claudeup 4.19.0 → 4.23.0

package/src/utils/file-locking.ts

@@ -0,0 +1,144 @@
+/**
+ * File locking utilities for concurrent write protection
+ *
+ * Prevents race conditions when multiple processes modify settings files
+ * Uses lock files for cross-platform compatibility
+ */
+
+import { open, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { existsSync } from 'node:fs';
+import type { FileHandle } from 'node:fs/promises';
+
+/**
+ * Maximum time to wait for a lock (milliseconds)
+ */
+const LOCK_TIMEOUT_MS = 10000;
+
+/**
+ * Lock retry interval (milliseconds)
+ */
+const LOCK_RETRY_INTERVAL_MS = 100;
+
+/**
+ * Acquire exclusive lock on file and execute operation
+ * Uses lock files for cross-platform compatibility
+ *
+ * @param filePath - Path to file to lock
+ * @param operation - Async operation to execute with lock held
+ * @returns Result of the operation
+ * @throws Error if lock cannot be acquired within timeout
+ */
+export async function withFileLock<T>(
+  filePath: string,
+  operation: () => Promise<T>,
+): Promise<T> {
+  const lockPath = `${filePath}.lock`;
+  const lockDir = dirname(lockPath);
+
+  // Ensure lock directory exists
+  if (!existsSync(lockDir)) {
+    await mkdir(lockDir, { recursive: true });
+  }
+
+  const startTime = Date.now();
+  let fileHandle: FileHandle | null = null;
+
+  // Try to acquire lock with retries
+  while (Date.now() - startTime < LOCK_TIMEOUT_MS) {
+    try {
+      // Try to create lock file exclusively (fails if exists)
+      fileHandle = await open(lockPath, 'wx');
+
+      // Write PID to lock file for debugging
+      await fileHandle.write(`${process.pid}\n${new Date().toISOString()}\n`);
+
+      break;
+    } catch (error: unknown) {
+      // Lock file exists, retry after interval
+      if ((error as NodeJS.ErrnoException).code === 'EEXIST') {
+        await new Promise((resolve) => setTimeout(resolve, LOCK_RETRY_INTERVAL_MS));
+        continue;
+      }
+      throw error;
+    }
+  }
+
+  if (fileHandle === null) {
+    throw new Error(
+      `Failed to acquire lock on ${filePath} after ${LOCK_TIMEOUT_MS}ms. ` +
+        `Another process may be holding the lock. Lock file: ${lockPath}`,
+    );
+  }
+
+  try {
+    // Execute operation with lock held
+    return await operation();
+  } finally {
+    // Release lock
+    try {
+      await fileHandle.close();
+      // Delete lock file
+      const fs = await import('node:fs/promises');
+      await fs.unlink(lockPath);
+    } catch (error) {
+      // Log error but don't throw - operation succeeded
+      console.error(`Warning: Failed to release lock ${lockPath}:`, error);
+    }
+  }
+}
+
+/**
+ * Check if file is currently locked
+ *
+ * @param filePath - Path to file to check
+ * @returns True if lock file exists
+ */
+export function isFileLocked(filePath: string): boolean {
+  const lockPath = `${filePath}.lock`;
+  return existsSync(lockPath);
+}
+
+/**
+ * Force remove lock file (use with caution)
+ * Only use if you're certain the lock is stale
+ *
+ * @param filePath - Path to file whose lock to remove
+ */
+export async function forceRemoveLock(filePath: string): Promise<void> {
+  const lockPath = `${filePath}.lock`;
+  try {
+    const fs = await import('node:fs/promises');
+    await fs.unlink(lockPath);
+  } catch (error: unknown) {
+    // Ignore ENOENT (lock doesn't exist)
+    if ((error as NodeJS.ErrnoException).code !== 'ENOENT') {
+      throw error;
+    }
+  }
+}
+
+/**
+ * Get information about current lock
+ *
+ * @param filePath - Path to file to check
+ * @returns Lock info or null if not locked
+ */
+export async function getLockInfo(
+  filePath: string,
+): Promise<{ pid: string; timestamp: string } | null> {
+  const lockPath = `${filePath}.lock`;
+
+  if (!existsSync(lockPath)) {
+    return null;
+  }
+
+  try {
+    const fs = await import('node:fs/promises');
+    const content = await fs.readFile(lockPath, 'utf-8');
+    const [pid, timestamp] = content.trim().split('\n');
+    return { pid, timestamp };
+  } catch (error) {
+    return null;
+  }
+}

