agentlytics 0.1.19 → 0.1.20

package/editors/base.js

@@ -32,6 +32,93 @@ function getAppDataPath(appName) {
  *       { role: 'user'|'assistant'|'system'|'tool', content: string|Array }
  */
 
+/**
+ * Scan a project folder for artifact files.
+ *
+ * @param {string} folder - Absolute path to the project folder
+ * @param {Object} opts
+ * @param {string} opts.editor - Editor identifier (e.g. 'cursor', 'claude-code')
+ * @param {string} opts.label - Display label (e.g. 'Cursor', 'Claude Code')
+ * @param {string[]} [opts.files] - Relative file paths to check (e.g. ['CLAUDE.md'])
+ * @param {string[]} [opts.dirs] - Relative directories to scan for .md/.yaml/.yml/.json files
+ * @returns {Array} Array of artifact objects
+ */
+function scanArtifacts(folder, { editor, label, files = [], dirs = [] }) {
+  const fs = require('fs');
+  const artifacts = [];
+  if (!folder || !fs.existsSync(folder)) return artifacts;
+
+  for (const relPath of files) {
+    const filePath = path.join(folder, relPath);
+    try {
+      const stat = fs.statSync(filePath);
+      if (!stat.isFile()) continue;
+      const content = fs.readFileSync(filePath, 'utf-8');
+      artifacts.push({
+        editor,
+        editorLabel: label,
+        name: relPath,
+        path: filePath,
+        relativePath: relPath,
+        size: stat.size,
+        modifiedAt: stat.mtime.getTime(),
+        preview: content.substring(0, 500),
+        lines: content.split('\n').length,
+      });
+    } catch { /* skip */ }
+  }
+
+  const isArtifactFile = (f) =>
+    f.endsWith('.md') || f.endsWith('.mdc') || f.endsWith('.yaml') || f.endsWith('.yml') || f.endsWith('.json');
+
+  const addFile = (filePath, relPath, fileName) => {
+    try {
+      const fstat = fs.statSync(filePath);
+      if (!fstat.isFile()) return;
+      const content = fs.readFileSync(filePath, 'utf-8');
+      artifacts.push({
+        editor,
+        editorLabel: label,
+        name: fileName,
+        path: filePath,
+        relativePath: relPath,
+        size: fstat.size,
+        modifiedAt: fstat.mtime.getTime(),
+        preview: content.substring(0, 500),
+        lines: content.split('\n').length,
+      });
+    } catch { /* skip */ }
+  };
+
+  for (const dir of dirs) {
+    const dirPath = path.join(folder, dir);
+    try {
+      const stat = fs.statSync(dirPath);
+      if (!stat.isDirectory()) continue;
+      const entries = fs.readdirSync(dirPath);
+      for (const entry of entries) {
+        const entryPath = path.join(dirPath, entry);
+        if (isArtifactFile(entry)) {
+          addFile(entryPath, path.join(dir, entry), entry);
+        } else {
+          // Recurse one level into subdirectories (e.g. .kiro/specs/<name>/, .windsurf/skills/<name>/)
+          try {
+            const eStat = fs.statSync(entryPath);
+            if (!eStat.isDirectory()) continue;
+            const subEntries = fs.readdirSync(entryPath).filter(isArtifactFile);
+            for (const subFile of subEntries) {
+              addFile(path.join(entryPath, subFile), path.join(dir, entry, subFile), subFile);
+            }
+          } catch { /* skip */ }
+        }
+      }
+    } catch { /* skip */ }
+  }
+
+  return artifacts;
+}
+
 module.exports = {
   getAppDataPath,
+  scanArtifacts,
 };

package/editors/claude.js

@@ -301,4 +301,14 @@ async function getUsage() {
 
 const labels = { 'claude-code': 'Claude Code' };
 
-module.exports = { name, labels, getChats, getMessages, getUsage };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'claude-code',
+    label: 'Claude Code',
+    files: ['CLAUDE.md', '.claude/settings.json', '.claude/settings.local.json', '.mcp.json'],
+    dirs: ['.claude/commands'],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, getUsage, getArtifacts };

package/editors/codex.js

@@ -499,9 +499,20 @@ async function getUsage() {
 
 const labels = { 'codex': 'Codex' };
 
