@westbayberry/dg 2.1.0 → 2.3.0

package/dist/setup-ui/offer.js

@@ -0,0 +1,42 @@
+import { resolvePresentation } from "../presentation/mode.js";
+import { MACHINE_OUTPUT_FLAGS } from "../runtime/first-run.js";
+import { buildSetupPlan } from "../setup/plan.js";
+import { shouldOfferSetupWizard } from "./gate.js";
+const SKIP_COMMANDS = new Set([
+    "help",
+    "--help",
+    "-h",
+    "--help-all",
+    "help-all",
+    "version",
+    "--version",
+    "-v",
+    "login",
+    "logout",
+    "setup",
+    "update",
+    "upgrade",
+    "uninstall"
+]);
+const NOT_RUN = { handled: false, result: { exitCode: 0, stdout: "", stderr: "" } };
+export async function maybeOfferSetupWizard(args, options = {}) {
+    const env = options.env ?? process.env;
+    const command = args[0] ?? "";
+    if (command && SKIP_COMMANDS.has(command)) {
+        return NOT_RUN;
+    }
+    if (args.some((arg) => MACHINE_OUTPUT_FLAGS.has(arg))) {
+        return NOT_RUN;
+    }
+    if (!shouldOfferSetupWizard(env, options.stdin ?? process.stdin, options.stderr ?? process.stderr)) {
+        return NOT_RUN;
+    }
+    const rich = options.richMode ?? resolvePresentation().mode === "rich";
+    if (!rich) {
+        return NOT_RUN;
+    }
+    const plan = buildSetupPlan({ shell: "auto" });
+    const runWizard = options.runWizard ?? (await import("./wizard.js")).runSetupWizard;
+    const result = await runWizard(plan, { env, autoActivate: args.length === 0 });
+    return { handled: args.length === 0, result };
+}

package/dist/setup-ui/selector.js

@@ -0,0 +1,27 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { useState } from "react";
+import { Box, Text, useInput } from "ink";
+export const Selector = ({ options, onSelect, onCancel }) => {
+    const [cursor, setCursor] = useState(0);
+    useInput((input, key) => {
+        if (key.upArrow || input === "k") {
+            setCursor((c) => Math.max(0, c - 1));
+        }
+        else if (key.downArrow || input === "j") {
+            setCursor((c) => Math.min(options.length - 1, c + 1));
+        }
+        else if (key.return) {
+            onSelect(cursor);
+        }
+        else if (key.escape) {
+            onCancel();
+        }
+        else if (/^[1-9]$/.test(input)) {
+            const index = Number(input) - 1;
+            if (index < options.length) {
+                onSelect(index);
+            }
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", children: [options.map((option, i) => (_jsxs(Text, { ...(i === cursor ? { color: "cyan" } : {}), children: [i === cursor ? "❯" : " ", " ", i + 1, ". ", option.label] }, i))), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Enter to confirm \u00B7 arrows or number keys to choose \u00B7 Esc to skip" })] }));
+};

package/dist/setup-ui/tasks.js

@@ -0,0 +1,56 @@
+import { LockBusyError } from "../state/index.js";
+import { applyGitHook } from "../setup/git-hook.js";
+import { applySetupPlanWithLock } from "../setup/plan.js";
+import { applyAgentHook } from "../agents/registry.js";
+export function buildWizardTasks(plan, agents) {
+    const tasks = [
+        {
+            label: "shell installs route through dg",
+            run: async () => {
+                try {
+                    applySetupPlanWithLock(plan);
+                    return { ok: true };
+                }
+                catch (error) {
+                    if (error instanceof LockBusyError) {
+                        return {
+                            ok: false,
+                            fatal: true,
+                            detail: `dg setup cannot apply while another setup or uninstall is running: ${error.path}`
+                        };
+                    }
+                    throw error;
+                }
+            }
+        }
+    ];
+    for (const offer of agents) {
+        tasks.push({
+            label: `${offer.label} installs route through dg`,
+            run: async () => {
+                try {
+                    await applyAgentHook(offer.ctx);
+                    return { ok: true };
+                }
+                catch (error) {
+                    return { ok: false, detail: error instanceof Error ? error.message : "unknown error" };
+                }
+            }
+        });
+    }
+    return tasks;
+}
+export function buildCommitGuardTask(repo) {
+    return {
+        label: "commits in this repo are scanned",
+        run: async () => {
+            try {
+                applyGitHook(repo);
+                return { ok: true };
+            }
+            catch (error) {
+                return { ok: false, detail: error instanceof Error ? error.message : "unknown error" };
+            }
+        }
+    };
+}

