auvrynt 1.0.2 → 1.0.5

package/dist/config.js

@@ -1,243 +1 @@
-import { homedir } from "node:os";
-import { join, resolve } from "node:path";
-import { expandHomePath } from "./roots.js";
-import { loadAuvryntFiles } from "./user-config.js";
-const DEFAULT_OAUTH_ACCESS_TOKEN_TTL_SECONDS = 60 * 60;
-const DEFAULT_OAUTH_REFRESH_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;
-export const SUPPORTED_SCOPES = [
-    "auvrynt:read",
-    "auvrynt:write",
-    "auvrynt:process",
-    "auvrynt:web",
-    "auvrynt:software",
-    "auvrynt:godot",
-    "auvrynt:blender",
-    "auvrynt:serena",
-];
-export const SCOPE_DESCRIPTIONS = {
-    "auvrynt:read": "Inspect files, search, and perform read-only project analysis",
-    "auvrynt:write": "Edit and create files",
-    "auvrynt:process": "Start and stop approved workspace processes",
-    "auvrynt:web": "Use browser and web-development tools",
-    "auvrynt:software": "Use software and .NET tools",
-    "auvrynt:godot": "Use Godot project tools",
-    "auvrynt:blender": "Use Blender 3D tools",
-    "auvrynt:serena": "Use local Serena semantic code tools",
-};
-function parsePort(value) {
-    if (value === undefined || value === "")
-        return 49321;
-    const port = Number(value);
-    if (!Number.isInteger(port) || port < 1 || port > 65535) {
-        throw new Error(`Invalid PORT: ${value}`);
-    }
-    return port;
-}
-function parseAllowedRoots(value) {
-    if (Array.isArray(value)) {
-        const roots = value.map((entry) => entry.trim()).filter(Boolean);
-        return (roots.length > 0 ? roots : [process.cwd()]).map((root) => resolve(expandHomePath(root)));
-    }
-    const rawRoots = value
-        ?.split(",")
-        .map((entry) => entry.trim())
-        .filter(Boolean) ?? [];
-    const roots = rawRoots.length > 0 ? rawRoots : [process.cwd()];
-    return roots.map((root) => resolve(expandHomePath(root)));
-}
-function parseAllowedHosts(value, derivedHosts) {
-    if (Array.isArray(value)) {
-        return normalizeAllowedHosts(value, derivedHosts);
-    }
-    const rawHosts = value
-        ?.split(",")
-        .map((entry) => entry.trim())
-        .filter(Boolean) ?? [];
-    return normalizeAllowedHosts(rawHosts, derivedHosts);
-}
-function normalizeAllowedHosts(rawHosts, derivedHosts) {
-    const hosts = rawHosts.length > 0 ? rawHosts : derivedHosts;
-    if (hosts.includes("*"))
-        return ["*"];
-    return Array.from(new Set(hosts.map((host) => host.trim()).filter(Boolean)));
-}
-function parseBoolean(value) {
-    return ["1", "true", "yes", "on"].includes(value?.toLowerCase() ?? "");
-}
-function parseMinimalTools(env) {
-    if (env.AUVRYNT_TOOL_MODE === "minimal")
-        return true;
-    if (env.AUVRYNT_TOOL_MODE === "full")
-        return false;
-    if (env.AUVRYNT_TOOL_MODE) {
-        throw new Error(`Invalid AUVRYNT_TOOL_MODE: ${env.AUVRYNT_TOOL_MODE}`);
-    }
-    if (env.AUVRYNT_MINIMAL_TOOLS !== undefined)
-        return parseBoolean(env.AUVRYNT_MINIMAL_TOOLS);
-    return true;
-}
-function parseLogLevel(value) {
-    if (!value || value === "info")
-        return "info";
-    if (["silent", "error", "warn", "debug"].includes(value))
-        return value;
-    throw new Error(`Invalid AUVRYNT_LOG_LEVEL: ${value}`);
-}
-function parseLogFormat(value) {
-    if (!value || value === "json")
-        return "json";
-    if (value === "pretty")
-        return "pretty";
-    throw new Error(`Invalid AUVRYNT_LOG_FORMAT: ${value}`);
-}
