beecork 1.7.0 → 2.0.0

package/dist/timeline/types.d.ts

@@ -1,12 +0,0 @@
-export type EventType = 'task_started' | 'task_completed' | 'task_failed' | 'watcher_triggered' | 'media_generated' | 'delegation_completed' | 'user_command' | 'system_event';
-export interface ActivityEvent {
-    id: string;
-    eventType: EventType;
-    projectName: string | null;
-    tabName: string | null;
-    summary: string;
-    details: string | null;
-    durationMs: number | null;
-    costUsd: number | null;
-    createdAt: string;
-}

package/dist/timeline/types.js

@@ -1 +0,0 @@
-export {};

package/dist/types.d.ts

@@ -1,216 +0,0 @@
-export interface TelegramConfig {
-    token: string;
-    allowedUserIds: number[];
-    adminUserId?: number;
-}
-export interface ClaudeCodeConfig {
-    bin: string;
-    defaultFlags: string[];
-    maxBudgetUsd?: number;
-    computerUse?: boolean;
-    /** Hard timeout per subprocess turn. Default 30 min. Set to 0 to disable. */
-    maxRuntimeMs?: number;
-}
-export interface MemoryConfig {
-    dbPath: string;
-}
-export interface TabConfig {
-    workingDir: string;
-}
-export interface TabTemplate {
-    workingDir?: string;
-    systemPrompt?: string;
-}
-export interface WhatsAppConfig {
-    enabled: boolean;
-    mode: 'baileys';
-    sessionPath: string;
-    allowedNumbers: string[];
-    /** Optional admin phone number. Defaults to allowedNumbers[0]. */
-    adminNumber?: string;
-}
-export interface VoiceConfig {
-    sttProvider: 'whisper-api' | 'none';
-    sttApiKey?: string;
-    ttsProvider: 'openai' | 'elevenlabs' | 'none';
-    ttsApiKey?: string;
-    ttsVoice?: string;
-    replyMode: 'text' | 'voice' | 'both';
-}
-export interface DiscordConfig {
-    token: string;
-    allowedUserIds?: string[];
-    /** Optional admin user ID. Defaults to allowedUserIds[0]. */
-    adminUserId?: string;
-}
-/**
- * Webhook channel auth semantics:
- *
- * - When both `authToken` and `hmacSecret` are configured, EITHER mode
- *   satisfies authentication (OR semantics). A valid Bearer token is enough
- *   even if the HMAC signature is missing. There is no AND mode today.
- * - Replay protection is NOT implemented. Callers must keep their payloads
- *   idempotent — see L10 in the audit. Acceptable while the server binds to
- *   127.0.0.1 only; revisit if remote exposure becomes a thing.
- * - `allowUnauthLocalhost` is the explicit opt-in to run with no auth at all.
- *   Useful for `curl localhost` from a trusted shell, but on a multi-user
- *   host any local process can inject prompts into your tabs.
- */
-export interface WebhookConfig {
-    enabled: boolean;
-    port: number;
-    authToken?: string;
-    hmacSecret?: string;
-    /** Set to true to skip the fail-secure auth check at start. NOT recommended on shared hosts. */
-    allowUnauthLocalhost?: boolean;
-}
-export interface GroupConfig {
-    activationMode: 'mention' | 'reply' | 'keyword' | 'always';
-    maxResponsesPerMinute: number;
-    tabPerGroup: boolean;
-    keywords?: string[];
-}
-/**
- * Discriminated union of notification provider configs. The `type` field
- * narrows which fields are required so callers get full type safety instead
- * of treating every field as optional. createNotificationProvider switches
- * exhaustively on `type`.
- */
-export type NotificationConfig = {
-    type: 'pushover';
-    userKey: string;
-    appToken: string;
-} | {
-    type: 'ntfy';
-    topic: string;
-    server?: string;
-} | {
-    type: 'webhook';
-    url: string;
-    headers?: Record<string, string>;
-};
-export interface MediaGeneratorConfig {
-    provider: string;
-    apiKey?: string;