package/dist/setup-ui/wizard.js

@@ -0,0 +1,233 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from "react";
+import { Box, Text, useApp, useInput } from "ink";
+import { Spinner } from "../scan-ui/components/Spinner.js";
+import { renderLogo } from "../scan-ui/logo.js";
+import { enterTui, leaveTui } from "../scan-ui/alt-screen.js";
+import { dgVersion } from "../commands/version.js";
+import { authStatus, displayTier } from "../auth/store.js";
+import { resolveWebBase } from "../auth/device-login.js";
+import { useLogin } from "../auth/login-app.js";
+import { collectAgentOffers, collectAgentSkips } from "../agents/registry.js";
+import { markFirstRunShown } from "../runtime/first-run.js";
+import { recordLoginNudge } from "../runtime/nudges.js";
+import { resolvePresentation } from "../presentation/mode.js";
+import { createTheme } from "../presentation/theme.js";
+import { activateShell, activationOffer } from "../setup/activate-shell.js";
+import { commitGuardOffer } from "../setup/git-hook.js";
+import { activationCommand, tildifyPath } from "../setup/plan.js";
+import { markSecurityNotesShown, markWizardSkipped, securityNotesShown } from "./gate.js";
+import { Selector } from "./selector.js";
+import { buildCommitGuardTask, buildWizardTasks } from "./tasks.js";
+export function protectsSentence(agentLabels) {
+    if (agentLabels.length === 0) {
+        return "Protects npm and pip installs in your shell.";
+    }
+    if (agentLabels.length === 1) {
+        return `Protects npm and pip installs in your shell and in ${agentLabels[0]}.`;
+    }
+    return `Protects npm and pip installs in your shell and in ${agentLabels.slice(0, -1).join(", ")} and ${agentLabels[agentLabels.length - 1]}.`;
+}
+const Header = ({ version }) => (_jsxs(Box, { flexDirection: "column", children: [renderLogo("pass").map((line, i) => (_jsx(Text, { children: line }, i))), _jsx(Text, { children: " " }), _jsxs(Text, { bold: true, children: ["Dependency Guardian v", version] }), _jsx(Text, { children: " " })] }));
+const LoginFlow = ({ webBase, env, onDone }) => {
+    const { state, openAndPoll } = useLogin(webBase, env);
+    useEffect(() => {
+        if (state.phase === "ready") {
+            openAndPoll();
+        }
+    }, [state.phase, openAndPoll]);
+    useInput((_input, key) => {
+        if (key.return && (state.phase === "success" || state.phase === "expired" || state.phase === "error")) {
+            onDone(state.phase === "success" ? state.email : "");
+        }
+        else if (key.escape) {
+            onDone("");
+        }
+    });
+    switch (state.phase) {
+        case "creating":
+            return _jsx(Spinner, { label: "Creating login session\u2026" });
+        case "ready":
+        case "waiting":
+            return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: "Sign in at:" }), _jsx(Text, { color: "cyan", children: state.verifyUrl }), _jsx(Text, { children: " " }), _jsx(Spinner, { label: "Waiting for you to approve in the browser\u2026" }), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Esc to skip" })] }));
+        case "success":
+            return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { color: "green", bold: true, children: ["\u2713 Logged in", state.email ? ` as ${state.email}` : "", state.plan ? ` (${displayTier(state.plan)} plan)` : ""] }), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Login successful. Press Enter to continue\u2026" })] }));
+        case "expired":
+        case "error":
+            return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { color: "yellow", children: state.phase === "expired" ? "That login link expired." : `Login failed: ${state.message}.` }), _jsx(Text, { dimColor: true, children: "You can run dg login later. Press Enter to continue\u2026" })] }));
+    }
+};
+function hyperlink(label, url) {
+    return `\u001B]8;;${url}\u0007${label}\u001B]8;;\u0007`;
+}
+const NotesStep = ({ termsUrl, privacyUrl, onAgree }) => {
+    useInput((_input, key) => {
+        if (key.return) {
+            onAgree();
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Security notes" }), _jsx(Text, { children: " " }), _jsx(Text, { children: "1. dg can make mistakes." }), _jsx(Text, { children: "   A PASS verdict does not guarantee a package is safe. You are" }), _jsx(Text, { children: "   responsible for what you install and should review new" }), _jsx(Text, { children: "   dependencies." }), _jsx(Text, { children: " " }), _jsx(Text, { children: "2. By continuing you confirm you have read and understand the" }), _jsxs(Text, { children: ["   ", _jsx(Text, { color: "cyan", children: hyperlink("Terms of Service", termsUrl) }), " and ", _jsx(Text, { color: "cyan", children: hyperlink("Privacy Policy", privacyUrl) }), "."] }), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Press Enter to agree" })] }));
