autohand-cli 0.9.0 → 0.9.2

package/dist/{chunk-ZHJ7JGME.cjs → chunk-R4UKBKDY.cjs}

@@ -1,13 +1,13 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkCH2J4PVEcjs = require('./chunk-CH2J4PVE.cjs');
+var _chunkDMM2BKSVcjs = require('./chunk-DMM2BKSV.cjs');
 
 
 
-var _chunkE26KKI46cjs = require('./chunk-E26KKI46.cjs');
+var _chunk3JURXAL6cjs = require('./chunk-3JURXAL6.cjs');
 
 
-var _chunkCHI52KFRcjs = require('./chunk-CHI52KFR.cjs');
+var _chunkRJCZLFHEcjs = require('./chunk-RJCZLFHE.cjs');
 
 // src/skills/communityInstaller.ts
 var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);
@@ -170,10 +170,10 @@ async function fetchRegistryWithFallback(cache, fetcher) {
   }
 }
 async function installSkillWithSecurity(ctx, skill, cache, fetcher, scope = "user") {
-  const targetDir = scope === "project" ? _path2.default.join(ctx.workspaceRoot, _chunkE26KKI46cjs.PROJECT_DIR_NAME, "skills") : _chunkE26KKI46cjs.AUTOHAND_PATHS.skills;
+  const targetDir = scope === "project" ? _path2.default.join(ctx.workspaceRoot, _chunk3JURXAL6cjs.PROJECT_DIR_NAME, "skills") : _chunk3JURXAL6cjs.AUTOHAND_PATHS.skills;
   const installed = await ctx.skillsRegistry.isSkillInstalled(skill.id, targetDir);
   if (installed) {
-    return _chunkCHI52KFRcjs.t.call(void 0, "commands.learn.alreadyInstalled", { name: skill.name });
+    return _chunkRJCZLFHEcjs.t.call(void 0, "commands.learn.alreadyInstalled", { name: skill.name });
   }
   let files = await cache.getSkillDirectory(skill.id);
   if (!files) {
@@ -190,7 +190,7 @@ async function installSkillWithSecurity(ctx, skill, cache, fetcher, scope = "use
   const scanResult = scanner.scan(allContent);
   if (scanResult.blocked) {
     const lines = [];
-    lines.push(_chalk2.default.red(_chunkCHI52KFRcjs.t.call(void 0, "commands.learn.securityBlocked", { score: String(scanResult.score) })));
+    lines.push(_chalk2.default.red(_chunkRJCZLFHEcjs.t.call(void 0, "commands.learn.securityBlocked", { score: String(scanResult.score) })));
     lines.push("");
     for (const threat of scanResult.threats) {
       lines.push(_chalk2.default.red(`  [${threat.category}] Line ${threat.line}: ${threat.context}`));
@@ -199,15 +199,15 @@ async function installSkillWithSecurity(ctx, skill, cache, fetcher, scope = "use
       return lines.join("\n");
     }
     lines.push("");
-    const override = await _chunkCH2J4PVEcjs.showConfirm.call(void 0, {
-      title: _chunkCHI52KFRcjs.t.call(void 0, "commands.learn.securityOverride"),
+    const override = await _chunkDMM2BKSVcjs.showConfirm.call(void 0, {
+      title: _chunkRJCZLFHEcjs.t.call(void 0, "commands.learn.securityOverride"),
       defaultValue: false
     });
     if (!override) {
       return lines.join("\n");
     }
   } else if (!scanResult.safe) {
-    console.log(_chalk2.default.yellow(_chunkCHI52KFRcjs.t.call(void 0, "commands.learn.securityWarning", { score: String(scanResult.score) })));
+    console.log(_chalk2.default.yellow(_chunkRJCZLFHEcjs.t.call(void 0, "commands.learn.securityWarning", { score: String(scanResult.score) })));
     for (const threat of scanResult.threats) {
       console.log(_chalk2.default.yellow(`  [${threat.category}] Line ${threat.line}: ${threat.context}`));
     }
@@ -219,7 +219,7 @@ async function installSkillWithSecurity(ctx, skill, cache, fetcher, scope = "use
     });
     const blocked = hookResults.some((r) => r.blockingError);
     if (blocked) {
-      return _chalk2.default.yellow(_chunkCHI52KFRcjs.t.call(void 0, "commands.learn.hookBlocked"));
+      return _chalk2.default.yellow(_chunkRJCZLFHEcjs.t.call(void 0, "commands.learn.hookBlocked"));
     }
   }
   const skillMd = files.get("SKILL.md");
@@ -249,7 +249,7 @@ async function installSkillWithSecurity(ctx, skill, cache, fetcher, scope = "use
     activationType: "explicit",
     action: "install"
   });
-  return _chalk2.default.green(_chunkCHI52KFRcjs.t.call(void 0, "commands.learn.installed", { name: skill.name }));
+  return _chalk2.default.green(_chunkRJCZLFHEcjs.t.call(void 0, "commands.learn.installed", { name: skill.name }));
 }
 function injectLearnMetadata(skillMd, skill) {
   const now = (/* @__PURE__ */ new Date()).toISOString();