-    model?: string;
-    style?: string;
-}
-/** A media file attached to a message. Shared by channels + util/text + media. */
-export interface MediaAttachment {
-    type: 'image' | 'audio' | 'video' | 'document' | 'voice';
-    mimeType: string;
-    filePath: string;
-    fileName?: string;
-    caption?: string;
-}
-export interface BeecorkConfig {
-    telegram: TelegramConfig;
-    whatsapp?: WhatsAppConfig;
-    webhook?: WebhookConfig;
-    discord?: DiscordConfig;
-    claudeCode: ClaudeCodeConfig;
-    tabs: Record<string, TabConfig>;
-    tabTemplates?: Record<string, TabTemplate>;
-    memory: MemoryConfig;
-    /** Directories to scan for projects on startup (defaults to ~/Coding, ~/Projects, etc.) */
-    projectScanPaths: string[];
-    voice?: VoiceConfig;
-    groups?: GroupConfig;
-    notifications?: NotificationConfig[];
-    mediaGenerators?: MediaGeneratorConfig[];
-    communityChannels?: string[];
-    /** Capability packs enabled via `beecork capabilities enable`. Owned by src/capabilities. */
-    capabilities?: import('./capabilities/types.js').EnabledCapability[];
-    deployment: 'local' | 'vps';
-}
-export type TabStatus = 'idle' | 'running' | 'error' | 'stopped';
-export interface Tab {
-    id: string;
-    name: string;
-    sessionId: string;
-    status: TabStatus;
-    workingDir: string;
-    createdAt: string;
-    lastActivityAt: string;
-    pid: number | null;
-    systemPrompt: string | null;
-}
-export interface StreamInit {
-    type: 'system';
-    subtype: 'init';
-    session_id: string;
-    tools: string[];
-    mcp_servers: string[];
-    model: string;
-}
-export interface StreamContentText {
-    type: 'text';
-    text: string;
-}
-export interface StreamContentToolUse {
-    type: 'tool_use';
-    id: string;
-    name: string;
-    input: Record<string, unknown>;
-}
-export interface StreamContentToolResult {
-    type: 'tool_result';
-    tool_use_id: string;
-    content: string;
-}
-export type StreamContentBlock = StreamContentText | StreamContentToolUse | StreamContentToolResult;
-export interface StreamAssistant {
-    type: 'assistant';
-    message: {
-        id: string;
-        role: 'assistant';
-        content: StreamContentBlock[];
-        stop_reason: string;
-        usage: StreamUsage;
-    };
-    session_id: string;
-}
-export interface StreamResult {
-    type: 'result';
-    subtype: 'success' | 'error' | 'error_during_execution';
-    is_error: boolean;
-    duration_ms: number;
-    result?: string;
-    errors?: string[];
-    session_id: string;
-    total_cost_usd?: number;
-    usage?: StreamUsage;
-}
-export interface StreamUsage {
-    input_tokens: number;
-    output_tokens: number;
-    cache_creation_input_tokens: number;
-    cache_read_input_tokens: number;
-}
-export type StreamEvent = StreamInit | StreamAssistant | StreamResult;
-export type TaskScheduleType = 'at' | 'every' | 'cron';
-export type TaskPayloadType = 'agentTurn' | 'systemEvent';
-export interface Task {
-    id: string;
-    name: string;
-    scheduleType: TaskScheduleType;
-    schedule: string;
-    tabName: string;
-    message: string;
-    payloadType: TaskPayloadType;
-    enabled: boolean;
-    createdAt: string;
-    lastRunAt: string | null;
-    nextRunAt: string | null;
-}
-export interface Memory {
-    id: number;
-    content: string;
-    tabName: string | null;
-    createdAt: string;
-    source: 'tool' | 'auto';
-}
-export interface CircuitBreakerConfig {
-    maxRepeats: number;
-    windowSize: number;
-}

package/dist/types.js

@@ -1,3 +0,0 @@
-// ─── Config ───
-export {};
-// Channel interface: see src/channels/types.ts