-function parsePathList(value) {
-    return (value
-        ?.split(",")
-        .map((entry) => entry.trim())
-        .filter(Boolean)
-        .map((entry) => resolve(expandHomePath(entry))) ?? []);
-}
-function parseStringList(value, fallback) {
-    const entries = value
-        ?.split(",")
-        .map((entry) => entry.trim())
-        .filter(Boolean);
-    return entries && entries.length > 0 ? entries : fallback;
-}
-function parsePositiveInteger(value, fallback, name) {
-    if (!value)
-        return fallback;
-    const parsed = Number(value);
-    if (!Number.isInteger(parsed) || parsed < 1) {
-        throw new Error(`Invalid ${name}: ${value}`);
-    }
-    return parsed;
-}
-function parseToolNaming(value) {
-    if (!value || value === "short")
-        return "short";
-    if (value === "legacy")
-        return "legacy";
-    throw new Error(`Invalid AUVRYNT_TOOL_NAMING: ${value}`);
-}
-function parseLoggingConfig(env) {
-    return {
-        level: parseLogLevel(env.AUVRYNT_LOG_LEVEL),
-        format: parseLogFormat(env.AUVRYNT_LOG_FORMAT),
-        requests: env.AUVRYNT_LOG_REQUESTS === undefined ? true : parseBoolean(env.AUVRYNT_LOG_REQUESTS),
-        assets: parseBoolean(env.AUVRYNT_LOG_ASSETS),
-        toolCalls: env.AUVRYNT_LOG_TOOL_CALLS === undefined ? true : parseBoolean(env.AUVRYNT_LOG_TOOL_CALLS),
-        shellCommands: parseBoolean(env.AUVRYNT_LOG_SHELL_COMMANDS),
-        trustProxy: parseBoolean(env.AUVRYNT_TRUST_PROXY),
-    };
-}
-function parseWidgetMode(value) {
-    if (!value || value === "full")
-        return "full";
-    if (value === "off" || value === "changes")
-        return value;
-    throw new Error(`Invalid AUVRYNT_WIDGETS: ${value}`);
-}
-function parseRequiredSecret(value, name) {
-    const secret = value?.trim();
-    if (!secret) {
-        throw new Error(`${name} is required for Auvrynt OAuth. Run: auvrynt init`);
-    }
-    if (secret.length < 16) {
-        throw new Error(`${name} must be at least 16 characters long.`);
-    }
-    return secret;
-}
-function parseOAuthConfig(env, ownerToken) {
-    return {
-        ownerToken: parseRequiredSecret(env.AUVRYNT_OAUTH_OWNER_TOKEN ?? ownerToken, "AUVRYNT_OAUTH_OWNER_TOKEN"),
-        accessTokenTtlSeconds: parsePositiveInteger(env.AUVRYNT_OAUTH_ACCESS_TOKEN_TTL_SECONDS, DEFAULT_OAUTH_ACCESS_TOKEN_TTL_SECONDS, "AUVRYNT_OAUTH_ACCESS_TOKEN_TTL_SECONDS"),
-        refreshTokenTtlSeconds: parsePositiveInteger(env.AUVRYNT_OAUTH_REFRESH_TOKEN_TTL_SECONDS, DEFAULT_OAUTH_REFRESH_TOKEN_TTL_SECONDS, "AUVRYNT_OAUTH_REFRESH_TOKEN_TTL_SECONDS"),
-        scopes: parseStringList(env.AUVRYNT_OAUTH_SCOPES, [...SUPPORTED_SCOPES]),
-        allowedRedirectHosts: parseStringList(env.AUVRYNT_OAUTH_ALLOWED_REDIRECT_HOSTS, [
-            "chatgpt.com",
-            "claude.ai",
-            "claude.com",
-            "localhost",
-            "127.0.0.1",
-        ]),
-    };
-}
-function defaultStateDir() {
-    return join(homedir(), ".local", "share", "auvrynt");
-}
-function defaultWorktreeRoot() {
-    return join(homedir(), ".auvrynt", "worktrees");
-}
-function defaultAgentDir() {
-    return join(homedir(), ".codex");
-}
-function parseSerenaConfig(env, filesConfig) {
-    const filesSerena = filesConfig.serena ?? {};
-    return {
-        enabled: parseBoolean(env.AUVRYNT_SERENA_ENABLED ?? filesSerena.enabled),
-        executable: env.AUVRYNT_SERENA_EXECUTABLE ?? env.AUVRYNT_SERENA_PATH ?? filesConfig.executables?.serena ?? filesSerena.executable ?? "serena",
