@tplog/pi-zendy 0.3.8 → 0.4.1

package/README.md

@@ -14,6 +14,7 @@ zendy is a single pi extension that provides:
 - **Slash Commands** — `/zendy-config` to set up credentials, `/zendy-status` to check connectivity.
 - **Skill** — a `zendy` skill (also `/skill:zendy`) that teaches the agent the ticket-analysis workflow, so "analyze ticket #1959" reliably uses the right tools in the right order.
 - **Session Safety** — Automatic workspace isolation and cleanup for source code analysis.
+- **Source Registry** — Bundled Dify source repository defaults. Enterprise repos use SSH URLs, so GitHub SSH permissions remain the access gate.
 
 Typical workflow:
 
@@ -73,19 +74,7 @@ The agent can call these tools directly:
 | `zendy_whoami` | Check the currently authenticated Zendesk identity |
 | `zendy_helm_get` | Query Helm chart values, images, validation by version |
 | `zendy_kg_search` | Semantic search over historical tickets |
-| `zendy_source_status` | Check source analysis workspace |
-
-## Legacy Launcher
-
-For users of the old `zendy` CLI:
-
-```bash
-npm install -g @tplog/pi-zendy
-zendy
-```
-
-The legacy launcher starts pi with the zendy extension and system prompt. It still supports
-`zendy preflight` and `zendy cleanup-src` as standalone subcommands.
+| `zendy_source_status` | Check source analysis workspace and bundled Dify source repository registry |
 
 ## How it works
 
@@ -93,3 +82,5 @@ zendy registers as a pi extension package. The extension provides tools (callabl
 slash commands (for human engineers), and session lifecycle hooks (workspace creation, cleanup).
 All data access goes through direct REST APIs — no `zcli`, `zendesk-kg`, or other CLI tools
 are required at runtime.
+
+For source analysis, zendy ships default repository entries for Dify Enterprise backend/frontend and related public Dify repositories. The Enterprise entries are SSH URLs; users without GitHub SSH access can install zendy, but source clone attempts will fail at Git authentication.

package/dist/config/schema.d.ts

@@ -1,6 +1,7 @@
 export interface ZendyConfig {
     zendesk?: ZendeskConfig;
     zendeskKg?: ZendeskKgConfig;
+    sourceRepos?: Record<string, SourceRepoConfig>;
 }
 export interface ZendeskConfig {
     subdomain?: string;
@@ -11,4 +12,11 @@ export interface ZendeskKgConfig {
     apiUrl?: string;
     apiKey?: string;
 }
+export interface SourceRepoConfig {
+    url: string;
+    description?: string;
+    visibility?: "private" | "public";
+    area?: "backend" | "frontend" | "oss" | "plugin" | "sandbox";
+}
 export declare const DEFAULT_KG_API_URL = "https://zendesk-ticket-retriever.vercel.app";
+export declare const DEFAULT_SOURCE_REPOS: Record<string, SourceRepoConfig>;

package/dist/config/schema.js

@@ -1,2 +1,34 @@
 // Config schema and types for zendy configuration (~/.zendy/config.json).
 export const DEFAULT_KG_API_URL = "https://zendesk-ticket-retriever.vercel.app";
+export const DEFAULT_SOURCE_REPOS = {
+    enterpriseBackend: {
+        url: "git@github.com:langgenius/dify-enterprise.git",
+        description: "Dify Enterprise backend code",
+        visibility: "private",
+        area: "backend",
+    },
+    enterpriseFrontend: {
+        url: "git@github.com:langgenius/dify-enterprise-frontend.git",
+        description: "Dify Enterprise frontend code",
+        visibility: "private",
+        area: "frontend",
+    },
+    difyOss: {
+        url: "https://github.com/langgenius/dify.git",
+        description: "Open-source Dify repository",
+        visibility: "public",
+        area: "oss",
+    },
+    pluginDaemon: {
+        url: "https://github.com/langgenius/dify-plugin-daemon.git",
+        description: "Dify plugin daemon",
+        visibility: "public",
+        area: "plugin",
+    },
+    sandbox: {
+        url: "https://github.com/langgenius/dify-sandbox.git",
+        description: "Dify sandbox",
+        visibility: "public",
+        area: "sandbox",
+    },
+};

package/dist/config/store.d.ts

@@ -1,4 +1,4 @@
-import type { ZendyConfig } from "./schema.js";
+import { type ZendyConfig } from "./schema.js";
 export declare function getConfig(): ZendyConfig;
 export declare function writeConfig(config: ZendyConfig): void;
 export declare function configPath(): string;

package/dist/config/store.js

@@ -3,6 +3,7 @@
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
+import { DEFAULT_SOURCE_REPOS } from "./schema.js";
 const CONFIG_DIR = join(homedir(), ".zendy");
 const CONFIG_PATH = join(CONFIG_DIR, "config.json");
 // ── Env overrides ─────────────────────────────────────────────────────
@@ -52,6 +53,10 @@ export function getConfig() {
             ...fileConfig.zendeskKg,
             ...envK,
         },
+        sourceRepos: {
+            ...DEFAULT_SOURCE_REPOS,
+            ...fileConfig.sourceRepos,
+        },
     };
 }
 export function writeConfig(config) {

package/extensions/commands.ts

@@ -66,6 +66,9 @@ async function configCommand(_args: string, ctx: {
     lines.push(
       `KG: ${c.zendeskKg?.apiKey ? `apiKey=*** (set), apiUrl=${c.zendeskKg.apiUrl || "default"}` : "not configured"}`,
     );
+    const repoEntries = Object.entries(c.sourceRepos ?? {});
+    const privateCount = repoEntries.filter(([, repo]) => repo.visibility === "private").length;
+    lines.push(`Source repos: ${repoEntries.length} configured (${privateCount} private SSH-gated)`);
     ctx.ui.notify(`[zendy-config]\n${lines.join("\n")}`, "info");
   }
 }
@@ -105,6 +108,10 @@ async function statusCommand(_args: string, ctx: {
     srcDir ? `  ✓ Source workspace — ${srcDir}` : "  - Source workspace — not active (will be created on session start)",
   );
 