package/dist/util/auto-heal.d.ts

@@ -1,43 +0,0 @@
-/**
- * Auto-heal install-path divergence between the CLI (this process) and the
- * running daemon. Triggered both from the npm postinstall hook and from the
- * CLI entry on every invocation — both paths converge here so the policy is
- * single-sourced and idempotent.
- *
- * What "divergence" means:
- *   The daemon's launchd plist (or systemd unit) hard-codes an absolute path
- *   to dist/daemon.js. If `npm install -g beecork@<new>` lands in a different
- *   npm prefix than the one the unit file points at, the daemon keeps running
- *   the old code while the CLI shows the new version. Bug reports get
- *   misdiagnosed because the user thinks both are on the new version.
- *
- * What this function does:
- *   1. Rewrite the unit file's daemon path if it doesn't point at us.
- *   2. SIGTERM the running daemon (KeepAlive / Restart=always brings it back
- *      on the new code) only when its runtime.json shows it was launched from
- *      a different install root than ours.
- *
- * Returns a Result describing what happened, for the caller to surface (or not)
- * to the user. The auto-heal NEVER throws — failures degrade to {action:'skip'}.
- */
-export interface HealResult {
-    action: 'noop' | 'rewrote-unit' | 'signaled-daemon' | 'rewrote-and-signaled' | 'skip';
-    reason?: string;
-    unitPath?: string;
-    oldDaemonScript?: string;
-    newDaemonScript?: string;
-}
-export declare function autoHealInstall(fromFileUrl: string): HealResult;
-/**
- * Extract the daemon-script absolute path from a launchd plist or systemd unit.
- * Returns null if the file shape isn't recognized — caller treats that as "skip".
- *
- * launchd: looks inside <key>ProgramArguments</key><array> for the .js entry.
- * systemd: looks for ExecStart=<node> <daemon.js> on a single line.
- */
-export declare function extractDaemonScript(content: string): string | null;
-/** Rewrite-only variant used by tests and the postinstall hook in dry-run mode. */
-export declare function rewriteUnitDaemonScript(unitPath: string, newDaemonScript: string): {
-    rewrote: boolean;
-    oldDaemonScript: string | null;
-};

