@xpufx/paseo-top 0.4.3 → 0.4.5

package/shared/vendor/permission-audit/filter.ts

@@ -0,0 +1,61 @@
+import { isToolCallEntry, type AuditRecord, type PermissionDecision } from "./shared.js";
+
+export type DecisionFilter = "all" | PermissionDecision;
+export type AuditTypeFilter = "all" | "permission" | "tool_call";
+
+export function formatAuditTime(iso: string): string {
+  const ms = Date.parse(iso);
+  if (Number.isNaN(ms)) return iso;
+  return new Date(ms).toLocaleString();
+}
+
+/**
+ * Middle-ellipsis for long values, keeping the leading key and the trailing
+ * identifier. `maxLength` is the content budget; the returned string can be one
+ * character longer once the ellipsis is inserted.
+ */
+function truncateMiddle(text: string, maxLength = 120): string {
+  if (text.length <= maxLength) return text;
+  const head = Math.ceil(maxLength / 2);
+  const tail = Math.floor(maxLength / 2);
+  return `${text.slice(0, head)}…${text.slice(text.length - tail)}`;
+}
+
+export function summarizeAuditInput(input: unknown): string {
+  if (input === null || input === undefined) return "—";
+  if (typeof input === "string") return truncateMiddle(input);
+  try {
+    return truncateMiddle(JSON.stringify(input));
+  } catch {
+    return "—";
+  }
+}
+
+export function filterAuditEntries(
+  records: AuditRecord[],
+  decision: DecisionFilter,
+  search: string,
+  type: AuditTypeFilter = "all",
+): AuditRecord[] {
+  const needle = search.trim().toLowerCase();
+  return records.filter((record) => {
+    const toolCall = isToolCallEntry(record);
+    if (type === "permission" && toolCall) return false;
+    if (type === "tool_call" && !toolCall) return false;
+    // Decisions only exist on permission records; a decision filter excludes tool calls.
+    if (decision !== "all" && (toolCall || record.decision !== decision)) return false;
+    if (!needle) return true;
+    const haystack = [
+      record.name,
+      record.kind,
+      record.agentId,
+      record.agentModel ?? "",
+      summarizeAuditInput(record.input),
+      toolCall ? record.outcome : record.decision,
+      toolCall ? record.turnId ?? "" : "",
+    ]
+      .join(" ")
+      .toLowerCase();
+    return haystack.includes(needle);
+  });
+}

package/shared/vendor/permission-audit/index.ts

@@ -0,0 +1,2 @@
+export * from "./shared.js";
+export * from "./filter.js";