package/dist/{chunk-IGMPWJ2I.cjs → chunk-R75AWII3.cjs}

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
 
-var _chunkE26KKI46cjs = require('./chunk-E26KKI46.cjs');
+var _chunk3JURXAL6cjs = require('./chunk-3JURXAL6.cjs');
 
 
-var _chunkVBOFPU5Mcjs = require('./chunk-VBOFPU5M.cjs');
+var _chunkJM3ZTQUKcjs = require('./chunk-JM3ZTQUK.cjs');
 
 // src/sync/types.ts
 var DEFAULT_SYNC_CONFIG = {
@@ -36,6 +36,9 @@ var SYNC_INCLUDE_DEFAULT = [
   "share/",
   "skills/"
 ];
+function isMemorySyncPath(filePath) {
+  return filePath === "memory" || filePath.startsWith("memory/");
+}
 
 // src/sync/encryption.ts
 var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);
@@ -137,7 +140,7 @@ function decryptConfig(config, authToken) {
       try {
         result[key] = decrypt(value, authToken);
       } catch (e2) {
-        result[key] = value;
+        continue;
       }
     } else {
       result[key] = value;
@@ -160,6 +163,32 @@ var MANIFEST_VERSION = 1;
 var SYNC_STATE_FILE = ".sync-state.json";
 var SYNC_LOCK_FILE = ".sync-lock";
 var MAX_TOTAL_SIZE = 100 * 1024 * 1024;
+function isJsonObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stripUnsyncedConfigFields(config) {
+  const rest = { ...config };
+  delete rest.auth;
+  return rest;
+}
+function mergeDownloadedConfig(downloaded, local) {
+  const sanitizedDownloaded = stripUnsyncedConfigFields(downloaded);
+  if (local && Object.prototype.hasOwnProperty.call(local, "auth")) {
+    return {
+      ...sanitizedDownloaded,
+      auth: local.auth
+    };
+  }
+  return sanitizedDownloaded;
+}
+function isRemoteNewer(localFile, remoteFile) {
+  const localTime = Date.parse(localFile.modifiedAt);
+  const remoteTime = Date.parse(remoteFile.modifiedAt);
+  if (Number.isNaN(localTime) || Number.isNaN(remoteTime)) {
+    return true;
+  }
+  return remoteTime > localTime;
+}
 var SyncService = (_class = class {
   