+  const repoEntries = Object.entries(getConfig().sourceRepos ?? {});
+  const privateCount = repoEntries.filter(([, repo]) => repo.visibility === "private").length;
+  lines.push(`  ✓ Source repos — ${repoEntries.length} configured (${privateCount} private SSH-gated)`);
+
   ctx.ui.notify(`Zendy Status:\n${lines.join("\n")}`, hasIssue ? "error" : "info");
 }
 

package/extensions/tools.ts

@@ -6,11 +6,45 @@ import { Type } from "typebox";
 import * as zendesk from "../dist/clients/zendesk.js";
 import * as helm from "../dist/clients/helm-watchdog.js";
 import * as kg from "../dist/clients/zendesk-kg.js";
+import { getConfig } from "../dist/config/store.js";
 
+// IMPORTANT: only `content` is sent to the model; `details` is UI/extension
+// metadata the model never sees (verified empirically against pi 0.79). Any
+// data the model must reason about has to be serialized into the text.
 function textResult(text: string, details: Record<string, unknown> = {}) {
   return { content: [{ type: "text" as const, text }], details };
 }
 
+function fmtComment(c: zendesk.SlimComment, users: Map<number, string>): string {
+  const who = users.get(c.author_id) ?? `user:${c.author_id}`;
+  const vis = c.public ? "public" : "internal";
+  return `--- comment by ${who} (${vis}, ${c.created_at}) ---\n${c.plain_body ?? c.body ?? ""}`;
+}
+
+function fmtTicket(r: zendesk.TicketResult): string {
+  const t = r.ticket;
+  const users = new Map<number, string>();
+  if (r.requester) users.set(r.requester.id, `${r.requester.name} <${r.requester.email}> (requester)`);
+  if (r.assignee) users.set(r.assignee.id, `${r.assignee.name} <${r.assignee.email}> (assignee)`);
+  const customFields = (t.custom_fields ?? []).filter((f) => f.value !== null && f.value !== "");
+  const lines = [
+    `# Ticket #${t.id}: ${t.subject}`,
+    `status: ${t.status} | priority: ${t.priority ?? "-"} | created: ${t.created_at} | updated: ${t.updated_at}`,
+    `requester: ${r.requester ? `${r.requester.name} <${r.requester.email}>` : t.requester_id}`,
+    `assignee: ${r.assignee ? `${r.assignee.name} <${r.assignee.email}>` : t.assignee_id ?? "-"}`,
+    `tags: ${(t.tags ?? []).join(", ") || "-"}`,
+    customFields.length ? `custom_fields: ${JSON.stringify(customFields)}` : "",
+    "",
+    `## Description`,
+    t.description ?? "",
+  ].filter(Boolean);
+  if (r.comments?.length) {
+    lines.push("", `## Comments (${r.comments.length})`);
+    for (const c of r.comments) lines.push(fmtComment(c, users));
+  }
+  return lines.join("\n");
+}
+
 function registerZendeskTools(pi: ExtensionAPI): void {
   pi.registerTool({
     name: "zendy_ticket_get",
@@ -26,15 +60,12 @@ function registerZendeskTools(pi: ExtensionAPI): void {
     }),
     async execute(_toolCallId: string, params: { ticketId: number }, signal?: AbortSignal) {
       const result = await zendesk.getTicketFull(params.ticketId, signal);
-      return textResult(
-        `Fetched Zendesk ticket #${result.ticket.id}: "${result.ticket.subject}" (${result.ticket.status}), ${result.comments?.length ?? 0} comments.`,
-        {
-          ticket: result.ticket,
-          comments: result.comments,
-          requester: result.requester,
-          assignee: result.assignee,
-        },
-      );
+      return textResult(fmtTicket(result), {
+        ticket: result.ticket,
+        comments: result.comments,
+        requester: result.requester,
+        assignee: result.assignee,
+      });
     },
   });
 
