engineering-memory 1.11.20 → 1.11.21

package/bin/engineering-memory.mjs

@@ -6,36 +6,22 @@ import { fileURLToPath } from 'node:url';
 import { exists, readJson } from '../install/files.mjs';
 import { stageBridgeRuntime } from '../lib/stage-runtime.mjs';
 import { runInstaller } from '../install/cli.mjs';
+import { installerTexts } from '../install/localization.generated.mjs';
 
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
 const require = createRequire(import.meta.url);
 
-const usage = `Usage:
-  engineering-memory install
-
-Installs the skill and the local bridge, and points them at the Engineering
-Memory backend this package was published for. Nothing else is needed: you sign
-in the first time an agent uses it, and your organization and project come from
-your account.
-
-Options:
-  --clients codex,claude          which agent CLIs to install for
-  --api-url <https-url>           a different backend, for a self-hosted install
-  --repo <repository-root>        install the Git verification gate in this repository
-  --hook-mode chain|verify-only|cancel
-  --help
-
-Choose the hook mode through the Codex or Claude native questionnaire before
-passing a repository. The installer never opens a questionnaire or an
-authentication web page.`;
+const locale = Intl.DateTimeFormat().resolvedOptions().locale;
+const texts =
+  installerTexts[locale] ??
+  installerTexts[locale.split('-')[0]] ??
+  installerTexts.en;
 
 async function publishedApiUrl() {
   const manifest = await readJson(join(packageRoot, 'package.json'));
   const apiUrl = manifest?.engineeringMemory?.apiUrl;
   if (typeof apiUrl !== 'string' || apiUrl.length === 0) {
-    throw new Error(
-      'This package was built without a backend address. Pass --api-url.',
-    );
+    throw new Error(texts['installer.noBackend']);
   }
   return apiUrl;
 }
@@ -48,15 +34,19 @@ async function publishedVersion() {
 async function main(argumentList) {
   const [command, ...rest] = argumentList;
   if (!command || command === '--help' || command === 'help') {
-    process.stdout.write(`${usage}\n`);
+    process.stdout.write(`${texts['installer.usage']}\n`);
     return;
   }
   if (command !== 'install') {
-    throw new Error(`Unknown command: ${command}`);
+    throw new Error(
+      texts['installer.unknownCommand'].replace('{command}', command),
+    );
   }
   const skillSource = join(packageRoot, 'skill');
   if (!(await exists(join(skillSource, 'SKILL.md')))) {
-    throw new Error(`Skill source is missing in ${skillSource}`);
+    throw new Error(
+      texts['installer.missingSkill'].replace('{path}', skillSource),
+    );
   }
   const staged = await stageBridgeRuntime(packageRoot, require);
   try {

package/install/localization.generated.mjs

@@ -0,0 +1,18 @@
+export const installerTexts = {
+  en: {
+    'installer.missingSkill': 'Skill source is missing in {path}',
+    'installer.noBackend':
+      'This package was built without a backend address. Pass --api-url.',
+    'installer.unknownCommand': 'Unknown command: {command}',
+    'installer.usage':
+      'Usage:\n  engineering-memory install\n\nInstalls the skill and the local bridge, and points them at the Engineering\nMemory backend this package was published for. Nothing else is needed: you sign\nin the first time an agent uses it, and your organization and project come from\nyour account.\n\nOptions:\n  --clients codex,claude          which agent CLIs to install for\n  --api-url <https-url>           a different backend, for a self-hosted install\n  --repo <repository-root>        install the Git verification gate in this repository\n  --hook-mode chain|verify-only|cancel\n  --help\n\nChoose the hook mode through the Codex or Claude native questionnaire before\npassing a repository. The installer never opens a questionnaire or an\nauthentication web page.',
+  },
+  tr: {
+    'installer.missingSkill': 'Skill kaynağı {path} içinde yok',
+    'installer.noBackend':
+      'Bu paket bir backend adresi olmadan derlenmiş. --api-url ver.',
+    'installer.unknownCommand': 'Bilinmeyen komut: {command}',
+    'installer.usage':
+      "Kullanım:\n  engineering-memory install\n\nSkill'i ve yerel bridge'i kurar, ikisini de bu paketin yayınlandığı Engineering\nMemory backend'ine bağlar. Başka bir şey gerekmez: bir ajan ilk kez kullandığında\ngiriş yaparsın; organizasyonun ve projen hesabından gelir.\n\nSeçenekler:\n  --clients codex,claude          hangi ajan CLI'ları için kurulacağı\n  --api-url <https-url>           kendi sunucunda çalışan başka bir backend\n  --repo <repository-root>        commit öncesi Git doğrulamasını bu depoya kurar\n  --hook-mode chain|verify-only|cancel\n  --help\n\nDepo vermeden önce hook modunu Codex veya Claude'un yerel soru formuyla seç.\nKurulum hiçbir zaman soru formu ya da giriş sayfası açmaz.",
+  },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "engineering-memory",
-  "version": "1.11.20",
+  "version": "1.11.21",
   "description": "Installs the Engineering Memory skill and its local MCP bridge. Sign in after installing; your organization and project are resolved from your account.",
   "license": "UNLICENSED",
   "type": "module",

