codehere 0.2.1 → 0.3.0-rc.1

package/dist/presentation/cli/commands/status-command.js

@@ -16,21 +16,23 @@ import { colors, newline, sectionHeader } from '../../../ui.js';
 import { getVersion } from '../../../utils/version.js';
 import { loadProductContext } from '../../../infrastructure/config/product-context.js';
 import { AUDIT_FILE } from '../../../infrastructure/hooks/claude-sdk-hook.js';
-import { analyzeSessions, detectAmplificationAlerts, formatDuration } from '../../../infrastructure/hooks/session-analyzer.js';
+import { analyzeSessions, detectAmplificationAlerts, formatDuration, } from '../../../infrastructure/hooks/session-analyzer.js';
 function readAuditLog(maxLines = 5000) {
     if (!existsSync(AUDIT_FILE))
         return [];
     try {
         const lines = readFileSync(AUDIT_FILE, 'utf-8').split('\n').filter(Boolean);
         const recent = lines.slice(-maxLines);
-        return recent.map(l => {
+        return recent
+            .map((l) => {
             try {
                 return JSON.parse(l);
             }
             catch {
                 return null;
             }
-        }).filter(Boolean);
+        })
+            .filter(Boolean);
     }
     catch {
         return [];
@@ -69,8 +71,12 @@ function extractBlockReason(entry) {
             return parts.slice(-2).join('/');
         }
     }
-    catch { /* parse failed — truncated JSON, try regex */ }
+    catch {
+        /* parse failed — truncated JSON, try regex */
+    }
     // Fallback: extract file_path or command from truncated JSON via regex
+    if (!entry.toolInput)
+        return 'tool call';
     const fpMatch = entry.toolInput.match(/"file_path"\s*:\s*"([^"]+)"/);
     if (fpMatch) {
         const parts = fpMatch[1].split('/');
@@ -84,15 +90,15 @@ function extractBlockReason(entry) {
 // ── main command ──────────────────────────────────────────────────────────────
 // ── session drill-down ────────────────────────────────────────────────────────
 function renderSessionDrillDown(sessionId, entries) {
-    const sessionEntries = entries.filter(e => e.sessionId === sessionId || e.sessionId?.startsWith(sessionId));
+    const sessionEntries = entries.filter((e) => e.sessionId === sessionId || e.sessionId?.startsWith(sessionId));
     if (sessionEntries.length === 0) {
         console.log(colors.yellow(`No entries found for session: ${sessionId}`));
         console.log(colors.dim('  Tip: use the first 8+ characters of a session ID from `codehere status --sessions`'));
         return;
     }
     const sorted = [...sessionEntries].sort((a, b) => new Date(a.timestamp).getTime() - new Date(b.timestamp).getTime());
-    const blocked = sorted.filter(e => e.blocked);
-    const critical = sorted.filter(e => e.criticalFindings > 0);
+    const blocked = sorted.filter((e) => e.blocked);
+    const critical = sorted.filter((e) => e.criticalFindings > 0);
     const durationMs = new Date(sorted[sorted.length - 1].timestamp).getTime() - new Date(sorted[0].timestamp).getTime();
     const toolCounts = {};
     for (const e of sorted) {
@@ -157,6 +163,252 @@ function renderSessionDrillDown(sessionId, entries) {
     }
     newline();
 }
+function extractFilePath(entry) {
+    if (!entry.toolInput)
+        return null;
+    try {
+        const input = JSON.parse(entry.toolInput);
+        if (input.file_path)
+            return String(input.file_path);
+        if (Array.isArray(input.edits) && input.edits[0]?.file_path)
+            return String(input.edits[0].file_path);
+    }
+    catch {
+        const m = entry.toolInput.match(/"file_path"\s*:\s*"([^"]+)"/);
+        if (m)
+            return m[1];
+    }
+    return null;
+}
+function shortReason(entry, maxLen = 60) {
+    const r = extractBlockReason(entry);
+    return r.length <= maxLen ? r : r.substring(0, maxLen - 1) + '…';
+}
+const BLOCK_CATEGORY_LABEL = {
+    'self-test': "codehere's own canary tests",
+    'cache-cleanup': 'routine cache/tmp deletion',
+    'content-match': 'editing files that mention dangerous patterns (docs/tests)',
