archbyte 0.3.3 → 0.3.5

package/dist/cli/ui.d.ts

@@ -8,6 +8,8 @@ export declare function spinner(label: string): Spinner;
 /**
  * Arrow-key selection menu. Returns the selected index.
  * Non-TTY fallback: returns 0 (first option).
+ *
+ * Navigation: ↑/↓ arrows to move, Enter to confirm, Ctrl+C to exit.
  */
 export declare function select(prompt: string, options: string[]): Promise<number>;
 interface ProgressBar {
@@ -23,6 +25,9 @@ export declare function progressBar(totalSteps: number): ProgressBar;
 /**
  * Y/n confirmation prompt. Returns true for y/Enter, false for n.
  * Non-TTY fallback: returns true.
+ *
+ * Only responds to explicit y/n/Enter/Ctrl+C. Ignores escape sequences
+ * (arrow keys, etc.) to prevent accidental confirmation.
  */
 export declare function confirm(prompt: string): Promise<boolean>;
 export {};

package/dist/cli/ui.js

@@ -1,5 +1,26 @@
 import chalk from "chalk";
 const BRAILLE_FRAMES = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
+// ─── Cursor Safety ───
+// Ensure the terminal cursor is always restored, even on unhandled crashes.
+let cursorHidden = false;
+function hideCursor() {
+    if (!cursorHidden) {
+        process.stdout.write("\x1b[?25l");
+        cursorHidden = true;
+    }
+}
+function showCursor() {
+    if (cursorHidden) {
+        process.stdout.write("\x1b[?25h");
+        cursorHidden = false;
+    }
+}
+// Restore cursor on any exit path
+for (const event of ["exit", "SIGINT", "SIGTERM", "uncaughtException", "unhandledRejection"]) {
+    process.on(event, () => {
+        showCursor();
+    });
+}
 /**
  * Animated braille spinner. Falls back to static console.log when not a TTY.
  */
@@ -30,6 +51,8 @@ export function spinner(label) {
 /**
  * Arrow-key selection menu. Returns the selected index.
  * Non-TTY fallback: returns 0 (first option).
+ *
+ * Navigation: ↑/↓ arrows to move, Enter to confirm, Ctrl+C to exit.
  */
 export function select(prompt, options) {
     if (!process.stdout.isTTY || options.length === 0) {
@@ -45,10 +68,9 @@ export function select(prompt, options) {
         stdin.resume();
         stdin.setEncoding("utf8");
         let selected = 0;
-        // Hide cursor
-        process.stdout.write("\x1b[?25l");
+        hideCursor();
         function render() {
-            // Move up to clear previous render (except first time)
+            // Move up to clear previous render
             const lines = options.length + 1; // prompt + options
             process.stdout.write(`\x1b[${lines}A`);
             process.stdout.write(`\x1b[K  ${chalk.bold(prompt)}\n`);
@@ -74,13 +96,13 @@ export function select(prompt, options) {
             }
         }
         const onData = (data) => {
-            if (data === "\x1b[A") {
-                // Up arrow
+            if (data === "\x1b[A" || data === "k") {
+                // Up arrow or k (vim-style)
                 selected = (selected - 1 + options.length) % options.length;
                 render();
             }
-            else if (data === "\x1b[B") {
-                // Down arrow
+            else if (data === "\x1b[B" || data === "j") {
+                // Down arrow or j (vim-style)
                 selected = (selected + 1) % options.length;
                 render();
             }
@@ -89,18 +111,19 @@ export function select(prompt, options) {
                 cleanup();
                 resolve(selected);
             }
-            else if (data === "\x03" || data === "q" || data === "Q") {
-                // Ctrl+C or q to quit
+            else if (data === "\x03") {
+                // Ctrl+C only — clean exit
                 cleanup();
+                process.stdout.write("\n");
                 process.exit(0);
             }
+            // All other keys (including q, arrows, etc.) are ignored
         };
         function cleanup() {
             stdin.removeListener("data", onData);
             stdin.setRawMode(wasRaw ?? false);
             stdin.pause();
-            // Show cursor
-            process.stdout.write("\x1b[?25h");
+            showCursor();
         }
         stdin.on("data", onData);
     });
@@ -152,6 +175,9 @@ export function progressBar(totalSteps) {
 /**
  * Y/n confirmation prompt. Returns true for y/Enter, false for n.
  * Non-TTY fallback: returns true.
+ *
+ * Only responds to explicit y/n/Enter/Ctrl+C. Ignores escape sequences
+ * (arrow keys, etc.) to prevent accidental confirmation.
  */
 export function confirm(prompt) {
     if (!process.stdout.isTTY) {
@@ -166,6 +192,9 @@ export function confirm(prompt) {
         stdin.resume();
         stdin.setEncoding("utf8");
         const onData = (data) => {
+            // Ignore escape sequences (arrow keys, function keys, etc.)
+            if (data.startsWith("\x1b"))
+                return;
             stdin.removeListener("data", onData);
             stdin.setRawMode(wasRaw ?? false);
             stdin.pause();
@@ -173,15 +202,16 @@ export function confirm(prompt) {
                 process.stdout.write("n\n");
                 resolve(false);
             }
-            else if (data === "\x03" || data === "q" || data === "Q") {
+            else if (data === "\x03") {
+                // Ctrl+C only
                 process.stdout.write("\n");
                 process.exit(0);
             }
-            else {
-                // y, Y, Enter — all true
+            else if (data === "y" || data === "Y" || data === "\r" || data === "\n") {
                 process.stdout.write("y\n");
                 resolve(true);
             }
+            // Ignore any other single keypresses — wait for y/n/Enter
         };
         stdin.on("data", onData);
     });

