copyrun 0.0.0-stage → 0.2.0

package/dist/autopilot-worker.js

@@ -0,0 +1,226 @@
+#!/usr/bin/env node
+
+// src/autopilot-worker.ts
+import { spawnSync } from "child_process";
+import { appendFileSync, existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, renameSync, writeFileSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname, join as join3 } from "path";
+
+// ../mcp/src/relevance.ts
+var STOP = new Set(
+  "a an the to of for in on at by with without from into onto and or but not no is are was be been it its this that these those my our your their i me we you they he she them us do does did done can could should would will want need needs help please how what why when where which who add adding make making fix fixing build building set setting up get use using write writing create creating run running change update app apps api project code file files thing stuff some sometimes keeps keep way too very really just also new old one two all any every work works working doesn don isn won t s".split(" ")
+);
+var SYN_GROUPS = [
+  ["tracing", "trace", "opentelemetry", "otel", "span", "observability"],
+  ["secret", "key", "credential", "token", "leak", "leaked"],
+  ["memory", "heap", "oom", "leak"],
+  ["esm", "module", "commonjs", "cjs", "import", "require"],
+  ["big", "large", "huge", "size", "shrink", "slim", "smaller"],
+  ["downtime", "lock", "locking", "stall", "zero", "migration"],
+  ["column", "table", "schema", "alter", "migration", "migrate"],
+  ["slow", "performance", "speed", "fast", "latency"],
+  ["query", "queries", "n+1", "nplus1", "orm", "prefetch"],
+  ["flaky", "flake", "intermittent", "race", "nondeterministic"],
+  // frameworks aren't synonyms of each other: a Jest run isn't a Vitest run
+  ["test", "tests", "testing", "spec"],
+  ["upgrade", "migrate", "migration", "version"],
+  ["postgres", "postgresql", "pg", "sql", "database"],
+  ["docker", "dockerfile", "container", "image"],
+  ["webhook", "webhooks", "event", "events"],
+  ["dark", "theme"],
+  ["rate", "throttle", "limit", "limiting"],
+  ["xss", "sanitize", "sanitise", "injection"],
+  ["git", "history", "commit"],
+  ["next", "nextjs"]
+];
+function stem(w) {
+  if (w.length > 5 && w.endsWith("ing")) return w.slice(0, -3);
+  if (w.length > 4 && w.endsWith("ed")) return w.slice(0, -2);
+  if (w.length > 4 && w.endsWith("ies")) return w.slice(0, -3) + "y";
+  if (w.length > 3 && w.endsWith("s") && !w.endsWith("ss")) return w.slice(0, -1);
+  return w;
+}
+var SYN = /* @__PURE__ */ new Map();
+for (const g of SYN_GROUPS) for (const w of g.map(stem)) SYN.set(w, /* @__PURE__ */ new Set([...SYN.get(w) ?? [], ...g.map(stem)]));
+var STACK = new Set(
+  "express react next nextjs vue svelte angular django flask fastapi rails ruby python node nodejs js javascript ts typescript go golang rust java kotlin swift php laravel spring dotnet csharp deno bun vite webpack tailwind".split(" ").map(stem)
+);
+var COMMON = new Set(
+  "event handler api server client data function method error bug test fail page request response route endpoint user config setting value type class service process script check safe simple issue problem feature support handle input output result status job task call".split(" ").map(stem)
+);
+
+// src/autopilot-logic.ts
+var AUTOPILOT_STATE_FILE = "autopilot.json";
+var AUTOPILOT_LOG_FILE = "autopilot.log";
+var MAX_SESSIONS = 2e3;
+var counts = (s) => s.counts ?? { consults: 0, matches: 0, filed: 0, failed: 0 };
+function trim(s) {
+  const entries = Object.entries(s.sessions ?? {});