@@ -113,31 +144,52 @@ function registerHelmTools(pi: ExtensionAPI): void {
       switch (params.resource) {
         case "version": {
           const data = await helm.getVersion(params.version!, signal);
-          return textResult(`Helm Watchdog version metadata for ${params.version}.`, { version: params.version, data });
+          return textResult(
+            `Helm Watchdog version metadata for ${params.version}:\n${JSON.stringify(data, null, 2)}`,
+            { version: params.version, data },
+          );
         }
         case "values": {
           const data = await helm.getValues(params.version!, signal);
-          return textResult(`Helm Watchdog values.yaml for ${params.version}.`, { version: params.version, data });
+          return textResult(
+            `values.yaml for chart ${params.version}:\n\n${data}`,
+            { version: params.version, data },
+          );
         }
         case "images": {
           const data = await helm.getImages(params.version!, params.validateImages, signal);
-          return textResult(`Helm Watchdog images for ${params.version} (${data.length} images).`, { version: params.version, images: data });
+          return textResult(
+            `Images for chart ${params.version} (${data.length}):\n${JSON.stringify(data, null, 2)}`,
+            { version: params.version, images: data },
+          );
         }
         case "validation": {
           const data = await helm.getValidation(params.version!, params.status, signal);
-          return textResult(`Helm Watchdog validation for ${params.version}.`, { version: params.version, results: data });
+          return textResult(
+            `Validation for chart ${params.version}:\n${JSON.stringify(data, null, 2)}`,
+            { version: params.version, results: data },
+          );
         }
         case "latest": {
           const data = await helm.getLatest(params.versionOnly, signal);
-          return textResult("Helm Watchdog latest version.", { data });
+          return textResult(
+            `Latest chart version: ${typeof data === "string" ? data : JSON.stringify(data, null, 2)}`,
+            { data },
+          );
         }
         case "versions": {
           const data = await helm.listVersions(signal);
-          return textResult(`Helm Watchdog cached versions (${data.length} entries).`, { versions: data });
+          return textResult(
+            `Cached chart versions (${data.length}):\n${JSON.stringify(data, null, 2)}`,
+            { versions: data },
+          );
         }
         case "cache": {
           const data = await helm.getCache(signal);
-          return textResult("Helm Watchdog cache metadata.", { data });
+          return textResult(
+            `Cache metadata:\n${JSON.stringify(data, null, 2)}`,
+            { data },
+          );
         }
       }
     },
@@ -178,8 +230,15 @@ function registerKnowledgeGraphTools(pi: ExtensionAPI): void {
           ...(params.status ? { status: params.status } : {}),
         },
       }, signal);
+      const blocks = result.results.map((r, i) => [
+        `[${i + 1}] ticketId: ${r.ticketId} — ${r.subject}`,
+        `    status: ${r.status} | priority: ${r.priority} | created: ${r.createdAt} | versions: ${(r.versions ?? []).join(", ") || "-"} | rrfScore: ${r.rrfScore}`,
+        r.quickSummary ? `    quick: ${r.quickSummary}` : "",
+        r.issueSummary ? `    issue: ${r.issueSummary}` : "",
+        r.solutionSummary ? `    solution: ${r.solutionSummary}` : "",
+      ].filter(Boolean).join("\n"));
       return textResult(
-        `KG search returned ${result.results.length} results for "${result.queryText}". Cite ticketId values from details.results.`,
+        `KG search returned ${result.results.length} results for "${result.queryText}". Cite ticketId values when summarizing.\n\n${blocks.join("\n\n")}`,
         { results: result.results, queryText: result.queryText },
       );
     },
@@ -190,14 +249,27 @@ function registerSourceTools(pi: ExtensionAPI): void {
   pi.registerTool({
     name: "zendy_source_status",
     label: "Zendy Source Status",
-    description: "Report the zendy source-analysis workspace path and whether source cloning is authorized.",
-    promptSnippet: "Check source workspace status with zendy_source_status.",
+    description: "Report the zendy source-analysis workspace path, bundled source repositories, and source-cloning authorization rules.",
+    promptSnippet: "Check source workspace and repo registry with zendy_source_status.",
     parameters: Type.Object({}),
     async execute() {
-      return textResult("Source workspace status.", {
-        workspace: process.env["ZENDY_SRC_DIR"] ?? null,
-        note: "Source cloning/search requires explicit user permission per zendy workflow rules. Ask before cloning private source.",
+      const workspace = process.env["ZENDY_SRC_DIR"] ?? null;
+      const repos = getConfig().sourceRepos ?? {};
+      const repoLines = Object.entries(repos).map(([name, repo]) => {
+        const visibility = repo.visibility ?? "public";
+        const access = visibility === "private" ? "SSH access required" : "public";
+        return `- ${name}: ${repo.url} (${access})${repo.description ? ` — ${repo.description}` : ""}`;
       });
+      const note = "Source cloning/search requires explicit user permission per zendy workflow rules. Private Enterprise repos are SSH-gated; clone failures usually mean the user lacks GitHub access.";
+      return textResult(
+        [
+          `Source workspace: ${workspace ?? "(not active — created on session start)"}`,
+          "Configured source repositories:",
+          repoLines.length ? repoLines.join("\n") : "- (none configured)",
+          note,
+        ].join("\n"),
+        { workspace, repos, note },
+      );
     },
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tplog/pi-zendy",
-  "version": "0.3.8",
+  "version": "0.4.1",
   "description": "Pi package for Dify Enterprise support ticket analysis",
   "repository": {
     "type": "git",
@@ -8,9 +8,6 @@
   },
   "license": "MIT",
   "type": "module",
-  "bin": {
-    "zendy": "dist/index.js"
-  },
   "keywords": [
     "pi-package",
     "pi",

package/skills/zendy/SKILL.md

@@ -25,7 +25,7 @@ support engineer can analyze a ticket end-to-end without leaving the terminal.
 | `zendy_whoami` | Verify which Zendesk account is authenticated |
 | `zendy_helm_get` | Dify Helm chart data by exact version: values.yaml, images, validation, latest |
 | `zendy_kg_search` | Semantic search over historical tickets; returns ticketIds |
-| `zendy_source_status` | Check the source-analysis workspace path and authorization rules |
+| `zendy_source_status` | Check the source-analysis workspace, bundled repo registry, and authorization rules |
 
 Use these tools for all data access. Do not use zcli, curl, or any external Zendesk
 CLI. If credentials are missing, tell the user to run `/zendy-config`; check
@@ -55,6 +55,8 @@ connectivity with `/zendy-status`.
 - **Source code analysis requires explicit user permission.** If config-level
   analysis cannot settle the question, ask the user whether to check the source
   (e.g. "需要我去源码确认吗？") — never clone without permission. Use
-  `zendy_source_status` to find the workspace.
+  `zendy_source_status` to find the workspace and bundled source repo URLs.
+  Enterprise backend/frontend repos are SSH-gated; if cloning fails, ask the user
+  to confirm their GitHub SSH access rather than trying alternate credentials.
 - **Inspect before filtering.** On the first call to an unfamiliar response shape,
   look at the structure before writing filter expressions; never assume field names.

package/dist/cleanup-src.d.ts

@@ -1 +0,0 @@
-export declare function runCleanupCLI(argv: string[]): Promise<number>;