package/src/data/alias-flags.js

@@ -1,205 +0,0 @@
-/**
- * Catalog of `claude` CLI flags that the Alias tab can compose into a managed
- * shell alias. Verified against `claude --help` output and binary string scan
- * of the shipped Claude Code 2.1.x binary.
- *
- * The catalog drives both the UI editor for each flag and the renderer that
- * emits the final `alias claude='claude …'` string per shell.
- */
-/**
- * Tokens supported in `templated: true` flag values. Description text is
- * shown to the user; the actual shell-substitution code lives in the writer
- * because it needs per-shell variants.
- *
- * Intentionally excludes `{hash}` for v1 — its only portable form is
- * `od -An -N4 -tx1 /dev/urandom | tr -d ' \n'`, which looks frightening in a
- * shell rc file. Users who want randomness can pair this prefix with bare
- * `--remote-control` (which already auto-generates a unique suffix).
- */
-export const TEMPLATE_TOKENS = [
-    { token: "{folder}", description: "current directory's basename" },
-    { token: "{day}", description: "day of month, zero-padded (01-31)" },
-    { token: "{month}", description: "month, zero-padded (01-12)" },
-    { token: "{year}", description: "4-digit year" },
-];
-export const FLAG_GROUPS = [
-    { id: "danger", label: "Permissions" },
-    { id: "session", label: "Session" },
-    { id: "context", label: "Context" },
-    { id: "channels", label: "Development channels" },
-    { id: "debug", label: "Debug" },
-    { id: "integration", label: "Integrations" },
-    { id: "worktree", label: "Worktree" },
-];
-export const ALIAS_FLAGS = [
-    {
-        id: "dangerously-skip-permissions",
-        label: "Skip permission checks",
-        flag: "--dangerously-skip-permissions",
-        kind: "boolean",
-        group: "danger",
-        description: "Bypass all permission checks. Recommended only for sandboxes with no internet access.",
-    },
-    {
-        id: "allow-dangerously-skip-permissions",
-        label: "Allow skip-permissions opt-in",
-        flag: "--allow-dangerously-skip-permissions",
-        kind: "boolean",
-        group: "danger",
-        description: "Enable the skip-permissions option without making it the default.",
-    },
-    {
-        id: "remote-control",
-        label: "Remote control",
-        flag: "--remote-control",
-        kind: "boolean",
-        group: "session",
-        description: "Start an interactive session with Remote Control enabled. Claude Code auto-generates a unique session name; use --remote-control-session-name-prefix to customize it.",
-    },
-    {
-        id: "remote-control-session-name-prefix",
-        label: "Remote control name prefix",
-        flag: "--remote-control-session-name-prefix",
-        kind: "text",
-        templated: true,
-        group: "session",
-        description: "Prefix for auto-generated Remote Control session names. Default: hostname. Supports template tokens that expand on each shell invocation: {folder} (basename of $PWD), {day}, {month}, {year}. Example: dev-{folder}-{day} → dev-myproject-15.",
-    },
-    {
-        id: "ide",
-        label: "Auto-connect to IDE",
-        flag: "--ide",
-        kind: "boolean",
-        group: "integration",
-        description: "Automatically connect to IDE on startup if exactly one valid IDE is available.",
-    },
-    {
-        id: "chrome",
-        label: "Chrome integration",
-        flag: "--chrome",
-        triStateOff: "--no-chrome",
-        kind: "tri-state",
-        group: "integration",
-        description: "Enable or disable Claude in Chrome integration. Unset leaves the project default in place.",
-    },
-    {
-        id: "effort",
-        label: "Effort level",
-        flag: "--effort",
-        kind: "select",
-        group: "session",
-        description: "Effort level for the current session.",
-        options: [
-            { label: "low", value: "low" },
-            { label: "medium", value: "medium" },