-        backend: (env.AUVRYNT_SERENA_BACKEND ?? filesSerena.backend ?? "LSP"),
-        context: env.AUVRYNT_SERENA_CONTEXT ?? filesSerena.context ?? "desktop-app",
-        startupTimeoutMs: parsePositiveInteger(env.AUVRYNT_SERENA_STARTUP_TIMEOUT ?? filesSerena.startupTimeoutMs, 30_000, "AUVRYNT_SERENA_STARTUP_TIMEOUT"),
-        requestTimeoutMs: parsePositiveInteger(env.AUVRYNT_SERENA_REQUEST_TIMEOUT ?? filesSerena.requestTimeoutMs, 60_000, "AUVRYNT_SERENA_REQUEST_TIMEOUT"),
-        idleTimeoutMinutes: parsePositiveInteger(env.AUVRYNT_SERENA_IDLE_TIMEOUT ?? filesSerena.idleTimeoutMinutes, 30, "AUVRYNT_SERENA_IDLE_TIMEOUT"),
-        maxInstances: parsePositiveInteger(env.AUVRYNT_SERENA_MAX_INSTANCES ?? filesSerena.maxInstances, 3, "AUVRYNT_SERENA_MAX_INSTANCES"),
-    };
-}
-function parseExecutablesConfig(env, filesConfig) {
-    const configExecs = filesConfig.executables ?? {};
-    return {
-        serena: env.AUVRYNT_SERENA_PATH ?? configExecs.serena,
-        godot: env.AUVRYNT_GODOT_PATH ?? configExecs.godot,
-        godotCsharp: env.AUVRYNT_GODOT_CSHARP_PATH ?? configExecs.godotCsharp,
-        blender: env.AUVRYNT_BLENDER_PATH ?? configExecs.blender,
-    };
-}
-export function loadConfig(env = process.env) {
-    const files = loadAuvryntFiles(env);
-    const host = env.HOST ?? files.config.host ?? "127.0.0.1";
-    const port = parsePort(env.PORT ?? files.config.port);
-    const publicBaseUrl = parsePublicBaseUrl(env.AUVRYNT_PUBLIC_BASE_URL ?? files.config.publicBaseUrl ?? localPublicBaseUrl(host, port));
-    const derivedAllowedHosts = [
-        "localhost",
-        "127.0.0.1",
-        "::1",
-        host,
-        new URL(publicBaseUrl).hostname,
-        ...(files.config.allowedHosts ?? []),
-    ];
-    return {
-        host,
-        port,
-        oauth: parseOAuthConfig(env, files.auth.ownerToken),
-        allowedRoots: parseAllowedRoots(env.AUVRYNT_ALLOWED_ROOTS ?? files.config.allowedRoots),
-        allowedHosts: parseAllowedHosts(env.AUVRYNT_ALLOWED_HOSTS, derivedAllowedHosts),
-        publicBaseUrl,
-        minimalTools: parseMinimalTools(env),
-        toolNaming: parseToolNaming(env.AUVRYNT_TOOL_NAMING),
-        widgets: parseWidgetMode(env.AUVRYNT_WIDGETS),
-        stateDir: resolve(expandHomePath(env.AUVRYNT_STATE_DIR ?? files.config.stateDir ?? defaultStateDir())),
-        worktreeRoot: resolve(expandHomePath(env.AUVRYNT_WORKTREE_ROOT ?? files.config.worktreeRoot ?? defaultWorktreeRoot())),
-        skillsEnabled: env.AUVRYNT_SKILLS === undefined ? true : parseBoolean(env.AUVRYNT_SKILLS),
-        skillPaths: parsePathList(env.AUVRYNT_SKILL_PATHS),
-        agentDir: resolve(expandHomePath(env.AUVRYNT_AGENT_DIR ?? files.config.agentDir ?? defaultAgentDir())),
-        logging: parseLoggingConfig(env),
-        serena: parseSerenaConfig(env, files.config),
-        executables: parseExecutablesConfig(env, files.config),
-    };
-}
-function parsePublicBaseUrl(value) {
-    const parsed = new URL(value);
-    parsed.hash = "";
-    parsed.search = "";
-    parsed.pathname = parsed.pathname.replace(/\/+$/, "");
-    return parsed.toString().replace(/\/$/, "");
-}
-function localPublicBaseUrl(host, port) {
-    const publicHost = host === "0.0.0.0" || host === "::" ? "127.0.0.1" : host;
-    const formattedHost = publicHost.includes(":") && !publicHost.startsWith("[")
-        ? `[${publicHost}]`
-        : publicHost;
-    return `http://${formattedHost}:${port}`;
-}
+export * from "./infrastructure/config.js";