package/dist/cleanup-src.js

@@ -1,217 +0,0 @@
-// CLI entry for `zendy cleanup-src`.
-// Invoked from src/index.ts when the first user arg is "cleanup-src".
-import { createInterface } from "node:readline";
-import { scanCandidates, classifyCandidates, deleteCandidates, findOrphanSessionDirs, formatBytes, formatAge, } from "./source-cleanup.js";
-const USAGE = `
-Usage: zendy cleanup-src [options]
-
-Wipe Dify source clones and orphan zendy session dirs from /tmp.
-
-Defaults are aggressive by design: dify-enterprise is a private repo, and
-every extra minute of on-disk residency is an extra minute of exposure.
-
-Options:
-  --dry-run              Show what would be deleted; delete nothing.
-  --yes, -y              Skip the confirmation prompt in interactive mode.
-  --days N               Only delete dirs older than N days.
-                         (Without this flag, all matching dirs are deleted.)
-  --all                  Delete all matching dirs regardless of age (default).
-  --keep-last N          Keep the N most-recent matching dirs. Default: 0.
-  --min-age-minutes N    Never delete dirs modified within last N minutes.
-                         Default: 5 (protects an actively-running clone).
-  --pattern P1,P2        Comma-separated prefix patterns (end with *).
-                         Default: "dify-*,zendy-session-*".
-  --dir PATH             Base directory to scan. Default: /tmp.
-  --no-sweep-orphans     Skip the orphan-session sweep (orphan = session dir
-                         whose pid is no longer alive).
-  -h, --help             Show this help.
-
-Examples:
-  # Preview what would be deleted right now:
-  zendy cleanup-src --dry-run
-
-  # Cron/launchd safe invocation (non-interactive, only older than 1 day):
-  zendy cleanup-src --days 1 --yes
-`;
-function parseArgs(argv) {
-    const opts = {
-        dryRun: false,
-        yes: false,
-        all: true,
-        keepLast: 0,
-        minAgeMinutes: 5,
-        patterns: ["dify-*", "zendy-session-*"],
-        dir: "/tmp",
-        sweepOrphans: true,
-    };
-    for (let i = 0; i < argv.length; i++) {
-        const a = argv[i];
-        switch (a) {
-            case "-h":
-            case "--help":
-                return { kind: "help" };
-            case "--dry-run":
-                opts.dryRun = true;
-                break;
-            case "-y":
-            case "--yes":
-                opts.yes = true;
-                break;
-            case "--all":
-                opts.all = true;
-                opts.days = undefined;
-                break;
-            case "--no-sweep-orphans":
-                opts.sweepOrphans = false;
-                break;
-            case "--days": {
-                const v = argv[++i];
-                const n = v !== undefined ? parseInt(v, 10) : NaN;
-                if (Number.isNaN(n) || n < 0)
-                    return { kind: "error", message: `Invalid --days value: ${v}` };
-                opts.days = n;
-                opts.all = false;
-                break;
-            }
-            case "--keep-last": {
-                const v = argv[++i];
-                const n = v !== undefined ? parseInt(v, 10) : NaN;
-                if (Number.isNaN(n) || n < 0)
-                    return { kind: "error", message: `Invalid --keep-last value: ${v}` };
-                opts.keepLast = n;
-                break;
-            }
-            case "--min-age-minutes": {
-                const v = argv[++i];
-                const n = v !== undefined ? parseInt(v, 10) : NaN;
-                if (Number.isNaN(n) || n < 0)
-                    return { kind: "error", message: `Invalid --min-age-minutes value: ${v}` };
-                opts.minAgeMinutes = n;
-                break;
-            }
-            case "--pattern": {
-                const v = argv[++i];
-                if (!v)
-                    return { kind: "error", message: "--pattern requires a value" };
-                opts.patterns = v.split(",").map((s) => s.trim()).filter(Boolean);
-                if (opts.patterns.length === 0)
-                    return { kind: "error", message: "--pattern list cannot be empty" };
-                break;
-            }
-            case "--dir": {
-                const v = argv[++i];
-                if (!v)
-                    return { kind: "error", message: "--dir requires a path" };
-                opts.dir = v;
-                break;
-            }
-            default:
-                return { kind: "error", message: `Unknown option: ${a}` };
-        }
-    }
-    return { kind: "ok", opts };
-}
-function promptYesNo(question) {
-    return new Promise((resolve) => {
-        const rl = createInterface({ input: process.stdin, output: process.stderr });
-        rl.question(question, (answer) => {
-            rl.close();
-            resolve(/^y(es)?$/i.test(answer.trim()));
-        });
-    });
-}
-export async function runCleanupCLI(argv) {
-    const parsed = parseArgs(argv);
-    if (parsed.kind === "help") {
-        console.log(USAGE.trim());
-        return 0;
-    }
-    if (parsed.kind === "error") {
-        console.error(`Error: ${parsed.message}`);
-        console.error(USAGE.trim());
-        return 2;
-    }
-    const opts = parsed.opts;
-    const nowMs = Date.now();
-    const maxAgeMs = opts.all ? undefined : (opts.days ?? 0) * 86_400_000;
-    const minAgeMs = opts.minAgeMinutes * 60_000;
-    console.log(`Scanning ${opts.dir} for: ${opts.patterns.join(", ")}`);
-    const candidates = await scanCandidates(opts.dir, opts.patterns);
-    let orphanPaths = [];
-    if (opts.sweepOrphans) {
-        orphanPaths = await findOrphanSessionDirs(opts.dir);
-    }
-    const protectedPaths = [];
-    const zendySrcDir = process.env["ZENDY_SRC_DIR"];
-    if (zendySrcDir)
-        protectedPaths.push(zendySrcDir);
-    const classified = classifyCandidates(candidates, {
-        nowMs,
-        minAgeMs,
-        maxAgeMs,
-        keepLast: opts.keepLast,
-        protectedPaths,
-    });
-    // Orphans are always eligible for deletion — their owning process is gone.
-    // Merge them in, but never override a min-age or current-session protection.
-    const toDeleteByPath = new Map();
-    for (const c of classified.toDelete)
-        toDeleteByPath.set(c.path, c);
-    const protectedSet = new Set(classified.protected.map((c) => c.path));
-    for (const pp of protectedPaths)
-        protectedSet.add(pp);
-    for (const orphanPath of orphanPaths) {
-        if (protectedSet.has(orphanPath))
-            continue;
-        if (toDeleteByPath.has(orphanPath))
-            continue;
-        const cand = candidates.find((c) => c.path === orphanPath);
-        if (cand)
-            toDeleteByPath.set(cand.path, cand);
-    }
-    const toDelete = Array.from(toDeleteByPath.values());
-    console.log(``);
-    console.log(`Found ${candidates.length} matching director${candidates.length === 1 ? "y" : "ies"}:`);
-    for (const c of [...candidates].sort((a, b) => b.mtimeMs - a.mtimeMs)) {
-        const age = formatAge(nowMs - c.mtimeMs);
-        const size = formatBytes(c.sizeBytes);
-        let tag = "";
-        if (protectedPaths.includes(c.path))
-            tag = "  [protected: current session]";
-        else if (classified.protected.includes(c))
-            tag = "  [protected: within min-age]";
-        else if (classified.kept.includes(c))
-            tag = "  [kept]";
-        else if (toDeleteByPath.has(c.path)) {
-            tag = orphanPaths.includes(c.path) ? "  [delete: orphan session]" : "  [delete]";
-        }
-        console.log(`  ${c.path}  ${age}  ${size}${tag}`);
-    }
-    if (toDelete.length === 0) {
-        console.log(``);
-        console.log(`Nothing to delete.`);
-        return 0;
-    }
-    const totalBytes = toDelete.reduce((a, b) => a + b.sizeBytes, 0);
-    console.log(``);
-    console.log(`Will delete ${toDelete.length} director${toDelete.length === 1 ? "y" : "ies"}, freeing ${formatBytes(totalBytes)}.`);
-    if (opts.dryRun) {
-        console.log(``);
-        console.log(`[--dry-run] Nothing actually deleted. Re-run without --dry-run to delete.`);
-        return 0;
-    }
-    if (!opts.yes && process.stdin.isTTY) {
-        const ok = await promptYesNo(`Proceed? [y/N] `);
-        if (!ok) {
-            console.log(`Cancelled.`);
-            return 0;
-        }
-    }
-    const result = await deleteCandidates(toDelete);
-    console.log(``);
-    console.log(`Deleted ${result.deleted.length} director${result.deleted.length === 1 ? "y" : "ies"}, freed ${formatBytes(result.bytesFreed)}.`);
-    for (const e of result.errors) {
-        console.error(`  ! ${e.path}: ${e.error}`);
-    }
-    return result.errors.length > 0 ? 1 : 0;
-}