+};
+export const SetupWizardApp = (props) => {
+    const { exit } = useApp();
+    const [step, setStep] = useState(props.loginNeeded ? "login" : props.notesNeeded ? "notes" : "choose");
+    const [results, setResults] = useState([]);
+    const [running, setRunning] = useState(null);
+    const [fatalDetail, setFatalDetail] = useState("");
+    const [email, setEmail] = useState(props.authedEmail);
+    const emailRef = useRef(props.authedEmail);
+    const applyStarted = useRef(false);
+    const Login = props.LoginFlowComponent ?? LoginFlow;
+    const afterLogin = () => {
+        setStep(props.notesNeeded ? "notes" : "choose");
+    };
+    useInput((_input, key) => {
+        if (key.return) {
+            exit();
+        }
+    }, { isActive: step === "done" });
+    useEffect(() => {
+        if (step !== "declined" && step !== "fatal") {
+            return undefined;
+        }
+        const timer = setTimeout(() => exit(), 30);
+        return () => clearTimeout(timer);
+    }, [step, exit]);
+    useEffect(() => {
+        if (step !== "applying" || applyStarted.current) {
+            return undefined;
+        }
+        applyStarted.current = true;
+        let cancelled = false;
+        void (async () => {
+            const completed = [];
+            for (const task of props.tasks) {
+                if (cancelled) {
+                    return;
+                }
+                setRunning(task.label);
+                await new Promise((resolve) => setImmediate(resolve));
+                let result;
+                try {
+                    result = await task.run();
+                }
+                catch (error) {
+                    result = { ok: false, fatal: true, detail: error instanceof Error ? error.message : "unknown error" };
+                }
+                if (cancelled) {
+                    return;
+                }
+                const line = { label: task.label, ok: result.ok, detail: result.detail };
+                completed.push(line);
+                setResults((prev) => [...prev, line]);
+                if (result.fatal) {
+                    setRunning(null);
+                    setFatalDetail(result.detail ?? "");
+                    props.onOutcome({ kind: "fatal", detail: result.detail ?? "" });
+                    setStep("fatal");
+                    return;
+                }
+            }
+            setRunning(null);
+            props.onOutcome({ kind: "done", email: emailRef.current, results: completed });
+            setStep("done");
+        })();
+        return () => {
+            cancelled = true;
+        };
+    }, [step, props]);
+    return (_jsxs(Box, { flexDirection: "column", paddingLeft: 1, paddingTop: 1, children: [_jsx(Header, { version: props.version }), step === "login" && (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Connect your account" }), _jsx(Text, { children: " " }), _jsx(Selector, { options: [{ label: "Connect in your browser" }, { label: "Skip for now" }], onSelect: (index) => {
+                            if (index === 0) {
+                                setStep("login-flow");
+                            }
+                            else {
+                                props.onLoginSkipped();
+                                afterLogin();
+                            }
+                        }, onCancel: () => {
+                            props.onLoginSkipped();
+                            afterLogin();
+                        } })] })), step === "login-flow" && (_jsx(Login, { webBase: props.webBase, env: props.env, onDone: (loggedInEmail) => {
+                    if (loggedInEmail) {
+                        setEmail(loggedInEmail);
+                        emailRef.current = loggedInEmail;
+                    }
+                    else {
+                        props.onLoginSkipped();
+                    }
+                    afterLogin();
+                } })), step === "notes" && (_jsx(NotesStep, { termsUrl: `${props.webBase}/terms`, privacyUrl: `${props.webBase}/privacy`, onAgree: () => {
+                    props.onNotesAgreed();
+                    setStep("choose");
+                } })), step === "choose" && (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Use recommended settings?" }), _jsx(Text, { children: " " }), _jsx(Text, { children: props.sentence }), props.guardsRepo && _jsx(Text, { children: "Also scans this repo's commits before they land." }), props.skips.map((skip) => (_jsxs(Text, { dimColor: true, children: [skip.label, " found but skipped \u2014 ", skip.detail] }, skip.label))), _jsx(Text, { children: " " }), _jsx(Selector, { options: [{ label: "Yes, use recommended settings" }, { label: "No, maybe later with dg setup" }], onSelect: (index) => {
