codehere 1.0.1 → 1.0.2

package/dist/infrastructure/protocols/ui/app-script-artifacts.js

@@ -1,121 +0,0 @@
-/**
- * Structured artifacts — the comparison table, response mock and recommendation pick an agent
- * produces, rendered from a typed data array rather than hand-authored HTML, plus the JSON
- * tinting they use.
- *
- * Split out of app-script.ts (strangler fig, split 15). Verbatim slice, interpolated back where
- * it was cut so it keeps sharing the surrounding IIFE scope. Verified by hashing the composed
- * APP_SCRIPT before and after: same bytes.
- *
- * The primitive is real: these render from `t.artifacts.structured[]`, so what you see is what
- * the adapter actually emitted. That is the difference between a demo and a record.
- */
-export const ARTIFACTS = `// Structured artifacts · render the comparison table / response mock /
-// recommendation pick that an agent produces, from a typed data array — NOT
-// hand-authored HTML. The demo v12 weaves these into Phase 1; here they render
-// from t.artifacts.structured[] so the primitive is real (seeded today, real
-// adapter output later · demo-synth pattern).
-function renderArtifacts(arr){
-  if(!Array.isArray(arr)||!arr.length)return'';
-  function he(s){ return String(s==null?'':s).replace(/[&<>"]/g, c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c])); }
-  function tintJson(raw){
-    return he(raw)
-      .replace(/&quot;([^&]*?)&quot;(\\s*:)/g, '<span class="jk">&quot;$1&quot;</span>$2')
-      .replace(/:\\s*&quot;([^&]*?)&quot;/g, ': <span class="js">&quot;$1&quot;</span>')
-      .replace(/:\\s*(-?\\d+(?:\\.\\d+)?)/g, ': <span class="jn">$1</span>');
-  }
-  let out='<div class="panel"><div class="panel-title">Artifacts produced</div>';
-  for(const a of arr){
-    if(a.type==='comparison'){
-      const cols=a.columns||[];
-      let g='<div class="art-cmp" style="grid-template-columns:130px repeat('+cols.length+',1fr)">';
-      g+='<div class="hd"></div>'+cols.map(c=>'<div class="hd">'+he(c)+'</div>').join('');
-      for(const r of (a.rows||[])){
-        g+='<div class="rl">'+he(r.label)+'</div>';
-        for(const cell of (r.cells||[])){
-          const mk = cell.mark==='pick'?'pick':cell.mark==='meh'?'meh':'';
-          g+='<div class="cell">'+(mk?'<span class="'+mk+'">'+he(cell.text)+'</span>':he(cell.text))+'</div>';
-        }
-      }
-      g+='</div>';
-      out+='<div class="artifact-card" data-user-content>'+(a.title?'<div class="artifact-h">'+he(a.title)+'</div>':'')+g+'</div>';
-    } else if(a.type==='mock'){
-      out+='<div class="art-mock">'
-        +'<div class="art-mock-head"><span class="status">'+he(a.status||'')+'</span>'+(a.contentType?'<span class="ct">'+he(a.contentType)+'</span>':'')+'</div>'
-        +'<div class="art-mock-body">'+tintJson(a.body||'')+'</div>'
-        +'</div>';
-    } else if(a.type==='pick'){
-      out+='<div class="art-pick">'
-        +'<div class="k">'+he(a.title||'')+'</div>'
-        +(a.what?'<div class="what">'+he(a.what)+'</div>':'')
-        +(a.why?'<div class="why">'+he(a.why)+'</div>':'')
-        +'</div>';
-    } else if(a.type==='bench'){
-      // Benchmark chart · horizontal bars · demo v12 .bench (phase audit 2.10)
-      let rows=(a.rows||[]).map(function(r){
-        const mk=r.mark==='allow'?' allow':r.mark==='warn'?' warn':'';
-        const pct=Math.max(0,Math.min(100,Number(r.pct)||0));
-        return '<div class="art-bench"><span class="bl">'+he(r.label)+'</span>'
-          +'<span class="bb"><span class="bf'+mk+'" style="width:'+pct+'%"></span></span>'
-          +'<span class="bv">'+he(r.value)+'</span></div>';
-      }).join('');
-      out+='<div class="artifact-card" data-user-content>'+(a.title?'<div class="artifact-h">'+he(a.title)+'</div>':'')+rows+'</div>';
