH and inside an editor, use `devdevian tui`. Window launchers still need platform-specific user testing; terminal rendering and input are covered by macOS/Linux pseudo-terminal checks.
+
+Pages have a bounded 30-second in-memory cache. Refresh explicitly with Shift+R. Network errors stay inside the workspace; failed writes are never automatically retried. Existing web permissions and server validation apply to every operation.
+
+## Project files and Git changes
+
+Start inside your project (`cd PROJECT1 && devdevian tui`) or use `devdevian tui --project /path/to/PROJECT1`. `devdevian open --project /path/to/PROJECT1` carries the same project into a new terminal window. The project root stays fixed for the session.
+
+In a **Code review** form:
+
+1. Press **Ctrl+O** to browse project files, or **Ctrl+G** to browse Git changes. These shortcuts work from any review field. Enter on an empty Code file field also opens the explorer.
+2. **↑/↓** select entries; **Enter** opens a directory or previews a file; **←/Backspace** goes to the parent directory. **/** filters names in the current directory, **H** shows hidden files and **G** switches Files/Git changes. Wide terminals show the file list next to the preview; compact terminals use the available width for code.
+3. In a file preview, use **↑/↓** or **Page Up/Down** to move. **Space** starts a line selection; move to extend it, or press Space again to reset. **←/→** scroll long lines horizontally. **Enter** uses the file/range; **Esc** returns to the list.
+4. In Git changes, **T** switches **unstaged/staged**. The preview initially includes all hunks for one file; **[ / ]** choose the whole patch or an individual hunk. **Enter** uses that selection. Untracked files are selected through Files; binary diffs/submodules are excluded.
+5. Fill in title, focus and context. **Ctrl+S** shows the exact code and audience to publish. Publication requires a separate confirmation.
+
+The explorer excludes `.git`, dependency/build directories, symlinks, common environment/credential/key filenames and (inside Git repositories) ignored paths. No content scanner can identify every secret: inspect the publication preview before confirming. Git is required for changes and `.gitignore` detection; ordinary file selection also works without Git. Git reads disable external diff/textconv/fsmonitor helpers and never stage, commit, reset or execute project code.
+
+File previews accept UTF-8 text up to **512 KiB**; a published snippet/patch is **10–20,000 characters**. Large files can be narrowed to a range and large patches to one hunk. Git patches appear as ordinary review snippets on the website; review line numbers count the **published patch including headers**, not the original source file. Source paths are relative to the project. If the selected patch changes before the publication preview, selection must be repeated. Publication uses the confirmed preview snapshot.
+
+## Local drafts
+
+Publication, reply, feedback, edit and community forms save locally after a **450 ms** pause. Explicit draft discard removes that draft; successful publication removes it too. `/drafts` lists saved drafts for the current **server, account and project directory**. Nothing is uploaded by autosave. Switching accounts or projects does not expose another scope's drafts.
+
+Draft files live under the CLI credentials directory in `drafts/<scope>/`, with Unix file permissions `0600` and new directories `0700`. They contain your text and file/diff selection descriptors, **not copies of selected source files or patches**. They are local JSON files, not encrypted; protect your OS account and do not commit/share this directory. The history retains up to **20 drafts per scope for 30 days**. An abrupt termination may lose the most recent input before autosave; these drafts are not a backup service.
+
+Restoring a review rereads the local source at the publication preview. Changed Git selections require reselection. A private audience that is no longer accessible is preserved as unavailable until you explicitly choose an available audience; it never silently becomes public.
+
 ## Everyday commands
 
 ```sh
@@ -47,6 +87,6 @@ For local development use `devdevian login --host http://127.0.0.1:4173`. Remote
 
 ## Alpha scope
 
-This first release covers login/logout, inbox, paginated feeds and search, discussions and replies, questions, code review creation, line feedback and feedback threads/status, and community discovery/private publication. Profile/media editing, events administration and moderation remain available in the browser. There is no offline mode or automatic GitHub repository synchronization.
+This alpha covers login/logout, inbox, paginated feeds and search, discussions and replies, questions, code review creation, line feedback and feedback threads/status, and community discovery, creation and private publication. Profile/media editing, events administration and moderation remain available in the browser. There is no offline mode or automatic GitHub repository synchronization.
 
 Source, contributions and issue reporting: [Tenyokj/devdevian](https://github.com/Tenyokj/devdevian). Report security issues through the repository's [security policy](https://github.com/Tenyokj/devdevian/blob/main/SECURITY.md), not a public issue containing private data. Licensed GPL-3.0-only.