package/shared/vendor/permission-audit/shared.ts

@@ -0,0 +1,119 @@
+import { z } from "zod";
+import { defineContract } from "../paseo-plugin-helper/index";
+
+export const PermissionDecisionSchema = z.enum(["pending", "allow", "deny"]);
+export type PermissionDecision = z.infer<typeof PermissionDecisionSchema>;
+
+export const PermissionAuditEntrySchema = z.object({
+  id: z.string().min(1),
+  timestamp: z.string().min(1),
+  agentId: z.string().min(1),
+  agentTitle: z.string().optional(),
+  agentModel: z.string().optional(),
+  agentProvider: z.string().optional(),
+  agentMode: z.string().optional(),
+  agentCwd: z.string().optional(),
+  kind: z.string().min(1),
+  name: z.string().min(1),
+  input: z.unknown(),
+  decision: PermissionDecisionSchema,
+  updatedInput: z.unknown().optional(),
+  denyReason: z.string().optional(),
+});
+export type PermissionAuditEntry = z.infer<typeof PermissionAuditEntrySchema>;
+
+export const TOOL_CALL_RECORD_TYPE = "tool_call";
+
+export const ToolCallOutcomeSchema = z.enum(["success", "failure", "canceled"]);
+export type ToolCallOutcome = z.infer<typeof ToolCallOutcomeSchema>;
+
+/**
+ * A tool invocation captured from the `agent.turn_ended` timeline. Shares the
+ * permission entry's attribution fields and is appended to the same JSONL log;
+ * `recordType` discriminates the two on read.
+ */
+export const ToolCallAuditEntrySchema = z.object({
+  recordType: z.literal(TOOL_CALL_RECORD_TYPE),
+  id: z.string().min(1),
+  timestamp: z.string().min(1),
+  turnId: z.string().optional(),
+  /** Index of the item in the turn timeline; orders calls that share a timestamp. */
+  sequence: z.number().int().nonnegative().optional(),
+  agentId: z.string().min(1),
+  agentTitle: z.string().optional(),
+  agentModel: z.string().optional(),
+  agentProvider: z.string().optional(),
+  agentMode: z.string().optional(),
+  agentCwd: z.string().optional(),
+  kind: z.string().min(1),
+  name: z.string().min(1),
+  input: z.unknown(),
+  outcome: ToolCallOutcomeSchema,
+  error: z.unknown().optional(),
+  result: z.unknown().optional(),
+});
+export type ToolCallAuditEntry = z.infer<typeof ToolCallAuditEntrySchema>;
+
+export const AuditRecordSchema = z.union([
+  ToolCallAuditEntrySchema,
+  PermissionAuditEntrySchema,
+]);
+export type AuditRecord = z.infer<typeof AuditRecordSchema>;
+
+export function isToolCallEntry(record: AuditRecord): record is ToolCallAuditEntry {
+  return (record as { recordType?: unknown }).recordType === TOOL_CALL_RECORD_TYPE;
+}
+
+export function isPermissionEntry(record: AuditRecord): record is PermissionAuditEntry {
+  return !isToolCallEntry(record);
+}
+
+/** Stable identity for dedupe: call ids and request ids share a namespace. */
+export function auditRecordKey(record: AuditRecord): string {
+  return `${isToolCallEntry(record) ? TOOL_CALL_RECORD_TYPE : "permission"}:${record.id}`;
+}
+
+export const AuditRecordTypeSchema = z.enum(["permission", TOOL_CALL_RECORD_TYPE]);
+export type AuditRecordType = z.infer<typeof AuditRecordTypeSchema>;
+
+export const PermissionQueryFilterSchema = z.object({
+  agentId: z.string().min(1).optional(),
+  model: z.string().min(1).optional(),
+  provider: z.string().min(1).optional(),
+  decision: PermissionDecisionSchema.optional(),
+  outcome: ToolCallOutcomeSchema.optional(),
+  recordType: AuditRecordTypeSchema.optional(),
+  kind: z.string().min(1).optional(),
+  from: z.string().min(1).optional(),
+  to: z.string().min(1).optional(),
+  search: z.string().optional(),
+  limit: z.number().int().min(1).max(1000).default(100),
+});
+export type PermissionQueryFilter = z.input<typeof PermissionQueryFilterSchema>;
+
+const auditQueryOutput = z.object({
+  entries: z.array(AuditRecordSchema),
+  total: z.number().int().nonnegative(),
+});
+
+export const permissionAuditQuery = defineContract({
+  name: "permission-audit.query",
+  description: "Query logged permission decisions, filtered by agent, model, date range, or decision",
+  input: PermissionQueryFilterSchema,
+  output: auditQueryOutput,
+});
+
+export const permissionLoggerQuery = defineContract({
+  name: "permission-logger.query",
+  description: "Query logged permission decisions, filtered by agent, model, date range, or decision",
+  input: PermissionQueryFilterSchema,
+  output: auditQueryOutput,
+});
+
+export const PERMISSION_AUDIT_PLUGIN_ID = "permission-logger";
+export const PERMISSION_AUDIT_FILENAME = "permissions.jsonl";
+
+export interface PermissionLogPaths {
+  primary: string;
+  legacy: string;
+}

package/shared/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by paseo-plugin-helper. Do not edit.
-export const PLUGIN_VERSION = "0.4.0+a50ea39";
+export const PLUGIN_VERSION = "0.4.5+50ac5ba8";

