@usebitl/cli 0.1.15 → 0.1.17

package/adapters/dist/core.mjs

@@ -471,7 +471,7 @@ function readCloudConfig(home = bitlHome()) {
   }
 }
 function clientVersionHeader() {
-  const v = "0.1.15";
+  const v = "0.1.17";
   return v ? { "x-bitl-client": v } : {};
 }
 function resolveTarget(home = bitlHome()) {

package/dist/chunks/{chunk-65TI66EM.mjs → chunk-3QUAEA6A.mjs}

@@ -20062,7 +20062,7 @@ function removeCloudLogin(home = bitlHome()) {
   rmSync(cloudKeyPath(home), { force: true });
 }
 function clientVersionHeader() {
-  const v = "0.1.15";
+  const v = "0.1.17";
   return v ? { "x-bitl-client": v } : {};
 }
 function resolveTarget(home = bitlHome()) {
@@ -20119,7 +20119,7 @@ async function latestVersion(home, now) {
   return latest;
 }
 var updateCommand = (install = process.env.BITL_INSTALL) => install === "npx" ? "npx @usebitl/cli@latest start" : "npm i -g @usebitl/cli";
-async function checkCliUpdate(current = "0.1.15", opts = {}) {
+async function checkCliUpdate(current = "0.1.17", opts = {}) {
   if (!current || process.env.BITL_NO_UPDATE_CHECK === "1") return void 0;
   const latest = await latestVersion(opts.home ?? bitlHome(), opts.now ?? Date.now());
   if (!latest || compareVersions(latest, current) <= 0) return void 0;

package/dist/chunks/{src-TJPPU3TC.mjs → src-DWPF6JDY.mjs}

@@ -11,7 +11,7 @@ import {
   isEmptySession,
   parseWireRecord,
   sessionKey
-} from "./chunk-65TI66EM.mjs";
+} from "./chunk-3QUAEA6A.mjs";
 
 // ../../../node_modules/.pnpm/bn.js@4.12.5/node_modules/bn.js/lib/bn.js
 var require_bn = __commonJS({
@@ -8842,6 +8842,102 @@ var ApprovalStore = class {
   }
 };
 