package/dist/connection-registry.js

@@ -1,73 +1 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-const REGISTRY_FILE = "connections.json";
-export function connectionRegistryPath(stateDir) {
-    return join(stateDir, REGISTRY_FILE);
-}
-export function identifyProvider(clientName, userAgent) {
-    const value = `${clientName ?? ""} ${userAgent ?? ""}`.trim();
-    const normalized = value.toLowerCase();
-    const knownProviders = [
-        ["chatgpt", "ChatGPT"],
-        ["openai", "OpenAI"],
-        ["claude", "Claude"],
-        ["anthropic", "Claude / Anthropic"],
-        ["kimi", "Kimi"],
-        ["cursor", "Cursor"],
-        ["windsurf", "Windsurf"],
-        ["gemini", "Gemini"],
-        ["vscode", "VS Code"],
-        ["visual studio code", "VS Code"],
-        ["codex", "Codex"],
-    ];
-    for (const [marker, provider] of knownProviders) {
-        if (normalized.includes(marker))
-            return provider;
-    }
-    if (clientName?.trim())
-        return clientName.trim().slice(0, 80);
-    if (userAgent?.trim())
-        return userAgent.trim().split(/[\s/]/, 1)[0].slice(0, 80) || "Unknown MCP client";
-    return "Unknown MCP client";
-}
-function sanitizeUserAgent(userAgent) {
-    if (!userAgent)
-        return undefined;
-    return userAgent.replace(/[\r\n]/g, " ").slice(0, 160);
-}
-export function readConnectedClients(stateDir) {
-    const path = connectionRegistryPath(stateDir);
-    if (!existsSync(path))
-        return [];
-    try {
-        const parsed = JSON.parse(readFileSync(path, "utf8"));
-        if (!Array.isArray(parsed))
-            return [];
-        return parsed.filter((entry) => Boolean(entry && typeof entry === "object"));
-    }
-    catch {
-        return [];
-    }
-}
-export function recordConnectedClient(stateDir, input) {
-    mkdirSync(stateDir, { recursive: true });
-    const provider = identifyProvider(input.clientName, input.userAgent);
-    const clients = readConnectedClients(stateDir);
-    const existing = clients.find((client) => client.provider === provider);
-    const now = new Date().toISOString();
-    if (existing) {
-        existing.lastSeen = now;
-        existing.requestCount += 1;
-        existing.userAgent = sanitizeUserAgent(input.userAgent) ?? existing.userAgent;
-    }
-    else {
-        clients.push({
-            provider,
-            userAgent: sanitizeUserAgent(input.userAgent),
-            lastSeen: now,
-            requestCount: 1,
-        });
-    }
-    clients.sort((left, right) => right.lastSeen.localeCompare(left.lastSeen));
-    writeFileSync(connectionRegistryPath(stateDir), JSON.stringify(clients.slice(0, 32), null, 2) + "\n", { mode: 0o600 });
-}
+export * from "./auth/connection-registry.js";