+    secret: 'potential credential in content',
+    destructive: 'destructive command (rm -rf, force push)',
+    injection: 'code/command injection pattern',
+    other: 'uncategorized',
+};
+function classifyBlock(entry) {
+    const raw = entry.toolInput.toLowerCase();
+    // Codehere's own test canaries (seeing these means someone is running our tests)
+    if (raw.includes('rm -rf /home/user') || raw.includes('evil.com')) {
+        return 'self-test';
+    }
+    // rm -rf against caches/tmp/build artifacts — real cleanup, not a threat
+    if (raw.includes('rm -rf') &&
+        (raw.includes('/.cache/') ||
+            raw.includes('library/caches/') ||
+            raw.includes('/tmp/') ||
+            raw.includes('node_modules') ||
+            raw.includes('/dist/') ||
+            raw.includes('/.next/') ||
+            raw.includes('/build/'))) {
+        return 'cache-cleanup';
+    }
+    // Edit/Write into docs/source that merely mentions dangerous patterns — content match FP
+    if (entry.toolName === 'Edit' || entry.toolName === 'MultiEdit' || entry.toolName === 'Write') {
+        const fp = extractFilePath(entry) || '';
+        if (/\.(md|tsx?|jsx?|html|rst|txt|ya?ml|json)$/i.test(fp)) {
+            return 'content-match';
+        }
+    }
+    // Destructive (not caught as cleanup above — so targeting user data)
+    if (raw.includes('rm -rf') || raw.includes('--force') || raw.includes('force push')) {
+        return 'destructive';
+    }
+    // Secret-in-content
+    if (/api_key|apikey|auth_token|bearer\s|password\s*[:=]|secret\s*[:=]|sk-[a-z0-9]{20,}/i.test(raw)) {
+        return 'secret';
+    }
+    // Code/command injection
+    if (raw.includes('eval(') || raw.includes('child_process.exec') || raw.includes('innerhtml')) {
+        return 'injection';
+    }
+    return 'other';
+}
+function formatDateRange(fromMs, toMs) {
+    const f = new Date(fromMs);
+    const t = new Date(toMs);
+    const opt = { month: 'short', day: 'numeric' };
+    return `${f.toLocaleDateString('en-US', opt)} – ${t.toLocaleDateString('en-US', opt)}`;
+}
+function renderWeeklyRecap(entries, jsonOut) {
+    const weekMs = 7 * 24 * 3600 * 1000;
+    const now = Date.now();
+    const windowStart = now - weekMs;
+    const week = entries.filter((e) => new Date(e.timestamp).getTime() >= windowStart);
+    // Aggregates
+    const sessions = new Set(week.map((e) => e.sessionId).filter(Boolean));
+    const writes = week.filter((e) => e.toolName === 'Write');
+    const edits = week.filter((e) => e.toolName === 'Edit' || e.toolName === 'MultiEdit');
+    const bash = week.filter((e) => e.toolName === 'Bash');
+    const blocks = week.filter((e) => e.blocked);
+    const fileStats = {};
+    for (const e of [...writes, ...edits]) {
+        const fp = extractFilePath(e);
+        if (!fp)
+            continue;
+        if (!fileStats[fp])
+            fileStats[fp] = { path: fp, edits: 0, writes: 0 };
+        if (e.toolName === 'Write')
+            fileStats[fp].writes++;
+        else
+            fileStats[fp].edits++;
+    }
+    const topFiles = Object.values(fileStats)
+        .sort((a, b) => b.edits + b.writes - (a.edits + a.writes))
+        .slice(0, 5);
+    const uniqueFiles = Object.keys(fileStats).length;
+    // Classify blocks — most of the 18-blocks headline is noise, users deserve to see which kind
+    const blockCategories = {
+        'self-test': 0,
+        'cache-cleanup': 0,
+        'content-match': 0,
+        secret: 0,
+        destructive: 0,
+        injection: 0,
+        other: 0,
+    };
+    for (const b of blocks) {
+        blockCategories[classifyBlock(b)]++;
+    }
+    const blockBreakdown = Object.entries(blockCategories)
+        .filter(([, n]) => n > 0)
+        .sort((a, b) => b[1] - a[1]);
+    const shortPath = (p) => {
+        const parts = p.split('/').filter(Boolean);
+        return parts.slice(-2).join('/');
+    };
+    if (jsonOut) {
+        console.log(JSON.stringify({