package/bin/devdevian.mjs

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import { fileURLToPath } from "node:url";
+import packageInfo from "../package.json" with { type: "json" };
 import { parseArgs } from "node:util";
 import { readFile, writeFile, mkdtemp, rm } from "node:fs/promises";
 import { hostname, tmpdir } from "node:os";
@@ -14,7 +16,7 @@ import {
   removeConfig,
   clean,
 } from "../lib/client.mjs";
-const version = "0.1.0-alpha.1";
+const version = packageInfo.version;
 const options = {
   host: { type: "string" },
   page: { type: "string" },
@@ -32,6 +34,7 @@ const options = {
   revision: { type: "string" },
   "reply-id": { type: "string" },
   name: { type: "string" },
+  project: { type: "string" },
   yes: { type: "boolean" },
   json: { type: "boolean" },
   editor: { type: "boolean" },
@@ -71,7 +74,9 @@ const positive = (value, label = "ID") => {
 };
 const help = `Devdevian CLI ${version} · alpha
 
-  devdevian                       Interactive menu
+  devdevian                       Live terminal workspace
+  devdevian tui                   Live workspace in this terminal
+  devdevian open                  Open the workspace in a new terminal window
   devdevian login                 Authorize in your browser
   devdevian logout                Revoke this terminal
   devdevian whoami
@@ -90,6 +95,7 @@ const help = `Devdevian CLI ${version} · alpha
   devdevian review reopen POST_ID REVIEW_ID
   devdevian communities [--page 2]
 
+  --project PATH     Root directory for the live file/diff picker (default: current directory)
   --community ID     Publish to an approved private community
   --editor           Write text in $VISUAL / $EDITOR
   --json             Machine-readable output
@@ -455,59 +461,7 @@ async function execute(args, flags) {
   }
   throw Error("Unknown command. Run devdevian --help.");
 }
-async function menu(flags) {
-  const config = await loadConfig();
-  if (!config) {
-    out("Devdevian · developer commons");
-    if (
-      (await prompt("Connect your account? (yes/no)", "yes")).toLowerCase() !==
-      "yes"
-    )
-      return;
-    await login(flags);
-  }
-  const identityConfig = await loadConfig(),
-    identity = await client(identityConfig.origin, identityConfig.token)("/me");
-  while (true) {
-    out(
-      `\nDEVDEVIAN · @${identity.user.username}\n  1  Inbox\n  2  Public feed\n  3  Open conversation\n  4  Ask a question\n  5  Request code review\n  6  Communities\n  7  Review feedback\n  8  Search\n  9  Reply to a conversation\n  0  Exit`,
-    );
-    const choice = await prompt("Choose", "0");
-    if (choice === "0") return;
-    try {
-      if (choice === "1") await execute(["inbox"], flags);
-      else if (choice === "2") await execute(["feed"], flags);
-      else if (choice === "3")
-        await execute(["conversation", "open", await prompt("Post ID")], flags);
-      else if (choice === "4") await execute(["ask"], flags);
-      else if (choice === "5") await execute(["review", "create"], flags);
-      else if (choice === "6") await execute(["communities"], flags);
-      else if (choice === "7") {
-        const post = await prompt("Review post ID");
-        await execute(["review", "list", post], flags);
-        const action = await prompt(
-          "Action: thread / comment / reply / resolve / reopen / back",
-          "back",
-        );
-        if (action !== "back") {
-          const id = action === "comment" ? null : await prompt("Feedback ID");
-          const next = { ...flags };
-          if (action === "comment") {
-            next["start-line"] = await prompt("Start line");
-            next["end-line"] = await prompt("End line", next["start-line"]);
-          }
-          await execute(["review", action, post, ...(id ? [id] : [])], next);
-        }
-      } else if (choice === "9")
-        await execute(["reply", await prompt("Post ID")], flags);
-      else if (choice === "8")
-        await execute(["search", await prompt("Search")], flags);
-      else out("Choose one of the listed actions.");
-    } catch (e) {
-      out("Error: " + e.message);
-    }
-  }
-}
+
 try {
   const { values, positionals } = parseArgs({
     options,
@@ -515,8 +469,19 @@ try {
     strict: true,
   });
   if (!positionals.length && !values.help && !values.version)
-    await menu(values);
-  else await execute(positionals, values);
+    await (await import("../lib/tui.mjs")).startTui(values);
+  else if (positionals[0] === "tui")
+    await (await import("../lib/tui.mjs")).startTui(values);
+  else if (positionals[0] === "open") {
+    const args = [];
+    for (const key of ["host", "name", "project"])
+      if (values[key]) args.push("--" + key, values[key]);
+    if (values["no-open"]) args.push("--no-open");
+    await (
+      await import("../lib/window.mjs")
+    ).openWindow({ entry: fileURLToPath(import.meta.url), args });
+    out("Devdevian opened in a separate terminal window.");
+  } else await execute(positionals, values);
 } catch (e) {
   process.stderr.write("Devdevian: " + clean(e.message) + "\n");
   process.exitCode = 1;

package/lib/client.mjs

@@ -90,7 +90,7 @@ export async function removeConfig() {