package/dist/util/auto-heal.js

@@ -1,107 +0,0 @@
-import fs from 'node:fs';
-import { findInstallRoot, getDaemonScript, readRuntimeInfo, isPidAlive, getServiceUnitPath, } from './install-info.js';
-export function autoHealInstall(fromFileUrl) {
-    try {
-        const currentRoot = findInstallRoot(fromFileUrl);
-        const currentDaemonScript = getDaemonScript(currentRoot);
-        const unitPath = getServiceUnitPath();
-        if (!unitPath || !fs.existsSync(unitPath)) {
-            // No installed service — beecork has been npm-installed but `beecork setup` (or
-            // equivalent) hasn't been run yet. Nothing to heal.
-            return { action: 'skip', reason: 'no service unit file present' };
-        }
-        const unitContent = fs.readFileSync(unitPath, 'utf-8');
-        const oldDaemonScript = extractDaemonScript(unitContent);
-        let rewroteUnit = false;
-        if (oldDaemonScript && oldDaemonScript !== currentDaemonScript) {
-            // Validate the new path actually exists before rewriting — never break the daemon
-            // by pointing it at a missing file.
-            if (!fs.existsSync(currentDaemonScript)) {
-                return { action: 'skip', reason: `current install missing daemon: ${currentDaemonScript}` };
-            }
-            const next = unitContent.split(oldDaemonScript).join(currentDaemonScript);
-            const tmp = unitPath + '.tmp';
-            fs.writeFileSync(tmp, next);
-            fs.renameSync(tmp, unitPath);
-            rewroteUnit = true;
-        }
-        // Restart the daemon if it's currently running from a stale install. This is
-        // separate from the unit-file rewrite so we also catch the case where the unit
-        // file is already current but the running process predates the latest install.
-        const runtime = readRuntimeInfo();
-        let signaledDaemon = false;
-        if (runtime && runtime.installRoot !== currentRoot && isPidAlive(runtime.pid)) {
-            try {
-                process.kill(runtime.pid, 'SIGTERM');
-                signaledDaemon = true;
-            }
-            catch {
-                // Permission denied (different user, or already gone). Surface as skip;
-                // we still rewrote the unit file so the next start picks up the new path.
-            }
-        }
-        if (rewroteUnit && signaledDaemon) {
-            return {
-                action: 'rewrote-and-signaled',
-                unitPath,
-                oldDaemonScript: oldDaemonScript,
-                newDaemonScript: currentDaemonScript,
-            };
-        }
-        if (rewroteUnit)
-            return {
-                action: 'rewrote-unit',
-                unitPath,
-                oldDaemonScript: oldDaemonScript,
-                newDaemonScript: currentDaemonScript,
-            };
-        if (signaledDaemon)
-            return { action: 'signaled-daemon', unitPath };
-        return { action: 'noop' };
-    }
-    catch (err) {
-        return { action: 'skip', reason: err instanceof Error ? err.message : String(err) };
-    }
-}
-/**
- * Extract the daemon-script absolute path from a launchd plist or systemd unit.
- * Returns null if the file shape isn't recognized — caller treats that as "skip".
- *
- * launchd: looks inside <key>ProgramArguments</key><array> for the .js entry.
- * systemd: looks for ExecStart=<node> <daemon.js> on a single line.
- */
-export function extractDaemonScript(content) {
-    // launchd plist: pull the second <string> inside ProgramArguments
-    const launchdMatch = content.match(/<key>\s*ProgramArguments\s*<\/key>\s*<array>([\s\S]*?)<\/array>/);
-    if (launchdMatch) {
-        const args = Array.from(launchdMatch[1].matchAll(/<string>([^<]+)<\/string>/g)).map((m) => m[1]);
-        const jsArg = args.find((a) => a.endsWith('daemon.js'));
-        if (jsArg)
-            return jsArg;
-    }
-    // systemd unit: ExecStart=<node> <daemon.js> [args...]
-    const systemdMatch = content.match(/^ExecStart\s*=\s*(.+)$/m);
-    if (systemdMatch) {
-        const parts = systemdMatch[1].split(/\s+/);
-        const jsArg = parts.find((p) => p.endsWith('daemon.js'));
-        if (jsArg)
-            return jsArg;
-    }
-    return null;
-}
-/** Rewrite-only variant used by tests and the postinstall hook in dry-run mode. */
-export function rewriteUnitDaemonScript(unitPath, newDaemonScript) {
-    if (!fs.existsSync(unitPath))
-        return { rewrote: false, oldDaemonScript: null };
-    const content = fs.readFileSync(unitPath, 'utf-8');
-    const oldDaemonScript = extractDaemonScript(content);
-    if (!oldDaemonScript)
-        return { rewrote: false, oldDaemonScript: null };
-    if (oldDaemonScript === newDaemonScript)
-        return { rewrote: false, oldDaemonScript };
-    const next = content.split(oldDaemonScript).join(newDaemonScript);
-    const tmp = unitPath + '.tmp';
-    fs.writeFileSync(tmp, next);
-    fs.renameSync(tmp, unitPath);
-    return { rewrote: true, oldDaemonScript };
-}

package/dist/util/install-info.d.ts

@@ -1,37 +0,0 @@
-/**
- * Metadata the daemon writes to ~/.beecork/runtime.json at startup so the CLI
- * (and postinstall hook) can detect when daemon and CLI are running from
- * different physical installs of beecork — the most common silent-staleness
- * mode after `npm install -g beecork@<new>` lands in a prefix the daemon's
- * launchd plist doesn't point at.
- */
-export interface RuntimeInfo {
-    pid: number;
-    version: string;
-    /** The package root: <prefix>/lib/node_modules/beecork. Single canonical key. */
-    installRoot: string;
-    /** Absolute path to dist/daemon.js — derived from installRoot. */
-    daemonScript: string;
-    /** ISO timestamp. */
-    startedAt: string;
-    /** process.version (e.g. "v20.11.0") */
-    nodeVersion: string;
-}
-/**
- * Walk up from a given file (typically import.meta.url) to find the directory
- * containing package.json — i.e. the beecork install root. Works for both:
- *  - source dev runs (.../src/util/install-info.ts → .../ )
- *  - built/installed runs (.../dist/util/install-info.js → .../ )
- */
-export declare function findInstallRoot(fromFileUrl: string): string;
-export declare function getDaemonScript(installRoot: string): string;
-export declare function writeRuntimeInfo(info: RuntimeInfo): void;
-export declare function readRuntimeInfo(): RuntimeInfo | null;
-export declare function removeRuntimeInfo(): void;
-export declare function isPidAlive(pid: number): boolean;
-/**
- * Cross-platform path to the service-manager unit file that launches the daemon.
- * Returns null if beecork doesn't manage one on this OS (currently Windows uses
- * Task Scheduler and is out of scope for the auto-heal flow).
- */
-export declare function getServiceUnitPath(): string | null;