+            range: { from: new Date(windowStart).toISOString(), to: new Date(now).toISOString() },
+            sessions: sessions.size,
+            toolCalls: week.length,
+            writes: writes.length,
+            edits: edits.length,
+            bashCommands: bash.length,
+            uniqueFiles,
+            blocks: blocks.length,
+            topFiles: topFiles.map((f) => ({ file: shortPath(f.path), edits: f.edits, writes: f.writes })),
+            blockBreakdown: blockBreakdown.map(([category, count]) => ({
+                category,
+                count,
+                label: BLOCK_CATEGORY_LABEL[category],
+            })),
+        }, null, 2));
+        return;
+    }
+    const pad = (s, n) => (s.length >= n ? s : s + ' '.repeat(n - s.length));
+    const num = (n) => colors.bold(String(n).padStart(6));
+    sectionHeader(`codehere weekly · ${formatDateRange(windowStart, now)}`);
+    newline();
+    if (week.length === 0) {
+        console.log(colors.dim('  No activity in the last 7 days.'));
+        console.log(colors.dim('  Run Claude Code with the codehere hook installed to start tracking.'));
+        newline();
+        return;
+    }
+    // Headline numbers
+    console.log(`  ${colors.bold(String(sessions.size))} session${sessions.size === 1 ? '' : 's'} · ${colors.bold(week.length.toLocaleString())} tool call${week.length === 1 ? '' : 's'} scanned · ${blocks.length > 0 ? colors.yellow(String(blocks.length)) : colors.dim('0')} block${blocks.length === 1 ? '' : 's'}`);
+    newline();
+    // Activity breakdown
+    console.log(colors.dim('  ACTIVITY'));
+    console.log(`    ${num(writes.length)}  new files written`);
+    console.log(`    ${num(edits.length)}  edits to existing files`);
+    console.log(`    ${num(bash.length)}  shell commands`);
+    console.log(`    ${num(uniqueFiles)}  unique files touched`);
+    newline();
+    // Top files
+    if (topFiles.length > 0) {
+        console.log(colors.dim('  TOP FILES'));
+        for (const f of topFiles) {
+            const count = f.edits + f.writes;
+            const kind = f.writes > 0 && f.edits === 0 ? 'write' : f.edits > 0 && f.writes === 0 ? 'edit' : 'touch';
+            const plural = count === 1 ? '' : kind === 'touch' ? 'es' : 's';
+            const countStr = String(count).padStart(3);
+            const kindStr = `${kind}${plural}`.padEnd(7);
+            console.log(`    ${colors.dim(countStr)} ${colors.dim(kindStr)}  ${shortPath(f.path)}`);
+        }
+        newline();
+    }
+    // Blocks — categorized so users see signal vs noise at a glance
+    if (blocks.length > 0) {
+        console.log(colors.dim(`  BLOCKS                      ${blocks.length} total`));
+        for (const [category, count] of blockBreakdown) {
+            const categoryColor = category === 'other' || category === 'destructive' || category === 'secret' || category === 'injection'
+                ? colors.yellow
+                : colors.dim;
+            const countStr = String(count).padStart(3);
+            console.log(`    ${colors.dim(countStr)}  ${categoryColor(pad(category, 15))}  ${colors.dim(BLOCK_CATEGORY_LABEL[category])}`);
+        }
+        newline();
+        console.log(colors.dim('    Drill in: codehere status --sessions'));
+        newline();
+    }
+    else {
+        console.log(`  ${colors.green('✓')} Nothing blocked this week.`);
+        newline();
+    }
+    console.log(colors.dim('  ─────'));
+    console.log(colors.dim('  codehere status --weekly --json    Export for sharing'));
+    newline();
+}
+// ── audit export ─────────────────────────────────────────────────────────────
+function parseDurationToHours(s) {
+    const m = /^(\d+)([hdw])$/.exec(s.trim());
+    if (!m)
+        return null;
+    const n = parseInt(m[1], 10);
+    switch (m[2]) {
+        case 'h':
+            return n;
+        case 'd':
+            return n * 24;
+        case 'w':
+            return n * 24 * 7;
+    }
+    return null;
+}
+function exportAudit(entries, format, sinceHours) {