+// ../../server/src/store/entry-store.ts
+var ENTRY_SCHEMA = `
+CREATE TABLE IF NOT EXISTS entries (
+  id          TEXT NOT NULL,
+  account_id  TEXT NOT NULL,
+  session_key TEXT,
+  data        TEXT NOT NULL,
+  created_at  TEXT NOT NULL,
+  updated_at  TEXT NOT NULL,
+  PRIMARY KEY (account_id, id)
+);
+CREATE INDEX IF NOT EXISTS entries_time ON entries(account_id, created_at);
+CREATE INDEX IF NOT EXISTS entries_session ON entries(account_id, session_key, created_at);
+`;
+var MAX_ENTRIES = 5e4;
+var toEntry = (r) => ({
+  id: r.id,
+  sessionKey: r.session_key ?? void 0,
+  data: r.data,
+  createdAt: r.created_at,
+  updatedAt: r.updated_at
+});
+var EntryStore = class {
+  constructor(db) {
+    this.db = db;
+  }
+  db;
+  listeners = /* @__PURE__ */ new Set();
+  subscribe(fn) {
+    this.listeners.add(fn);
+    return () => this.listeners.delete(fn);
+  }
+  emit(c) {
+    for (const l of this.listeners) l(c);
+  }
+  /**
+   * Newest first. session: only that card's entries. since/before: written at or after / strictly before (paging back).
+   */
+  async list(accountId, opts = {}) {
+    const where = ["account_id = ?"];
+    const params = [accountId];
+    if (opts.session !== void 0) {
+      where.push("session_key = ?");
+      params.push(opts.session);
+    }
+    if (opts.since) {
+      where.push("created_at >= ?");
+      params.push(opts.since);
+    }
+    if (opts.before) {
+      where.push("created_at < ?");
+      params.push(opts.before);
+    }
+    params.push(Math.min(Math.max(opts.limit ?? 200, 1), 1e3));
+    const { rows } = await this.db.query(`SELECT * FROM entries WHERE ${where.join(" AND ")} ORDER BY created_at DESC, id DESC LIMIT ?`, params);
+    return rows.map(toEntry);
+  }
+  /** The browser picks the id (it is part of the seal's AAD). undefined if it exists or the limit is reached */
+  async create(accountId, id, data, sessionKey2, at = (/* @__PURE__ */ new Date()).toISOString()) {
+    const created = await this.db.transaction(async (q) => {
+      const { rows } = await q("SELECT COUNT(*) AS n, SUM(CASE WHEN id = ? THEN 1 ELSE 0 END) AS dup FROM entries WHERE account_id = ?", [id, accountId]);
+      if (Number(rows[0]?.n ?? 0) >= MAX_ENTRIES || Number(rows[0]?.dup ?? 0) > 0) return false;
+      await q("INSERT INTO entries (id, account_id, session_key, data, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)", [
+        id,
+        accountId,
+        sessionKey2 ?? null,
+        data,
+        at,
+        at
+      ]);
+      return true;
+    });
+    if (!created) return void 0;
+    const entry = { id, ...sessionKey2 ? { sessionKey: sessionKey2 } : {}, data, createdAt: at, updatedAt: at };
+    this.emit({ accountId, type: "entry", entry });
+    return entry;
+  }
+  /** Rewrites the sealed content. The time it was written never changes */
+  async update(accountId, id, data) {
+    const at = (/* @__PURE__ */ new Date()).toISOString();
+    const entry = await this.db.transaction(async (q) => {
+      const { changes } = await q("UPDATE entries SET data = ?, updated_at = ? WHERE account_id = ? AND id = ?", [data, at, accountId, id]);
+      if (!changes) return void 0;
+      const { rows } = await q("SELECT * FROM entries WHERE account_id = ? AND id = ?", [accountId, id]);
+      return rows[0] ? toEntry(rows[0]) : void 0;
+    });
+    if (entry) this.emit({ accountId, type: "entry", entry });
+    return entry;
+  }
+  async delete(accountId, id) {
+    const ok = await this.db.transaction(async (q) => (await q("DELETE FROM entries WHERE account_id = ? AND id = ?", [accountId, id])).changes > 0);
+    if (ok) this.emit({ accountId, type: "entry-removed", id });
+    return ok;
+  }
+};
+
 // ../../server/src/store/goal-store.ts
 var GOAL_SCHEMA = `
 CREATE TABLE IF NOT EXISTS goals (
@@ -9385,7 +9481,7 @@ import { DatabaseSync } from "node:sqlite";
 var LOCAL_ACCOUNT = "local";
 
 // ../../server/src/store/sqlite.ts
-var SCHEMA_VERSION = 10;
+var SCHEMA_VERSION = 11;
 var SCHEMA = `
 CREATE TABLE IF NOT EXISTS sessions (
   account_id    TEXT NOT NULL,
@@ -9427,7 +9523,8 @@ CREATE INDEX IF NOT EXISTS events_session ON events(account_id, session_key, at)
 CREATE INDEX IF NOT EXISTS events_at ON events(at);
 ${PUSH_SCHEMA}
 ${APPROVAL_SCHEMA}
-${GOAL_SCHEMA}`;
+${GOAL_SCHEMA}
+${ENTRY_SCHEMA}`;
 var MIGRATE_2_TO_3 = `
 ALTER TABLE sessions RENAME TO sessions_v2;
 ALTER TABLE turns RENAME TO turns_v2;
@@ -12108,10 +12205,49 @@ var streamSSE = (c, cb, onError) => {
   return c.newResponse(stream2.responseReadable);
 };
 