package/dist/util/install-info.js

@@ -1,80 +0,0 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import os from 'node:os';
-import { fileURLToPath } from 'node:url';
-import { getRuntimeInfoPath } from './paths.js';
-/**
- * Walk up from a given file (typically import.meta.url) to find the directory
- * containing package.json — i.e. the beecork install root. Works for both:
- *  - source dev runs (.../src/util/install-info.ts → .../ )
- *  - built/installed runs (.../dist/util/install-info.js → .../ )
- */
-export function findInstallRoot(fromFileUrl) {
-    const fromPath = fileURLToPath(fromFileUrl);
-    let dir = path.dirname(fromPath);
-    for (let i = 0; i < 6; i++) {
-        if (fs.existsSync(path.join(dir, 'package.json')))
-            return dir;
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-    }
-    throw new Error(`Could not locate beecork install root walking up from ${fromPath}`);
-}
-export function getDaemonScript(installRoot) {
-    return path.join(installRoot, 'dist', 'daemon.js');
-}
-export function writeRuntimeInfo(info) {
-    const filePath = getRuntimeInfoPath();
-    // Atomic-ish write: temp + rename so a partial write never confuses a reader.
-    const tmp = filePath + '.tmp';
-    fs.writeFileSync(tmp, JSON.stringify(info, null, 2));
-    fs.renameSync(tmp, filePath);
-}
-export function readRuntimeInfo() {
-    const filePath = getRuntimeInfoPath();
-    if (!fs.existsSync(filePath))
-        return null;
-    try {
-        const data = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
-        if (typeof data?.pid === 'number' && typeof data?.installRoot === 'string') {
-            return data;
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-export function removeRuntimeInfo() {
-    const filePath = getRuntimeInfoPath();
-    try {
-        fs.unlinkSync(filePath);
-    }
-    catch {
-        /* not present, fine */
-    }
-}
-export function isPidAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Cross-platform path to the service-manager unit file that launches the daemon.
- * Returns null if beecork doesn't manage one on this OS (currently Windows uses
- * Task Scheduler and is out of scope for the auto-heal flow).
- */
-export function getServiceUnitPath() {
-    const home = os.homedir();
-    if (process.platform === 'darwin')
-        return path.join(home, 'Library', 'LaunchAgents', 'com.beecork.daemon.plist');
-    if (process.platform === 'linux')
-        return path.join(home, '.config', 'systemd', 'user', 'beecork.service');
-    return null;
-}

package/dist/util/logger.d.ts

@@ -1,18 +0,0 @@
-type LogLevel = 'debug' | 'info' | 'warn' | 'error';
-declare class Logger {
-    private minLevel;
-    private logFile;
-    private stream;
-    private bytesWritten;
-    setLevel(level: LogLevel): void;
-    setLogFile(name: string): void;
-    private write;
-    debug(msg: string, ...args: unknown[]): void;
-    info(msg: string, ...args: unknown[]): void;
-    warn(msg: string, ...args: unknown[]): void;
-    error(msg: string, ...args: unknown[]): void;
-    private checkRotation;
-    close(): void;
-}
-export declare const logger: Logger;
-export {};