+  if (entries.length <= MAX_SESSIONS) return s;
+  const at = (m) => (m.filedAt || m.refused ? 1e15 : 0) + (m.filedAt ?? m.consultedAt ?? m.checkedMtime ?? 0);
+  const keep = entries.sort((a, b) => at(b[1]) - at(a[1])).slice(0, MAX_SESSIONS);
+  return { ...s, sessions: Object.fromEntries(keep) };
+}
+function shareArgs(transcriptPath) {
+  return ["share", transcriptPath, "--autopilot", "--yes", "--confidential", "remove", "--no-recipe", "--json"];
+}
+var FINAL_REFUSAL_CODES = /* @__PURE__ */ new Set(["sensitive_health_data", "autopilot_not_allowed", "autopilot_filing_off", "pro_required"]);
+function finalRefusal(body) {
+  if (!body || body.ok === true) return void 0;
+  const code = typeof body.code === "string" ? body.code : void 0;
+  if (code && (code.startsWith("policy_") || FINAL_REFUSAL_CODES.has(code))) return code;
+  if (body.policyBlocked === true) return "policy_blocked";
+  return void 0;
+}
+function recordFiled(state, sessionId, runId, now, error, refused) {
+  const c = counts(state);
+  const prev = { ...state.sessions?.[sessionId] };
+  if (runId) {
+    delete prev.failures;
+    delete prev.lastError;
+  }
+  if (!runId && refused) {
+    return trim({
+      ...state,
+      sessions: { ...state.sessions, [sessionId]: { ...prev, refused, ...error ? { lastError: error.slice(0, 200) } : {} } },
+      counts: { ...c, refused: (c.refused ?? 0) + 1 }
+    });
+  }
+  const memo = runId ? { ...prev, filedAt: now, runId } : { ...prev, failures: (prev.failures ?? 0) + 1, ...error ? { lastError: error.slice(0, 200) } : {} };
+  return trim({
+    ...state,
+    sessions: { ...state.sessions, [sessionId]: memo },
+    counts: { ...c, filed: c.filed + (runId ? 1 : 0), failed: c.failed + (runId ? 0 : 1) }
+  });
+}
+var SWEEP_QUIET_MS = 10 * 6e4;
+var SWEEP_LOCK_STALE_MS = 30 * 6e4;
+function sweepArgs(agent, hints) {
+  const named = hints.path ?? hints.id;
+  return ["autopilot", "sweep", "--agent", agent, ...named ? ["--session", named] : [], "--json"];
+}
+
+// src/config.ts
+import { randomUUID } from "crypto";
+import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { join as join2 } from "path";
+
+// src/managed.ts
+import { execFileSync } from "child_process";
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+
+// src/config.ts
+var VERSION = "0.2.0";
+var DIR = process.env.COPYRUN_HOME ?? join2(homedir(), ".copyrun");
+
+// src/autopilot-worker.ts
+var HOME = process.env.COPYRUN_HOME ?? join3(homedir2(), ".copyrun");
+function log(line) {
+  try {
+    mkdirSync(HOME, { recursive: true, mode: 448 });
+    appendFileSync(join3(HOME, AUTOPILOT_LOG_FILE), `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function recordedCli() {
+  try {
+    const cfg = JSON.parse(readFileSync2(join3(HOME, "config.json"), "utf8"));
+    return [cfg.autopilot?.cli, cfg.memory?.cli].find((p) => typeof p === "string" && p.endsWith(".js") && existsSync2(p));
+  } catch {
+    return void 0;
+  }
+}
+function cli(args) {
+  const local = process.env.COPYRUN_CLI ?? recordedCli();
+  const [cmd, argv] = local ? [process.execPath, [local, ...args]] : [process.platform === "win32" ? "npx.cmd" : "npx", ["-y", `copyrun@${VERSION}`, ...args]];
+  const r = spawnSync(cmd, argv, { encoding: "utf8", timeout: 20 * 6e4, env: { ...process.env, COPYRUN_HOME: HOME, COPYRUN_AUTOPILOT: "1" }, stdio: ["ignore", "pipe", "pipe"] });
+  return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
+}
+var lastJson = (out) => {
+  for (const line of out.trim().split("\n").reverse()) {
+    try {
+      const v = JSON.parse(line);