package/dist/index.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/index.js

@@ -1,115 +0,0 @@
-#!/usr/bin/env node
-import { join, dirname } from "node:path";
-import { execFileSync, spawn } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { createRequire } from "node:module";
-import { runPreflight, printPreflightReport, promptCoreMissing } from "./preflight.js";
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-const require = createRequire(import.meta.url);
-const pkg = require("../package.json");
-const VERSION = pkg.version;
-// Resolve package root (one level up from dist/)
-const PKG_ROOT = join(__dirname, "..");
-// The extension is loaded directly from the package's own extensions/ dir,
-// where zendy.ts and its sibling imports (tools.ts, commands.ts) live together.
-// This is the same file pi loads via the `pi.extensions` manifest field, so the
-// `zendy` launcher and `pi install` behave identically — no separate extraction step.
-const EXT_ZENDY = join(PKG_ROOT, "extensions", "zendy.ts");
-// Skill describing zendy and the ticket-analysis workflow. pi discovers it via
-// the pi.skills manifest field when installed as a package; the launcher passes
-// it explicitly so both load paths expose the same skill.
-const SKILL_ZENDY = join(PKG_ROOT, "skills", "zendy");
-function findPi() {
-    try {
-        return execFileSync("which", ["pi"], { encoding: "utf-8" }).trim();
-    }
-    catch {
-        process.stderr.write("Error: `pi` not found in PATH.\n" +
-            "Install it with: npm install -g @earendil-works/pi-coding-agent\n");
-        process.exit(1);
-    }
-}
-async function main() {
-    const userArgs = process.argv.slice(2);
-    // Intercept --version / -V / -v before passing to pi.
-    // pi also recognises -v as a version flag, so without this interception
-    // `zendy -v` would fall through and print pi's version, not zendy's.
-    if (userArgs.includes("--version") ||
-        userArgs.includes("-V") ||
-        userArgs.includes("-v")) {
-        console.log(`zendy ${VERSION}`);
-        return;
-    }
-    // Intercept the cleanup-src subcommand — runs standalone, without pi.
-    if (userArgs[0] === "cleanup-src") {
-        const { runCleanupCLI } = await import("./cleanup-src.js");
-        const code = await runCleanupCLI(userArgs.slice(1));
-        process.exit(code);
-    }
-    // Intercept the preflight subcommand — runs the same checks as startup,
-    // but on demand. `--json` emits machine-readable output (used by the
-    // /status slash command extension).
-    if (userArgs[0] === "preflight") {
-        const wantJson = userArgs.includes("--json");
-        const report = await runPreflight();
-        if (wantJson) {
-            process.stdout.write(JSON.stringify(report) + "\n");
-            return;
-        }
-        printPreflightReport(report);
-        if (report.results.every((r) => r.status === "ok")) {
-            process.stdout.write("All checks passed.\n");
-        }
-        return;
-    }
-    // Skip preflight if user explicitly opts out
-    if (!userArgs.includes("--skip-preflight")) {
-        const report = await runPreflight();
-        printPreflightReport(report);
-        if (report.hasFatal) {
-            process.exit(1);
-        }
-        if (report.hasCore) {
-            // Only prompt interactively when stdin is a TTY;
-            // in pipes / -p mode, just warn on stderr and continue.
-            if (process.stdin.isTTY) {
-                const shouldContinue = await promptCoreMissing();
-                if (!shouldContinue) {
-                    process.exit(0);
-                }
-            }
-        }
-    }
-    // Remove --skip-preflight before passing to pi
-    const filteredArgs = userArgs.filter((a) => a !== "--skip-preflight");
-    const pi = findPi();
-    const args = [
-        "--extension",
-        EXT_ZENDY,
-        "--skill",
-        SKILL_ZENDY,
-    ];
-    // Pass through all user arguments
-    args.push(...filteredArgs);
-    // Spawn pi, replacing this process (inherit stdio for interactive use)
-    const child = spawn(pi, args, {
-        stdio: "inherit",
-    });
-    child.on("error", (err) => {
-        process.stderr.write(`Failed to exec pi: ${err.message}\n`);
-        process.exit(1);
-    });
-    child.on("exit", (code, signal) => {
-        if (signal) {
-            process.kill(process.pid, signal);
-        }
-        else {
-            process.exit(code ?? 1);
-        }
-    });
-}
-main().catch((err) => {
-    process.stderr.write(`zendy: ${err.message}\n`);
-    process.exit(1);
-});