package/dist/util/logger.js

@@ -1,118 +0,0 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import { getLogsDir } from './paths.js';
-const LEVEL_PRIORITY = {
-    debug: 0,
-    info: 1,
-    warn: 2,
-    error: 3,
-};
-// Patterns that should never reach disk or stdout. Each channel uses a per-call
-// sanitizer too (defense-in-depth), but the Logger is the last line of defense
-// for any third-party error object that happens to embed a secret in its message.
-const REDACTION_PATTERNS = [
-    { re: /bot\d+:[A-Za-z0-9_-]+/g, replacement: 'bot<REDACTED>' }, // Telegram bot token
-];
-function redact(s) {
-    let out = s;
-    for (const { re, replacement } of REDACTION_PATTERNS)
-        out = out.replace(re, replacement);
-    return out;
-}
-const ROTATE_BYTES = 10 * 1024 * 1024;
-class Logger {
-    minLevel = 'info';
-    logFile = null;
-    stream = null;
-    bytesWritten = 0;
-    setLevel(level) {
-        this.minLevel = level;
-    }
-    setLogFile(name) {
-        const dir = getLogsDir();
-        fs.mkdirSync(dir, { recursive: true });
-        this.logFile = path.join(dir, name);
-        this.stream = fs.createWriteStream(this.logFile, { flags: 'a' });
-        // Seed bytesWritten from the existing file size so we don't reset the
-        // rotation counter on every daemon restart.
-        try {
-            this.bytesWritten = fs.statSync(this.logFile).size;
-        }
-        catch {
-            this.bytesWritten = 0;
-        }
-    }
-    write(level, msg, ...args) {
-        if (LEVEL_PRIORITY[level] < LEVEL_PRIORITY[this.minLevel])
-            return;
-        const timestamp = new Date().toISOString();
-        const prefix = `[${timestamp}] [${level.toUpperCase()}]`;
-        const raw = args.length > 0
-            ? `${prefix} ${msg} ${args.map((a) => (typeof a === 'string' ? a : JSON.stringify(a))).join(' ')}`
-            : `${prefix} ${msg}`;
-        const line = redact(raw);
-        if (this.stream) {
-            const out = line + '\n';
-            this.stream.write(out);
-            this.bytesWritten += out.length;
-            if (this.bytesWritten > ROTATE_BYTES)
-                this.checkRotation();
-        }
-        if (level === 'error') {
-            console.error(line);
-        }
-        else if (level === 'warn') {
-            console.warn(line);
-        }
-        else if (level !== 'debug') {
-            console.log(line);
-        }
-    }
-    debug(msg, ...args) {
-        this.write('debug', msg, ...args);
-    }
-    info(msg, ...args) {
-        this.write('info', msg, ...args);
-    }
-    warn(msg, ...args) {
-        this.write('warn', msg, ...args);
-    }
-    error(msg, ...args) {
-        this.write('error', msg, ...args);
-    }
-    checkRotation() {
-        if (!this.logFile || !this.stream)
-            return;
-        // bytesWritten-based gate already triggered us; rotate without statSync.
-        try {
-            this.stream.end();
-            const rotated = this.logFile + '.1';
-            try {
-                fs.unlinkSync(rotated);
-            }
-            catch {
-                /* not fatal */
-            }
-            fs.renameSync(this.logFile, rotated);
-            this.stream = fs.createWriteStream(this.logFile, { flags: 'a' });
-            this.bytesWritten = 0;
-        }
-        catch {
-            /* rotation failure shouldn't kill the daemon */
-        }
-    }
-    close() {
-        if (this.stream) {
-            this.stream.end();
-            this.stream = null;
-        }
-    }
-}
-export const logger = new Logger();
-// Allow operators to bump verbosity at runtime without recompiling.
-// e.g. `BEECORK_LOG_LEVEL=debug beecork start` surfaces every claude subprocess
-// stdout/stderr line via the logger.debug calls.
-const envLevel = process.env.BEECORK_LOG_LEVEL?.toLowerCase();
-if (envLevel === 'debug' || envLevel === 'info' || envLevel === 'warn' || envLevel === 'error') {
-    logger.setLevel(envLevel);
-}

package/dist/util/paths.d.ts

@@ -1,13 +0,0 @@
-export declare function getBeecorkHome(): string;
-export declare function getConfigPath(): string;
-export declare function getDbPath(): string;
-export declare function getCrontabPath(): string;
-export declare function getMcpConfigPath(): string;
-export declare function getLogsDir(): string;
-export declare function getPidPath(): string;
-export declare function getRuntimeInfoPath(): string;
-export declare function getCronReloadSignalPath(): string;
-export declare function getWatcherReloadSignalPath(): string;
-export declare function getWhatsappSessionPath(): string;
-export declare function ensureBeecorkDirs(): void;
-export declare function expandHome(p: string): string;