+    const filtered = sinceHours != null ? entries.filter((e) => withinHours(e.timestamp, sinceHours)) : entries;
+    if (format === 'jsonl') {
+        for (const e of filtered)
+            console.log(JSON.stringify(e));
+        return;
+    }
+    if (format === 'csv') {
+        console.log('timestamp,sessionId,toolName,riskScore,blocked,findings,criticalFindings');
+        for (const e of filtered) {
+            const row = [e.timestamp, e.sessionId, e.toolName, e.riskScore, e.blocked, e.findings, e.criticalFindings].join(',');
+            console.log(row);
+        }
+        return;
+    }
+    if (format === 'json') {
+        console.log(JSON.stringify(filtered, null, 2));
+        return;
+    }
+    if (format === 'md') {
+        console.log(`# codehere audit log · ${filtered.length} events`);
+        console.log('');
+        if (sinceHours != null)
+            console.log(`*Window: last ${sinceHours} hour${sinceHours === 1 ? '' : 's'}*\n`);
+        console.log('| Timestamp | Session | Tool | Risk | Blocked | Findings |');
+        console.log('|---|---|---|---:|:---:|---:|');
+        for (const e of filtered) {
+            const sid = (e.sessionId || '').substring(0, 8);
+            const blocked = e.blocked ? '✗' : '✓';
+            console.log(`| \`${e.timestamp}\` | \`${sid}\` | ${e.toolName} | ${e.riskScore} | ${blocked} | ${e.findings} |`);
+        }
+        return;
+    }
+    throw new Error(`Unsupported export format: ${format}. Use jsonl, json, csv, or md.`);
+}
 export async function executeStatusCommand(options = {}) {
     const cwd = process.cwd();
     const version = getVersion();
@@ -166,12 +418,33 @@ export async function executeStatusCommand(options = {}) {
         renderSessionDrillDown(options.session, entries);
         return;
     }
-    const last24h = entries.filter(e => withinHours(e.timestamp, 24));
-    const last7d = entries.filter(e => withinHours(e.timestamp, 24 * 7));
+    // Audit export mode — dump raw events for archival/compliance/sharing
+    if (options.export) {
+        const sinceHours = options.since ? parseDurationToHours(options.since) : null;
+        if (options.since && sinceHours == null) {
+            console.error(`Invalid --since value: "${options.since}". Use e.g. 24h, 7d, 4w.`);
+            process.exit(1);
+        }
+        try {
+            exportAudit(entries, options.export, sinceHours);
+        }
+        catch (e) {
+            console.error(e.message);
+            process.exit(1);
+        }
+        return;
+    }
+    // Weekly recap mode — shareable agent-activity summary
+    if (options.weekly) {
+        renderWeeklyRecap(entries, options.json);
+        return;
+    }
+    const last24h = entries.filter((e) => withinHours(e.timestamp, 24));
+    const last7d = entries.filter((e) => withinHours(e.timestamp, 24 * 7));
     const stats = (subset) => ({
         total: subset.length,
-        blocked: subset.filter(e => e.blocked).length,
-        critical: subset.filter(e => e.criticalFindings > 0).length,
+        blocked: subset.filter((e) => e.blocked).length,
+        critical: subset.filter((e) => e.criticalFindings > 0).length,
     });
     const s24 = stats(last24h);
     const s7d = stats(last7d);
@@ -196,9 +469,14 @@ export async function executeStatusCommand(options = {}) {
                 const { getTaskRepository } = await import('../../../infrastructure/storage/task-repository.js');
                 const taskRepo = getTaskRepository();
                 const tasks = await taskRepo.getAll();
-                result.tasks = tasks.slice(0, 20).map(t => ({
-                    id: t.id, mode: t.mode, status: t.status,
-                    riskTier: t.riskTier, environment: t.environment, goal: t.goal, createdAt: t.createdAt,
+                result.tasks = tasks.slice(0, 20).map((t) => ({
+                    id: t.id,
+                    mode: t.mode,
+                    status: t.status,
+                    riskTier: t.riskTier,
+                    environment: t.environment,