+      if (v && typeof v === "object") return v;
+    } catch {
+    }
+  }
+  return void 0;
+};
+var why = (body, r) => String(body?.message ?? body?.error ?? r.stderr.replace(/\x1b\[[0-9;]*m/g, "").trim().split("\n").filter(Boolean).pop()?.slice(0, 200) ?? `exit ${r.status}`);
+function sweep(agent, path, id) {
+  const r = cli(sweepArgs(agent, { path: path || void 0, id: id || void 0 }));
+  const body = lastJson(r.stdout);
+  if (r.status !== 0 && !body) log(`sweep ${agent}: failed (${why(body, r)})`);
+}
+function filingOff() {
+  try {
+    const path = join3(HOME, "config.json");
+    const cfg = JSON.parse(readFileSync2(path, "utf8"));
+    const ap = cfg.autopilot && typeof cfg.autopilot === "object" ? cfg.autopilot : {};
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify({ ...cfg, autopilot: { ...ap, file: false, needsPro: true } }, null, 2), { mode: 384 });
+    renameSync(tmp, path);
+  } catch {
+  }
+}
+function fileOne(sessionId, transcript) {
+  const statePath = join3(HOME, AUTOPILOT_STATE_FILE);
+  const share = cli(shareArgs(transcript));
+  const body = lastJson(share.stdout);
+  const runId = body?.ok === true && typeof body.id === "string" ? body.id : void 0;
+  let state = {};
+  try {
+    state = JSON.parse(readFileSync2(statePath, "utf8"));
+  } catch {
+  }
+  const refused = runId ? void 0 : finalRefusal(body);
+  state = recordFiled(state, sessionId, runId, Date.now(), runId ? void 0 : why(body, share), refused);
+  try {
+    const tmp = `${statePath}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify(state), { mode: 384 });
+    renameSync(tmp, statePath);
+  } catch {
+  }
+  if (!runId && body?.code === "pro_required") {
+    filingOff();
+    log(`file ${sessionId}: not filed: filing sessions into private memory is part of Pro. Filing is off; lookups stay on (npx copyrun autopilot status)`);
+    return;
+  }
+  if (refused) {
+    log(`file ${sessionId}: refused (${refused}: ${why(body, share)}); final, not retried`);
+    return;
+  }
+  if (!runId) {
+    log(`file ${sessionId}: not filed (${why(body, share)}); the next sweep tries again`);
+    return;
+  }
+  log(`file ${sessionId}: filed ${typeof body?.visibility === "string" ? `(${body.visibility}${typeof body.org === "string" ? ` to ${body.org}` : ""}) ` : ""}as ${runId} ${typeof body?.url === "string" ? body.url : ""}`);
+  const out = join3(HOME, "attestations", `${runId}.copyrun-run.intoto.json`);
+  try {
+    mkdirSync(dirname(out), { recursive: true, mode: 448 });
+  } catch {
+  }
+  const att = cli(["attest", runId, "--no-commit", "--out", out, "--json"]);
+  log(att.status === 0 ? `attest ${runId}: ${out}` : `attest ${runId}: failed (exit ${att.status})`);
+}
+function main() {
+  const args = process.argv.slice(2);
+  if (args[0] === "--index") {
+    const r = cli(["memory", "index", "--quiet", "--json"]);
+    const body = lastJson(r.stdout);
+    if (body && typeof body.total === "number") {
+      if (body.added || body.updated || body.dropped) log(`memory index: ${body.total} sessions (${Number(body.added) || 0} new, ${Number(body.updated) || 0} updated${body.dropped ? `, ${Number(body.dropped)} dropped by the size cap` : ""}); on this machine only`);
+    } else if (r.status !== 0) log(`memory index: failed (${why(body, r)})`);
+    return;
+  }
+  if (args[0] === "--sweep") {
+    if (args[1] === "codex" || args[1] === "cursor") sweep(args[1], args[2], args[3]);
+    return;
+  }
+  const [sessionId, transcript] = args;
+  if (sessionId && transcript) fileOne(sessionId, transcript);
+}
+main();