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'codex',
+    label: 'Codex',
+    files: ['AGENTS.md', 'codex.md'],
+    dirs: [],
+  });
+}
+
 module.exports = {
   name,
   labels,
+  getArtifacts,
   getChats,
   getMessages,
   getUsage,

package/editors/copilot.js

@@ -240,4 +240,14 @@ async function getUsage() {
 
 const labels = { 'copilot-cli': 'Copilot CLI' };
 
-module.exports = { name, labels, getChats, getMessages, getUsage };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'copilot-cli',
+    label: 'Copilot',
+    files: ['.github/copilot-instructions.md'],
+    dirs: [],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, getUsage, getArtifacts };

package/editors/cursor.js

@@ -415,4 +415,14 @@ async function getUsage() {
 
 const labels = { 'cursor': 'Cursor' };
 
-module.exports = { name, labels, getChats, getMessages, getUsage };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'cursor',
+    label: 'Cursor',
+    files: ['.cursorrules', 'AGENTS.md'],
+    dirs: ['.cursor/rules', '.cursor/plans'],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, getUsage, getArtifacts };

package/editors/gemini.js

@@ -173,4 +173,14 @@ function getMessages(chat) {
 
 const labels = { 'gemini-cli': 'Gemini CLI' };
 
-module.exports = { name, labels, getChats, getMessages };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'gemini-cli',
+    label: 'Gemini CLI',
+    files: ['GEMINI.md'],
+    dirs: [],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, getArtifacts };

package/editors/goose.js

@@ -1,24 +1,36 @@
 const path = require('path');
 const fs = require('fs');
 const os = require('os');
-const { execSync } = require('child_process');
 
 const GOOSE_DIR = path.join(os.homedir(), '.local', 'share', 'goose', 'sessions');
 const DB_PATH = path.join(GOOSE_DIR, 'sessions.db');
 const CONFIG_PATH = path.join(os.homedir(), '.config', 'goose', 'config.yaml');
 
 // ============================================================
-// Query SQLite via CLI
+// Query SQLite via better-sqlite3 (cross-platform)
 // ============================================================
 
+let Database;
+function getDatabase() {
+  if (!Database) {
+    try {
+      Database = require('better-sqlite3');
+    } catch {
+      // better-sqlite3 not available
+    }
+  }
+  return Database;
+}
+
 function queryDb(sql) {
   if (!fs.existsSync(DB_PATH)) return [];
+  const Db = getDatabase();
+  if (!Db) return []; // Fallback if better-sqlite3 not available
   try {
-    const raw = execSync(
-      `sqlite3 -json ${JSON.stringify(DB_PATH)} ${JSON.stringify(sql)}`,
-      { encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024, stdio: ['pipe', 'pipe', 'pipe'] }
-    );
-    return JSON.parse(raw);
+    const db = new Db(DB_PATH, { readonly: true });
+    const rows = db.prepare(sql).all();
+    db.close();
+    return rows;
   } catch { return []; }
 }
 
@@ -284,4 +296,14 @@ function resetCache() {
 
 const labels = { 'goose': 'Goose' };
 
-module.exports = { name, labels, getChats, getMessages, resetCache };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'goose',
+    label: 'Goose',
+    files: ['.goosehints'],
+    dirs: [],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, resetCache, getArtifacts };

package/editors/index.js

@@ -80,4 +80,43 @@ async function getAllUsage() {
   return results;
 }
 
-module.exports = { getAllChats, getMessages, editors, editorLabels, resetCaches, getAllUsage };
+/**
+ * Get all artifacts for a given project folder from all editors.
+ * Also scans for general/shared artifact files (plan.md, etc.).
+ */
+function getAllArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  const artifacts = [];
+
+  // Collect from each editor that implements getArtifacts
+  for (const editor of editors) {
+    if (typeof editor.getArtifacts !== 'function') continue;
+    try {
+      artifacts.push(...editor.getArtifacts(folder));
+    } catch { /* skip broken adapters */ }
+  }
+
+  // General / shared artifact files (not tied to any specific editor)
+  if (folder) {
+    try {
+      artifacts.push(...scanArtifacts(folder, {
+        editor: '_general',
+        label: 'General',
+        files: ['AGENTS.md', '.mcp.json', 'plan.md', 'progress.md', 'TODO.md', 'CONVENTIONS.md', 'ARCHITECTURE.md', 'PLANNING.md'],
+        dirs: [],
+      }));
+    } catch { /* skip */ }
+  }
+
+  // Deduplicate by path — editor-specific entries take priority over general
+  const seen = new Map();
+  for (const a of artifacts) {
+    const existing = seen.get(a.path);
+    if (!existing || (existing.editor === '_general' && a.editor !== '_general')) {
+      seen.set(a.path, a);
+    }
+  }
+  return Array.from(seen.values());
+}
+
+module.exports = { getAllChats, getMessages, editors, editorLabels, resetCaches, getAllUsage, getAllArtifacts };

