copyrun 0.1.0 → 0.2.0

package/dist/receipt.js

@@ -0,0 +1,349 @@
+#!/usr/bin/env node
+
+// src/receipt-hook.ts
+import { spawn, spawnSync } from "child_process";
+import { appendFileSync, existsSync as existsSync2, readFileSync as readFileSync2, renameSync, statSync, writeFileSync } from "fs";
+import { dirname, join as join3 } from "path";
+import { fileURLToPath } from "url";
+
+// src/config.ts
+import { randomUUID } from "crypto";
+import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { join as join2 } from "path";
+
+// src/managed.ts
+import { execFileSync } from "child_process";
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+var GATED_CAPABILITIES = ["shell", "install", "network", "settings"];
+var SLUG = /^[a-z0-9][a-z0-9-]{0,39}$/;
+var HANDLE = /^[a-z0-9][a-z0-9-]{0,38}$/;
+function parseManaged(v) {
+  const problems = [];
+  const config = {};
+  if (!v || typeof v !== "object" || Array.isArray(v)) return { config, problems: ["not a JSON object"] };
+  const o = v;
+  const bool = (k) => {
+    if (o[k] === void 0) return;
+    if (typeof o[k] !== "boolean") problems.push(`${k} must be true or false`);
+    else config[k] = o[k];
+  };
+  if (o.apiHost !== void 0) {
+    try {
+      const u = new URL(String(o.apiHost));
+      const local = u.hostname === "localhost" || u.hostname === "127.0.0.1";
+      if (u.protocol !== "https:" && !(local && u.protocol === "http:")) problems.push("apiHost must be an https URL");
+      else config.apiHost = u.origin;
+    } catch {
+      problems.push("apiHost must be a URL");
+    }
+  }
+  if (o.org !== void 0) {
+    const s = typeof o.org === "string" ? o.org.trim().toLowerCase() : "";
+    if (!SLUG.test(s)) problems.push("org must be an org slug");
+    else config.org = s;
+  }
+  for (const k of ["forbidPublic", "forbidAnonymous", "forbidUnlisted", "requireShape", "disableNudge", "disableLive", "disableReceipts", "disableAutopilot", "copyLink", "disableAsk", "disableMission", "disableCopy"]) bool(k);
+  if (o.autopilotOrg !== void 0) {
+    const s = typeof o.autopilotOrg === "string" ? o.autopilotOrg.trim().toLowerCase() : "";
+    if (!SLUG.test(s)) problems.push("autopilotOrg must be an org slug");
+    else config.autopilotOrg = s;
+  }
+  if (o.autopilotContent !== void 0) {
+    if (o.autopilotContent !== "full" && o.autopilotContent !== "actions" && o.autopilotContent !== "commands") problems.push('autopilotContent must be "full", "actions" or "commands"');
+    else config.autopilotContent = o.autopilotContent;
+  }
+  if (o.allowedCloneSources !== void 0) {
+    const a = o.allowedCloneSources;
+    if (a === "any" || a === "org-playbook") config.allowedCloneSources = a;
+    else if (Array.isArray(a) && a.every((x) => typeof x === "string" && HANDLE.test(x.trim().replace(/^@/, "").toLowerCase())))
+      config.allowedCloneSources = [...new Set(a.map((x) => x.trim().replace(/^@/, "").toLowerCase()))];
+    else problems.push('allowedCloneSources must be "any", "org-playbook" or a list of handles and org slugs');
+  }
+  if (o.extraRedactTerms !== void 0) {
+    if (!Array.isArray(o.extraRedactTerms) || !o.extraRedactTerms.every((t) => typeof t === "string")) problems.push("extraRedactTerms must be a list of strings");
+    else config.extraRedactTerms = [...new Set(o.extraRedactTerms.map((t) => t.trim()).filter((t) => t.length >= 2 && t.length <= 100))].slice(0, 200);
+  }
+  if (o.profile !== void 0) {
+    if (o.profile !== "finance" && o.profile !== "hipaa") problems.push('profile must be "finance" or "hipaa"');
+    else config.profile = o.profile;
+  }
+  if (o.archive !== void 0) {
+    const a = o.archive;
