crewx 0.9.0-rc.145 → 0.9.0-rc.147

package/bin/cli-commands.js

@@ -1,38 +1 @@
-/**
- * SSOT for CLI subcommand whitelist.
- *
- * These are all commands that the launcher routes to the CLI engine (packages/cli).
- * Must stay in sync with KNOWN_COMMANDS ∪ BUILTIN_COMMAND_NAMES ∪ NOT_YET_MIGRATED
- * in packages/cli/src/commands/registry.ts.
- *
- * Verified by bin/__tests__/crewx-entrypoint.test.ts SSOT assertion test.
- */
-export const CLI_SUBCOMMANDS = new Set([
-  // Query / Execute
-  'q', 'query',
-  'x', 'execute',
-
-  // Agent / Task
-  'agent',
-  'ps', 'stop', 'kill', 'result', 'log', 'restart',
-
-  // Diagnostics / Init / DB
-  'doctor', 'init',
-  'db',
-  'help',
-  'shortcut',
-  'publish',
-
-  // Built-in tools
-  'memory', 'search', 'doc', 'wbs', 'cron', 'workflow', 'skill', 'dreaming',
-  'wi', 'chromex', 'notify', 'app',
-
-  // Hook platform
-  'hook', 'hook-dispatch',
-
-  // Slack / Adapters
-  'slack', 'slack:files',
-
-  // Not-yet-migrated
-  'template', 'templates', 'chat', 'mcp',
-]);
+const e=new Set(["q","query","x","execute","agent","ps","stop","kill","result","log","restart","doctor","init","db","help","shortcut","publish","memory","search","doc","wbs","cron","workflow","skill","dreaming","wi","chromex","notify","app","hook","hook-dispatch","slack","slack:files","template","templates","chat","mcp"]);export{e as CLI_SUBCOMMANDS};

package/bin/crewx-lib.js

@@ -1,271 +1,2 @@
-/**
- * crewx launcher library — testable pure-logic functions extracted from crewx.js.
- */
-import { lstatSync, mkdirSync, readFileSync } from 'fs';
-import { homedir } from 'os';
-import { join } from 'path';
-import { getCrewxHome } from '@crewx/sdk';
-import { CLI_SUBCOMMANDS } from './cli-commands.js';
-import { buildHintMessage } from './launcher-flags.js';
-
-const PAIRING_CREDENTIAL_MODE = 0o600;
-const PAIRING_CREDENTIAL_NAME = 'pairing.token';
-const DEFAULT_PAIRING_ENDPOINT = 'http://localhost:8150';
-// Mirrors the WI-028 packages/built-in/shared/crewx-api-credential contract.
-const PAIRING_CREDENTIAL_PATTERN = /^crewxrt_pairing_[0-9a-f]{64}$/;
-
-
-function currentUid() {
-  return process.platform === 'win32' || typeof process.getuid !== 'function'
-    ? undefined
-    : process.getuid();
-}
-
-/**
- * Return the canonical runtime credential path used by the local server.
- * The path is intentionally resolved through the SDK's shared home helper.
- *
- * @returns {string}
- */
-export function pairingCredentialPath() {
-  return join(getCrewxHome(), 'auth', 'runtime', PAIRING_CREDENTIAL_NAME);
-}
-
-/**
- * Read the purpose-scoped pairing credential with the WI-028 file contract.
- * Missing, unreadable, or insecure files throw before any HTTP request can be
- * made. Error messages never include the credential value.