   
@@ -176,11 +205,11 @@ var SyncService = (_class = class {
     this.authToken = options.authToken;
     this.userId = options.userId;
     this.config = options.config;
-    this.client = options.apiClient || _chunkVBOFPU5Mcjs.getSyncApiClient.call(void 0, );
+    this.client = options.apiClient || _chunkJM3ZTQUKcjs.getSyncApiClient.call(void 0, );
     this.onEvent = options.onEvent || (() => {
     });
     this.onAuthFailure = options.onAuthFailure;
-    this.basePath = _chunkE26KKI46cjs.AUTOHAND_HOME;
+    this.basePath = _chunk3JURXAL6cjs.AUTOHAND_HOME;
   }
   /**
    * Start the background sync timer
@@ -275,13 +304,21 @@ var SyncService = (_class = class {
           const url = downloadUrls[file.path];
           if (!url) continue;
           try {
-            const content = await this.client.downloadFile(url);
+            const content = await this.client.downloadFile(url, this.authToken);
             const localPath = _path2.default.join(this.basePath, file.path);
             if (file.path === "config.json") {
               const config = JSON.parse(content.toString("utf8"));
-              const decrypted = decryptConfig(config, this.authToken);
+              const localConfig = await _fsextra2.default.readJson(localPath).catch(() => null);
+              const decrypted = decryptConfig(
+                isJsonObject(config) ? config : {},
+                this.authToken
+              );
+              const merged = mergeDownloadedConfig(
+                decrypted,
+                isJsonObject(localConfig) ? localConfig : null
+              );
               await _fsextra2.default.ensureDir(_path2.default.dirname(localPath));
-              await _fsextra2.default.writeJson(localPath, decrypted, { spaces: 2 });
+              await _fsextra2.default.writeJson(localPath, merged, { spaces: 2 });
             } else {
               await _fsextra2.default.ensureDir(_path2.default.dirname(localPath));
               await _fsextra2.default.writeFile(localPath, content);
@@ -319,12 +356,13 @@ var SyncService = (_class = class {
             let content;
             if (file.path === "config.json") {
               const config = await _fsextra2.default.readJson(localPath);
-              const encrypted = encryptConfig(config, this.authToken);
+              const syncedConfig = stripUnsyncedConfigFields(isJsonObject(config) ? config : {});
+              const encrypted = encryptConfig(syncedConfig, this.authToken);
               content = Buffer.from(JSON.stringify(encrypted, null, 2), "utf8");
             } else {
               content = await _fsextra2.default.readFile(localPath);
             }
-            await this.client.uploadFile(url, content);
+            await this.client.uploadFile(url, content, this.authToken);
             uploaded++;
             this.onEvent({ type: "file_uploaded", path: file.path, size: content.length });
           } catch (error) {
@@ -408,11 +446,11 @@ var SyncService = (_class = class {
       if (await _fsextra2.default.pathExists(fullPath)) {
         const stat = await _fsextra2.default.stat(fullPath);
         if (stat.isFile()) {
-          const content = await _fsextra2.default.readFile(fullPath);
+          const content = await this.readManifestContent(relativePath, fullPath);
           files.push({
             path: relativePath,
             hash: computeHash(content),
-            size: stat.size,
+            size: content.length,
             modifiedAt: stat.mtime.toISOString(),
             encrypted: relativePath === "config.json"
           });
@@ -471,11 +509,11 @@ var SyncService = (_class = class {
       if (entry.isFile()) {
         try {
           const stat = await _fsextra2.default.stat(fullPath);
-          const content = await _fsextra2.default.readFile(fullPath);
+          const content = await this.readManifestContent(relativePath, fullPath);
           files.push({
             path: relativePath,
             hash: computeHash(content),
-            size: stat.size,
+            size: content.length,
             modifiedAt: stat.mtime.toISOString()
           });
         } catch (e3) {
@@ -488,6 +526,14 @@ var SyncService = (_class = class {
     }
     return files;
   }
+  async readManifestContent(relativePath, fullPath) {
+    if (relativePath !== "config.json") {
+      return _fsextra2.default.readFile(fullPath);
+    }
+    const config = await _fsextra2.default.readJson(fullPath).catch(() => null);
+    const syncedConfig = stripUnsyncedConfigFields(isJsonObject(config) ? config : {});
+    return Buffer.from(JSON.stringify(syncedConfig, null, 2), "utf8");
+  }
   /**
    * Check if a path matches any exclude pattern
    */
@@ -526,7 +572,11 @@ var SyncService = (_class = class {
       if (!remoteFile) {
         actions.uploads.push(localFile);
       } else if (localFile.hash !== remoteFile.hash) {
-        actions.conflicts.push(remoteFile);
+        if (isRemoteNewer(localFile, remoteFile)) {
+          actions.conflicts.push(remoteFile);
+        } else {
+          actions.uploads.push(localFile);
+        }
       }
     }
     for (const [filePath, remoteFile] of remoteFiles) {
@@ -550,14 +600,49 @@ var SyncService = (_class = class {
         error: "No remote data to download"
       };
     }
+    return this.forceDownloadFiles(remoteManifest.files);
+  }
+  /**
+   * Force download a subset of cloud files by path.
+   */
+  async forceDownloadPaths(paths) {
+    const remoteManifest = await this.client.getRemoteManifest(this.authToken);
+    if (!remoteManifest) {
+      return {
+        success: false,
+        uploaded: 0,
+        downloaded: 0,
+        conflicts: 0,
+        error: "No remote data to download"
+      };
+    }
+    const requestedPaths = new Set(paths);
+    const files = remoteManifest.files.filter((file) => requestedPaths.has(file.path));
+    return this.forceDownloadFiles(files);
+  }
+  async forceDownloadFiles(files) {
+    if (files.length === 0) {
+      return {
+        success: true,
+        uploaded: 0,
+        downloaded: 0,
+        conflicts: 0
+      };
+    }
     const actions = {
       uploads: [],
-      downloads: remoteManifest.files,
+      downloads: files,
       conflicts: [],
       localDeletes: [],
       remoteDeletes: []
     };
-    return this.performSyncActions(actions, remoteManifest);
+    return this.performSyncActions(actions, {
+      version: MANIFEST_VERSION,
+      userId: this.userId,
+      lastModified: (/* @__PURE__ */ new Date()).toISOString(),
+      files,
+      checksum: computeHash(JSON.stringify(files))
+    });
   }
   /**
    * Force a full upload (overwrite cloud with local)
@@ -590,13 +675,21 @@ var SyncService = (_class = class {
           const url = downloadUrls[file.path];
           if (!url) continue;
           try {
-            const content = await this.client.downloadFile(url);
+            const content = await this.client.downloadFile(url, this.authToken);
             const localPath = _path2.default.join(this.basePath, file.path);
             if (file.path === "config.json") {
               const config = JSON.parse(content.toString("utf8"));
-              const decrypted = decryptConfig(config, this.authToken);
+              const localConfig = await _fsextra2.default.readJson(localPath).catch(() => null);
+              const decrypted = decryptConfig(
+                isJsonObject(config) ? config : {},
+                this.authToken
+              );
+              const merged = mergeDownloadedConfig(
+                decrypted,
+                isJsonObject(localConfig) ? localConfig : null
+              );
               await _fsextra2.default.ensureDir(_path2.default.dirname(localPath));
-              await _fsextra2.default.writeJson(localPath, decrypted, { spaces: 2 });
+              await _fsextra2.default.writeJson(localPath, merged, { spaces: 2 });
             } else {
               await _fsextra2.default.ensureDir(_path2.default.dirname(localPath));
               await _fsextra2.default.writeFile(localPath, content);
@@ -620,12 +713,13 @@ var SyncService = (_class = class {
             let content;
             if (file.path === "config.json") {
               const config = await _fsextra2.default.readJson(localPath);
-              const encrypted = encryptConfig(config, this.authToken);
+              const syncedConfig = stripUnsyncedConfigFields(isJsonObject(config) ? config : {});
+              const encrypted = encryptConfig(syncedConfig, this.authToken);
               content = Buffer.from(JSON.stringify(encrypted, null, 2), "utf8");
             } else {
               content = await _fsextra2.default.readFile(localPath);
             }
-            await this.client.uploadFile(url, content);
+            await this.client.uploadFile(url, content, this.authToken);
             uploaded++;
           } catch (e5) {
           }
@@ -689,7 +783,8 @@ function createSyncService(options) {
 