+    const org = a && typeof a.org === "string" ? a.org.trim().toLowerCase() : "";
+    if (!a || typeof a !== "object" || !SLUG.test(org) || a.required !== void 0 && typeof a.required !== "boolean") problems.push("archive must be { org: <slug>, required: true|false }");
+    else config.archive = { org, required: a.required === true };
+  }
+  if (o.restrictOrgs !== void 0) {
+    const list = typeof o.restrictOrgs === "string" ? o.restrictOrgs.split(",") : o.restrictOrgs;
+    if (!Array.isArray(list) || !list.every((x) => typeof x === "string" && SLUG.test(x.trim().toLowerCase()))) problems.push("restrictOrgs must be a list of org slugs");
+    else config.restrictOrgs = [...new Set(list.map((x) => x.trim().toLowerCase()))];
+  }
+  if (o.restrictMode !== void 0) {
+    if (o.restrictMode !== "block-all-uploads") problems.push('restrictMode must be "block-all-uploads"');
+    else config.restrictMode = o.restrictMode;
+  }
+  if (o.askBefore !== void 0) {
+    if (!Array.isArray(o.askBefore) || !o.askBefore.every((t) => typeof t === "string")) problems.push("askBefore must be a list of change areas and path patterns");
+    else config.askBefore = [...new Set(o.askBefore.map((t) => t.trim()).filter((t) => t && t.length <= 200))].slice(0, 50);
+  }
+  if (o.askTimeoutMinutes !== void 0) {
+    const n = o.askTimeoutMinutes;
+    if (typeof n !== "number" || !Number.isFinite(n) || n < 1 || n > 15) problems.push("askTimeoutMinutes must be a number from 1 to 15");
+    else config.askTimeoutMinutes = Math.round(n);
+  }
+  if (o.askOrg !== void 0) {
+    const s = typeof o.askOrg === "string" ? o.askOrg.trim().toLowerCase() : "";
+    if (!SLUG.test(s)) problems.push("askOrg must be an org slug");
+    else config.askOrg = s;
+  }
+  if (o.allowCloneYesWith !== void 0) {
+    const l = o.allowCloneYesWith;
+    if (!Array.isArray(l) || !l.every((x) => GATED_CAPABILITIES.includes(x))) problems.push('allowCloneYesWith must list only "shell", "install", "network" and/or "settings"');
+    else config.allowCloneYesWith = [...new Set(l)];
+  }
+  return { config, problems };
+}
+function systemManagedPaths(platform = process.platform, env = process.env) {
+  if (platform === "darwin")
+    return [
+      { path: "/Library/Application Support/copyrun/managed.json", kind: "json" },
+      // a configuration profile (Jamf, Kandji, Intune for Mac) lands here; it wins over the file
+      { path: "/Library/Managed Preferences/ai.copyrun.cli.plist", kind: "plist" }
+    ];
+  if (platform === "win32") return [{ path: join(env.ProgramData || env.PROGRAMDATA || "C:\\ProgramData", "copyrun", "managed.json"), kind: "json" }];
+  return [{ path: "/etc/copyrun/managed.json", kind: "json" }];
+}
+function plutil(p) {
+  try {
+    return execFileSync("/usr/bin/plutil", ["-convert", "json", "-o", "-", p], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 5e3 });
+  } catch {
+    return void 0;
+  }
+}
+function loadManaged(deps = {}) {
+  const env = deps.env ?? process.env;
+  const exists = deps.exists ?? existsSync;
+  const read = deps.read ?? ((p) => readFileSync(p, "utf8"));
+  const plist = deps.plistToJson ?? plutil;
+  const system = systemManagedPaths(deps.platform ?? process.platform, env).filter((f) => exists(f.path));
+  const files = system.length ? system : env.COPYRUN_MANAGED_CONFIG ? [{ path: env.COPYRUN_MANAGED_CONFIG, kind: "json" }] : [];
+  const state = { config: {}, sources: [], errors: [] };
+  for (const f of files) {
+    let text;
+    try {
+      text = f.kind === "plist" ? plist(f.path) : read(f.path);
+    } catch (e) {
+      state.errors.push(`${f.path}: can't be read (${e.message})`);