- *
- * @returns {string}
- */
-export function readPairingCredential() {
-  const filePath = pairingCredentialPath();
-  let fileStat;
-  try {
-    fileStat = lstatSync(filePath);
-  } catch (error) {
-    if (error?.code === 'ENOENT') {
-      throw new Error('Pairing runtime credential is missing; start the CrewX server once to create pairing.token.');
-    }
-    throw new Error('Pairing runtime credential is not readable.');
-  }
-
-  if (!fileStat.isFile()) {
-    throw new Error('Pairing runtime credential is not a regular file.');
-  }
-  if (process.platform !== 'win32' && (fileStat.mode & 0o777) !== PAIRING_CREDENTIAL_MODE) {
-    throw new Error('Pairing runtime credential permissions are invalid; expected mode 0600.');
-  }
-  const uid = currentUid();
-  if (uid !== undefined && fileStat.uid !== uid) {
-    throw new Error('Pairing runtime credential must be owned by the current user.');
-  }
-
-  let credential;
-  try {
-    credential = readFileSync(filePath, 'utf8');
-  } catch {
-    throw new Error('Pairing runtime credential is not readable.');
-  }
-  if (!PAIRING_CREDENTIAL_PATTERN.test(credential)) {
-    throw new Error('Pairing runtime credential has an invalid format.');
-  }
-  return credential;
-}
-
-/**
- * Resolve the server endpoint for `crewx pair`.
- * Explicit --port wins over CREWX_ENDPOINT, which wins over the local default.
- *
- * @param {{ port?: number, env?: NodeJS.ProcessEnv }} options
- * @returns {string}
- */
-export function resolvePairEndpoint({ port, env = process.env } = {}) {
-  const rawEndpoint = port === undefined
-    ? (env.CREWX_ENDPOINT?.trim() || DEFAULT_PAIRING_ENDPOINT)
-    : `http://localhost:${port}`;
-  let endpoint;
-  try {
-    endpoint = new URL(rawEndpoint);
-  } catch {
-    throw new Error('Invalid CrewX endpoint. Use an http:// or https:// URL.');
-  }
-  if (endpoint.protocol !== 'http:' && endpoint.protocol !== 'https:') {
-    throw new Error('Invalid CrewX endpoint. Use an http:// or https:// URL.');
-  }
-  if (endpoint.username || endpoint.password || endpoint.search || endpoint.hash) {
-    throw new Error('Invalid CrewX endpoint. Do not include credentials, query, or fragment data.');
-  }
-  return endpoint.toString().replace(/\/$/, '');
-}
-
-
-/**
- * Parse --port option from extra CLI args.
- * Backward-compatible thin wrapper; kept for existing callers.
- *
- * @param {string[]} extraArgs
- * @returns {{ port: number } | { error: string } | null}
- */
-export function parseWebPort(extraArgs) {
-  const portIdx = extraArgs.indexOf('--port');
-  if (portIdx === -1) return null;
-  const portVal = Number(extraArgs[portIdx + 1]);
-  if (!portVal || portVal < 1 || portVal > 65535) {
-    return { error: 'Invalid port number. Use 1-65535.' };
-  }
-  return { port: portVal };
-}
-
-/**
- * Determine the route based on CLI arguments.
- *
- * Priority order:
- *   1. --help/-h, --version/-v → CLI (global options handled by CLI engine)
- *   2. Known CLI subcommand    → CLI
- *   3. 'serve' verb            → serve
- *   4. 'pair' verb             → pair
- *   5. 'electron' verb         → electron
- *   6. No arguments            → web-default (browser auto-open)
- *   7. Unknown first argument  → error with hint
- *
- * @param {string[]} args - process.argv.slice(2)
- * @returns {{ route: string, routeArgs: string[], error?: string }}
- */
-export function resolveRoute(args) {
-  const firstArg = args[0];
-
-  // 1. Global options → CLI engine handles them
-  if (firstArg === '--help' || firstArg === '-h') {
-    return { route: 'cli', routeArgs: args };
-  }
-  if (firstArg === '--version' || firstArg === '-v') {
-    return { route: 'cli', routeArgs: args };
-  }
-
-  // 2. CLI subcommand whitelist → CLI engine
-  if (firstArg !== undefined && CLI_SUBCOMMANDS.has(firstArg)) {
-    return { route: 'cli', routeArgs: args };
-  }
-
-  // 3. New verb: serve
-  if (firstArg === 'serve') {
-    return { route: 'serve', routeArgs: args.slice(1) };
-  }
-
-  // 4. Local browser pairing code requester
-  if (firstArg === 'pair') {
-    return { route: 'pair', routeArgs: args.slice(1) };
-  }
-
-  // 5. New verb: electron
-  if (firstArg === 'electron') {
-    return { route: 'electron', routeArgs: args.slice(1) };
-  }
-
-  // 6. No arguments → web default
-  if (firstArg === undefined) {
-    return { route: 'web-default', routeArgs: [] };
-  }
-
-  // 6. Unknown → error with hint
-  const hint = buildHintMessage(firstArg);
-  const hintSuffix = hint ? `\n   ${hint}` : '\n   Run `crewx --help` for usage.';
-  return {
-    route: 'error',
-    error: `Unknown command or option: "${firstArg}"${hintSuffix}`,
-    routeArgs: args,
-  };
-}
-
-/**
- * Ensure CrewX directories exist before any subcommand runs.