package/client/vendor/paseo-plugin-helper/components/AboutSection.tsx

@@ -1,493 +0,0 @@
-import React, { useState, type ReactNode } from "react";
-import {
-  Image,
-  Linking,
-  StyleSheet,
-  Text,
-  View,
-  type ImageSourcePropType,
-  type StyleProp,
-  type ViewStyle,
-} from "react-native";
-import { getClientHost } from "../host";
-import { usePluginTheme } from "../theme/provider";
-import { useResponsive } from "../theme/useResponsive";
-import { Card } from "./Card";
-import { Badge } from "./Badge";
-import { Button } from "./Button";
-import { KeyValue, KeyValueGroup } from "./KeyValue";
-import { copyToClipboard } from "../utils/clipboard";
-import { triggerHaptic } from "../utils/haptics";
-
-export interface AboutLink {
-  label: string;
-  url: string;
-  icon?: string;
-}
-
-export interface AboutSectionProps {
-  /**
-   * Name of the plugin.
-   */
-  name: string;
-
-  /**
-   * Short description or tagline.
-   */
-  description?: string;
-
-  /**
-   * Semantic version string (e.g. from `PLUGIN_VERSION` or package.json).
-   */
-  version: string;
-
-  /**
-   * Author or organization name.
-   */
-  author?: string;
-
-  /**
-   * Logo or icon to display.
-   * - A React Native image source object: `{ uri: "https://..." }` or `require("./assets/logo.png")`
-   * - A string starting with "http" (e.g. avatar/logo URL)
-   * - A Paseo Lucide icon name (e.g. "Cpu", "Layers", "Sparkles")
-   * - If omitted and `repository` or `author` is a GitHub link/username, defaults to the GitHub avatar!
-   */
-  logo?: ImageSourcePropType | string;
-
-  /**
-   * Repository URL (e.g. "https://github.com/xpufx/paseo-top").
-   */
-  repository?: string;
-
-  /**
-   * Issue tracker URL (e.g. "https://github.com/xpufx/paseo-top/issues").
-   */
-  issues?: string;
-
-  /**
-   * Documentation website or wiki URL.
-   */
-  homepage?: string;
-
-  /**
-   * License identifier (e.g. "MIT", "Apache-2.0").
-   */
-  license?: string;
-
-  /**
-   * Custom additional links.
-   */
-  links?: AboutLink[];
-
-  /**
-   * Extra diagnostic or environmental items to display in the details section.
-   */
-  extraItems?: Array<{
-    label: string;
-    value: string;
-    subValue?: string;
-    copyable?: boolean;
-  }>;
-
-  /**
-   * Whether to display the "Copy Diagnostics" button. Default: true.
-   */
-  showDiagnosticsCopy?: boolean;
-
-  /**
-   * Optional custom container style.
-   */
-  style?: StyleProp<ViewStyle>;
-
-  /**
-   * Visual density. `"tiny"` scales all fonts to the smallest readable
-   * size for dense About pages. Default: `"default"`.
-   */
-  density?: "default" | "compact" | "tiny";
-}
-
-/**
- * Extracts a GitHub owner/organization from a repository URL or author name.
- */
-function resolveGitHubAvatarUrl(repo?: string, author?: string): string | null {
-  if (repo) {
-    const match = repo.match(/github\.com[/:]([a-zA-Z0-9_-]+)/);
-    if (match?.[1]) {
-      return `https://github.com/${match[1]}.png?size=128`;
-    }
-  }
-  if (author && !author.includes(" ") && !author.includes("@")) {
-    return `https://github.com/${author}.png?size=128`;
-  }
-  return null;
-}
-
-/**
- * `<AboutSection>` provides a standardized, responsive plugin information and diagnostics view.
- * 
- * Features:
- * - Displays plugin branding, author, description, version, and license badges.
- * - Supports custom logo images, local asset requires, Lucide icons, or auto-resolved GitHub avatars.
- * - One-click "Copy Diagnostics" button formatting system info for GitHub issue triage.
- * - Pre-styled external links with native browser launch via React Native `Linking`.
- */
-export function AboutSection({
-  name,
-  description,
-  version,
-  author,
-  logo,
-  repository,
-  issues,
-  homepage,
-  license = "MIT",
-  links = [],
-  extraItems = [],
-  showDiagnosticsCopy = true,
-  style,
-  density = "default",
-}: AboutSectionProps) {
-  const { Icon } = getClientHost();
-  const { colors, resolveRadius, typography } = usePluginTheme();
-  const { isCompact, platform } = useResponsive();
-  const [copied, setCopied] = useState(false);
-  const isTiny = density === "tiny";
-
-  // 1. Resolve Logo / Avatar
-  let resolvedLogoNode: ReactNode = null;
-  const radius = resolveRadius("md");
-
-  if (logo) {
-    if (typeof logo === "string") {
-      if (logo.startsWith("http://") || logo.startsWith("https://")) {
-        resolvedLogoNode = (
-          <Image
-            source={{ uri: logo }}
-            style={[styles.logoImage, { borderRadius: radius }]}
-          />