 
 
-exports.DEFAULT_SYNC_CONFIG = DEFAULT_SYNC_CONFIG; exports.SYNC_EXCLUDE_ALWAYS = SYNC_EXCLUDE_ALWAYS; exports.SYNC_CONSENT_REQUIRED = SYNC_CONSENT_REQUIRED; exports.SYNC_INCLUDE_DEFAULT = SYNC_INCLUDE_DEFAULT; exports.deriveKey = deriveKey; exports.encrypt = encrypt; exports.decrypt = decrypt; exports.isEncrypted = isEncrypted; exports.encryptConfig = encryptConfig; exports.decryptConfig = decryptConfig; exports.computeHash = computeHash; exports.SyncService = SyncService; exports.createSyncService = createSyncService;
+
+exports.DEFAULT_SYNC_CONFIG = DEFAULT_SYNC_CONFIG; exports.SYNC_EXCLUDE_ALWAYS = SYNC_EXCLUDE_ALWAYS; exports.SYNC_CONSENT_REQUIRED = SYNC_CONSENT_REQUIRED; exports.SYNC_INCLUDE_DEFAULT = SYNC_INCLUDE_DEFAULT; exports.isMemorySyncPath = isMemorySyncPath; exports.deriveKey = deriveKey; exports.encrypt = encrypt; exports.decrypt = decrypt; exports.isEncrypted = isEncrypted; exports.encryptConfig = encryptConfig; exports.decryptConfig = decryptConfig; exports.computeHash = computeHash; exports.SyncService = SyncService; exports.createSyncService = createSyncService;
 /**
  * @license
  * Copyright 2025 Autohand AI LLC