-            { label: "high", value: "high" },
-            { label: "xhigh", value: "xhigh" },
-            { label: "max", value: "max" },
-        ],
-    },
-    {
-        id: "system-prompt",
-        label: "System prompt",
-        flag: "--system-prompt",
-        kind: "text",
-        group: "context",
-        xorGroup: "system-prompt",
-        description: "System prompt text to use for the session. Mutually exclusive with --system-prompt-file.",
-    },
-    {
-        id: "system-prompt-file",
-        label: "System prompt file",
-        flag: "--system-prompt-file",
-        kind: "text",
-        group: "context",
-        xorGroup: "system-prompt",
-        description: "Path to a file whose contents replace the default system prompt. Mutually exclusive with --system-prompt.",
-    },
-    {
-        id: "append-system-prompt",
-        label: "Append system prompt",
-        flag: "--append-system-prompt",
-        kind: "text",
-        group: "context",
-        description: "Text appended to the default system prompt. Composes with --system-prompt.",
-    },
-    {
-        id: "append-system-prompt-file",
-        label: "Append system prompt file",
-        flag: "--append-system-prompt-file",
-        kind: "text",
-        group: "context",
-        description: "Path to a file whose contents are appended to the default system prompt.",
-    },
-    {
-        id: "channels",
-        label: "Channels (approved)",
-        flag: "--channels",
-        kind: "text-list",
-        group: "channels",
-        description: "Approved channel plugins/MCP servers to run this session (the allowlist). Channels derived from --dangerously-load appear in a separate section here and are unioned in on write; add your own approved channels on top.",
-        defaultValues: [],
-    },
-    {
-        id: "dangerously-load-development-channels",
-        label: "Load development channels",
-        flag: "--dangerously-load-development-channels",
-        kind: "text-list",
-        group: "channels",
-        description: "Sideload development channels not on the approved allowlist (local dev only). Also shown under --channels and unioned into it on write. Default seed: claudish (the only magus plugin currently shipping channels).",
-        defaultValues: ["plugin:claudish@magus"],
-    },
-    {
-        id: "debug",
-        label: "Debug categories",
-        flag: "--debug",
-        shortFlag: "-d",
-        kind: "multi-with-custom",
-        group: "debug",
-        description: "Enable debug mode with optional category filter. Pick from common categories or add custom tokens (including negations like !file).",
-        picklist: [
-            "api",
-            "hooks",
-            "mcp",
-            "tools",
-            "plugins",
-            "skills",
-            "settings",
-            "permissions",
-            "auth",
-            "cache",
-            "statsig",
-            "file",
-            "1p",
-        ],
-        defaultValues: [],
-    },
-    {
-        id: "worktree",
-        label: "Use worktree",
-        flag: "--worktree",
-        kind: "boolean",
-        group: "worktree",
-        description: "Create a git worktree for the session. Prerequisite for --tmux.",
-    },
-    {
-        id: "tmux",
-        label: "tmux session",
-        flag: "--tmux",
-        kind: "select",
-        group: "worktree",
-        requires: "worktree",
-        description: "Create a tmux session for the worktree. Requires --worktree. iTerm2 native panes when available; classic for traditional tmux.",
-        options: [
-            { label: "auto (iTerm2 native)", value: "" },
-            { label: "classic", value: "classic" },
-        ],
-    },
-];
-/** Look up a flag by id. Throws if missing — keeps callers honest. */
-export function getFlagById(id) {
-    const f = ALIAS_FLAGS.find((flag) => flag.id === id);
-    if (!f)
-        throw new Error(`Unknown alias flag id: ${id}`);
-    return f;
-}