-        );
-      } else {
-        resolvedLogoNode = (
-          <View
-            style={[
-              styles.logoIconFallback,
-              {
-                backgroundColor: colors.surface2,
-                borderRadius: radius,
-                borderColor: colors.border,
-              },
-            ]}
-          >
-            <Icon name={logo} size={26} color={colors.accent} />
-          </View>
-        );
-      }
-    } else {
-      resolvedLogoNode = (
-        <Image
-          source={logo}
-          style={[styles.logoImage, { borderRadius: radius }]}
-        />
-      );
-    }
-  } else {
-    // Attempt automatic GitHub avatar resolution
-    const githubAvatar = resolveGitHubAvatarUrl(repository, author);
-    if (githubAvatar) {
-      resolvedLogoNode = (
-        <Image
-          source={{ uri: githubAvatar }}
-          style={[styles.logoImage, { borderRadius: radius }]}
-        />
-      );
-    } else {
-      resolvedLogoNode = (
-        <View
-          style={[
-            styles.logoIconFallback,
-            {
-              backgroundColor: colors.surface2,
-              borderRadius: radius,
-              borderColor: colors.border,
-            },
-          ]}
-        >
-          <Icon name="Layers" size={26} color={colors.accent} />
-        </View>
-      );
-    }
-  }
-
-  // 2. Open URL helper
-  const handleOpenUrl = async (url: string) => {
-    try {
-      triggerHaptic("light");
-      const canOpen = await Linking.canOpenURL(url);
-      if (canOpen) {
-        await Linking.openURL(url);
-      }
-    } catch {
-      // Ignore linking errors
-    }
-  };
-
-  // 3. Diagnostics copy helper
-  const handleCopyDiagnostics = async () => {
-    triggerHaptic("success");
-    const lines = [
-      `Plugin: ${name} v${version}`,
-      author ? `Author: ${author}` : null,
-      `License: ${license}`,
-      `Platform: ${platform} (${isCompact ? "compact" : "regular"})`,
-      repository ? `Repository: ${repository}` : null,
-      ...extraItems.map((item) => `${item.label}: ${item.value}`),
-    ].filter(Boolean);
-
-    await copyToClipboard(lines.join("\n"));
-    setCopied(true);
-    setTimeout(() => setCopied(false), 2500);
-  };
-
-  // 4. Assemble external links
-  const allLinks: AboutLink[] = [
-    ...(repository ? [{ label: "Repository", url: repository, icon: "ExternalLink" }] : []),
-    ...(issues ? [{ label: "Report Issue", url: issues, icon: "Bug" }] : []),
-    ...(homepage ? [{ label: "Documentation", url: homepage, icon: "BookOpen" }] : []),
-    ...links,
-  ];
-
-  return (
-    <View style={[styles.container, isTiny && tinyStyles.container, style]}>
-      {/* Header Banner Card */}
-      <Card variant="elevated" style={isTiny ? tinyStyles.card : undefined}>
-        <View style={[styles.headerRow, isTiny && tinyStyles.headerRow]}>
-          {resolvedLogoNode}
-
-          <View style={[styles.metaColumn, isTiny && tinyStyles.metaColumn]}>
-            <View style={styles.identityTitleRow}>
-              <Text
-                numberOfLines={2}
-                style={[
-                  styles.identityTitle,
-                  {
-                    color: colors.foreground,
-                    ...typography.heading,
-                  },
-                  isTiny && tinyStyles.title,
-                ]}
-              >
-                {name}
-              </Text>
-              <Badge
-                variant="accent"
-                label={`v${version}`}
-                textStyle={isTiny ? tinyStyles.text9 : undefined}
-              />
-            </View>
-
-            {description ? (
-              <Text
-                numberOfLines={3}
-                style={[
-                  styles.identityDescription,
-                  { color: colors.foregroundMuted, ...typography.body },
-                  isTiny && tinyStyles.text9,
-                ]}
-              >
-                {description}
-              </Text>
-            ) : null}
-
-            {author ? (
-              <Text
-                style={[
-                  styles.authorText,
-                  { color: colors.foregroundMuted, ...typography.caption },
-                  isTiny && tinyStyles.text9,
-                ]}
-              >
-                by {author}
-              </Text>
-            ) : null}
-
-            {license ? (
-              <View style={styles.titleRow}>
-                <Badge
-                  variant="neutral"
-                  label={license}
