agentvibes 5.9.0 → 5.10.1

package/src/installer.js

@@ -383,14 +383,14 @@ function isPiperInstalled() {
     }
     // Also check PATH (e.g. pip-installed piper)
     try {
-      execSync('where piper.exe', { stdio: 'pipe', timeout: 3000 });
+      execSync('where piper.exe', { stdio: 'pipe', timeout: 3000 }); // NOSONAR
       return true;
     } catch (e) {
       return false;
     }
   }
   try {
-    execSync('which piper', {
+    execSync('which piper', { // NOSONAR
       stdio: 'pipe',
       timeout: 3000
     });
@@ -406,7 +406,7 @@ function isPiperInstalled() {
  */
 function isSopranoInstalled() {
   try {
-    execSync('which soprano-tts || which soprano-webui', {
+    execSync('which soprano-tts || which soprano-webui', { // NOSONAR
       stdio: 'pipe',
       timeout: 3000
     });
@@ -415,7 +415,7 @@ function isSopranoInstalled() {
     // On Windows, 'which' may not find Python scripts; try 'py -m pip show' as fallback
     if (isNativeWindows()) {
       try {
-        const result = spawnSync('py', ['-m', 'pip', 'show', 'soprano-tts'], {
+        const result = spawnSync('py', ['-m', 'pip', 'show', 'soprano-tts'], { // NOSONAR
           encoding: 'utf8',
           stdio: ['pipe', 'pipe', 'pipe'],
           timeout: 10000
@@ -454,7 +454,7 @@ async function playVoiceSample(voiceName, provider) {
       // Play using sox/aplay - use spawn for non-blocking playback
       try {
         // Play using aplay directly (no shell interpolation — prevents command injection)
-        const player = spawn('aplay', [sampleFile], {
+        const player = spawn('aplay', [sampleFile], { // NOSONAR
           detached: false,
           stdio: 'ignore'
         });
@@ -470,7 +470,7 @@ async function playVoiceSample(voiceName, provider) {
     if (isPiperProvider(provider) && isPiperInstalled()) {
       const text = `Hi, I'm ${voiceName.split('-')[1] || 'Piper'}`;
       // Use bash -c with positional args to prevent command injection via text/voiceName
-      spawnSync('bash', ['-c', 'echo "$1" | piper --model "$2" --output_raw | aplay -r 22050 -f S16_LE -t raw -', '_', text, voiceName], {
+      spawnSync('bash', ['-c', 'echo "$1" | piper --model "$2" --output_raw | aplay -r 22050 -f S16_LE -t raw -', '_', text, voiceName], { // NOSONAR
         stdio: 'inherit',
         timeout: 15000
       });
@@ -492,7 +492,7 @@ async function playVoiceSample(voiceName, provider) {
         fsSync.writeFileSync(tempFile, Buffer.from(audio));
         try {
           // Use spawnSync with argument array to prevent command injection
-          spawnSync('aplay', [tempFile], { stdio: 'pipe', timeout: 5000 });
+          spawnSync('aplay', [tempFile], { stdio: 'pipe', timeout: 5000 }); // NOSONAR
         } finally {
           fsSync.unlinkSync(tempFile);
         }
@@ -531,7 +531,7 @@ async function startSopranoServer() {
     console.log(chalk.gray('🚀 Starting Soprano TTS server...'));
 
     // Start soprano-webui in background
-    const sopranoProcess = spawn('soprano-webui', ['--port', '7860'], {
+    const sopranoProcess = spawn('soprano-webui', ['--port', '7860'], { // NOSONAR
       detached: true,
       stdio: 'ignore'
     });
@@ -569,7 +569,7 @@ async function detectSystemCapabilities() {
   try {
     // Detect NVIDIA GPU
     try {
-      execSync('nvidia-smi --query-gpu=name --format=csv,noheader', {
+      execSync('nvidia-smi --query-gpu=name --format=csv,noheader', { // NOSONAR
         stdio: 'pipe',
         timeout: 5000  // 5 second timeout
       });
@@ -580,7 +580,7 @@ async function detectSystemCapabilities() {
 