package/src/data/cli-tools.js

@@ -1,123 +0,0 @@
-export const cliTools = [
-    {
-        name: "claudeup",
-        displayName: "claudeup",
-        description: "TUI tool for managing Claude Code plugins, MCPs, and configuration",
-        installCommand: "npm install -g claudeup",
-        checkCommand: "claudeup --version",
-        website: "https://github.com/MadAppGang/magus/tree/main/tools/claudeup",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "claudeup",
-    },
-    {
-        name: "mnemex",
-        displayName: "Mnemex",
-        description: "AST-aware code search with PageRank, callers/callees, and semantic embeddings",
-        installCommand: "npm install -g mnemex",
-        checkCommand: "mnemex --version",
-        website: "https://github.com/MadAppGang/mnemex",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "mnemex",
-    },
-    {
-        name: "claudish",
-        displayName: "Claudish",
-        description: "Run Claude Code with OpenRouter models (Grok, GPT-5, Gemini)",
-        installCommand: "npm install -g claudish",
-        checkCommand: "claudish --version",
-        website: "https://github.com/MadAppGang/claudish",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "claudish",
-    },
-    {
-        name: "claude",
-        displayName: "Claude Code",
-        description: "Anthropic official agentic coding tool",
-        installCommand: "npm install -g @anthropic-ai/claude-code",
-        checkCommand: "claude --version",
-        website: "https://claude.ai/code",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "@anthropic-ai/claude-code",
-    },
-    {
-        name: "codex",
-        displayName: "OpenAI Codex",
-        description: "Lightweight coding agent from OpenAI that runs in your terminal",
-        installCommand: "npm install -g @openai/codex",
-        checkCommand: "codex --version",
-        website: "https://github.com/openai/codex",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "@openai/codex",
-    },
-    {
-        name: "gemini",
-        displayName: "Gemini CLI",
-        description: "Google AI agent with 1M token context, free tier available",
-        installCommand: "npm install -g @google/gemini-cli",
-        checkCommand: "gemini --version",
-        website: "https://github.com/google-gemini/gemini-cli",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "@google/gemini-cli",
-    },
-    {
-        name: "qwen",
-        displayName: "Qwen Code",
-        description: "Alibaba coding agent optimized for Qwen3-Coder models",
-        installCommand: "npm install -g @qwen-code/qwen-code",
-        checkCommand: "qwen --version",
-        website: "https://github.com/QwenLM/qwen-code",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "@qwen-code/qwen-code",
-    },
-    {
-        name: "cline",
-        displayName: "Cline",
-        description: "Autonomous coding agent with plan & act, checkpoints, browser use",
-        installCommand: "npm install -g cline",
-        checkCommand: "cline --version",
-        website: "https://cline.bot",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "cline",
-    },
-    {
-        name: "opencode",
-        displayName: "OpenCode",
-        description: "Open source AI coding agent trusted by 400k+ developers",
-        installCommand: "npm install -g opencode-ai",
-        checkCommand: "opencode --version",
-        website: "https://opencode.ai",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "opencode-ai",
-    },
-    {
-        name: "aider",
-        displayName: "Aider",
-        description: "AI pair programming - works with Claude, GPT-4, local models",
-        installCommand: "pip install aider-install && aider-install",
-        checkCommand: "aider --version",
-        website: "https://aider.chat",
-        category: "ai-coding",
-        packageManager: "pip",
-        packageName: "aider-chat",
-    },
-    {
-        name: "crush",
-        displayName: "Crush",
-        description: "AI coding assistant from Charm with terminal-native UX",
-        installCommand: "npm install -g @charmland/crush",
-        checkCommand: "crush --version",
-        website: "https://github.com/charmbracelet/crush",
-        category: "ai-coding",
-        packageManager: "npm",
-        packageName: "@charmland/crush",
-    },
-];

package/src/data/gitignore-defaults.js

@@ -1,24 +0,0 @@
-/**
- * Conservative built-in defaults. These ship inside claudeup and apply to
- * every project unless overridden by a global or project manifest. Kept narrow
- * on purpose — broader patterns (node_modules, .env, .DS_Store, …) live in the
- * "common-dev" template which users opt into via `extends`.
- */
-export const BUILTIN_DEFAULTS = {
-    ignore: [
-        ".claude/settings.local.json",
-        ".claude/scheduled_tasks.lock",
-        ".claude/cache/",
-        ".claude/.statusline-worktree-*",
-        "ai-docs/sessions/",
-        ".mnemex/",
-        ".claudemem/",
-        "gtd/sessions/",
-        ".agents/",
-    ],
-    track: [
-        ".claude/settings.json",
-        ".mcp.json",
-        "plugin.json",
-    ],
-};