package/dist/preflight.d.ts

@@ -1,22 +0,0 @@
-export type CheckLevel = "fatal" | "core" | "enhanced";
-export type CheckStatus = "ok" | "missing" | "auth_error";
-export interface CheckResult {
-    name: string;
-    label: string;
-    level: CheckLevel;
-    status: CheckStatus;
-    hint: string;
-}
-export interface PreflightReport {
-    results: CheckResult[];
-    hasFatal: boolean;
-    hasCore: boolean;
-    hasEnhanced: boolean;
-}
-export declare function runPreflight(): Promise<PreflightReport>;
-export declare function printPreflightReport(report: PreflightReport): void;
-/**
- * Interactive prompt for core dependency failures.
- * Returns true if the user wants to continue, false to exit.
- */
-export declare function promptCoreMissing(): Promise<boolean>;

package/dist/preflight.js

@@ -1,264 +0,0 @@
-import { execFile } from "node:child_process";
-import { existsSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
-import { createInterface } from "node:readline";
-import { resolveZendeskConfig, resolveKgConfig } from "./config/resolve.js";
-import { DEFAULT_KG_API_URL } from "./config/schema.js";
-// ── Helpers ────────────────────────────────────────────────────────────
-function exec(cmd, args, timeoutMs = 5000) {
-    return new Promise((resolve) => {
-        execFile(cmd, args, { timeout: timeoutMs, encoding: "utf-8" }, (err, stdout, stderr) => {
-            if (err && err.code === "ENOENT") {
-                resolve({ code: 127, stdout: "", stderr: "" });
-                return;
-            }
-            // execFile callback err has an `exit code` when the process exits non-zero
-            const exitCode = err ? (err.status ?? 1) : 0;
-            resolve({ code: exitCode, stdout: stdout ?? "", stderr: stderr ?? "" });
-        });
-    });
-}
-// ── Individual checks ──────────────────────────────────────────────────
-// Common API key env vars that pi recognizes
-const PI_API_KEY_VARS = [
-    "ANTHROPIC_API_KEY",
-    "ANTHROPIC_OAUTH_TOKEN",
-    "OPENAI_API_KEY",
-    "GEMINI_API_KEY",
-    "GROQ_API_KEY",
-    "OPENROUTER_API_KEY",
-    "XAI_API_KEY",
-    "MISTRAL_API_KEY",
-    "AWS_ACCESS_KEY_ID",
-];
-async function checkPi() {
-    const base = {
-        name: "pi",
-        label: "AI Agent (pi)",
-        level: "fatal",
-    };
-    const result = await exec("pi", ["--version"]);
-    if (result.code === 127) {
-        return {
-            ...base,
-            status: "missing",
-            hint: "Install pi: npm install -g @earendil-works/pi-coding-agent",
-        };
-    }
-    // pi is installed — check if any auth is configured.
-    // Auth can be in ~/.pi/agent/auth.json (OAuth login) or via API key env vars.
-    const authFile = join(homedir(), ".pi", "agent", "auth.json");
-    const hasFileAuth = existsSync(authFile);
-    const hasEnvAuth = PI_API_KEY_VARS.some((v) => !!process.env[v]);
-    if (!hasFileAuth && !hasEnvAuth) {
-        return {
-            ...base,
-            status: "auth_error",
-            hint: "pi is installed but no provider is configured.\nRun: pi (to log in interactively)\nOr set an API key: export GEMINI_API_KEY=...",
-        };
-    }
-    return { ...base, status: "ok", hint: "" };
-}
-async function checkZendesk() {
-    const base = {
-        name: "zendesk",
-        label: "Zendesk access",
-        level: "core",
-    };
-    const cfg = resolveZendeskConfig();
-    if (!cfg) {
-        return {
-            ...base,
-            status: "missing",
-            hint: "Zendesk credentials not configured.\nUse /zendy-config in pi, or set env: ZENDY_ZENDESK_SUBDOMAIN, ZENDY_ZENDESK_EMAIL, ZENDY_ZENDESK_API_TOKEN",
-        };
-    }
-    try {
-        const ctrl = new AbortController();
-        const timeout = setTimeout(() => ctrl.abort(), 10000);
-        const auth = "Basic " + Buffer.from(`${cfg.email}/token:${cfg.apiToken}`).toString("base64");
-        const response = await fetch(`https://${cfg.subdomain}.zendesk.com/api/v2/users/me.json`, {
-            headers: { Authorization: auth, Accept: "application/json", "User-Agent": "zendy-preflight" },
-            signal: ctrl.signal,
-        });
-        clearTimeout(timeout);
-        if (response.ok) {
-            const data = await response.json();
-            return { ...base, status: "ok", hint: `Authenticated as ${data.user?.email ?? "unknown"}` };
-        }
-        return {
-            ...base,
-            status: "auth_error",
-            hint: `Zendesk API returned ${response.status}. Check credentials in ~/.zendy/config.json or env vars.`,
-        };
-    }
-    catch (e) {
-        const msg = e.message || String(e);
-        return {
-            ...base,
-            status: "auth_error",
-            hint: `Zendesk API unreachable: ${msg.slice(0, 200)}`,
-        };
-    }
-}
-async function checkZendeskKgApi() {
-    const base = {
-        name: "zendesk-kg",
-        label: "Zendesk Knowledge Graph",
-        level: "enhanced",
-    };
-    const cfg = resolveKgConfig();
-    if (!cfg) {
-        return {
-            ...base,
-            status: "missing",
-            hint: "Knowledge Graph API key not configured.\nUse /zendy-config in pi, or set env: ZENDY_KG_API_KEY",
-        };
-    }
-    try {
-        const ctrl = new AbortController();
-        const timeout = setTimeout(() => ctrl.abort(), 10000);
-        const baseUrl = cfg.apiUrl || DEFAULT_KG_API_URL;
-        const headers = {
-            Accept: "application/json",
-            Authorization: `Bearer ${cfg.apiKey}`,
-            "User-Agent": "zendy-preflight",
-        };
-        if (cfg.apiKey)
-            headers["x-api-key"] = cfg.apiKey;
-        const response = await fetch(`${baseUrl}/health`, { headers, signal: ctrl.signal });
-        clearTimeout(timeout);
-        if (response.ok) {
-            const data = await response.json();
-            return { ...base, status: "ok", hint: `Status: ${data.status ?? "ok"}` };
-        }
-        return {
-            ...base,
-            status: "auth_error",
-            hint: `KG API returned ${response.status}. Check credentials.`,
-        };
-    }
-    catch (e) {
-        const msg = e.message || String(e);
-        return {
-            ...base,
-            status: "auth_error",
-            hint: `KG API unreachable: ${msg.slice(0, 200)}`,
-        };
-    }
-}
-async function checkGithub() {
-    const base = {
-        name: "github",
-        label: "GitHub access",
-        level: "enhanced",
-    };
-    const result = await exec("ssh", ["-T", "-o", "ConnectTimeout=3", "-o", "StrictHostKeyChecking=no", "git@github.com"]);
-    // ssh -T git@github.com exits 1 on success (GitHub prints "Hi user!")
-    // exits 255 on auth failure, and 127 if ssh missing
-    if (result.code === 127) {
-        return {
-            ...base,
-            status: "missing",
-            hint: "SSH client not found. Install OpenSSH to enable source code analysis.",
-        };
-    }
-    const combined = result.stdout + result.stderr;
-    if (combined.includes("successfully authenticated") || combined.includes("Hi ")) {
-        return { ...base, status: "ok", hint: "" };
-    }
-    return {
-        ...base,
-        status: "auth_error",
-        hint: "GitHub SSH not configured. Source code analysis will be unavailable.\nSet up SSH keys: https://docs.github.com/en/authentication/connecting-to-github-with-ssh",
-    };
-}
-// ── Preflight runner ───────────────────────────────────────────────────
-export async function runPreflight() {
-    const results = await Promise.all([checkPi(), checkZendesk(), checkZendeskKgApi(), checkGithub()]);
-    const failed = results.filter((r) => r.status !== "ok");
-    return {
-        results,
-        hasFatal: failed.some((r) => r.level === "fatal"),
-        hasCore: failed.some((r) => r.level === "core"),
-        hasEnhanced: failed.some((r) => r.level === "enhanced"),
-    };
-}
-// ── Terminal display ───────────────────────────────────────────────────
-const RESET = "\x1b[0m";
-const BOLD = "\x1b[1m";
-const RED = "\x1b[31m";
-const YELLOW = "\x1b[33m";
-const GREEN = "\x1b[32m";
-const DIM = "\x1b[2m";
-function statusIcon(status) {
-    if (status === "ok")
-        return `${GREEN}✓${RESET}`;
-    return `${RED}✗${RESET}`;
-}
-export function printPreflightReport(report) {
-    const failed = report.results.filter((r) => r.status !== "ok");
-    if (failed.length === 0)
-        return; // all good, stay silent
-    console.error("");
-    console.error(`${BOLD}Zendy setup check${RESET}`);
-    console.error("");
-    for (const r of report.results) {
-        console.error(`  ${statusIcon(r.status)} ${r.label}`);
-    }
-    console.error("");
-    // Fatal — hard stop
-    if (report.hasFatal) {
-        const fatal = failed.filter((r) => r.level === "fatal");
-        for (const r of fatal) {
-            console.error(`${RED}${BOLD}Error:${RESET} ${r.label} is required but not available.`);
-            console.error(`${DIM}${r.hint}${RESET}`);
-            console.error("");
-        }
-        return;
-    }
-    // Core missing — strong warning with options
-    if (report.hasCore) {
-        const core = failed.filter((r) => r.level === "core");
-        for (const r of core) {
-            console.error(`${YELLOW}${BOLD}Warning:${RESET} ${r.label} is not configured.`);
-            console.error(`${DIM}${r.hint}${RESET}`);
-            console.error("");
-        }
-    }
-    // Enhanced missing — light banner
-    if (report.hasEnhanced) {
-        const enhanced = failed.filter((r) => r.level === "enhanced");
-        for (const r of enhanced) {
-            console.error(`${DIM}Note: ${r.label} is not configured. ${r.hint.split("\n")[0]}${RESET}`);
-        }
-        console.error("");
-    }
-}
-/**
- * Interactive prompt for core dependency failures.
- * Returns true if the user wants to continue, false to exit.
- */
-export function promptCoreMissing() {
-    return new Promise((resolve) => {
-        const rl = createInterface({
-            input: process.stdin,
-            output: process.stderr,
-        });
-        console.error(`${BOLD}What would you like to do?${RESET}`);
-        console.error(`  ${BOLD}1${RESET} Continue with limited capabilities`);
-        console.error(`  ${BOLD}2${RESET} Exit and configure manually`);
-        console.error("");
-        rl.question(`${DIM}Choose [1/2]: ${RESET}`, (answer) => {
-            rl.close();
-            const choice = answer.trim();
-            if (choice === "2") {
-                resolve(false);
-            }
-            else {
-                resolve(true); // default: continue
-            }
-        });
-    });
-}