package/editors/kiro.js

@@ -293,4 +293,14 @@ function getFileMtime(filePath) {
 
 const labels = { 'kiro': 'Kiro' };
 
-module.exports = { name, labels, getChats, getMessages };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'kiro',
+    label: 'Kiro',
+    files: ['AGENTS.md'],
+    dirs: ['.kiro/specs', '.kiro/steering'],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, getArtifacts };

package/editors/opencode.js

@@ -3,19 +3,9 @@ const fs = require('fs');
 const os = require('os');
 const Database = require('better-sqlite3');
 
-// OpenCode stores data in different locations depending on the platform
-// - Windows: %LOCALAPPDATA%\opencode\storage (not Roaming)
-// - macOS/Linux: ~/.local/share/opencode/storage (XDG path)
+// OpenCode stores data in XDG-style paths across all platforms
 function getOpenCodeStoragePath() {
-  const home = os.homedir();
-  switch (process.platform) {
-    case 'win32':
-      return path.join(home, 'AppData', 'Local', 'opencode', 'storage');
-    case 'darwin':
-    case 'linux':
-    default:
-      return path.join(home, '.local', 'share', 'opencode', 'storage');
-  }
+  return path.join(os.homedir(), '.local', 'share', 'opencode', 'storage');
 }
 
 const STORAGE_DIR = getOpenCodeStoragePath();
@@ -23,17 +13,9 @@ const SESSION_DIR = path.join(STORAGE_DIR, 'session');
 const MESSAGE_DIR = path.join(STORAGE_DIR, 'message');
 const PART_DIR = path.join(STORAGE_DIR, 'part');
 
-// OpenCode also stores data in a SQLite database (older/primary store)
+// OpenCode also stores data in a SQLite database
 function getOpenCodeDbPath() {
-  const home = os.homedir();
-  switch (process.platform) {
-    case 'win32':
-      return path.join(home, 'AppData', 'Local', 'opencode', 'opencode.db');
-    case 'darwin':
-    case 'linux':
-    default:
-      return path.join(home, '.local', 'share', 'opencode', 'opencode.db');
-  }
+  return path.join(os.homedir(), '.local', 'share', 'opencode', 'opencode.db');
 }
 
 const DB_PATH = getOpenCodeDbPath();

package/editors/vscode.js

@@ -386,4 +386,14 @@ async function getUsage() {
 
 const labels = { 'vscode': 'VS Code', 'vscode-insiders': 'VS Code Insiders' };
 
-module.exports = { name, labels, getChats, getMessages, getUsage };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'vscode',
+    label: 'VS Code',
+    files: ['.github/copilot-instructions.md'],
+    dirs: ['.vscode'],
+  });
+}
+
+module.exports = { name, labels, getChats, getMessages, getUsage, getArtifacts };

