failproofai 1.0.2-beta.4 → 1.0.2-beta.5

package/src/hooks/pack-cli.ts

@@ -6,10 +6,10 @@
  * This layer decides nothing; it formats.
  */
 import { execFileSync } from "node:child_process";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { createHash } from "node:crypto";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
+import { copyFileSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
 import { INTEGRATION_TYPES } from "./types";
 import { PACK_VERSION_RE } from "./pack-manifest";
 import { detectInstalledClis } from "./integrations";
@@ -354,6 +354,15 @@ export async function runPolicyPicker(
  * policy that already RUNS and already blocks something real, so the first
  * action is editing a working thing rather than authoring an empty one.
  */
+/**
+ * A policy filename, whatever spelling it arrived in. Discovery takes
+ * `.mjs`/`.js`/`.ts` and nothing else, so a name with no extension has to gain
+ * one or the file it names can never be found.
+ */
+function withPolicyExtension(name: string): string {
+  return /\.(mjs|js|ts)$/.test(name) ? name : `${name}.mjs`;
+}
+
 async function scaffold(target: string | null): Promise<PackCliResult> {
   // Ask what the pack is called when nothing was named and there is somebody to
   // ask. The answer becomes the FILENAME and the header, so what lands on disk
@@ -374,9 +383,14 @@ async function scaffold(target: string | null): Promise<PackCliResult> {
       stdout: process.stdout,
     });
     if (answer === null) return ok(["Nothing written."]);
-    chosen = `./${answer.trim().replace(/\.(mjs|js|ts)$/, "")}.mjs`;
+    chosen = answer.trim();
   }
-  const path = resolve(chosen ?? "./my-policies.mjs");
+  // Both paths land here, because only one of them used to. A name typed at
+  // the prompt got `.mjs`; the same name passed as `--init myguards` was taken
+  // literally and wrote a file called `myguards` — which discovery skips (it
+  // takes .mjs/.js/.ts) and which no ESM loader will import. The starter file
+  // was unreachable by every command meant to pick it up.
+  const path = resolve(withPolicyExtension(chosen ?? "my-policies"));
   if (existsSync(path)) {
     return fail([`${path} already exists — name a different file, or edit that one.`]);
   }
@@ -416,7 +430,7 @@ customPolicies.add({
     "  then ask your agent to force-push — it gets refused",
     "",
     "Then publish it:",
-    `  failproofai publish ${path} --repo <you>/<repo> --version 1.0.0`,
+    "  failproofai publish --repo <you>/<repo>",
   ]);
 }
 
@@ -582,6 +596,7 @@ async function ensureRepo(
   name: string,
   id: string,
   token: string,
+  sourceDir?: string,
 ): Promise<{ info: Awaited<ReturnType<typeof gh>>; created: boolean } | { error: string[] }> {
   let info = await gh(`${GITHUB_API}/repos/${owner}/${name}`, token);
   let created = false;
@@ -601,7 +616,15 @@ async function ensureRepo(
         name,
         private: false,
         description: `failproofai policy pack — ${id}`,
-        auto_init: true,
+        // NOT auto_init. The author already has the commit that holds these
+        // policies; a repository seeded with its own "Initial commit" shares
+        // no history with it, so the `git push` that every publish is followed
+        // by is rejected as unrelated — and the way out (`pull --allow-
+        // unrelated-histories`, or a force-push over the seed) is a worse
+        // first five minutes than an empty repository, which accepts the push
+        // as-is. Releases do not need a commit to hang from: the tag is
+        // created against whatever the release API is given.
+        auto_init: false,
       }),
     });
     if (made.status >= 400) {
@@ -617,6 +640,14 @@ async function ensureRepo(
       };
     }
     created = true;
+    // A repository created with no commits has no default branch, and the
+    // release API tags the default branch — so something has to land on it
+    // before the release is cut. Pushing the author's own history is the
+    // version that leaves a usable repository behind; seeding is the fallback
+    // for a pack that is not in a git checkout at all.