-                  textStyle={isTiny ? tinyStyles.text9 : undefined}
-                />
-              </View>
-            ) : null}
-          </View>
-        </View>
-
-        {/* Action Buttons: External Links & Diagnostics */}
-        <View style={[styles.actionsRow, isTiny && tinyStyles.actionsRow]}>
-          {allLinks.map((link) => (
-            <Button
-              key={link.url}
-              size="sm"
-              variant="secondary"
-              icon={link.icon ?? "ExternalLink"}
-              label={link.label}
-              onPress={() => handleOpenUrl(link.url)}
-              textStyle={isTiny ? tinyStyles.text9 : undefined}
-            />
-          ))}
-
-          {showDiagnosticsCopy && (
-            <Button
-              size="sm"
-              variant={copied ? "primary" : "ghost"}
-              icon={copied ? "Check" : "Copy"}
-              label={copied ? "Diagnostics Copied!" : "Copy Diagnostics"}
-              onPress={handleCopyDiagnostics}
-              textStyle={isTiny ? tinyStyles.text9 : undefined}
-            />
-          )}
-        </View>
-      </Card>
-
-      {/* Environment & Extra Diagnostics Details */}
-      <Card variant="elevated" style={isTiny ? tinyStyles.card : undefined}>
-        <Card.Header
-          title="Runtime Environment"
-          subtitle="Diagnostics for issue reports and system verification"
-          titleStyle={isTiny ? tinyStyles.title : undefined}
-          subtitleStyle={isTiny ? tinyStyles.text9 : undefined}
-        />
-        <KeyValueGroup columns={isCompact ? 1 : 2} gap={isTiny ? 6 : undefined}>
-          <KeyValue
-            label="Plugin Version"
-            value={`v${version}`}
-            copyable
-            labelStyle={isTiny ? tinyStyles.text9 : undefined}
-            valueStyle={isTiny ? tinyStyles.text9 : undefined}
-          />
-          <KeyValue
-            label="Client Platform"
-            value={platform}
-            labelStyle={isTiny ? tinyStyles.text9 : undefined}
-            valueStyle={isTiny ? tinyStyles.text9 : undefined}
-          />
-          {author ? (
-            <KeyValue
-              label="Author"
-              value={author}
-              labelStyle={isTiny ? tinyStyles.text9 : undefined}
-              valueStyle={isTiny ? tinyStyles.text9 : undefined}
-            />
-          ) : null}
-          {license ? (
-            <KeyValue
-              label="License"
-              value={license}
-              labelStyle={isTiny ? tinyStyles.text9 : undefined}
-              valueStyle={isTiny ? tinyStyles.text9 : undefined}
-            />
-          ) : null}
-          {extraItems.map((item, idx) => (
-            <KeyValue
-              key={idx}
-              label={item.label}
-              value={item.value}
-              subValue={item.subValue}
-              copyable={item.copyable}
-              labelStyle={isTiny ? tinyStyles.text9 : undefined}
-              valueStyle={isTiny ? tinyStyles.text9 : undefined}
-            />
-          ))}
-        </KeyValueGroup>
-      </Card>
-    </View>
-  );
-}
-
-const styles = StyleSheet.create({
-  container: {
-    gap: 12,
-  },
-  headerRow: {
-    flexDirection: "row",
-    alignItems: "center",
-    gap: 14,
-  },
-  logoImage: {
-    width: 48,
-    height: 48,
-    resizeMode: "cover",
-  },
-  logoIconFallback: {
-    width: 48,
-    height: 48,
-    alignItems: "center",
-    justifyContent: "center",
-    borderWidth: 1,
-  },
-  metaColumn: {
-    flex: 1,
-    gap: 5,
-    minWidth: 0,
-  },
-  identityTitleRow: {
-    flexDirection: "row",
-    alignItems: "center",
-    flexWrap: "wrap",
-    gap: 6,
-  },
-  identityTitle: {
-    flexShrink: 1,
-  },
-  identityDescription: {
-    flexShrink: 1,
-  },
-  titleRow: {
-    flexDirection: "row",
-    alignItems: "center",
-    flexWrap: "wrap",
-    gap: 6,
-  },
-  authorText: {
-    flexShrink: 1,
-  },
-  actionsRow: {
-    flexDirection: "row",
-    alignItems: "center",
-    flexWrap: "wrap",
-    gap: 8,
-    marginTop: 12,
-    paddingTop: 10,
-    borderTopWidth: StyleSheet.hairlineWidth,
-    borderTopColor: "rgba(128, 128, 128, 0.2)",
-  },
-});
-
-const tinyStyles = StyleSheet.create({
-  container: {
-    gap: 6,
-  },
-  card: {
-    paddingHorizontal: 8,
-    paddingVertical: 8,
-    gap: 6,
-  },
-  title: {
-    fontSize: 11,
-  },
-  text9: {
-    fontSize: 9,
-  },
-  headerRow: {
-    gap: 8,
-  },
-  metaColumn: {
-    gap: 4,
-  },
-  actionsRow: {
-    gap: 6,
-    marginTop: 8,
-    paddingTop: 6,
-  },
-});