package/editors/windsurf.js

@@ -1,4 +1,4 @@
-const { execSync } = require('child_process');
+const { execSync, execFileSync } = require('child_process');
 const path = require('path');
 const os = require('os');
 const fs = require('fs');
@@ -18,18 +18,19 @@ const IS_WINDOWS = process.platform === 'win32';
 function getProcessList() {
   try {
     if (IS_WINDOWS) {
-      // wmic provides CSV-formatted process data
-      const output = execSync('wmic process get CommandLine,ProcessId /format:csv', {
+      // Use PowerShell Get-Process (WMIC is deprecated in Windows 10/11)
+      const output = execFileSync('powershell', ['-Command', 'Get-Process | Select-Object Id, Path, CommandLine | ConvertTo-Csv -NoTypeInformation'], {
         encoding: 'utf-8',
         maxBuffer: 10 * 1024 * 1024,
       });
-      // Parse CSV: skip header, split by comma
+      // Parse CSV: skip header
       const lines = output.split('\n').slice(1);
       return lines.map(line => {
         const parts = line.split(',');
-        if (parts.length < 2) return null;
-        const commandLine = parts.slice(0, -1).join(',').trim().replace(/^"|"$/g, '');
-        const pid = parts[parts.length - 1].trim();
+        if (parts.length < 3) return null;
+        const pid = parts[0].trim().replace(/^"|"$/g, '');
+        const commandLine = parts[2].trim().replace(/^"|"$/g, '');
+        if (!pid || !commandLine) return null;
         return { commandLine, pid };
       }).filter(Boolean);
     } else {
@@ -49,8 +50,8 @@ function getProcessList() {
 function getListeningPorts(pid) {
   try {
     if (IS_WINDOWS) {
-      // netstat -ano shows PID in the last column
-      const output = execSync(`netstat -ano | findstr ${pid}`, {
+      // Use PowerShell to get netstat output and filter by PID
+      const output = execFileSync('powershell', ['-Command', `netstat -ano | Select-String "${pid}$"`], {
         encoding: 'utf-8',
         maxBuffer: 10 * 1024 * 1024,
       });
@@ -577,4 +578,14 @@ function resetCache() { _lsCache = null; }
 
 const labels = { 'windsurf': 'Windsurf', 'windsurf-next': 'Windsurf Next' };
 
-module.exports = { name, sources, labels, getChats, getMessages, resetCache, getUsage };
+function getArtifacts(folder) {
+  const { scanArtifacts } = require('./base');
+  return scanArtifacts(folder, {
+    editor: 'windsurf',
+    label: 'Windsurf',
+    files: ['.windsurfrules'],
+    dirs: ['.windsurf/workflows', '.windsurf/rules', '.windsurf/plans', '.windsurf/skills'],
+  });
+}
+
+module.exports = { name, sources, labels, getChats, getMessages, resetCache, getUsage, getArtifacts };

package/editors/zed.js

@@ -1,7 +1,6 @@
 const path = require('path');
 const fs = require('fs');
 const os = require('os');
-const { execSync } = require('child_process');
 
 const Database = require('better-sqlite3');
 
@@ -24,7 +23,7 @@ function getZedDataPath() {
 const THREADS_DB = path.join(getZedDataPath(), 'threads', 'threads.db');
 
 // ============================================================
-// Decompress zstd blob via CLI
+// Decompress zstd blob via CLI (with cross-platform support)
 // ============================================================
 
 function decompressZstd(buf) {
@@ -32,7 +31,28 @@ function decompressZstd(buf) {
   const tmpOut = tmpIn.replace('.zst', '.json');
   try {
     fs.writeFileSync(tmpIn, buf);
-    execSync(`zstd -d -f -q ${JSON.stringify(tmpIn)} -o ${JSON.stringify(tmpOut)}`, { stdio: ['pipe', 'pipe', 'pipe'] });
+
+    // Try zstd CLI first
+    try {
+      const { execFileSync } = require('child_process');
+      const zstdCmd = process.platform === 'win32' ? 'zstd.exe' : 'zstd';
+      execFileSync(zstdCmd, ['-d', '-f', '-q', tmpIn, '-o', tmpOut], { stdio: ['pipe', 'pipe', 'pipe'] });
+    } catch {
+      // Fallback: try using Node.js zstd library if available
+      try {
+        const zlib = require('zlib');
+        // Check if Node version supports zstd natively (v22+)
+        if (zlib.createZstdDecompress) {
+          const decompressed = zlib.zstdDecompressSync(buf);
+          fs.writeFileSync(tmpOut, decompressed);
+        } else {
+          throw new Error('zstd not available');
+        }
+      } catch {
+        throw new Error('zstd decompression not available on this system');
+      }
+    }
+
     const data = fs.readFileSync(tmpOut, 'utf-8');
     return data;
   } finally {

package/index.js

@@ -244,7 +244,7 @@ for (const [src, label, count] of displayList) {
 }
 console.log('');
 
