@usepowerplant/cli 0.4.1 → 0.4.3

package/dist/hooks/powerplant-cursor-transcript.mjs

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+// Local discovery only. The collector validates paths and capture policy
+// before opening transcripts. Never persist prompts, email, or full input.
+import { createHash, randomUUID } from "node:crypto";
+import { Buffer } from "node:buffer";
+import { mkdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+const MAX_INPUT_BYTES = 128 * 1024;
+let chunks = [];
+let bytes = 0;
+process.stdin.on("error", () => {});
+process.stdin.on("data", (chunk) => {
+  bytes += chunk.length;
+  if (bytes <= MAX_INPUT_BYTES) chunks.push(chunk);
+  else chunks = [];
+});
+process.stdin.on("end", () => {
+  const dir = path.join(os.homedir(), ".config", "powerplant");
+  try {
+    if (bytes <= MAX_INPUT_BYTES) {
+      const input = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+      if (
+        ["sessionStart", "sessionEnd", "stop"].includes(input?.hook_event_name) &&
+        typeof input.conversation_id === "string" &&
+        /^[a-zA-Z0-9_-]{1,200}$/.test(input.conversation_id)
+      ) {
+        const roots =
+          Array.isArray(input.workspace_roots) &&
+          input.workspace_roots.length <= 8 &&
+          input.workspace_roots.every(
+            (p) => typeof p === "string" && p.length <= 4096 && path.isAbsolute(p)
+          )
+            ? input.workspace_roots
+            : [];
+        const record = {
+          sessionId: input.conversation_id,
+          transcriptPath:
+            typeof input.transcript_path === "string" &&
+            input.transcript_path.length <= 4096 &&
+            path.isAbsolute(input.transcript_path)
+              ? input.transcript_path
+              : null,
+          workspaceRoots: roots,
+          ...(typeof input.model === "string" &&
+            input.model.length <= 256 && { model: input.model }),
+        };
+        const records = path.join(dir, "cursor-transcripts");
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        mkdirSync(records, { recursive: true, mode: 0o700 });
+        const file = path.join(
+          records,
+          `${createHash("sha256").update(record.sessionId).digest("hex")}.json`
+        );
+        const temporary = `${file}.${randomUUID()}.tmp`;
+        try {
+          // eslint-disable-next-line security/detect-non-literal-fs-filename
+          writeFileSync(temporary, JSON.stringify(record), { mode: 0o600, flag: "wx" });
+          // eslint-disable-next-line security/detect-non-literal-fs-filename
+          renameSync(temporary, file);
+        } finally {
+          rmSync(temporary, { force: true });
+        }
+      }
+    }
+  } catch {
+    // Discovery failure must never stop the provider. Existing capture remains.
+  }
+  try {
+    // Publish after the pointer so the watcher sees a complete discovery record.
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    mkdirSync(dir, { recursive: true });
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    writeFileSync(path.join(dir, "session-change"), `${Date.now()}\n`, { mode: 0o600 });
+  } catch {
+    // No output to the agent, even if the disk is unavailable.
+  }
+});

package/dist/hooks/powerplant-session-change.mjs

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+// Canonical standalone hook, bundled by packages/cli/build.mjs.
+// Wake the local collector without inspecting or saving the hook payload.
+// Existing readers still enforce capture scope and redact before uploading.
+import { mkdirSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+// Drain provider input without retaining it or emitting an agent response.
+process.stdin.on("error", () => {});
+process.stdin.resume();
+try {
+  const dir = path.join(os.homedir(), ".config", "powerplant");
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  mkdirSync(dir, { recursive: true });
+  // A fixed-size signal coalesces events. No paths or content come from stdin.
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  writeFileSync(path.join(dir, "session-change"), `${Date.now()}\n`, { mode: 0o600 });
+} catch {
+  // A disk failure must not disrupt the agent. Recovery scans still run.
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usepowerplant/cli",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "publishConfig": {
     "access": "public"
   },