+                            if (index === 0) {
+                                setStep("applying");
+                            }
+                            else {
+                                props.onOutcome({ kind: "declined" });
+                                setStep("declined");
+                            }
+                        }, onCancel: () => {
+                            props.onOutcome({ kind: "declined" });
+                            setStep("declined");
+                        } })] })), (step === "applying" || step === "done" || step === "fatal") && (_jsxs(Box, { flexDirection: "column", children: [results.map((line) => (_jsxs(Text, { color: line.ok ? "green" : "yellow", children: [line.ok ? "✓" : "✗", " ", line.label, !line.ok && line.detail ? ` — ${line.detail}` : ""] }, line.label))), running !== null && _jsx(Spinner, { label: running }), step === "fatal" && (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: " " }), _jsx(Text, { color: "red", children: fatalDetail })] })), step === "done" && (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { children: " " }), _jsxs(Text, { children: [_jsx(Text, { color: "green", bold: true, children: "\u2713 Setup complete." }), " ", "Activate now: ", _jsx(Text, { bold: true, children: props.activateHint })] }), email ? _jsxs(Text, { dimColor: true, children: ["Logged in as ", email] }) : null, _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Press Enter to continue\u2026" })] }))] })), step === "declined" && _jsx(Text, { dimColor: true, children: "Run dg setup any time to turn this on." })] }));
+};
+export async function runSetupWizard(plan, options = {}) {
+    const env = options.env ?? process.env;
+    const ci = process.env.CI;
+    const restoreCi = ci === "" || ci === "0" || ci === "false";
+    if (restoreCi) {
+        delete process.env.CI;
+    }
+    const agents = collectAgentOffers();
+    const repo = commitGuardOffer();
+    const auth = authStatus(env);
+    const state = { outcome: null };
+    const tasks = buildWizardTasks(plan, agents);
+    if (repo) {
+        tasks.push(buildCommitGuardTask(repo));
+    }
+    const { render } = await import("ink");
+    enterTui();
+    const instance = render(_jsx(SetupWizardApp, { version: dgVersion(), notesNeeded: !securityNotesShown(env), loginNeeded: !auth.authenticated, authedEmail: auth.email ?? "", sentence: protectsSentence(agents.map((offer) => offer.label)), guardsRepo: repo !== null, skips: collectAgentSkips(), tasks: tasks, webBase: resolveWebBase(env), env: env, activateHint: activationCommand(plan.shell, tildifyPath(plan.rcPath)), onNotesAgreed: () => markSecurityNotesShown(env), onLoginSkipped: () => recordLoginNudge(env), onOutcome: (outcome) => {
+            state.outcome = outcome;
+        } }), { exitOnCtrlC: true });
+    await instance.waitUntilExit();
+    leaveTui();
+    if (restoreCi) {
+        process.env.CI = ci;
+    }
+    const theme = createTheme(resolvePresentation().color);
+    const accent = (text) => theme.paint("accent", text);
+    const muted = (text) => theme.paint("muted", text);
+    const outcome = state.outcome;
+    if (outcome === null) {
+        // Aborted (e.g. Ctrl-C). Record the skip so the wizard does not re-intercept
+        // every subsequent dg command until the user explicitly declines or applies it.
+        markWizardSkipped(env);
+        markFirstRunShown(env);
+        return { exitCode: 0, stdout: "", stderr: "" };
+    }
+    if (outcome.kind === "declined") {
+        markWizardSkipped(env);
+        markFirstRunShown(env);
+        return { exitCode: 0, stdout: "", stderr: `  ${muted("Run")} ${accent("dg setup")} ${muted("any time to turn this on.")}\n` };
+    }
+    if (outcome.kind === "fatal") {
+        return { exitCode: 1, stdout: "", stderr: `  ${outcome.detail}\n` };
+    }
+    markFirstRunShown(env);
+    const lines = outcome.results.map((line) => line.ok
+        ? `  ${theme.paint("pass", `✓ ${line.label}`)}`
+        : `  ${theme.paint("warn", `✗ ${line.label}`)}${line.detail ? ` ${muted(`— ${line.detail}`)}` : ""}`);
+    lines.push(`  ${theme.paint("pass", "✓ dg setup complete — installs are protected in new terminals.")}`);
+    if (outcome.email) {
+        lines.push(`  ${muted(`Logged in as ${outcome.email}`)}`);
+    }
+    if (options.autoActivate && activationOffer() === "prompt") {
+        process.stderr.write(`${lines.join("\n")}\n  ${muted("Starting a protected shell — type")} ${accent("exit")} ${muted("to return to your previous one.")}\n`);
+        return { exitCode: activateShell(), stdout: "", stderr: "" };
+    }
+    lines.push(`  ${muted("Activate now:")} ${accent(activationCommand(plan.shell, tildifyPath(plan.rcPath)))}`);
+    return { exitCode: 0, stdout: "", stderr: `${lines.join("\n")}\n` };
+}