-// ── Analyze sessions with robot animation ──────────────────
+// ── Analyze sessions with robot animation (async to allow Ctrl+C) ──
 const logUpdate = require('log-update');
 const BOT_STYLES = [
   { l: '(', r: ')', color: '#818cf8' },
@@ -252,44 +252,46 @@ const BOT_STYLES = [
   { l: '{', r: '}', color: '#34d399' },
   { l: '<', r: '>', color: '#fbbf24' },
 ];
-let tick = 0;
-
-const startTime = Date.now();
-const result = cache.scanAll((p) => {
-  tick++;
-  if (tick % 5 !== 0) return;
-  const frame = Math.floor(tick / 40);
-  const b = BOT_STYLES[frame % 4];
-  const dots = '.'.repeat((Math.floor(tick / 10) % 3) + 1).padEnd(3);
-  logUpdate(`  ${chalk.hex(b.color)(`${b.l}● ●${b.r}`)}  ${chalk.dim(`Analyzing${dots} ${p.scanned}/${p.total}`)}`);
-}, { chats: allChats });
-const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
-const allFaces = BOT_STYLES.map(b => chalk.hex(b.color)(`${b.l}● ●${b.r}`)).join(' ');
-logUpdate(`  ${allFaces}  ${chalk.green(`✓ ${result.analyzed} analyzed, ${result.skipped} cached (${elapsed}s)`)}`);
-logUpdate.done();
-console.log('');
 
-// In collect-only mode, exit after cache is built
-if (collectOnly) {
-  const cacheDbPath = path.join(os.homedir(), '.agentlytics', 'cache.db');
-  console.log(chalk.dim(`  Cache file: ${cacheDbPath}`));
+(async () => {
+  let tick = 0;
+  const startTime = Date.now();
+  const result = await cache.scanAllAsync((p) => {
+    tick++;
+    if (tick % 5 !== 0) return;
+    const frame = Math.floor(tick / 40);
+    const b = BOT_STYLES[frame % 4];
+    const dots = '.'.repeat((Math.floor(tick / 10) % 3) + 1).padEnd(3);
+    logUpdate(`  ${chalk.hex(b.color)(`${b.l}● ●${b.r}`)}  ${chalk.dim(`Analyzing${dots} ${p.scanned}/${p.total}`)}`);
+  }, { chats: allChats });
+  const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+  const allFaces = BOT_STYLES.map(b => chalk.hex(b.color)(`${b.l}● ●${b.r}`)).join(' ');
+  logUpdate(`  ${allFaces}  ${chalk.green(`✓ ${result.analyzed} analyzed, ${result.skipped} cached (${elapsed}s)`)}`);
+  logUpdate.done();
   console.log('');
-  process.exit(0);
-}
 
-// Start server
-const app = require('./server');
-app.listen(PORT, () => {
-  const url = `http://localhost:${PORT}`;
-  console.log(chalk.green(`  ✓ Dashboard ready at ${chalk.bold.white(url)}`));
-  console.log('');
-  console.log(chalk.dim('  💡 Share sessions with your team:'));
-  console.log(chalk.dim(`     npx agentlytics --relay                        Start a relay server`));
-  console.log(chalk.dim(`     npx agentlytics --join <host:port> --username   Join a relay server`));
-  console.log('');
-  console.log(chalk.dim('  Press Ctrl+C to stop\n'));
+  // In collect-only mode, exit after cache is built
+  if (collectOnly) {
+    const cacheDbPath = path.join(os.homedir(), '.agentlytics', 'cache.db');
+    console.log(chalk.dim(`  Cache file: ${cacheDbPath}`));
+    console.log('');
+    process.exit(0);
+  }
 