package/dist/source-cleanup.d.ts

@@ -1,43 +0,0 @@
-export interface CandidateDir {
-    path: string;
-    name: string;
-    mtimeMs: number;
-    sizeBytes: number;
-}
-export interface ClassifyOptions {
-    nowMs: number;
-    /** Skip any dir whose mtime is within this window (0 disables). Wins over everything. */
-    minAgeMs: number;
-    /** Only delete dirs older than this (undefined = no age limit, i.e. --all). */
-    maxAgeMs?: number;
-    /** Keep the N most-recent candidates regardless of age. */
-    keepLast: number;
-    /** Absolute paths that must never be deleted (e.g. the current session dir). */
-    protectedPaths?: string[];
-}
-export interface ClassifyResult {
-    toDelete: CandidateDir[];
-    kept: CandidateDir[];
-    protected: CandidateDir[];
-}
-export interface DeleteResult {
-    deleted: string[];
-    bytesFreed: number;
-    errors: {
-        path: string;
-        error: string;
-    }[];
-}
-export declare function scanCandidates(baseDir: string, patterns: string[]): Promise<CandidateDir[]>;
-export declare function classifyCandidates(candidates: CandidateDir[], opts: ClassifyOptions): ClassifyResult;
-export declare function deleteCandidates(candidates: CandidateDir[]): Promise<DeleteResult>;
-export interface SessionDirInfo {
-    pid: number;
-    timestamp: number;
-}
-export declare function parseSessionDirName(name: string): SessionDirInfo | null;
-export declare function buildSessionDirName(pid: number, timestamp: number): string;
-export declare function isProcessAlive(pid: number): boolean;
-export declare function findOrphanSessionDirs(baseDir: string): Promise<string[]>;
-export declare function formatBytes(n: number): string;
-export declare function formatAge(ageMs: number): string;

