codehere 0.5.0-alpha.6 → 0.6.0-alpha.1

package/dist/infrastructure/orchestration/session-manager.js

@@ -25,6 +25,9 @@ import { AUDIT_FILE } from '../hooks/claude-sdk-hook.js';
 import { appendSpawned, appendCompleted, appendFinalReport, loadRecent } from './session-persistence.js';
 import { generateFinalReport, printFinalReportToTerminal } from '../../application/use-cases/generate-final-report.js';
 import { mirrorSpawnedToThread, mirrorCompletedToThread } from '../storage/project-thread-mirror.js';
+import { scanPromptBeforeSpawn } from '../hooks/pre-prompt-scan.js';
+import { generateNarration } from '../../application/use-cases/generate-narration.js';
+import { randomUUID } from 'crypto';
 // ── Agent registry ─────────────────────────────────────────────────────────────
 // All backends codehere can spawn. Order here drives the default UI dropdown
 // order. Built-in adapters first; user-config-driven ones appended from
@@ -47,19 +50,25 @@ const REGISTRY = [
 // Conductor is appended to the same array so UIs that iterate REGISTRY see it.
 REGISTRY.push(buildConductorAdapter(() => REGISTRY));
 export function availableAgents() {
-    return REGISTRY.map((a) => ({ id: a.id, label: a.label, installed: a.isInstalled() }));
+    return REGISTRY.map((a) => ({
+        id: a.id,
+        label: a.label,
+        installed: a.isInstalled(),
+        ...(a.description ? { description: a.description } : {}),
+    }));
 }
 /** Per-agent readiness across the full registry. Powers the setup-aware UI. */
 export function readinessForAllAgents() {
     return REGISTRY.map((a) => {
-        if (a.checkReadiness)
-            return a.checkReadiness();
-        // Fallback for adapters that haven't implemented checkReadiness yet: treat
-        // "installed" as "ready", "not installed" as "needs_install without hint".
-        const installed = a.isInstalled();
-        return installed
-            ? { id: a.id, label: a.label, state: 'ready', installed: true }
-            : { id: a.id, label: a.label, state: 'needs_install', installed: false };
+        const base = a.checkReadiness
+            ? a.checkReadiness()
+            : a.isInstalled()
+                ? { id: a.id, label: a.label, state: 'ready', installed: true }
+                : { id: a.id, label: a.label, state: 'needs_install', installed: false };
+        // v0.6 S5 — mirror the adapter's "when to use me" description into the
+        // readiness payload so the dashboard dropdown can surface it as a
+        // plain-English hover tooltip without a separate API call.
+        return a.description ? { ...base, description: a.description } : base;
     });
 }
 export function getAdapter(id) {
@@ -115,6 +124,14 @@ export class SessionManager {
      *  reads via getFinalReport() through the /api/tasks serializer so non-technical
      *  users see the prose summary without opening a terminal. */
     finalReportBySession = new Map();
+    /** v0.6 M3 · PM Narrator. Mid-task plain-English summaries cached per
+     *  session so the API can serve the latest narration without re-running
+     *  the LLM call on every frontend poll. Latest-only — older narrations
+     *  are overwritten when a new one fires. Per claim_user_persona HIGH:
+     *  non-technical users read narration, not tool calls. */
+    narrationBySession = new Map();
+    narrationTimers = new Map();
+    narrationStepsAtLastFire = new Map();
     spawn(prompt, agentId = 'claude-code', options) {
         const adapter = getAdapter(agentId);
         if (!adapter) {
@@ -123,6 +140,24 @@ export class SessionManager {
         if (!adapter.isInstalled()) {
             throw new Error(`Agent ${adapter.label} (${adapter.id}) is not installed on this machine`);
         }
+        // Cross-vendor pre-prompt scan (task #110, slice 1). Closes the gap
+        // the FAQ now claims as "v0.5.x → v0.6 track": every adapter — not
+        // just claude-code — gets a safety scan on the user's prompt before
+        // spawn. Catches API-key paste, prompt-injection patterns, etc.
+        // Always writes one audit entry (synthetic toolName 'pre_prompt');
+        // refuses spawn ONLY when getHookMode() === 'block' AND the prompt
+        // has critical/high findings. Other modes (advisory/log-only/off)
+        // log + proceed.
+        const preScanSessionId = randomUUID();
+        const scan = scanPromptBeforeSpawn({
+            sessionId: preScanSessionId,
+            agent: agentId,
+            prompt,
+            cwd: options?.cwd,
+        });
+        if (!scan.allowed) {
+            throw new Error(scan.blockReason || 'pre-prompt scan blocked the spawn');
+        }
         const session = adapter.spawn(prompt, options);
         this.sessions.set(session.sessionId, session);
         // Persistence: write the spawned record immediately so a daemon crash still
@@ -215,10 +250,61 @@ export class SessionManager {
                 .catch(() => {
                 // generateFinalReport never throws by contract; defensive only.
             });
+            // v0.6 M3 — clean up the narration timer for this session.
+            const t = this.narrationTimers.get(session.sessionId);
+            if (t) {
+                clearInterval(t);
+                this.narrationTimers.delete(session.sessionId);
+            }
             unsubscribe();
         });
+        // v0.6 M3 — PM Narrator. Mid-task plain-English summaries fired
+        // every 30s while the session is running. Heuristic: only fire if
+        // the step count grew by ≥3 since the last narration (otherwise
+        // we'd narrate the same state with new words). Fire-and-forget;
+        // failures (no claude binary, timeout, malformed output) silently
+        // skip — narration is enrichment, not the primary surface.
+        this.startNarrationTimer(session);
         return session;
     }
+    /** v0.6 M3 — periodic narration loop per session. */
+    startNarrationTimer(session) {
+        if (process.env.CODEHERE_DISABLE_NARRATOR === '1')
+            return;
+        this.narrationStepsAtLastFire.set(session.sessionId, 0);
+        const intervalMs = Number(process.env.CODEHERE_NARRATOR_INTERVAL_MS ?? 30_000);
+        const minStepDelta = Number(process.env.CODEHERE_NARRATOR_MIN_STEPS ?? 3);
+        const timer = setInterval(() => {
+            // Skip if session has settled.
+            if (session.status !== 'running')
+                return;
+            const steps = session.steps ?? [];
+            const lastFireSteps = this.narrationStepsAtLastFire.get(session.sessionId) ?? 0;
+            if (steps.length - lastFireSteps < minStepDelta)
+                return;
+            // Mark BEFORE the async call to prevent double-firing if the LLM
+            // is slow.
+            this.narrationStepsAtLastFire.set(session.sessionId, steps.length);
+            const elapsedMs = Date.now() - session.startedAt;
+            void generateNarration({
+                sessionId: session.sessionId,
+                prompt: session.prompt,
+                agent: session.agent,
+                elapsedMs,
+                steps: [...steps],
+            })
+                .then((out) => {
+                if (out)
+                    this.narrationBySession.set(session.sessionId, out);
+            })
+                .catch(() => { });
+        }, intervalMs);
+        this.narrationTimers.set(session.sessionId, timer);
+    }
+    /** v0.6 M3 — latest narration for a session, or undefined. */
+    getNarration(sessionId) {
+        return this.narrationBySession.get(sessionId);
+    }
     /** Persisted (read-only) sessions from prior daemon runs. Cached at boot. */
     listPersisted() {
         return this.persistedCache;