+    if (!(sourceDir && pushExistingHistory(sourceDir, owner, name, token))) {
+      await seedDefaultBranch(owner, name, id, token);
+    }
     info = await gh(`${GITHUB_API}/repos/${owner}/${name}`, token);
   }
   if (info.status >= 400) {
@@ -625,6 +656,102 @@ async function ensureRepo(
   return { info, created };
 }
 
+/**
+ * Push the checkout the policies live in to the repository just created for
+ * them, and report whether it landed.
+ *
+ * Why publish pushes at all: it created the repository, so it owns the one
+ * moment when pushing cannot conflict with anything. The repository used to be
+ * created with `auto_init`, which meant GitHub wrote an "Initial commit" the
+ * author did not have — so the `git push` that every publish is followed by was
+ * rejected as unrelated history, every time, for everybody. Seeding it and
+ * pushing it are the same job; doing only the first left the author to
+ * reconcile two histories by hand.
+ *
+ * It also makes the tag mean something. The release tags the default branch, so
+ * against a seeded repository `1.0.0` named a README commit that did not
+ * contain a single one of the policies it shipped.
+ *
+ * The token goes in through GIT_ASKPASS, never in the URL or the argv: a remote
+ * with a credential in it is written into `.git/config` in plaintext, and one on
+ * a command line is readable from `ps` by every user on the box.
+ */
+export const __pushExistingHistoryForTest = (
+  dir: string,
+  owner: string,
+  name: string,
+  token: string,
+): boolean => pushExistingHistory(dir, owner, name, token);
+
+function pushExistingHistory(dir: string, owner: string, name: string, token: string): boolean {
+  const git = (args: string[], env?: Record<string, string>): string | null => {
+    try {
+      return execFileSync("git", args, {
+        cwd: dir,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: 60_000,
+        env: env ? { ...process.env, ...env } : process.env,
+      }).trim();
+    } catch {
+      return null;
+    }
+  };
+  const branch = git(["rev-parse", "--abbrev-ref", "HEAD"]);
+  // No commits yet (`HEAD` unborn) means there is nothing to push and nothing
+  // to conflict with later either.
+  if (!branch || branch === "HEAD" || !git(["rev-parse", "--verify", "HEAD"])) return false;
+
+  const askpass = join(mkdtempSync(join(tmpdir(), "fpai-askpass-")), "askpass.sh");
+  try {
+    writeFileSync(askpass, `#!/bin/sh\ncase "$1" in\n*Username*) echo x-access-token ;;\n*) echo "$FPAI_GH_TOKEN" ;;\nesac\n`, { mode: 0o700 });
+    const env = { GIT_ASKPASS: askpass, FPAI_GH_TOKEN: token, GIT_TERMINAL_PROMPT: "0" };
+    const url = `${GITHUB_GIT}/${owner}/${name}.git`;
+    // Name the remote FIRST when there is not one, so the push can be `-u` and
+    // leave the branch tracking it. Pushing to a bare URL and setting the
+    // upstream afterwards cannot work: `--set-upstream-to` needs a
+    // remote-tracking ref, and a URL push writes none.
+    const adopt = !git(["remote", "get-url", "origin"]);
+    if (adopt) git(["remote", "add", "origin", url]);
+    // An author who already has an `origin` keeps it, and the push goes to the
+    // URL directly rather than quietly redirecting their remote.
+    const pushed = adopt
+      ? git(["push", "-u", "origin", `${branch}:${branch}`], env)
+      : git(["push", url, `${branch}:${branch}`], env);
+    if (pushed === null) {
+      // Leave nothing behind that was not there before.
+      if (adopt) git(["remote", "remove", "origin"]);
+      return false;
+    }
+    return true;
+  } finally {
+    try {
+      rmSync(dirname(askpass), { recursive: true, force: true });
+    } catch {
+      /* a leftover temp dir is not worth failing a publish over */
+    }
+  }
+}
+
+/**
+ * The minimum that gives a repository a default branch: one commit, made
+ * through the API. Only for a pack published from somewhere that is not a git
+ * checkout — otherwise the author's own history does this job better.