     // Detect total RAM (in MB)
     if (isMacOS) {
-      const output = execSync('sysctl hw.memsize', {
+      const output = execSync('sysctl hw.memsize', { // NOSONAR
         encoding: 'utf8',
         timeout: 3000  // 3 second timeout
       });
@@ -594,7 +594,7 @@ async function detectSystemCapabilities() {
       }
       totalRAM = Math.floor(bytes / (1024 * 1024));
     } else {
-      const output = execSync('cat /proc/meminfo | grep MemTotal', {
+      const output = execSync('cat /proc/meminfo | grep MemTotal', { // NOSONAR
         encoding: 'utf8',
         timeout: 3000  // 3 second timeout
       });
@@ -679,12 +679,12 @@ function checkAudioDevices() {
     if (process.platform === 'linux') {
       try {
         // Try aplay first (ALSA)
-        execSync('aplay -l 2>/dev/null', { encoding: 'utf8', stdio: 'pipe' });
+        execSync('aplay -l 2>/dev/null', { encoding: 'utf8', stdio: 'pipe' }); // NOSONAR
         return true;
       } catch (e) {
         // Try paplay (PulseAudio)
         try {
-          execSync('paplay --version 2>/dev/null', { encoding: 'utf8', stdio: 'pipe' });
+          execSync('paplay --version 2>/dev/null', { encoding: 'utf8', stdio: 'pipe' }); // NOSONAR
           return true;
         } catch (e2) {
           return false;
@@ -936,7 +936,7 @@ async function handleSystemDependenciesPage() {
 
     if (piperInstalled) {
       try {
-        const piperPath = execSync('which piper 2>/dev/null', { encoding: 'utf8' }).trim();
+        const piperPath = execSync('which piper 2>/dev/null', { encoding: 'utf8' }).trim(); // NOSONAR
         depContent += chalk.green('✓ Piper TTS (offline voice synthesis)\n');
         depContent += chalk.gray(`  ${piperPath}\n`);
       } catch (e) {
@@ -947,9 +947,9 @@ async function handleSystemDependenciesPage() {
       try {
         let sopranoPath = '';
         try {
-          sopranoPath = execSync('which soprano-tts 2>/dev/null', { encoding: 'utf8' }).trim();
+          sopranoPath = execSync('which soprano-tts 2>/dev/null', { encoding: 'utf8' }).trim(); // NOSONAR
         } catch (e) {
-          sopranoPath = execSync('which soprano-webui 2>/dev/null', { encoding: 'utf8' }).trim();
+          sopranoPath = execSync('which soprano-webui 2>/dev/null', { encoding: 'utf8' }).trim(); // NOSONAR
         }
         depContent += chalk.green('✓ Soprano TTS (premium quality)\n');
         depContent += chalk.gray(`  ${sopranoPath}\n`);
@@ -2244,7 +2244,7 @@ async function collectConfiguration(options = {}) {
             const content = await fs.readFile(filePath, 'utf-8');
 
             // Extract description from frontmatter
-            const descMatch = content.match(/^description:\s*(.+)$/m);
+            const descMatch = content.match(/^description:\s*(.+)$/m); // NOSONAR
             const description = descMatch ? descMatch[1].trim() : '';
 
             personalities.push({
@@ -2958,7 +2958,7 @@ function getReleaseInfoBoxen() {
       .replace(/^#{1,6}\s*/, '')           // ## headings
       .replace(/\*\*([^*]+)\*\*/g, '$1')  // **bold**
       .replace(/`([^`]+)`/g, '$1')        // `code`
-      .replace(/\[([^\]]+)\]\([^)]+\)/g, '$1'); // [text](url)
+      .replace(/\[([^\]]+)\]\([^)]+\)/g, '$1'); // [text](url) // NOSONAR
 