package/dist/cli/utils.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Check if a command exists in the system PATH.
+ * Uses `which` (Unix) or `where` (Windows).
+ */
+export declare function isInPath(cmd: string): boolean;
+/**
+ * Mask an API key for safe display.
+ * Shows first 6 + last 4 characters: `sk-ant-...7x9z`
+ */
+export declare function maskKey(key: string): string;
+/**
+ * Whether stdin/stdout support interactive terminal features.
+ */
+export declare function isTTY(): boolean;
+/**
+ * Resolve the user's home directory, or throw if unresolvable.
+ * Prefers $HOME (Unix), falls back to $USERPROFILE (Windows).
+ */
+export declare function resolveHome(): string;
+/**
+ * Basic email format check. Not exhaustive — just catches obvious typos.
+ */
+export declare function isValidEmail(email: string): boolean;

package/dist/cli/utils.js

@@ -0,0 +1,52 @@
+// Shared CLI utilities.
+// Single source of truth for helpers used across multiple CLI modules.
+import { execSync } from "child_process";
+/**
+ * Check if a command exists in the system PATH.
+ * Uses `which` (Unix) or `where` (Windows).
+ */
+export function isInPath(cmd) {
+    try {
+        // Only allow simple command names (no spaces, slashes, or shell metacharacters)
+        if (!/^[a-zA-Z0-9._-]+$/.test(cmd))
+            return false;
+        const which = process.platform === "win32" ? "where" : "which";
+        execSync(`${which} ${cmd}`, { stdio: "ignore" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Mask an API key for safe display.
+ * Shows first 6 + last 4 characters: `sk-ant-...7x9z`
+ */
+export function maskKey(key) {
+    if (key.length <= 10)
+        return "****";
+    return key.slice(0, 6) + "..." + key.slice(-4);
+}
+/**
+ * Whether stdin/stdout support interactive terminal features.
+ */
+export function isTTY() {
+    return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+/**
+ * Resolve the user's home directory, or throw if unresolvable.
+ * Prefers $HOME (Unix), falls back to $USERPROFILE (Windows).
+ */
+export function resolveHome() {
+    const home = process.env.HOME ?? process.env.USERPROFILE;
+    if (!home) {
+        throw new Error("Cannot determine home directory. Set the HOME environment variable.");
+    }
+    return home;
+}
+/**
+ * Basic email format check. Not exhaustive — just catches obvious typos.
+ */
+export function isValidEmail(email) {
+    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
+}

package/dist/server/src/index.js

@@ -150,7 +150,7 @@ function createHttpServer() {
                     // Read current architecture file
                     const content = await readFile(config.diagramPath, "utf-8");
                     const arch = JSON.parse(content);
-                    // Apply position/dimension updates
+                    // Apply position/dimension updates only to moved nodes
                     for (const update of updates) {
                         const node = arch.nodes.find((n) => n.id === update.id);
                         if (node) {
@@ -158,10 +158,9 @@ function createHttpServer() {
                             node.y = update.y;
                             node.width = update.width;
                             node.height = update.height;
+                            node.userPositioned = true;
                         }
                     }
-                    // Mark layout as user-saved so UI uses these positions
-                    arch.layoutSaved = true;
                     // Write back
                     await writeFile(config.diagramPath, JSON.stringify(arch, null, 2), "utf-8");
                     currentArchitecture = arch;
@@ -726,6 +725,7 @@ function createHttpServer() {
                                 node.width = update.width;
                             if (update.height)
                                 node.height = update.height;
+                            node.userPositioned = true;
                         }
                     }
                     // Update timestamp

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "archbyte",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "ArchByte - See what agents build. As they build it.",
   "type": "module",
   "bin": {