+ */
+async function seedDefaultBranch(owner: string, name: string, id: string, token: string): Promise<void> {
+  await gh(`${GITHUB_API}/repos/${owner}/${name}/contents/README.md`, token, {
+    method: "PUT",
+    contentType: "application/json",
+    body: JSON.stringify({
+      message: `${id}: create pack repository`,
+      content: Buffer.from(
+        `# ${name}\n\nA [failproofai](https://github.com/failproofai/failproofai) policy pack.\n\n\`\`\`bash\nfailproofai policies add ${owner}/${name}\n\`\`\`\n`,
+        "utf8",
+      ).toString("base64"),
+    }),
+  });
+}
+
 /**
  * Where `bun` is, if it is anywhere.
  *
@@ -736,6 +863,9 @@ function publishEntryArg(rest: string[]): string | undefined {
 
 const GITHUB_API = process.env.FAILPROOFAI_GITHUB_API ?? "https://api.github.com";
 const GITHUB_UPLOADS = process.env.FAILPROOFAI_GITHUB_UPLOADS ?? "https://uploads.github.com";
+/** Where the git remote lives, so the push path can be tested against a real
+ *  local bare repository rather than only reasoned about. */
+const GITHUB_GIT = process.env.FAILPROOFAI_GITHUB_GIT ?? "https://github.com";
 
 /**
  * The credential, from the places a developer already keeps one.
@@ -822,6 +952,60 @@ function ghError(res: { status: number; json: Record<string, unknown> | null; te
  *   - a private repository, which publishes to nobody, because installs are
  *     anonymous HTTPS with no credential to offer.
  */
+/**
+ * The two things `publish` cannot work out on its own, asked instead of
+ * demanded as flags.
+ *
+ * Everything else it already derives: the policy files by content, the version
+ * by counting the repository's own releases, the id from the repository, the
+ * credential from the environment. What is left is genuinely a question —
+ * WHERE this should live, when the folder has no git remote naming somewhere —
+ * and a confirmation, because publishing is public and a version number can
+ * never be reused.
+ *
+ * Only ever on a TTY. A pipe, a CI job or a test gets the old behaviour: flags
+ * decide, and a missing `--repo` still means "build the assets and stop"
+ * rather than a prompt nobody can answer.
+ */
+async function askWhereToPublish(
+  suggestion: string,
+  io: { stdin: TTYIn; stdout: TTYOut },
+): Promise<string | null> {
+  const answer = await promptText({
+    // The suggestion goes in the HINT, not just in `defaultValue`: the hint is
+    // what renders as the placeholder, while `defaultValue` is only applied on
+    // an empty submit and is never shown. Passing it as the default alone left
+    // the one keystroke that finishes this prompt — return — invisible.
+    message: "Where should this publish?",
+    hint: `${suggestion}  ·  created if it does not exist`,
+    defaultValue: suggestion,
+    validate: (v) => {
+      const t = v.trim();
+      if (!/^[A-Za-z0-9][\w.-]*\/[A-Za-z0-9][\w.-]*$/.test(t)) return "owner/repo";
+      return null;
+    },
+    stdin: io.stdin,
+    stdout: io.stdout,
+  });
+  return answer === null ? null : answer.trim();
+}
+
+/**
+ * The account the credential belongs to, for the default answer above.
+ *
+ * Best-effort: a failure here costs a nicer default and nothing else, so it
+ * never blocks or reports. The prompt still has the folder name to fall back
+ * on, which is what the repository would most likely be called anyway.