+                    goal: t.goal,
+                    createdAt: t.createdAt,
                 }));
                 result.taskCount = tasks.length;
             }
@@ -214,16 +492,17 @@ export async function executeStatusCommand(options = {}) {
     sectionHeader('Codehere Status');
     newline();
     // Version + hooks
-    const hookStatus = hookRunning
-        ? colors.green('✓') + ' Hooks running'
-        : colors.yellow('⚠') + ' Hooks not installed';
+    const hookStatus = hookRunning ? colors.green('✓') + ' Hooks running' : colors.yellow('⚠') + ' Hooks not installed';
     console.log(`  Version: ${version}  ·  Status: Running  ·  ${hookStatus}`);
     newline();
     // Product brain
     if (productCtx) {
-        const riskColor = productCtx.riskLevel === 'critical' ? colors.red
-            : productCtx.riskLevel === 'high' ? colors.yellow
-                : productCtx.riskLevel === 'medium' ? colors.cyan
+        const riskColor = productCtx.riskLevel === 'critical'
+            ? colors.red
+            : productCtx.riskLevel === 'high'
+                ? colors.yellow
+                : productCtx.riskLevel === 'medium'
+                    ? colors.cyan
                     : colors.green;
         const parts = [
             colors.bold(productCtx.name),
@@ -239,27 +518,29 @@ export async function executeStatusCommand(options = {}) {
     }
     else {
         // Activity table
-        const col = (n, color) => {
-            const s = String(n);
-            return color && n > 0 ? color(s) : colors.dim(s);
+        // Pad number BEFORE applying color, so ANSI codes don't break alignment
+        const fmtNum = (n, color) => {
+            const padded = String(n).padStart(10);
+            return color && n > 0 ? color(padded) : colors.dim(padded);
         };
         const labelW = 12;
-        const numW = 10;
         const label = (s) => s.padEnd(labelW);
-        const num = (s) => s.padStart(numW);
-        const header = `  ${label('')}${num('Last 24h')}${num('This week')}${num('All time')}`;
+        const header = `  ${label('')}${'Last 24h'.padStart(10)}${'This week'.padStart(10)}${'All time'.padStart(10)}`;
         console.log(colors.dim(header));
-        console.log(colors.dim(`  ${'-'.repeat(labelW + numW * 3)}`));
-        console.log(`  ${label('Scans')}${num(col(s24.total))}${num(col(s7d.total))}${num(col(sAll.total))}`);
-        console.log(`  ${label('Blocked')}${num(col(s24.blocked, colors.red))}${num(col(s7d.blocked, colors.red))}${num(col(sAll.blocked, colors.red))}`);
+        console.log(colors.dim(`  ${'-'.repeat(labelW + 30)}`));
+        console.log(`  ${label('Scans')}${fmtNum(s24.total)}${fmtNum(s7d.total)}${fmtNum(sAll.total)}`);
+        console.log(`  ${label('Blocked')}${fmtNum(s24.blocked, colors.red)}${fmtNum(s7d.blocked, colors.red)}${fmtNum(sAll.blocked, colors.red)}`);
         if (sAll.critical > 0) {
-            console.log(`  ${label('Critical')}${num(col(s24.critical, colors.red))}${num(col(s7d.critical, colors.red))}${num(col(sAll.critical, colors.red))}`);
+            console.log(`  ${label('Critical')}${fmtNum(s24.critical, colors.red)}${fmtNum(s7d.critical, colors.red)}${fmtNum(sAll.critical, colors.red)}`);
         }
         newline();
         // Recent blocks
-        const recentBlocked = [...entries].reverse().filter(e => e.blocked).slice(0, 5);
+        const recentBlocked = [...entries]
+            .reverse()
+            .filter((e) => e.blocked)
+            .slice(0, 5);
         if (recentBlocked.length > 0) {
-            console.log(colors.bold('Recent blocks:'));
+            console.log(colors.dim('  RECENT BLOCKS'));
             for (const entry of recentBlocked) {
                 const tool = colors.cyan(entry.toolName.padEnd(10));
                 const time = colors.dim(timeAgo(entry.timestamp).padEnd(8));
@@ -275,23 +556,26 @@ export async function executeStatusCommand(options = {}) {
         }
     }
     // Skills status
+    console.log(colors.dim('  ─────'));