package/dist/connection-status.js

@@ -1,139 +1 @@
-import { createRequire } from "node:module";
-import { getBlenderClient } from "./blender-client.js";
-import { godotEditorStatus } from "./godot-editor-bridge.js";
-import { discoverLocalIntegrations, processDetected } from "./integration-discovery.js";
-const require = createRequire(import.meta.url);
-function checkedAt() {
-    return new Date().toISOString();
-}
-function browserStatus() {
-    const timestamp = checkedAt();
-    for (const packageName of ["playwright", "playwright-core"]) {
-        try {
-            require.resolve(packageName);
-            return {
-                state: "available",
-                provider: "Playwright",
-                detail: "Browser support is installed and will connect on demand per request.",
-                checkedAt: timestamp,
-            };
-        }
-        catch { }
-    }
-    return {
-        state: "unavailable",
-        provider: "Playwright",
-        detail: "Install Playwright to enable browser inspection and screenshots.",
-        checkedAt: timestamp,
-    };
-}
-export async function getConnectionStatus(registry, processManager, workspaceId) {
-    const workspace = registry.getWorkspace(workspaceId);
-    const timestamp = checkedAt();
-    const local = await discoverLocalIntegrations();
-    const blender = {
-        state: "disconnected",
-        provider: "Auvrynt Blender bridge",
-        endpoint: "127.0.0.1:49323",
-        detail: "No response from the local Blender bridge.",
-        checkedAt: timestamp,
-    };
-    try {
-        const response = await getBlenderClient(workspaceId).sendExecute("import bpy\nresult = {'version': bpy.app.version_string, 'scene': bpy.context.scene.name}\n");
-        blender.state = "connected";
-        blender.detail = "Blender bridge responded.";
-        blender.metadata = response;
-    }
-    catch (error) {
-        blender.detail = error instanceof Error ? error.message : String(error);
-    }
-    const blenderLabMcp = {
-        state: local.ports.blender_lab_mcp ? "connected" : processDetected(local, "blender") ? "available" : "disconnected",
-        provider: "Blender Lab MCP",
-        endpoint: `127.0.0.1:${process.env.AUVRYNT_BLENDER_MCP_PORT ?? "9876"}`,
-        detail: local.ports.blender_lab_mcp
-            ? "Blender MCP is listening on the configured Blender Lab endpoint."
-            : processDetected(local, "blender")
-                ? "Blender is running, but its MCP endpoint is not reachable. Check Blender MCP Auto Start and port 9876."
-                : "Blender is not detected. Start Blender with the MCP extension enabled for automatic connection.",
-        checkedAt: timestamp,
-    };
-    let godot;
-    try {
-        const response = await godotEditorStatus({ workspaceId });
-        godot = {
-            state: response.connected ? "connected" : "disconnected",
-            provider: "Auvrynt Godot editor bridge",
-            endpoint: "127.0.0.1:49322",
-            detail: response.connected ? "Godot editor bridge responded." : "Godot editor bridge is not connected.",
-            checkedAt: timestamp,
-            metadata: response.connected ? response : undefined,
-        };
-    }
-    catch (error) {
-        godot = {
-            state: "error",
-            provider: "Auvrynt Godot editor bridge",
-            endpoint: "127.0.0.1:49322",
-            detail: error instanceof Error ? error.message : String(error),
-            checkedAt: timestamp,
-        };
-    }
-    const godotMcp = {
-        state: local.ports.auvrynt_godot_bridge ? "connected" : processDetected(local, "godot") ? "available" : "disconnected",
-        provider: "Godot / Codex MCP",
-        endpoint: "local process or 127.0.0.1:49322",
-        detail: local.ports.auvrynt_godot_bridge
-            ? "Auvrynt Godot bridge is reachable."
-            : processDetected(local, "godot")
-                ? "Godot is running, but no reachable Auvrynt bridge was found. Enable the bridge or Codex Godot MCP."
-                : "Godot is not detected. Start Godot with the Auvrynt bridge or Codex Godot MCP enabled.",
-        checkedAt: timestamp,
-    };
-    const cloudflare = {
-        state: processDetected(local, "cloudflare_tunnel") ? "connected" : local.executables.cloudflared ? "available" : "unavailable",
-        provider: "Cloudflare Tunnel",
-        detail: processDetected(local, "cloudflare_tunnel")
-            ? "cloudflared is running."
-            : local.executables.cloudflared
-                ? `cloudflared is installed at ${local.executables.cloudflared}, but no tunnel process is running.`
-                : "cloudflared is not installed. Install it to expose /mcp through Cloudflare Tunnel.",
-        checkedAt: timestamp,
-    };
-    const serena = {
-        state: processDetected(local, "serena") ? "connected" : local.executables.serena ? "available" : "unavailable",
-        provider: "Serena",
-        detail: processDetected(local, "serena")
-            ? "Serena process detected."
-            : local.executables.serena
-                ? `Serena is installed at ${local.executables.serena} and available on demand.`
-                : "Serena is not installed or not available on PATH.",
-        checkedAt: timestamp,
-    };
-    return {
-        checkedAt: timestamp,
-        workspace: { id: workspace.id, root: workspace.root, mode: workspace.mode },
-        connections: {
-            mcp: {
-                state: "connected",
-                provider: "Auvrynt MCP server",
-                detail: "This status request was received through the authenticated MCP connection.",
-                checkedAt: timestamp,
-            },
-            blender,
-            blender_lab_mcp: blenderLabMcp,
-            godot,
-            godot_mcp: godotMcp,
-            cloudflare_tunnel: cloudflare,
-            serena,
-            browser: browserStatus(),
-            chrome_mcp: {
-                state: "not_configured",
-                provider: "Chrome MCP",
-                detail: "No Chrome MCP adapter is registered in this Auvrynt build.",
-                checkedAt: timestamp,
-            },
-        },
-        processes: processManager.listProcesses({ workspaceId }),
-    };
-}
+export * from "./auth/connection-status.js";