+// ../../server/src/entries-api.ts
+var ENTRY_ID = /^[A-Za-z0-9_-]{8,32}$/;
+var MAX_DATA = 8e3;
+var MAX_KEY = 300;
+var validData = (v) => typeof v === "string" && v.length <= MAX_DATA && SEALED_PATTERN.test(v);
+var validTime = (v) => typeof v === "string" && !Number.isNaN(Date.parse(v));
+function mountEntries(app, entries, access = allowAll) {
+  const notFound = { error: "not found" };
+  const readonly = { error: "subscription_required" };
+  app.get("/api/entries", async (c) => {
+    const q = (k) => c.req.query(k) || void 0;
+    const since = q("since");
+    const before = q("before");
+    if (since && !validTime(since) || before && !validTime(before)) return c.json({ error: "invalid time" }, 400);
+    const limit = Number(q("limit") ?? 200);
+    return c.json(await entries.list(c.var.accountId, { session: q("session"), since, before, limit: Number.isFinite(limit) ? limit : 200 }));
+  });
+  app.post("/api/entries", async (c) => {
+    if (!await access.canWrite(c.var.accountId)) return c.json(readonly, 402);
+    const body = await c.req.json().catch(() => null);
+    if (typeof body?.id !== "string" || !ENTRY_ID.test(body.id) || !validData(body.data)) return c.json({ error: "invalid body" }, 400);
+    if (body.sessionKey !== void 0 && (typeof body.sessionKey !== "string" || !body.sessionKey || body.sessionKey.length > MAX_KEY))
+      return c.json({ error: "invalid sessionKey" }, 400);
+    const entry = await entries.create(c.var.accountId, body.id, body.data, body.sessionKey);
+    return entry ? c.json(entry, 201) : c.json({ error: "entry exists or too many entries" }, 409);
+  });
+  app.put("/api/entries/:id", async (c) => {
+    if (!await access.canWrite(c.var.accountId)) return c.json(readonly, 402);
+    const body = await c.req.json().catch(() => null);
+    if (!validData(body?.data)) return c.json({ error: "invalid body" }, 400);
+    const entry = await entries.update(c.var.accountId, c.req.param("id"), body.data);
+    return entry ? c.json(entry) : c.json(notFound, 404);
+  });
+  app.delete(
+    "/api/entries/:id",
+    async (c) => await entries.delete(c.var.accountId, c.req.param("id")) ? c.json({ ok: true }) : c.json(notFound, 404)
+  );
+}
+
 // ../../server/src/goals-api.ts
 var GOAL_ID = /^[A-Za-z0-9_-]{8,32}$/;
-var MAX_DATA = 64e3;
-var validData = (v) => typeof v === "string" && v.length <= MAX_DATA && SEALED_PATTERN.test(v);
+var MAX_DATA2 = 64e3;
+var validData2 = (v) => typeof v === "string" && v.length <= MAX_DATA2 && SEALED_PATTERN.test(v);
 function mountGoals(app, goals, access = allowAll) {
   const notFound = { error: "not found" };
   const readonly = { error: "subscription_required" };
@@ -12119,7 +12255,7 @@ function mountGoals(app, goals, access = allowAll) {
   app.post("/api/goals", async (c) => {
     if (!await access.canWrite(c.var.accountId)) return c.json(readonly, 402);
     const body = await c.req.json().catch(() => null);
-    if (typeof body?.id !== "string" || !GOAL_ID.test(body.id) || !validData(body.data)) return c.json({ error: "invalid body" }, 400);
+    if (typeof body?.id !== "string" || !GOAL_ID.test(body.id) || !validData2(body.data)) return c.json({ error: "invalid body" }, 400);
     const goal = await goals.create(c.var.accountId, body.id, body.data);
     return goal ? c.json(goal, 201) : c.json({ error: "goal exists or too many goals" }, 409);
   });
@@ -12127,7 +12263,7 @@ function mountGoals(app, goals, access = allowAll) {
     if (!await access.canWrite(c.var.accountId)) return c.json(readonly, 402);
     const body = await c.req.json().catch(() => null);
     if (!body || !Number.isInteger(body.version)) return c.json({ error: "invalid body" }, 400);
-    if (body.data !== void 0 && !validData(body.data)) return c.json({ error: "invalid data" }, 400);
+    if (body.data !== void 0 && !validData2(body.data)) return c.json({ error: "invalid data" }, 400);
     if (body.closed !== void 0 && typeof body.closed !== "boolean") return c.json({ error: "invalid closed" }, 400);
     const r = await goals.update(c.var.accountId, c.req.param("id"), body.version, {
       data: body.data,
@@ -12147,7 +12283,7 @@ async function ingestRecord(store, accountId, body) {
   const rec = parseWireRecord(body);
   return rec ? store.ingest(accountId, rec) : null;
 }
-function createApp({ store, webDist, account, push, approvals, goals, access = allowAll, extension, build }) {
+function createApp({ store, webDist, account, push, approvals, goals, entries, access = allowAll, extension, build }) {
   const app = new Hono2();
   const resolve2 = account ?? (() => LOCAL_ACCOUNT);
   app.get("/api/health", (c) => c.json(build ? { ok: true, build } : { ok: true }));
@@ -12171,6 +12307,7 @@ function createApp({ store, webDist, account, push, approvals, goals, access = a
   if (push) mountPush(app, push.store);
   if (approvals) mountApprovals(app, approvals, access);
   if (goals) mountGoals(app, goals, access);
+  if (entries) mountEntries(app, entries, access);
   app.post("/api/events", async (c) => {
     let body;
     try {
@@ -12264,10 +12401,16 @@ function createApp({ store, webDist, account, push, approvals, goals, access = a
         queue.push(change);
         wake?.();
       });
+      const offEntries = entries?.subscribe((change) => {
+        if (change.accountId !== accountId) return;
+        queue.push(change);
+        wake?.();
+      });
       const unsubscribe = () => {
         offSessions();
         offApprovals?.();
         offGoals?.();
+        offEntries?.();
       };
       stream2.onAbort(() => {
         unsubscribe();
@@ -12288,7 +12431,7 @@ function createApp({ store, webDist, account, push, approvals, goals, access = a
         }
         const change = queue.shift();
         await stream2.writeSSE(
-          change.type === "session" ? { event: "session", data: JSON.stringify(change.session) } : change.type === "approval" ? { event: "approval", data: JSON.stringify(change.approval) } : change.type === "goal" ? { event: "goal", data: JSON.stringify(change.goal) } : change.type === "goal-removed" ? { event: "goal-removed", data: JSON.stringify({ id: change.id }) } : { event: "removed", data: JSON.stringify({ key: change.key }) }
+          change.type === "session" ? { event: "session", data: JSON.stringify(change.session) } : change.type === "approval" ? { event: "approval", data: JSON.stringify(change.approval) } : change.type === "goal" ? { event: "goal", data: JSON.stringify(change.goal) } : change.type === "goal-removed" ? { event: "goal-removed", data: JSON.stringify({ id: change.id }) } : change.type === "entry" ? { event: "entry", data: JSON.stringify(change.entry) } : change.type === "entry-removed" ? { event: "entry-removed", data: JSON.stringify({ id: change.id }) } : { event: "removed", data: JSON.stringify({ key: change.key }) }
         );
       }
       unsubscribe();
@@ -12466,6 +12609,7 @@ function coreServices(store, access = allowAll) {
   const pushStore = vapidPublic && vapidPrivate ? new PushStore(store.db) : void 0;
   const approvals = new ApprovalStore(store.db);
   const goals = new GoalStore(store.db);
+  const entries = new EntryStore(store.db);
   const offApprovalCleanup = closeApprovalsOnResume(store, approvals, logError("approval request cleanup"));
   const notifier = pushStore ? startPushNotifier({
     store,
@@ -12477,7 +12621,7 @@ function coreServices(store, access = allowAll) {
   }) : void 0;
   return {
     /** Passed to createApp */
-    app: { push: pushStore && { store: pushStore, publicKey: vapidPublic }, approvals, goals, access },
+    app: { push: pushStore && { store: pushStore, publicKey: vapidPublic }, approvals, goals, entries, access },
     approvals,
     pushing: Boolean(notifier),
     stop() {