-  // Auto-open browser
-  const open = require('open');
-  open(url).catch(() => {});
-});
+  // Start server
+  const app = require('./server');
+  app.listen(PORT, () => {
+    const url = `http://localhost:${PORT}`;
+    console.log(chalk.green(`  ✓ Dashboard ready at ${chalk.bold.white(url)}`));
+    console.log('');
+    console.log(chalk.dim('  💡 Share sessions with your team:'));
+    console.log(chalk.dim(`     npx agentlytics --relay                        Start a relay server`));
+    console.log(chalk.dim(`     npx agentlytics --join <host:port> --username   Join a relay server`));
+    console.log('');
+    console.log(chalk.dim('  Press Ctrl+C to stop\n'));
+
+    // Auto-open browser
+    const open = require('open');
+    open(url).catch(() => {});
+  });
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlytics",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "description": "Comprehensive analytics dashboard for AI coding agents — Cursor, Windsurf, Claude Code, VS Code Copilot, Zed, Antigravity, OpenCode, Command Code",
   "main": "index.js",
   "bin": {

package/server.js

@@ -338,8 +338,15 @@ app.get('/api/check-ai', async (req, res) => {
   if (!folder) return res.status(400).json({ error: 'folder query param required' });
   try {
     const { execFile } = require('child_process');
+    const isWindows = process.platform === 'win32';
+    // On Windows, use npx.cmd with shell; on Unix, use npx directly
+    const cmd = isWindows ? 'npx.cmd' : 'npx';
     const result = await new Promise((resolve, reject) => {
-      execFile('npx', ['-y', 'check-ai', '--json', folder], { timeout: 60000, maxBuffer: 1024 * 1024 }, (err, stdout) => {
+      execFile(cmd, ['-y', 'check-ai', '--json', folder], {
+        timeout: 60000,
+        maxBuffer: 1024 * 1024,
+        shell: isWindows
+      }, (err, stdout) => {
         try {
           const json = JSON.parse(stdout);
           resolve(json);
@@ -354,6 +361,79 @@ app.get('/api/check-ai', async (req, res) => {
   }
 });
 
+// ============================================================
+// Artifacts — delegates to editors/index.js getAllArtifacts
+// ============================================================
+
+app.get('/api/artifacts', (req, res) => {
+  try {
+    const { getAllArtifacts } = require('./editors');
+    const projects = cache.getCachedProjects({ hiddenFolders: getHiddenFolders() });
+    const result = [];
+
+    for (const project of projects) {
+      const folder = project.folder;
+      if (!folder) continue;
+
+      const artifacts = getAllArtifacts(folder);
+      if (artifacts.length === 0) continue;
+
+      // Group by editor
+      const byEditor = {};
+      for (const a of artifacts) {
+        if (!byEditor[a.editor]) byEditor[a.editor] = { editor: a.editor, label: a.editorLabel, files: [] };
+        byEditor[a.editor].files.push(a);
+      }
+
+      result.push({
+        folder,
+        name: project.name || path.basename(folder),
+        totalArtifacts: artifacts.length,
+        editors: Object.values(byEditor),
+      });
+    }
+
+    // Sort by total artifacts descending
+    result.sort((a, b) => b.totalArtifacts - a.totalArtifacts);
+    res.json(result);
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
+app.get('/api/artifact-content', (req, res) => {
+  try {
+    const filePath = req.query.path;
+    if (!filePath) return res.status(400).json({ error: 'path query param required' });
+
+    // Security: validate file exists in known artifact results for at least one project
+    const { getAllArtifacts } = require('./editors');
+    const projects = cache.getCachedProjects({ hiddenFolders: getHiddenFolders() });
+    let allowed = false;
+    for (const project of projects) {
+      if (!project.folder) continue;
+      const artifacts = getAllArtifacts(project.folder);
+      if (artifacts.some(a => a.path === filePath)) { allowed = true; break; }
+    }
+    // Also check global/editor-level artifacts not tied to any project (e.g. brain files)
+    if (!allowed) {
+      try {
+        const artifacts = getAllArtifacts(null);
+        if (artifacts.some(a => a.path === filePath)) allowed = true;
+      } catch { /* skip */ }
+    }
+    if (!allowed) return res.status(403).json({ error: 'Not an artifact file' });
+
+    if (!fs.existsSync(filePath)) return res.status(404).json({ error: 'File not found' });
+
+    const content = fs.readFileSync(filePath, 'utf-8');
+    const stat = fs.statSync(filePath);
+    res.json({ path: filePath, name: path.basename(filePath), content, size: stat.size, modifiedAt: stat.mtime.getTime() });
+  } catch (err) {
+    res.status(500).json({ error: err.message });
+  }
+});
+
 app.get('/api/all-projects', (req, res) => {
   try {
     res.json(cache.getCachedProjects({ ...parseDateOpts(req.query), includeHidden: true }));