- *  - ~/.crewx (crewx home)             — config + DB (crewx.db)
- *  - ~/crewx  (crewx workspaces dir)   — user-facing workspaces collection,
- *                                        surfaced as "워크스페이스" Quick Access shortcut
- *                                        in DirectoryPickerDialog (WKSUI001-NEW).
- *
- * The two are completely different directories — never conflate them.
- * Both calls are idempotent (mkdir recursive). Failures are warned to stderr
- * but never abort the launcher.
- */
-export function ensureCrewxDirs() {
-  const crewxHome = join(homedir(), '.crewx');         // config/DB
-  const crewxWorkspaces = join(homedir(), 'crewx');    // workspaces collection
-
-  const crewxTls = join(crewxHome, 'tls');
-
-  for (const dir of [crewxHome, crewxWorkspaces, crewxTls]) {
-    try {
-      mkdirSync(dir, { recursive: true });
-    } catch (err) {
-      console.warn(`[crewx] Failed to ensure ${dir}: ${err?.message ?? err}`);
-    }
-  }
-}
-
-/**
- * Forward signals to a child process for clean shutdown.
- *
- * Uses an `exited` flag (set by the child's 'exit' event) instead of
- * `child.killed`, because `child.killed` becomes `true` immediately after
- * calling `child.kill()` — even if the child process is still running.
- * This ensures the SIGKILL escalation timer can actually fire.
- *
- * On Windows, SIGTERM is equivalent to an immediate kill.
- *
- * @param {import('child_process').ChildProcess} child
- * @param {{ escalateKill?: boolean, detached?: boolean }} options
- */
-export function setupSignalForwarding(child, { escalateKill = false, detached = false } = {}) {
-  let exited = false;
-  let escalationScheduled = false;
-
-  child.on('exit', () => {
-    exited = true;
-  });
-
-  // When detached, the child runs in its own process group.
-  // Use process.kill(-pid) to kill the entire group (Electron + GPU helpers).
-  // When not detached, use child.kill() for single-process kill.