package/dist/cli.mjs

@@ -21,7 +21,7 @@ import {
   unwrapMasterKey,
   verifyPublicKey,
   wrapMasterKey
-} from "./chunks/chunk-65TI66EM.mjs";
+} from "./chunks/chunk-3QUAEA6A.mjs";
 
 // ../src/index.ts
 import { homedir as homedir2 } from "node:os";
@@ -453,7 +453,7 @@ async function logout() {
 }
 
 // ../src/update.ts
-async function updateNotice(current = "0.1.15") {
+async function updateNotice(current = "0.1.17") {
   const u = await checkCliUpdate(current);
   return u && `${t("update.available", { ...u })}
 ${t("update.changelog")}`;
@@ -609,7 +609,7 @@ async function main(argv) {
         if (String(typeof warning === "string" ? warning : warning.message).startsWith("SQLite is an experimental feature")) return;
         emitWarning(warning, ...rest2);
       });
-      const { startServer } = await import("./chunks/src-TJPPU3TC.mjs");
+      const { startServer } = await import("./chunks/src-DWPF6JDY.mjs");
       await startServer();
       console.log(t("start.pair", { url: localPairUrl() }));
       return;
@@ -631,7 +631,7 @@ async function main(argv) {
     case "--version":
     case "-v":
     case "version":
-      console.log("0.1.15");
+      console.log("0.1.17");
       return;
     case "remote":
     case "away":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usebitl/cli",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "BITL — see which of your AI coding agents (Claude Code, Codex, Antigravity) are waiting for you. Local board or usebitl.com",
   "type": "module",
   "bin": {