+      continue;
+    }
+    if (text === void 0) {
+      if (f.kind === "plist" && files.some((x) => x.kind === "json")) continue;
+      state.errors.push(`${f.path}: can't be read (plutil unavailable)`);
+      continue;
+    }
+    let json;
+    try {
+      json = JSON.parse(text);
+    } catch {
+      state.errors.push(`${f.path}: not valid JSON`);
+      continue;
+    }
+    const { config, problems } = parseManaged(json);
+    if (problems.length) state.errors.push(`${f.path}: ${problems.join("; ")}`);
+    state.config = { ...state.config, ...config };
+    state.sources.push(f.path);
+  }
+  if (state.config.allowedCloneSources === "org-playbook" && !state.config.org) state.errors.push('allowedCloneSources "org-playbook" needs org');
+  if (state.config.autopilotOrg && state.config.org && state.config.autopilotOrg !== state.config.org) state.errors.push("autopilotOrg must be the same org as org");
+  if (state.config.askOrg && state.config.org && state.config.askOrg !== state.config.org) state.errors.push("askOrg must be the same org as org");
+  return state;
+}
+var cached;
+function managed() {
+  return cached ??= loadManaged();
+}
+
+// src/config.ts
+var VERSION = "0.2.0";
+var DIR = process.env.COPYRUN_HOME ?? join2(homedir(), ".copyrun");
+
+// src/receipt-logic.ts
+var RECEIPT_STATE_FILE = "receipts.json";
+var RECEIPT_LOG_FILE = "receipts.log";
+var PUSH_RESHARE_MS = 10 * 6e4;
+var MAX_SESSIONS = 200;
+var PR_URL = /https:\/\/github\.com\/([\w.-]{1,100})\/([\w.-]{1,100})\/pull\/(\d{1,9})\b/g;
+function commandText(input) {
+  const c = input.tool_input?.command;
+  if (typeof c === "string") return c.slice(0, 2e4);
+  if (Array.isArray(c) && c.every((x) => typeof x === "string")) return c.join(" ").slice(0, 2e4);
+  return void 0;
+}
+function responseText(resp) {
+  if (typeof resp === "string") return resp.slice(-2e4);
+  if (resp && typeof resp === "object") {
+    const r = resp;
+    return [r.stdout, r.stderr, r.output].filter((x) => typeof x === "string").join("\n").slice(-2e4);
+  }
+  return "";
+}
+var failed = (resp) => !!resp && typeof resp === "object" && (resp.interrupted === true || resp.is_error === true);
+function segments(cmd) {
+  return cmd.split(/&&|\|\||[;|\n]/).map((s) => s.trim().replace(/^(?:[A-Za-z_][A-Za-z0-9_]*=(?:"[^"]*"|'[^']*'|\S*)\s+){0,10}/, "")).filter(Boolean);
+}
+function prEventOf(input) {
+  if (input.hook_event_name && input.hook_event_name !== "PostToolUse") return void 0;
+  const cmd = commandText(input);
+  if (!cmd || failed(input.tool_response)) return void 0;
+  const segs = segments(cmd);
+  const create = segs.some((s) => /^gh\s+pr\s+create\b/.test(s) && !/\s--(?:dry-run|web|help)\b|\s-w\b|\s-h\b/.test(s));
+  if (create) {
+    const urls = [...responseText(input.tool_response).matchAll(PR_URL)];
+    const last = urls.at(-1);
+    if (last) return { kind: "created", prUrl: `https://github.com/${last[1]}/${last[2]}/pull/${last[3]}` };
+    return void 0;
+  }
+  const push = segs.some((s) => /^git\s+(?:-C\s+\S+\s+)?push\b/.test(s) && !/\s--(?:dry-run|delete|tags|help)\b|\s-[nd]\b/.test(s));
+  if (push && !/\b(?:rejected|error:|fatal:)/.test(responseText(input.tool_response))) return { kind: "pushed" };
+  return void 0;
+}
+function decideAttach(state, sessionId, ev, now, size, cwd) {
+  if (ev.kind === "created") return { prUrl: ev.prUrl };
+  const s = state.sessions?.[sessionId];
+  if (!s || cwd && s.cwd && s.cwd !== cwd) return void 0;
+  if (size <= s.size || now - s.at < PUSH_RESHARE_MS) return void 0;
+  return { prUrl: s.prUrl };
+}
+function recordAttach(state, sessionId, s) {
