beecork 1.7.1 → 2.0.0

package/dist/dashboard/server.js

@@ -1,104 +0,0 @@
-import http from 'node:http';
-import crypto from 'node:crypto';
-import { execFile } from 'node:child_process';
-import { platform } from 'node:os';
-import { getDashboardHtml } from './html.js';
-import { logger } from '../util/logger.js';
-import { dispatch, json } from './routes.js';
-function safeEqualToken(provided, expected) {
-    if (!provided)
-        return false;
-    const a = Buffer.from(provided);
-    const b = Buffer.from(expected);
-    if (a.length !== b.length)
-        return false;
-    try {
-        return crypto.timingSafeEqual(a, b);
-    }
-    catch {
-        return false;
-    }
-}
-function openBrowser(url) {
-    const p = platform();
-    if (p === 'darwin')
-        execFile('open', [url]);
-    else if (p === 'win32')
-        execFile('cmd', ['/c', 'start', url]);
-    else
-        execFile('xdg-open', [url]);
-}
-const SECURITY_HEADERS = {
-    'X-Frame-Options': 'DENY',
-    'X-Content-Type-Options': 'nosniff',
-    'Referrer-Policy': 'no-referrer',
-};
-export function startDashboardServer(port = 0) {
-    // Generate auth token at server start (24 random bytes → 192-bit base64url).
-    const authToken = crypto.randomBytes(24).toString('base64url');
-    const server = http.createServer(async (req, res) => {
-        const url = new URL(req.url || '/', `http://localhost`);
-        const path = url.pathname;
-        // Serve HTML
-        if (path === '/' || path === '/index.html') {
-            const token = url.searchParams.get('token');
-            if (!token) {
-                res.writeHead(302, { Location: `/?token=${authToken}` });
-                res.end();
-                return;
-            }
-            if (!safeEqualToken(token, authToken)) {
-                res.writeHead(403, { 'Content-Type': 'text/plain', ...SECURITY_HEADERS });
-                res.end('Forbidden');
-                return;
-            }
-            res.writeHead(200, {
-                'Content-Type': 'text/html',
-                ...SECURITY_HEADERS,
-                'Set-Cookie': `beecork_dash=${authToken}; HttpOnly; SameSite=Strict; Path=/`,
-            });
-            res.end(getDashboardHtml(authToken));
-            return;
-        }
-        // Auth check for API routes (constant-time compare)
-        if (path.startsWith('/api/')) {
-            const authHeader = req.headers.authorization;
-            const queryToken = url.searchParams.get('token');
-            const cookieToken = req.headers.cookie
-                ?.split(';')
-                .map((c) => c.trim())
-                .find((c) => c.startsWith('beecork_dash='))
-                ?.split('=')[1];
-            const providedToken = authHeader?.replace('Bearer ', '') || queryToken || cookieToken;
-            if (!safeEqualToken(providedToken, authToken)) {
-                json(res, { error: 'Unauthorized' }, 401);
-                return;
-            }
-        }
-        try {
-            const route = dispatch(req.method || 'GET', path);
-            if (!route) {
-                json(res, { error: 'Not found' }, 404);
-                return;
-            }
-            await route.handler({ req, res, url, path });
-        }
-        catch (err) {
-            logger.error('Dashboard error:', err);
-            json(res, { error: 'Internal server error' }, 500);
-        }
-    });
-    server.listen(port, '127.0.0.1', () => {
-        const addr = server.address();
-        if (addr && typeof addr === 'object') {
-            const url = `http://localhost:${addr.port}?token=${authToken}`;
-            console.log(`\nBeecork Dashboard: ${url}\n`);
-            console.log('Press Ctrl+C to stop.\n');
-            openBrowser(url);
-        }
-    });
-    process.on('SIGINT', () => {
-        server.close();
-        process.exit(0);
-    });
-}