package/dist/source-cleanup.js

@@ -1,188 +0,0 @@
-// Source clone directory cleanup library.
-//
-// Dify enterprise repositories are private; every extra minute their source
-// sits on local disk is an extra minute of exposure surface. This module
-// provides the primitives to enumerate, classify, and wipe those clones.
-//
-// Used by:
-//   - `src/cleanup-src.ts` — the `zendy cleanup-src` CLI subcommand.
-//   - `extensions/zendy.ts` — the pi extension inlines the tiny session-dir
-//     helpers it needs so it can be loaded as a self-contained TS file by pi
-//     at runtime.
-import { readdir, stat, rm } from "node:fs/promises";
-import { join } from "node:path";
-async function dirSize(path) {
-    let total = 0;
-    const stack = [path];
-    while (stack.length) {
-        const cur = stack.pop();
-        let entries;
-        try {
-            entries = await readdir(cur, { withFileTypes: true });
-        }
-        catch {
-            continue;
-        }
-        for (const e of entries) {
-            if (e.isSymbolicLink())
-                continue;
-            const full = join(cur, e.name);
-            if (e.isDirectory()) {
-                stack.push(full);
-            }
-            else if (e.isFile()) {
-                try {
-                    const s = await stat(full);
-                    total += s.size;
-                }
-                catch {
-                    // unreadable file — skip
-                }
-            }
-        }
-    }
-    return total;
-}
-function matchesAnyPattern(name, patterns) {
-    return patterns.some((p) => {
-        if (p.endsWith("*"))
-            return name.startsWith(p.slice(0, -1));
-        return name === p;
-    });
-}
-export async function scanCandidates(baseDir, patterns) {
-    let entries;
-    try {
-        entries = await readdir(baseDir, { withFileTypes: true });
-    }
-    catch {
-        return [];
-    }
-    const results = [];
-    for (const e of entries) {
-        if (!e.isDirectory())
-            continue; // skip files + symlinks
-        if (!matchesAnyPattern(e.name, patterns))
-            continue;
-        const full = join(baseDir, e.name);
-        let st;
-        try {
-            st = await stat(full);
-        }
-        catch {
-            continue;
-        }
-        const size = await dirSize(full);
-        results.push({ path: full, name: e.name, mtimeMs: st.mtimeMs, sizeBytes: size });
-    }
-    return results;
-}
-export function classifyCandidates(candidates, opts) {
-    const protectedSet = new Set(opts.protectedPaths ?? []);
-    const sorted = [...candidates].sort((a, b) => b.mtimeMs - a.mtimeMs);
-    const toDelete = [];
-    const kept = [];
-    const protectedOut = [];
-    let keptByKeepLast = 0;
-    for (const c of sorted) {
-        if (protectedSet.has(c.path)) {
-            protectedOut.push(c);
-            continue;
-        }
-        const ageMs = opts.nowMs - c.mtimeMs;
-        if (opts.minAgeMs > 0 && ageMs < opts.minAgeMs) {
-            protectedOut.push(c);
-            continue;
-        }
-        if (keptByKeepLast < opts.keepLast) {
-            kept.push(c);
-            keptByKeepLast++;
-            continue;
-        }
-        if (opts.maxAgeMs !== undefined && ageMs < opts.maxAgeMs) {
-            kept.push(c);
-            continue;
-        }
-        toDelete.push(c);
-    }
-    return { toDelete, kept, protected: protectedOut };
-}
-export async function deleteCandidates(candidates) {
-    const deleted = [];
-    const errors = [];
-    let bytesFreed = 0;
-    for (const c of candidates) {
-        try {
-            await rm(c.path, { recursive: true, force: true });
-            deleted.push(c.path);
-            bytesFreed += c.sizeBytes;
-        }
-        catch (err) {
-            errors.push({ path: c.path, error: err.message });
-        }
-    }
-    return { deleted, bytesFreed, errors };
-}
-export function parseSessionDirName(name) {
-    const m = /^zendy-session-(\d+)-(\d+)$/.exec(name);
-    if (!m)
-        return null;
-    return { pid: parseInt(m[1], 10), timestamp: parseInt(m[2], 10) };
-}
-export function buildSessionDirName(pid, timestamp) {
-    return `zendy-session-${pid}-${timestamp}`;
-}
-export function isProcessAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (err) {
-        // EPERM: process exists but we can't signal it; it's still alive.
-        return err.code === "EPERM";
-    }
-}
-export async function findOrphanSessionDirs(baseDir) {
-    let entries;
-    try {
-        entries = await readdir(baseDir, { withFileTypes: true });
-    }
-    catch {
-        return [];
-    }
-    const orphans = [];
-    for (const e of entries) {
-        if (!e.isDirectory())
-            continue;
-        const info = parseSessionDirName(e.name);
-        if (!info)
-            continue;
-        if (!isProcessAlive(info.pid)) {
-            orphans.push(join(baseDir, e.name));
-        }
-    }
-    return orphans;
-}
-// ── Formatting helpers ────────────────────────────────────────────────
-export function formatBytes(n) {
-    if (n < 1024)
-        return `${n} B`;
-    if (n < 1024 * 1024)
-        return `${(n / 1024).toFixed(1)} KB`;
-    if (n < 1024 * 1024 * 1024)
-        return `${(n / 1024 / 1024).toFixed(1)} MB`;
-    return `${(n / 1024 / 1024 / 1024).toFixed(2)} GB`;
-}
-export function formatAge(ageMs) {
-    const s = Math.floor(ageMs / 1000);
-    if (s < 60)
-        return `${s}s`;
-    const m = Math.floor(s / 60);
-    if (m < 60)
-        return `${m}m`;
-    const h = Math.floor(m / 60);
-    if (h < 24)
-        return `${h}h`;
-    const d = Math.floor(h / 24);
-    return `${d}d`;
-}