+  const sessions = { ...state.sessions ?? {}, [sessionId]: { ...state.sessions?.[sessionId] ?? {}, ...s } };
+  const ids = Object.keys(sessions).sort((a, b) => sessions[b].at - sessions[a].at);
+  for (const id of ids.slice(MAX_SESSIONS)) delete sessions[id];
+  return { ...state, sessions };
+}
+function repoOfPr(url) {
+  const m = [...url.matchAll(PR_URL)][0];
+  return m ? `${m[1]}/${m[2]}` : void 0;
+}
+function receiptShareArgs(transcript, repoPublic2) {
+  return ["share", transcript, ...repoPublic2 ? ["--pr"] : ["--private"], "--yes", "--confidential", "remove", "--no-recipe", "--json"];
+}
+var attachingMessage = (prUrl) => `\u{1F9FE} copyrun is attaching this session to ${prUrl} in the background, redacted like \`copyrun share --yes\` (npx copyrun receipts status \xB7 receipts off stops it)`;
+function attachOutcome(stdout, stderr, status) {
+  let body;
+  for (const line of stdout.trim().split("\n").reverse()) {
+    try {
+      const v = JSON.parse(line);
+      if (v && typeof v === "object") {
+        body = v;
+        break;
+      }
+    } catch {
+    }
+  }
+  const plain = stderr.replace(/\x1b\[[0-9;]*m/g, "");
+  const runId = body?.ok === true && typeof body.id === "string" ? body.id : void 0;
+  const attached = /Added the run to https:\/\/github\.com\//.test(plain);
+  const error = runId ? void 0 : String(body?.message ?? body?.error ?? plain.trim().split("\n").filter(Boolean).pop() ?? `exit ${status}`).slice(0, 200);
+  return { ...runId ? { runId } : {}, ...typeof body?.visibility === "string" ? { visibility: body.visibility } : {}, attached, ...error ? { error } : {} };
+}
+
+// src/receipt-hook.ts
+var DIR2 = process.env.COPYRUN_HOME ?? dirname(fileURLToPath(import.meta.url));
+var SELF = fileURLToPath(import.meta.url);
+function readJson(path) {
+  try {
+    return JSON.parse(readFileSync2(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function writeState(state) {
+  const path = join3(DIR2, RECEIPT_STATE_FILE);
+  const tmp = `${path}.${process.pid}.tmp`;
+  writeFileSync(tmp, JSON.stringify(state), { mode: 384 });
+  renameSync(tmp, path);
+}
+function log(line) {
+  try {
+    appendFileSync(join3(DIR2, RECEIPT_LOG_FILE), `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function readStdin() {
+  return new Promise((resolve) => {
+    let data = "";
+    const t = setTimeout(() => resolve(data), 1500);
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (d) => {
+      data += d;
+      if (data.length > 2e6) process.stdin.destroy();
+    });
+    process.stdin.on("end", () => (clearTimeout(t), resolve(data)));
+    process.stdin.on("error", () => (clearTimeout(t), resolve(data)));
+  });
+}
+function cliCommand(config) {
+  const local = process.env.COPYRUN_CLI ?? (typeof config?.receipts?.cli === "string" && existsSync2(config.receipts.cli) ? config.receipts.cli : void 0);
+  return local ? [process.execPath, [local]] : [process.platform === "win32" ? "npx.cmd" : "npx", ["-y", `copyrun@${VERSION}`]];
+}
+function repoPublic(repo, cwd) {
+  const gh = process.env.COPYRUN_GH ?? "gh";
+  const r = spawnSync(gh, ["api", `repos/${repo}`, "--jq", ".private"], { cwd, encoding: "utf8", timeout: 2e4, stdio: ["ignore", "pipe", "ignore"] });
+  return r.status === 0 && (r.stdout ?? "").trim() === "false";
+}
+function attach(cwd, transcript, sessionId, prUrl) {
+  const config = readJson(join3(DIR2, "config.json"));
+  const repo = repoOfPr(prUrl);
+  if (!repo || !existsSync2(transcript)) return;
+  const pub = repoPublic(repo, cwd);
+  const [cmd, pre] = cliCommand(config);
+  const r = spawnSync(cmd, [...pre, ...receiptShareArgs(transcript, pub)], { cwd, encoding: "utf8", timeout: 15 * 6e4, env: { ...process.env, COPYRUN_HOME: DIR2, COPYRUN_RECEIPT: "1" }, stdio: ["ignore", "pipe", "pipe"] });