package/runtime/build.json

@@ -1,3 +1,3 @@
 {
-  "gitHead": "f0d87f878f51b092855c584d810072297b4062f4"
+  "gitHead": "9df251d4cf095e0f9ed2e7da4e480bbf60142c81"
 }

package/runtime/dist/src/auth/browser-auth.js

@@ -1,14 +1,20 @@
 import { createHash, randomBytes } from 'node:crypto';
 import { createServer } from 'node:http';
+import * as z from 'zod/v4';
+import { copies, escapeHtml, textDirection } from '../runtime/texts.js';
 import { endpoints } from '../config.js';
+const text = z.string().min(1);
+const signInWording = z.strictObject({ invalid: text, completed: text, failed: text });
 export class BrowserAuthCoordinator {
     client;
     credentials;
+    language;
     server = null;
     pending = null;
-    constructor(client, credentials) {
+    constructor(client, credentials, language = async () => undefined) {
         this.client = client;
         this.credentials = credentials;
+        this.language = language;
     }
     async ensureAuthenticated(options = {}) {
         if (await this.credentials.get('access-token')) {
@@ -100,7 +106,7 @@ export class BrowserAuthCoordinator {
                 !authorizationCode ||
                 Date.parse(this.pending.expiresAt) <= Date.now()) {
                 response.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
-                response.end('<!doctype html><html><body>Authentication request is invalid.</body></html>');
+                response.end(await this.page('invalid'));
                 return;
             }
             const envelope = await this.client.request(endpoints.authBrowserExchange, {
@@ -118,18 +124,23 @@ export class BrowserAuthCoordinator {
             await this.persistTokenPair(envelope.data.accessToken, envelope.data.refreshToken);
             this.pending = null;
             response.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-            response.end('<!doctype html><html><body>Authentication completed. You can return to the coding agent.</body></html>');
+            response.end(await this.page('completed'));
             await this.stopServer();
         }
         catch {
             await this.clearCredentialsBestEffort();
             this.pending = null;
             response.writeHead(500, { 'Content-Type': 'text/html; charset=utf-8' });
-            response.end('<!doctype html><html><body>Authentication could not be completed.</body></html>');
+            response.end(await this.page('failed'));
             await this.stopServer();
             process.stderr.write('Browser authentication failed\n');
         }
     }
+    async page(outcome) {
+        const told = await this.language().catch(() => undefined);
+        const { language, copy } = copies(signInWording, 'signIn', told)[0];
+        return `<!doctype html><html lang="${escapeHtml(language)}" dir="${textDirection(language)}"><body>${escapeHtml(copy[outcome])}</body></html>`;
+    }
     async persistTokenPair(accessToken, refreshToken) {
         try {
             await this.credentials.set('refresh-token', refreshToken);

package/runtime/dist/src/config.js

@@ -30,6 +30,7 @@ export function apiStateRoot(config) {
 }
 export const endpoints = {
     releases: '/runtime/releases',
+    runtimeTexts: '/runtime/texts',
     projectGitPreferences: (projectId) => '/projects/' + projectId + '/git-preferences',
     worktreePolicy: '/runtime/worktree-policy',
     auditList: '/audit',

package/runtime/dist/src/git/git-inspector.js

@@ -391,6 +391,16 @@ export class GitInspector {
         const result = await this.runner.run('git', ['merge-base', '--is-ancestor', ancestor, descendant], { cwd: repoRoot });
         return result.exitCode === 0;
     }
+    async remoteRefContaining(repoRoot, commit) {
+        return await this.gitValue(repoRoot, [
+            'for-each-ref',
+            '--count=1',
+            '--format=%(refname)',
+            '--contains',
+            commit,
+            'refs/remotes/',
+        ]);
+    }
     async committedPaths(repoRoot, baseCommit) {
         const result = await this.runner.run('git', ['diff', '--name-only', '-z', '--find-renames', baseCommit, 'HEAD', '--'], { cwd: repoRoot });
         if (result.exitCode !== 0)