 }
 export function client(origin, token = null) {
   origin = originOf(origin);
-  return async (path, { method = "GET", body } = {}) => {
+  return async (path, { method = "GET", body, signal } = {}) => {
     if (!path.startsWith("/") || path.startsWith("//"))
       throw Error("Invalid API path.");
     let response;
@@ -104,9 +104,12 @@ export function client(origin, token = null) {
           ...(token ? { Authorization: "Bearer " + token } : {}),
         },
         body: body ? JSON.stringify(body) : undefined,
-        signal: AbortSignal.timeout(20000),
+        signal: signal
+          ? AbortSignal.any([signal, AbortSignal.timeout(20000)])
+          : AbortSignal.timeout(20000),
       });
-    } catch {
+    } catch (error) {
+      if (signal?.aborted) throw error;
       throw Error(
         "Could not reach Devdevian. Check your connection and server address.",
       );

package/lib/drafts.mjs

@@ -0,0 +1,119 @@
+import {
+  mkdir,
+  lstat,
+  readdir,
+  readFile,
+  writeFile,
+  rename,
+  unlink,
+} from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { createHash, randomBytes } from "node:crypto";
+import { configFile } from "./client.mjs";
+const digest = (value) =>
+  createHash("sha256").update(JSON.stringify(value)).digest("hex");
+const MAX = 128 * 1024,
+  TTL = 30 * 86400000;
+export function draftIdentity(form) {
+  return /^[a-f0-9]{64}$/.test(form.draftId || "")
+    ? form.draftId
+    : digest([
+        form.kind,
+        form.postId || "",
+        form.url || "",
+        form.parentId || "",
+      ]);
+}
+export class DraftStore {
+  constructor({ origin, userId, root, env = process.env }) {
+    this.scope = digest([origin, userId, root]);
+    this.directory = join(dirname(configFile(env)), "drafts", this.scope);
+    this.root = root;
+  }
+  async ensure() {
+    const base = dirname(dirname(this.directory));
+    await mkdir(base, { recursive: true, mode: 0o700 });
+    for (const directory of [base, dirname(this.directory), this.directory]) {
+      await mkdir(directory, { recursive: true, mode: 0o700 });
+      const info = await lstat(directory);
+      if (!info.isDirectory() || info.isSymbolicLink())
+        throw Error("The draft directory must be a real directory.");
+    }
+  }
+  async read(id) {
+    if (!/^[a-f0-9]{64}$/.test(id)) throw Error("Invalid draft ID.");
+    const file = join(this.directory, id + ".json");
+    const info = await lstat(file);
+    if (!info.isFile() || info.isSymbolicLink() || info.size > MAX)
+      throw Error("Invalid draft file.");
+    if (process.platform !== "win32" && info.mode & 0o077)
+      throw Error("Draft file permissions must be 600.");
+    const record = JSON.parse(await readFile(file, "utf8"));
+    if (
+      !Number.isFinite(record.savedAt) ||
+      record.version !== 1 ||
+      record.scope !== this.scope ||
+      record.id !== id ||
+      Date.now() - record.savedAt > TTL ||
+      record.savedAt > Date.now() + 60000 ||
+      !["publication", "reply", "line", "edit", "community"].includes(
+        record.form?.kind,
+      ) ||
+      !record.form?.values ||
+      typeof record.form.values !== "object" ||
+      Array.isArray(record.form.values)
+    )
+      throw Error("Draft expired or is invalid.");
+    return record;
+  }
+  async list() {
+    await this.ensure();
+    const names = await readdir(this.directory),
+      rows = [];
+    for (const name of names) {
+      if (!/^[a-f0-9]{64}\.json$/.test(name)) continue;
+      try {
+        rows.push(await this.read(name.slice(0, -5)));
+      } catch {
+        /* A corrupt or expired local draft never prevents opening the workspace. */
+      }
+    }
+    return rows.sort((a, b) => b.savedAt - a.savedAt).slice(0, 20);
+  }
+  async save(form) {
+    if (
+      ["open", "report"].includes(form.kind) ||
+      !["title", "body", "name", "description", "file", "review_focus"].some(
+        (key) => String(form.values[key] || "").trim(),
+      )
+    )
+      return;
+    await this.ensure();
+    const id = draftIdentity(form),
+      record = { version: 1, id, scope: this.scope, savedAt: Date.now(), form };
+    const body = JSON.stringify(record);
+    if (Buffer.byteLength(body) > MAX)
+      throw Error("This draft is too large to save locally.");
+    const temp = join(this.directory, "." + randomBytes(12).toString("hex"));
+    try {
+      await writeFile(temp, body, { mode: 0o600, flag: "wx" });
+      await rename(temp, join(this.directory, id + ".json"));
+    } finally {
+      await unlink(temp).catch((e) => {
+        if (e.code !== "ENOENT") throw e;
+      });
+    }
+    const rows = await this.list();
+    const keep = new Set(rows.map((row) => row.id));
+    for (const file of await readdir(this.directory))
+      if (/^[a-f0-9]{64}\.json$/.test(file) && !keep.has(file.slice(0, -5)))
+        await this.remove(file.slice(0, -5));
+    return id;
+  }
+  async remove(id) {
+    if (!/^[a-f0-9]{64}$/.test(id)) throw Error("Invalid draft ID.");
+    await unlink(join(this.directory, id + ".json")).catch((e) => {
+      if (e.code !== "ENOENT") throw e;
+    });
+  }
+}