+  const out = attachOutcome(r.stdout ?? "", r.stderr ?? "", r.status);
+  const state = readJson(join3(DIR2, RECEIPT_STATE_FILE)) ?? {};
+  const s = state.sessions?.[sessionId];
+  if (s) {
+    s.runId = out.runId ?? s.runId;
+    if (out.visibility) s.visibility = out.visibility;
+    if (out.error) s.error = out.error;
+    else delete s.error;
+    try {
+      writeState(state);
+    } catch {
+    }
+  }
+  if (!out.runId) log(`${prUrl}: not attached (${out.error})`);
+  else if (pub) log(`${prUrl}: ${out.attached ? "attached" : "shared, but the PR wasn't edited"} run ${out.runId} (${out.visibility ?? "unlisted"})`);
+  else log(`${prUrl}: filed run ${out.runId} privately (the repo isn't public, or gh couldn't say); on a paying team's or Pro workspace's own private repo the copyrun App links it to the PR by commit`);
+}
+async function main() {
+  if (process.argv[2] === "--attach") return attach(process.argv[3], process.argv[4], process.argv[5], process.argv[6]);
+  const config = readJson(join3(DIR2, "config.json"));
+  if (config?.receipts?.on !== true || managed().config.disableReceipts || process.env.COPYRUN_REPLAY) return;
+  const input = JSON.parse(await readStdin());
+  if (!input.session_id || !input.transcript_path || !input.cwd) return;
+  const ev = prEventOf(input);
+  if (!ev) return;
+  const state = readJson(join3(DIR2, RECEIPT_STATE_FILE)) ?? {};
+  let size = 0;
+  try {
+    size = statSync(input.transcript_path).size;
+  } catch {
+    return;
+  }
+  const now = Date.now();
+  const go = decideAttach(state, input.session_id, ev, now, size, input.cwd);
+  if (!go) return;
+  writeState(recordAttach(state, input.session_id, { prUrl: go.prUrl, cwd: input.cwd, at: now, size }));
+  const child = spawn(process.execPath, [SELF, "--attach", input.cwd, input.transcript_path, input.session_id, go.prUrl], { detached: true, stdio: "ignore", windowsHide: true, cwd: input.cwd });
+  child.on("error", () => {
+  });
+  child.unref();
+  if (ev.kind === "created") process.stdout.write(JSON.stringify({ systemMessage: attachingMessage(go.prUrl) }) + "\n");
+}
+main().catch(() => {
+}).finally(() => {
+  if (process.argv[2] !== "--attach") process.exit(0);
+});

package/package.json

@@ -1,15 +1,16 @@
 {
   "name": "copyrun",
-  "version": "0.1.0",
-  "description": "Receipts for AI-written code. Share what your coding agent did, attach it to the pull request, and reuse runs that worked.",
+  "version": "0.2.0",
+  "description": "A copy of you that runs your agents: every agent acting as you on one board, asks before risky steps answered from any browser, a copy of your judgment that answers the way you would where it has earned it, and a check of what your agent claimed against what actually ran.",
   "keywords": [
     "ai",
     "coding-agent",
     "claude-code",
     "codex",
     "cursor",
+    "agents",
+    "human-in-the-loop",
     "pull-request",
-    "code-review",
     "provenance",
     "cli"
   ],
@@ -31,17 +32,17 @@
   "engines": {
     "node": ">=20"
   },
-  "devDependencies": {
-    "tsup": "8.5.1",
-    "@copyrun/core": "0.1.0",
-    "@copyrun/extract": "0.1.0",
-    "@copyrun/datapacks": "0.1.0"
-  },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",
     "build:plugin": "tsup && cp dist/autopilot.js ../plugin/scripts/autopilot.mjs && cp dist/autopilot-worker.js ../plugin/scripts/autopilot-worker.mjs"
+  },
+  "devDependencies": {
+    "@copyrun/core": "workspace:*",
+    "tsup": "8.5.1",
+    "@copyrun/extract": "workspace:*",
+    "@copyrun/datapacks": "workspace:*"
   }
-}
+}