package/dist/control-retry.js

@@ -0,0 +1 @@
+export * from "./process/control-retry.js";

package/dist/crash-recovery.js

@@ -0,0 +1 @@
+export * from "./process/crash-recovery.js";

package/dist/db/client.js

@@ -1,4 +1,4 @@
-import { mkdirSync } from "node:fs";
+import { chmodSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 import Database from "better-sqlite3";
 import { drizzle } from "drizzle-orm/better-sqlite3";
@@ -7,8 +7,21 @@ export function databasePath(stateDir) {
     return join(stateDir, "auvrynt.sqlite");
 }
 export function openDatabase(stateDir) {
-    mkdirSync(stateDir, { recursive: true });
-    const sqlite = new Database(databasePath(stateDir));
+    mkdirSync(stateDir, { recursive: true, mode: 0o700 });
+    try {
+        chmodSync(stateDir, 0o700);
+    }
+    catch {
+        // Best effort on platforms/filesystems without POSIX permission bits.
+    }
+    const path = databasePath(stateDir);
+    const sqlite = new Database(path);
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // The containing state directory is still private when chmod is unavailable.
+    }
     sqlite.pragma("journal_mode = WAL");
     sqlite.pragma("foreign_keys = ON");
     return {

package/dist/db/schema.js

@@ -27,3 +27,33 @@ export const loadedAgentFiles = sqliteTable("loaded_agent_files", {
     primaryKey({ columns: [table.workspaceSessionId, table.path] }),
     index("loaded_agent_files_path_idx").on(table.path),
 ]);
+export const artifacts = sqliteTable("artifacts", {
+    id: text("id").primaryKey(),
+    workspaceSessionId: text("workspace_session_id")
+        .notNull()
+        .references(() => workspaceSessions.id, { onDelete: "cascade" }),
+    ownerClientId: text("owner_client_id").notNull(),
+    status: text("status").notNull().default("available"),
+    sha256: text("sha_256"),
+    path: text("path").notNull(),
+    mimeType: text("mime_type"),
+    toolName: text("tool_name"),
+    sizeBytes: text("size_bytes"),
+    createdAt: text("created_at").notNull(),
+}, (table) => [
+    index("artifacts_workspace_idx").on(table.workspaceSessionId, table.createdAt),
+    index("artifacts_status_idx").on(table.status),
+    index("artifacts_owner_idx").on(table.ownerClientId),
+]);
+export const rooms = sqliteTable("rooms", {
+    id: text("id").primaryKey(),
+    ownerClientId: text("owner_client_id").notNull(),
+    workspaceId: text("workspace_id").notNull().unique(),
+    state: text("state").notNull().default("active"),
+    createdAt: text("created_at").notNull(),
+    lastActivityAt: text("last_activity_at").notNull(),
+    closedAt: text("closed_at"),
+}, (table) => [
+    index("rooms_workspace_idx").on(table.workspaceId),
+    index("rooms_owner_idx").on(table.ownerClientId),
+]);