package/dist/db/connection.d.ts

@@ -1,29 +0,0 @@
-/**
- * Single source of truth for opening the Beecork SQLite database.
- *
- * Previously three sites each opened the DB with their own pragma setup:
- *   - daemon side (db/index.ts) — applied migrations + WAL checkpoint interval
- *   - MCP side (mcp/server.ts)  — read-only-ish singleton, no migrations
- *   - doctor (cli/doctor.ts)    — ad-hoc read-only handle
- *
- * The pragmas matched today but the duplication was silent-drift bait. This
- * helper centralizes pragma setup so future tweaks land in one place.
- */
-import Database from 'better-sqlite3';
-export interface OpenDbOptions {
-    /** Open the file read-only (used by `beecork doctor` for status snapshots). */
-    readonly?: boolean;
-    /**
-     * If true, restrict file mode to 0o600 after open. Daemon side wants this;
-     * read-only sidecar handles don't need to retouch perms.
-     */
-    enforcePerms?: boolean;
-}
-/**
- * Open a Beecork SQLite database with consistent pragmas.
- *
- * Migrations are NOT applied here — the daemon's `getDb()` runs migrations
- * separately, so this helper can be reused by the MCP child + doctor without
- * accidentally double-applying migrations.
- */
-export declare function openDb(dbPath: string, opts?: OpenDbOptions): Database.Database;

package/dist/db/connection.js

@@ -1,37 +0,0 @@
-/**
- * Single source of truth for opening the Beecork SQLite database.
- *
- * Previously three sites each opened the DB with their own pragma setup:
- *   - daemon side (db/index.ts) — applied migrations + WAL checkpoint interval
- *   - MCP side (mcp/server.ts)  — read-only-ish singleton, no migrations
- *   - doctor (cli/doctor.ts)    — ad-hoc read-only handle
- *
- * The pragmas matched today but the duplication was silent-drift bait. This
- * helper centralizes pragma setup so future tweaks land in one place.
- */
-import Database from 'better-sqlite3';
-import fs from 'node:fs';
-/**
- * Open a Beecork SQLite database with consistent pragmas.
- *
- * Migrations are NOT applied here — the daemon's `getDb()` runs migrations
- * separately, so this helper can be reused by the MCP child + doctor without
- * accidentally double-applying migrations.
- */
-export function openDb(dbPath, opts = {}) {
-    const db = new Database(dbPath, opts.readonly ? { readonly: true } : undefined);
-    db.pragma('journal_mode = WAL');
-    db.pragma('foreign_keys = ON');
-    db.pragma('busy_timeout = 5000');
-    if (opts.enforcePerms && !opts.readonly) {
-        for (const p of [dbPath, dbPath + '-wal', dbPath + '-shm']) {
-            try {
-                fs.chmodSync(p, 0o600);
-            }
-            catch {
-                /* sidecar may not exist yet */
-            }
-        }
-    }
-    return db;
-}

package/dist/db/index.d.ts

@@ -1,14 +0,0 @@
-import Database from 'better-sqlite3';
-export declare function getDb(): Database.Database;
-export interface CreateTabOptions {
-    name: string;
-    workingDir?: string;
-    systemPrompt?: string | null;
-}
-/** Shared tab record creation — used by dashboard, MCP, and TabManager */
-export declare function createTabRecord(db: Database.Database, opts: CreateTabOptions): {
-    id: string;
-    name: string;
-    created: boolean;
-};
-export declare function closeDb(): void;