     // Render: heading in cyan, bullets as gray, skip blank/hr lines at end
     return sectionLines
@@ -3007,7 +3007,7 @@ async function playWelcomeDemo(targetDir, spinner, options = {}) {
   if (isNativeWindows()) {
     // Escape single quotes to prevent PowerShell injection (double them per PS escaping rules)
     const safeAudioPath = welcomeDemoAudio.replace(/'/g, "''");
-    const audioProcess = spawn('powershell', [
+    const audioProcess = spawn('powershell', [ // NOSONAR
       '-NoProfile', '-ExecutionPolicy', 'Bypass', '-Command',
       `(New-Object System.Media.SoundPlayer '${safeAudioPath}').PlaySync()`
     ], { detached: true, stdio: 'ignore' });
@@ -3019,15 +3019,15 @@ async function playWelcomeDemo(targetDir, spinner, options = {}) {
   let audioPlayer = null;
 
   try {
-    execFileSync('which', ['paplay'], { stdio: 'pipe' });
+    execFileSync('which', ['paplay'], { stdio: 'pipe' }); // NOSONAR
     audioPlayer = 'paplay';
   } catch {
     try {
-      execFileSync('which', ['afplay'], { stdio: 'pipe' });
+      execFileSync('which', ['afplay'], { stdio: 'pipe' }); // NOSONAR
       audioPlayer = 'afplay';
     } catch {
       try {
-        execFileSync('which', ['mpv'], { stdio: 'pipe' });
+        execFileSync('which', ['mpv'], { stdio: 'pipe' }); // NOSONAR
         audioPlayer = 'mpv';
       } catch {}
     }
@@ -4907,7 +4907,7 @@ async function executeMigrationScript(migrationScript, targetDir, spinner) {
 
     // Execute migration script using execFileSync to prevent command injection
     // Uses top-level import of execFileSync (ESM-compatible, no require())
-    execFileSync('bash', [migrationScript], { cwd: targetDir, stdio: 'pipe' });
+    execFileSync('bash', [migrationScript], { cwd: targetDir, stdio: 'pipe' }); // NOSONAR
 
     spinner.succeed(chalk.green('✓ Configuration migrated to .agentvibes/'));
     console.log(chalk.gray('   Old locations: .claude/config/, .claude/plugins/'));
@@ -5298,7 +5298,7 @@ async function restartWatcherIfInstalled(homeDirOverride) {
   const { spawnSync, spawn } = require('child_process');
 
   // Kill old watcher — use array args to avoid quoting issues
-  spawnSync('powershell.exe', [
+  spawnSync('powershell.exe', [ // NOSONAR
     '-NoProfile', '-Command',
     'Get-CimInstance Win32_Process | Where-Object { $_.CommandLine -like \'*tts-watcher.ps1*\' } | ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }'
   ], { stdio: 'ignore', timeout: 8000 });
@@ -5315,9 +5315,9 @@ async function restartWatcherIfInstalled(homeDirOverride) {
   // Restart via VBS launcher (hidden, no console flash) or fall back to direct spawn
   try {
     await fs.access(vbsLauncher);
-    spawnSync('wscript.exe', [vbsLauncher], { stdio: 'ignore' });
+    spawnSync('wscript.exe', [vbsLauncher], { stdio: 'ignore' }); // NOSONAR
   } catch {
-    const ps = spawn('powershell.exe', [
+    const ps = spawn('powershell.exe', [ // NOSONAR
       '-NoProfile', '-ExecutionPolicy', 'Bypass', '-WindowStyle', 'Hidden', '-File', watcherDest
     ], { detached: true, stdio: 'ignore' });
     ps.unref();
@@ -5782,7 +5782,7 @@ Troubleshooting:
       const validReverb = ['light', 'medium', 'heavy', 'cathedral'];
       if (validReverb.includes(selectedReverb)) {
         try {
-          execFileSync('bash', [effectsManagerPath, 'set-reverb', selectedReverb, 'default'], { stdio: 'pipe' });
+          execFileSync('bash', [effectsManagerPath, 'set-reverb', selectedReverb, 'default'], { stdio: 'pipe' }); // NOSONAR
         } catch {
           // Reverb setting failed — non-fatal
         }
@@ -6721,4 +6721,9 @@ export {
   // Manifest utilities (used by tests and external tooling)
   getProjectManifestPath, getGlobalManifestPath,
   loadManifest, saveManifest, computeFileHash, manifestSafeCopy, removeManifestFiles,
+  // Pure helper functions exported for testing
+  isPiperProvider, supportsEmoji, getPersonalityIcon,
+  detectEnvironment, createPageHeaderFooter, buildNavigationChoices, handleNavigationAction, getPageTitle,
+  getUserShell, showWelcome, getReleaseInfoBoxen, generateActivationInstructions,
+  collectConfiguration,
 };