-  const killChild = (signal) => {
-    try {
-      if (detached) {
-        process.kill(-child.pid, signal);
-      } else {
-        child.kill(signal);
-      }
-    } catch {
-      // Process or process group already terminated
-    }
-  };
-
-  process.on('SIGINT', () => {
-    if (!exited) {
-      killChild('SIGTERM');
-      if (escalateKill && !escalationScheduled) {
-        escalationScheduled = true;
-        setTimeout(() => {
-          if (!exited) killChild('SIGKILL');
-        }, 3000).unref();
-      }
-    }
-  });
-
-  process.on('SIGTERM', () => {
-    if (!exited) killChild('SIGTERM');
-  });
-
-  process.on('SIGHUP', () => {
-    if (!exited) killChild('SIGHUP');
-  });
-
-  // Clean up the child process group when the parent exits unexpectedly
-  if (detached) {
-    process.on('exit', () => {
-      if (!exited) {
-        try { process.kill(-child.pid, 'SIGKILL'); } catch {}
-      }
-    });
-  }
-}
+import{lstatSync as a,mkdirSync as l,readFileSync as f}from"fs";import{homedir as u}from"os";import{join as s}from"path";import{getCrewxHome as p}from"@crewx/sdk";import{CLI_SUBCOMMANDS as d}from"./cli-commands.js";import{buildHintMessage as w}from"./launcher-flags.js";const m=384;const h="pairing.token";const E="http://localhost:8150";const I=/^crewxrt_pairing_[0-9a-f]{64}$/;function g(){return process.platform==="win32"||typeof process.getuid!=="function"?void 0:process.getuid()}function x(){return s(p(),"auth","runtime",h)}function C(){const e=x();let r;try{r=a(e)}catch(o){if(o?.code==="ENOENT"){throw new Error("Pairing runtime credential is missing; start the CrewX server once to create pairing.token.")}throw new Error("Pairing runtime credential is not readable.")}if(!r.isFile()){throw new Error("Pairing runtime credential is not a regular file.")}if(process.platform!=="win32"&&(r.mode&511)!==m){throw new Error("Pairing runtime credential permissions are invalid; expected mode 0600.")}const n=g();if(n!==void 0&&r.uid!==n){throw new Error("Pairing runtime credential must be owned by the current user.")}let t;try{t=f(e,"utf8")}catch{throw new Error("Pairing runtime credential is not readable.")}if(!I.test(t)){throw new Error("Pairing runtime credential has an invalid format.")}return t}function T({port:e,env:r=process.env}={}){const n=e===void 0?r.CREWX_ENDPOINT?.trim()||E:`http://localhost:${e}`;let t;try{t=new URL(n)}catch{throw new Error("Invalid CrewX endpoint. Use an http:// or https:// URL.")}if(t.protocol!=="http:"&&t.protocol!=="https:"){throw new Error("Invalid CrewX endpoint. Use an http:// or https:// URL.")}if(t.username||t.password||t.search||t.hash){throw new Error("Invalid CrewX endpoint. Do not include credentials, query, or fragment data.")}return t.toString().replace(/\/$/,"")}function y(e){const r=e.indexOf("--port");if(r===-1)return null;const n=Number(e[r+1]);if(!n||n<1||n>65535){return{error:"Invalid port number. Use 1-65535."}}return{port:n}}function G(e){const r=e[0];if(r==="--help"||r==="-h"){return{route:"cli",routeArgs:e}}if(r==="--version"||r==="-v"){return{route:"cli",routeArgs:e}}if(r!==void 0&&d.has(r)){return{route:"cli",routeArgs:e}}if(r==="serve"){return{route:"serve",routeArgs:e.slice(1)}}if(r==="pair"){return{route:"pair",routeArgs:e.slice(1)}}if(r==="electron"){return{route:"electron",routeArgs:e.slice(1)}}if(r===void 0){return{route:"web-default",routeArgs:[]}}const n=w(r);const t=n?`
+   ${n}`:"\n   Run `crewx --help` for usage.";return{route:"error",error:`Unknown command or option: "${r}"${t}`,routeArgs:e}}function L(){const e=s(u(),".crewx");const r=s(u(),"crewx");const n=s(e,"tls");for(const t of[e,r,n]){try{l(t,{recursive:true})}catch(o){console.warn(`[crewx] Failed to ensure ${t}: ${o?.message??o}`)}}}function U(e,{escalateKill:r=false,detached:n=false}={}){let t=false;let o=false;e.on("exit",()=>{t=true});const i=c=>{try{if(n){process.kill(-e.pid,c)}else{e.kill(c)}}catch{}};process.on("SIGINT",()=>{if(!t){i("SIGTERM");if(r&&!o){o=true;setTimeout(()=>{if(!t)i("SIGKILL")},3e3).unref()}}});process.on("SIGTERM",()=>{if(!t)i("SIGTERM")});process.on("SIGHUP",()=>{if(!t)i("SIGHUP")});if(n){process.on("exit",()=>{if(!t){try{process.kill(-e.pid,"SIGKILL")}catch{}}})}}export{L as ensureCrewxDirs,x as pairingCredentialPath,y as parseWebPort,C as readPairingCredential,T as resolvePairEndpoint,G as resolveRoute,U as setupSignalForwarding};