package/dist/db/index.js

@@ -1,127 +0,0 @@
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-import path from 'node:path';
-import { getDbPath, ensureBeecorkDirs, expandHome } from '../util/paths.js';
-import { runMigrations } from './migrations.js';
-import { openDb } from './connection.js';
-import { logger } from '../util/logger.js';
-const SCHEMA = `
-CREATE TABLE IF NOT EXISTS tabs (
-  id TEXT PRIMARY KEY,
-  name TEXT UNIQUE NOT NULL,
-  session_id TEXT NOT NULL,
-  status TEXT NOT NULL DEFAULT 'idle',
-  working_dir TEXT NOT NULL,
-  pid INTEGER,
-  created_at TEXT NOT NULL DEFAULT (datetime('now')),
-  last_activity_at TEXT NOT NULL DEFAULT (datetime('now'))
-);
-
-CREATE TABLE IF NOT EXISTS messages (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  tab_id TEXT NOT NULL REFERENCES tabs(id),
-  role TEXT NOT NULL,
-  content TEXT NOT NULL,
-  cost_usd REAL,
-  tokens_in INTEGER,
-  tokens_out INTEGER,
-  created_at TEXT NOT NULL DEFAULT (datetime('now'))
-);
-
-CREATE INDEX IF NOT EXISTS idx_messages_tab ON messages(tab_id, created_at);
-
-CREATE TABLE IF NOT EXISTS memories (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  content TEXT NOT NULL,
-  tab_name TEXT,
-  source TEXT NOT NULL DEFAULT 'tool',
-  created_at TEXT NOT NULL DEFAULT (datetime('now'))
-);
-
-CREATE TABLE IF NOT EXISTS pending_messages (
-  id INTEGER PRIMARY KEY AUTOINCREMENT,
-  tab_name TEXT NOT NULL,
-  message TEXT NOT NULL,
-  created_at TEXT NOT NULL DEFAULT (datetime('now')),
-  processed INTEGER NOT NULL DEFAULT 0
-);
-
-CREATE INDEX IF NOT EXISTS idx_pending_unprocessed ON pending_messages(processed, created_at);
-`;
-let db = null;
-let walInterval = null;
-export function getDb() {
-    if (db)
-        return db;
-    ensureBeecorkDirs();
-    const dbPath = getDbPath();
-    db = openDb(dbPath, { enforcePerms: true });
-    db.exec(SCHEMA);
-    runMigrations(db);
-    // Periodic WAL checkpointing + table cleanup. Cheap precheck `LIMIT 1`
-    // SELECTs skip the DELETE entirely when nothing matches — saves the WAL
-    // write on a quiet system.
-    walInterval = setInterval(() => {
-        try {
-            db?.pragma('wal_checkpoint(PASSIVE)');
-            if (!db)
-                return;
-            // Prune old permission history (keep last 1000 entries). Two-pass: count
-            // first, then bulk-delete the oldest N. The previous correlated-subquery
-            // version re-evaluated the OFFSET 999 row per candidate, which scaled
-            // poorly past ~5k rows.
-            const permCount = db.prepare('SELECT COUNT(*) as c FROM permission_history').get().c;
-            if (permCount > 1000) {
-                db.prepare(`DELETE FROM permission_history WHERE id IN (
-             SELECT id FROM permission_history ORDER BY created_at ASC LIMIT ?
-           )`).run(permCount - 1000);
-            }
-            // Activity log: only DELETE if a candidate row exists, otherwise no-op.
-            const oldActivity = db
-                .prepare("SELECT 1 FROM activity_log WHERE created_at < datetime('now', '-90 days') LIMIT 1")
-                .get();
-            if (oldActivity)
-                db.exec("DELETE FROM activity_log WHERE created_at < datetime('now', '-90 days')");
-            // Routing preferences: same precheck pattern.
-            const stalePref = db
-                .prepare("SELECT 1 FROM routing_preferences WHERE hit_count < 3 AND created_at < datetime('now', '-30 days') LIMIT 1")
-                .get();
-            if (stalePref) {
-                db.exec("DELETE FROM routing_preferences WHERE hit_count < 3 AND created_at < datetime('now', '-30 days')");
-            }
-        }
-        catch (err) {
-            logger.warn('WAL checkpoint/cleanup error:', err);
-        }
-    }, 30 * 60 * 1000); // every 30 minutes
-    return db;
-}
-/** Shared tab record creation — used by dashboard, MCP, and TabManager */
-export function createTabRecord(db, opts) {
-    const existing = db.prepare('SELECT name FROM tabs WHERE name = ?').get(opts.name);
-    if (existing)
-        return { id: '', name: opts.name, created: false };
-    // Resolve and validate workingDir. Done here so every caller (CLI, dashboard, MCP)
-    // gets the same checks instead of each rolling its own.
-    let dir = opts.workingDir || process.env.HOME || '/';
-    dir = path.resolve(expandHome(dir));
-    if (!fs.existsSync(dir)) {
-        throw new Error(`workingDir does not exist: ${dir}`);
-    }
-    if (!fs.statSync(dir).isDirectory()) {
-        throw new Error(`workingDir is not a directory: ${dir}`);
-    }
-    const id = crypto.randomUUID();
-    db.prepare('INSERT INTO tabs (id, name, session_id, status, working_dir, system_prompt) VALUES (?, ?, ?, ?, ?, ?)').run(id, opts.name, crypto.randomUUID(), 'idle', dir, opts.systemPrompt || null);
-    return { id, name: opts.name, created: true };
-}
-export function closeDb() {
-    if (walInterval) {
-        clearInterval(walInterval);
-        walInterval = null;
-    }
-    if (db) {
-        db.close();
-        db = null;
-    }
-}

package/dist/db/migrations.d.ts

@@ -1,2 +0,0 @@
-import type Database from 'better-sqlite3';
-export declare function runMigrations(db: Database.Database): void;