package/src/data/gitignore-reasons.js

@@ -1,97 +0,0 @@
-const RULE_REASONS = new Map([
-    [
-        key("ignore", ".claude/settings.local.json"),
-        "Personal Claude settings belong to each developer and should not be shared.",
-    ],
-    [
-        key("ignore", ".claude/scheduled_tasks.lock"),
-        "Runtime lock files are local process state and should be regenerated locally.",
-    ],
-    [
-        key("ignore", ".claude/cache/"),
-        "Claude cache contents are local generated data and can grow quickly.",
-    ],
-    [
-        key("ignore", ".claude/.statusline-worktree-*"),
-        "Statusline worktree markers are local runtime state.",
-    ],
-    [
-        key("ignore", "ai-docs/sessions/"),
-        "Session transcripts and scratch notes are local working artifacts.",
-    ],
-    [
-        key("ignore", ".mnemex/"),
-        "Local memory/index data is machine-specific and regenerated by tooling.",
-    ],
-    [
-        key("ignore", ".claudemem/"),
-        "Local claudemem indexes are generated from the repo and should not be committed.",
-    ],
-    [
-        key("ignore", "gtd/sessions/"),
-        "Local GTD session artifacts are personal workflow state.",
-    ],
-    [
-        key("ignore", ".agents/"),
-        "Local agent workspaces and runtime artifacts should stay out of team history.",
-    ],
-    [
-        key("ignore", "node_modules/"),
-        "Installed dependencies are restored from the package manager lockfile.",
-    ],
-    [
-        key("ignore", ".env"),
-        "Environment files commonly contain local secrets and machine-specific values.",
-    ],
-    [
-        key("ignore", ".env.local"),
-        "Local environment overrides commonly contain secrets or developer-specific values.",
-    ],
-    [
-        key("ignore", ".DS_Store"),
-        "macOS Finder metadata is machine-generated noise.",
-    ],
-    [
-        key("ignore", "dist/"),
-        "Distribution output is generated from source during builds.",
-    ],
-    [
-        key("ignore", "build/"),
-        "Build output is generated from source during builds.",
-    ],
-    [
-        key("ignore", "*.log"),
-        "Log files are runtime output and usually contain noisy local details.",
-    ],
-    [
-        key("ignore", "coverage/"),
-        "Coverage reports are generated by test runs.",
-    ],
-    [
-        key("ignore", ".cache/"),
-        "Tool cache contents are local generated data.",
-    ],
-    [
-        key("track", ".claude/settings.json"),
-        "Team Claude settings should be committed so everyone gets the same project behavior.",
-    ],
-    [
-        key("track", ".mcp.json"),
-        "Team MCP configuration should be committed so shared tools are discoverable.",
-    ],
-    [
-        key("track", "plugin.json"),
-        "The plugin manifest is source metadata required by the plugin system.",
-    ],
-]);
-export function getGitignoreRuleReason(action, pattern) {
-    const reason = RULE_REASONS.get(key(action, pattern));
-    if (reason)
-        return reason;
-    return action === "ignore"
-        ? "A managed rule says this path should stay out of git."
-        : "A managed rule says this path should stay tracked in git.";
-}
-function key(action, pattern) {
-    return `${action}:${pattern}`;
-}

package/src/data/gitignore-templates.js

@@ -1,21 +0,0 @@
-/**
- * Opt-in templates a user manifest can pull in via `extends`. Kept separate
- * from BUILTIN_DEFAULTS so the active baseline stays minimal — these only
- * apply when explicitly requested.
- */
-export const BUILTIN_TEMPLATES = {
-    "common-dev": {
-        ignore: [
-            "node_modules/",
-            ".env",
-            ".env.local",
-            ".DS_Store",
-            "dist/",
-            "build/",
-            "*.log",
-            "coverage/",
-            ".cache/",
-        ],
-        track: [],
-    },
-};