     if (hasSkills) {
-        console.log(colors.dim('  Skills: /codehere:trust  /codehere:report  /codehere:audit  /codehere:hook-status'));
+        console.log(colors.dim('  /codehere:trust  /codehere:report  /codehere:audit  /codehere:hook-status'));
     }
     else {
-        console.log(colors.dim('  Skills not installed. Run `codehere hook install` to add them.'));
+        console.log(colors.dim('  Run codehere hook install to add slash commands'));
     }
     newline();
     // Multi-agent session analysis
     if (options.sessions && entries.length > 0) {
         const allSessions = analyzeSessions(entries);
-        const sessions = allSessions.filter(s => s.sessionId !== 'unknown');
+        const sessions = allSessions.filter((s) => s.sessionId !== 'unknown');
         const alerts = detectAmplificationAlerts(sessions);
         console.log(colors.bold('Sessions (last 10):'));
         for (const s of sessions.slice(0, 10)) {
             const sid = s.sessionId.substring(0, 8);
-            const risk = s.amplificationRisk === 'high' ? colors.red('high')
-                : s.amplificationRisk === 'medium' ? colors.yellow('med')
+            const risk = s.amplificationRisk === 'high'
+                ? colors.red('high')
+                : s.amplificationRisk === 'medium'
+                    ? colors.yellow('med')
                     : colors.green('low');
             const blocked = s.blockedCalls > 0 ? colors.red(` ${s.blockedCalls} blocked`) : '';
             const dur = formatDuration(s.durationMs);
@@ -323,15 +607,22 @@ export async function executeStatusCommand(options = {}) {
             const taskRepo = getTaskRepository();
             const tasks = await taskRepo.getAll();
             if (tasks.length === 0) {
-                console.log(colors.dim('No tasks found. Run "codehere suggest" or "codehere run" to create tasks.'));
+                console.log(colors.dim('No tasks found. Run "codehere start" to open the task intake, or "codehere task <prompt>" from the CLI.'));
             }
             else {
-                const pad = (s, n) => s.length >= n ? s.substring(0, n) : s + ' '.repeat(n - s.length);
-                const trunc = (s, n) => s.length <= n ? s : s.substring(0, n - 1) + '…';
+                const pad = (s, n) => (s.length >= n ? s.substring(0, n) : s + ' '.repeat(n - s.length));
+                const trunc = (s, n) => (s.length <= n ? s : s.substring(0, n - 1) + '…');
                 console.log(colors.dim([pad('ID', 10), pad('Mode', 8), pad('Status', 12), pad('Risk', 4), pad('Env', 6), 'Goal'].join('  ')));
                 console.log(colors.dim(['-'.repeat(10), '-'.repeat(8), '-'.repeat(12), '-'.repeat(4), '-'.repeat(6), '-'.repeat(30)].join('  ')));
-                tasks.slice(0, 10).forEach(task => {
-                    console.log([pad(task.id.substring(0, 8) + '..', 10), pad(task.mode, 8), pad(task.status, 12), pad(task.riskTier.toUpperCase(), 4), pad(task.environment.substring(0, 6), 6), trunc(task.goal, 30)].join('  '));
+                tasks.slice(0, 10).forEach((task) => {
+                    console.log([
+                        pad(task.id.substring(0, 8) + '..', 10),
+                        pad(task.mode, 8),
+                        pad(task.status, 12),
+                        pad(task.riskTier.toUpperCase(), 4),
+                        pad(task.environment.substring(0, 6), 6),
+                        trunc(task.goal, 30),
+                    ].join('  '));
                 });
                 if (tasks.length > 10) {
                     newline();
@@ -340,7 +631,7 @@ export async function executeStatusCommand(options = {}) {
             }
         }
         catch {
-            console.log(colors.dim('No tasks found. Run "codehere suggest" or "codehere run" to create tasks.'));
+            console.log(colors.dim('No tasks found. Run "codehere start" to open the task intake, or "codehere task <prompt>" from the CLI.'));
         }
     }
     // Quick trust scan (opt-in)