-    } else if(a.type==='checklist'){
-      // Verifier severity grid · ✓/⚠ per check · demo v12 (phase audit 4.4/3.3)
-      let items=(a.items||[]).map(function(it){
-        const ok=it.ok!==false;
-        return '<div class="art-check'+(ok?'':' warn')+'">'
-          +'<span class="ci">'+(ok?'\\u2713':'\\u26A0')+'</span>'
-          +'<span class="cl">'+he(it.label)+'</span>'
-          +(it.note?'<span class="cn">'+he(it.note)+'</span>':'')
-          +'</div>';
-      }).join('');
-      out+='<div class="artifact-card" data-user-content>'+(a.title?'<div class="artifact-h">'+he(a.title)+'</div>':'')+'<div class="art-checklist">'+items+'</div></div>';
-    } else if(a.type==='sequence'){
-      // Sequence diagram · inline SVG · auto-layout actors + messages from a typed
-      // directive — NOT hand-authored SVG (demo v12 Artifact 2 · phase audit 1.13 · C-13).
-      const parts=(a.participants||[]).map(String);
-      const msgs=a.messages||[];
-      const n=parts.length;
-      if(n>=2){
-        const colW=148, padX=14, padTop=12, boxH=26, headGap=20, rowH=34, padBot=16, loopW=42;
-        const cx=i=>padX+74+colW*i;                 // center x of lifeline i
-        const w=padX*2+148+colW*(n-1)+loopW;        // right margin covers a trailing self-loop
-        const topY=padTop+boxH;
-        const h=topY+headGap+rowH*msgs.length+padBot;
-        const cls=m=>m.mark==='allow'?'allow':m.mark==='warn'?'warn':m.ret?'ret':'';
-        const head=m=>m.mark==='allow'?'ah-allow':m.mark==='warn'?'ah-warn':m.ret?'ah-ret':'ah';
-        let svg='<svg class="seq-svg" viewBox="0 0 '+w+' '+h+'" width="'+w+'" height="'+h+'" preserveAspectRatio="xMidYMin meet">';
-        svg+='<defs>';
-        ['ah','ah-allow','ah-warn','ah-ret'].forEach(function(id){
-          svg+='<marker id="seq-'+id+'" markerWidth="9" markerHeight="9" refX="6.5" refY="3.5" orient="auto"><path class="'+id+'" d="M0,0 L7,3.5 L0,7 Z"/></marker>';
-        });
-        svg+='</defs>';
-        for(let i=0;i<n;i++){
-          const x=cx(i), bw=Math.max(76,parts[i].length*7+18);
-          svg+='<line class="ll" x1="'+x+'" y1="'+topY+'" x2="'+x+'" y2="'+(h-padBot)+'"/>';
-          svg+='<rect class="box" x="'+(x-bw/2)+'" y="'+padTop+'" width="'+bw+'" height="'+boxH+'" rx="5"/>';
-          svg+='<text class="at" x="'+x+'" y="'+(padTop+boxH/2+4)+'" text-anchor="middle" font-size="11" font-family="ui-monospace,monospace">'+he(parts[i])+'</text>';
-        }
-        msgs.forEach(function(m,mi){
-          const fi=typeof m.from==='number'?m.from:parts.indexOf(m.from);
-          const ti=typeof m.to==='number'?m.to:parts.indexOf(m.to);
-          if(fi<0||ti<0)return;
-          const y=topY+headGap+rowH*mi+rowH/2, x1=cx(fi), x2=cx(ti), c=cls(m), tc=(c==='allow'||c==='warn')?' '+c:'';
-          if(fi===ti){                              // self-message · small loop to the right
-            svg+='<path class="msg '+c+'" d="M'+x1+','+(y-5)+' h'+loopW+' v10 h-'+loopW+'" marker-end="url(#seq-'+head(m)+')"/>';
-            svg+='<text class="mt'+tc+'" x="'+(x1+loopW+5)+'" y="'+(y-8)+'" font-size="10" font-family="ui-monospace,monospace">'+he(m.label||'')+'</text>';
-          } else {
-            svg+='<line class="msg '+c+'" x1="'+x1+'" y1="'+y+'" x2="'+x2+'" y2="'+y+'" marker-end="url(#seq-'+head(m)+')"/>';
-            svg+='<text class="mt'+tc+'" x="'+((x1+x2)/2)+'" y="'+(y-6)+'" text-anchor="middle" font-size="10" font-family="ui-monospace,monospace">'+he(m.label||'')+'</text>';
-          }
-        });
-        svg+='</svg>';
-        out+='<div class="artifact-card" data-user-content>'+(a.title?'<div class="artifact-h">'+he(a.title)+'</div>':'')+'<div class="art-seq">'+svg+'</div></div>';
-      }
-    }
-  }
-  out+='</div>';
-  return out;
-}`;
-//# sourceMappingURL=app-script-artifacts.js.map