package/bin/crewx-ui.js

@@ -1,80 +1,2 @@
 #!/usr/bin/env node
-/**
- * crewx-ui launcher
- *
- * Usage:
- *   npx crewx-ui              → NestJS web server (default)
- *   npx crewx-ui --electron   → Electron dashboard (main window)
- *   npx crewx-ui --overlay    → Electron floating overlay
- */
-import { spawn } from 'child_process';
-import { fileURLToPath } from 'url';
-import { dirname, join } from 'path';
-import { createRequire } from 'module';
-import { ensureCrewxDirs } from './crewx-lib.js';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-ensureCrewxDirs();
-
-const args = process.argv.slice(2);
-const isElectron = args.includes('--electron');
-const isOverlay = args.includes('--overlay');
-
-function getElectronSpawnEnv() {
-  const env = { ...process.env };
-  delete env.ELECTRON_RUN_AS_NODE;
-  env.NODE_ENV = 'production'; // Force production — prevents users from bypassing FREE limits via env
-  return env;
-}
-
-if (isElectron || isOverlay) {
-  // Electron mode: resolve binary path via require('electron')
-  const require = createRequire(import.meta.url);
-
-  let electronPath;
-  try {
-    electronPath = require('electron');
-  } catch {
-    console.error('');
-    console.error('  ❌ Electron is not installed.');
-    console.error('');
-    console.error('  To use --electron or --overlay mode, install Electron:');
-    console.error('');
-    console.error('    npm install -g electron');
-    console.error('    # or, in this project:');
-    console.error('    npm install --save-dev electron');
-    console.error('');
-    process.exit(1);
-  }
-
-  const entryFile = isOverlay
-    ? join(__dirname, '..', 'dist-electron', 'overlay.js')
-    : join(__dirname, '..', 'dist-electron', 'main.js');
-
-  const child = spawn(String(electronPath), [entryFile], {
-    stdio: 'inherit',
-    env: getElectronSpawnEnv(),
-  });
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to launch Electron:', err);
-    process.exit(1);
-  });
-} else {
-  // Default: delegate to server.js (NestJS web server)
-  const serverScript = join(__dirname, '..', 'server.js');
-
-  const child = spawn(process.execPath, [serverScript, ...args], {
-    stdio: 'inherit',
-    env: { ...process.env, NODE_ENV: 'production' }, // Force production — prevents users from bypassing FREE limits via env
-  });
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to start server:', err);
-    process.exit(1);
-  });
-}
+import{spawn as l}from"child_process";import{fileURLToPath as p}from"url";import{dirname as m,join as t}from"path";import{createRequire as d}from"module";import{ensureCrewxDirs as v}from"./crewx-lib.js";const u=p(import.meta.url);const s=m(u);v();const c=process.argv.slice(2);const E=c.includes("--electron");const a=c.includes("--overlay");function h(){const e={...process.env};delete e.ELECTRON_RUN_AS_NODE;e.NODE_ENV="production";return e}if(E||a){const e=d(import.meta.url);let r;try{r=e("electron")}catch{console.error("");console.error("  \u274C Electron is not installed.");console.error("");console.error("  To use --electron or --overlay mode, install Electron:");console.error("");console.error("    npm install -g electron");console.error("    # or, in this project:");console.error("    npm install --save-dev electron");console.error("");process.exit(1)}const o=a?t(s,"..","dist-electron","overlay.js"):t(s,"..","dist-electron","main.js");const i=l(String(r),[o],{stdio:"inherit",env:h()});i.on("exit",n=>process.exit(n??0));i.on("error",n=>{console.error("Failed to launch Electron:",n);process.exit(1)})}else{const e=t(s,"..","server.js");const r=l(process.execPath,[e,...c],{stdio:"inherit",env:{...process.env,NODE_ENV:"production"}});r.on("exit",o=>process.exit(o??0));r.on("error",o=>{console.error("Failed to start server:",o);process.exit(1)})}