package/dist/infrastructure/protocols/ui/app-script-audit-footer.js

@@ -1,44 +0,0 @@
-/**
- * Audit-chain footer stats and activity dots — the always-visible summary of how much the
- * chain has recorded and whether it is still intact.
- *
- * Split out of app-script.ts (strangler fig). Verbatim slice, interpolated back at the
- * position it was cut from so it keeps sharing the surrounding IIFE scope — its functions
- * are still called from the code left behind. Verified by hashing the composed APP_SCRIPT
- * before and after: same bytes.
- */
-export const AUDIT_FOOTER = `  /* Audit-chain footer stats + activity dots · enriches the footer
-     from a one-liner to a real status panel. Polls /api/audit/summary
-     every 8s. */
-  async function pollAuditStats(){
-    try{
-      const r = await fetch('/api/audit/summary');
-      if(!r.ok) return;
-      const d = await r.json();
-      const statsEl = document.getElementById('audit-chain-stats');
-      const dotsEl = document.getElementById('audit-chain-dots');
-      if(statsEl){
-        const actions = d.actions || 0;
-        const blocked = d.blocked || 0;
-        const agents = d.agents || 0;
-        statsEl.textContent = actions+' entries last 24h · '+agents+' agent'+(agents===1?'':'s')+' · '+blocked+' blocked';
-      }
-      if(dotsEl){
-        // Without per-entry recent[], approximate by drawing N=min(actions,12)
-        // green dots and B=min(blocked, 12) red dots. Honest enough · still
-        // gives the user visual "audit chain is alive" signal.
-        const a = Math.min(d.actions||0, 12);
-        const b = Math.min(d.blocked||0, 12);
-        const greens = Math.max(0, a - b);
-        let h = '';
-        for(let i=0;i<b;i++) h += '<span class="dot block" title="blocked entry"></span>';
-        for(let i=0;i<greens;i++) h += '<span class="dot allow" title="allowed entry"></span>';
-        if(!a) for(let i=0;i<3;i++) h += '<span class="dot muted" title="no entries yet"></span>';
-        dotsEl.innerHTML = h;
-      }
-    }catch{ /* ignore */ }
-  }
-  setInterval(pollAuditStats, 8000);
-  pollAuditStats();
-`;
-//# sourceMappingURL=app-script-audit-footer.js.map

package/dist/infrastructure/protocols/ui/app-script-audit-verify.js

@@ -1,56 +0,0 @@
-/**
- * Audit-chain verification — the dashboard button that asks the daemon to re-walk the hash
- * chain and renders the verdict it gets back.
- *
- * Split out of app-script.ts (strangler fig). Verbatim slice, interpolated back at the
- * position it was cut from so it keeps sharing the surrounding IIFE scope. Verified by
- * hashing the composed APP_SCRIPT before and after: same bytes.
- */
-export const AUDIT_CHAIN_VERIFY = `// F-06 · audit chain verification · click handler for the dashboard panel.
-async function verifyAuditChain(){
-  const btn=document.getElementById('audit-verify-btn');
-  const res=document.getElementById('audit-result');
-  if(!btn||!res)return;
-  btn.textContent='Verifying...';
-  btn.className='audit-chain-btn';
-  try{
-    const r=await fetch('/api/audit/verify').then(x=>x.json());
-    if(r.error){
-      res.innerHTML='<span class="fail">Failed: '+String(r.error).replace(/</g,'&lt;')+'</span>';
-      btn.textContent='Verify chain'; return;
-    }
-    const counts='<div class="audit-chain-counts">'+r.totalEntries+' entries &middot; '+r.chainedEntries+' hash-chained &middot; '+r.legacyEntries+' legacy</div>';
-    // Ask "is there anything here?" BEFORE "did it pass?", and never make the empty branch
-    // depend on r.valid.
-    //
-    // This read \`r.valid && totalEntries===0\`, which was correct against the OLD API — back
-    // when an empty chain returned valid:true, the lie that f030769 fixed. Making the API
-    // honest (valid:false when there is nothing to verify) turned this branch unreachable, so
-    // a fresh install clicking "verify log" got "× Chain BROKEN · 0 break point(s) detected"
-    // in red. Self-contradictory on its face, and alarming for someone whose only mistake was
-    // not having run an agent yet.
-    //
-    // Fixing valid without walking every consumer of valid is how a two-state control over a
-    // three-state fact keeps producing a new lie in a new place. Empty is its own answer.
-    if((r.totalEntries||0)===0 || r.verifiable===false){
-      res.innerHTML='<div class="audit-chain-counts">Nothing recorded yet &middot; run an agent through codehere to start the chain.</div>';
-      btn.textContent='Verify chain';
-      btn.className='audit-chain-btn';
-    } else if(r.valid){
-      res.innerHTML='<span class="ok">&check; Chain intact &middot; every entry verified against its predecessor hash.</span>'+counts;
-      btn.textContent='Chain intact';
-      btn.className='audit-chain-btn verified';
-    } else {
-      const errs=(r.errors||[]).slice(0,5).map(function(e){
-        return '<div class="audit-chain-error">line '+e.lineNumber+' &middot; '+e.reason+' &middot; '+String(e.detail||'').replace(/</g,'&lt;')+'</div>';
-      }).join('');
-      res.innerHTML='<span class="fail">&times; Chain BROKEN &middot; '+(r.errors||[]).length+' break point(s) detected.</span>'+counts+errs;
-      btn.textContent='Re-verify';
-      btn.className='audit-chain-btn broken';
-    }
-  }catch(e){
-    res.innerHTML='<span class="fail">Failed to reach /api/audit/verify: '+(e&&e.message?e.message:String(e))+'</span>';
-    btn.textContent='Verify chain';
-  }
-}`;
-//# sourceMappingURL=app-script-audit-verify.js.map