+ */
+async function credentialLogin(token: string): Promise<string | null> {
+  try {
+    const me = await gh(`${GITHUB_API}/user`, token);
+    return typeof me.json?.login === "string" ? me.json.login : null;
+  } catch {
+    return null;
+  }
+}
+
 async function publish(rest: string[]): Promise<PackCliResult> {
   const flag = (name: string): string | undefined => {
     const i = rest.findIndex((a) => a === `--${name}` || a.startsWith(`--${name}=`));
@@ -838,7 +1022,32 @@ async function publish(rest: string[]): Promise<PackCliResult> {
   // it is that file and only that file.
   const discovered = entry ? [] : findEntry(process.cwd());
   if (!entry && discovered.length > 0) entry = discovered[0];
-  const repo = flag("repo") ?? (entry ? inferRepo(entry) : null) ?? undefined;
+  let repo = flag("repo") ?? (entry ? inferRepo(entry) : null) ?? undefined;
+  // Nothing names a destination and there is somebody to ask. This is the
+  // whole of "just run `failproofai publish`": the folder is a git repo full
+  // of policies, and the one thing it cannot know is where they should go.
+  const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+  const askingWhere = interactive && !repo && entry && !rest.includes("--dry-run");
+  if (askingWhere) {
+    // What is about to be published, before being asked where to put it. The
+    // question is answerable without it — but "publish" with no arguments
+    // otherwise gives no sign of WHICH files it found, and finding the wrong
+    // ones is the mistake that matters here.
+    const found = discovered.length > 0 ? discovered : [entry!];
+    process.stdout.write(
+      `\n  ${found.length} policy ${found.length === 1 ? "file" : "files"}: ` +
+        `${found.map((f) => basename(f)).join(", ")}\n\n`,
+    );
+    const token = githubToken();
+    const login = token ? await credentialLogin(token) : null;
+    const folder = basename(resolve(entry!, ".."));
+    const answered = await askWhereToPublish(
+      `${login ?? "your-account"}/${folder}`,
+      { stdin: process.stdin as unknown as TTYIn, stdout: process.stdout as unknown as TTYOut },
+    );
+    if (answered === null) return ok(["Nothing was published."]);
+    repo = answered;
+  }
   // A tag on HEAD is somebody SAYING what this release is, so it wins over a
   // counted one. Everything else is decided after the repository is known,
   // because the count comes from what that repository has already published.
@@ -846,8 +1055,19 @@ async function publish(rest: string[]): Promise<PackCliResult> {
   let versionCounted = false;
   // The id and the repo are usually the same words, and requiring both is asking
   // the same question twice. Either one alone answers for the other.
-  const id = flag("id") ?? repo;
   const dryRun = rest.includes("--dry-run") || !repo;
+  // A dry run publishes nothing, so the id only has to name the artifact it
+  // writes — and refusing to build one because the folder has no git remote
+  // yet blocked the exact thing a dry run is for: looking at the pack BEFORE
+  // committing to a repository for it. The folder name is what the repository
+  // would be called anyway, and `--id` or `--repo` overrides it the moment
+  // either is known.
+  //
+  // `local/` rather than a guessed account: the owner is genuinely not known
+  // yet, and a plausible-looking one would be baked into a manifest somebody
+  // could upload by hand.
+  const id =
+    flag("id") ?? repo ?? (dryRun && entry ? `local/${basename(resolve(entry, ".."))}` : undefined);
   const [owner, name] = (repo ?? "/").split("/");
   if (repo && (!owner || !name || repo.split("/").length !== 2)) {
     return fail([`--repo must be <owner>/<repo>, got ${JSON.stringify(repo)}`]);
@@ -899,7 +1119,7 @@ async function publish(rest: string[]): Promise<PackCliResult> {
         "It needs write access to releases on that repository, and nothing else.",
       ]);
     }
-      const ensured = await ensureRepo(owner, name, id, token);
+      const ensured = await ensureRepo(owner, name, id, token, resolve(entry, ".."));
     if ("error" in ensured) return fail(ensured.error);
     created = ensured.created;
     repoInfo = ensured.info;
@@ -953,7 +1173,13 @@ async function publish(rest: string[]): Promise<PackCliResult> {
         ? ["Dry run — nothing was published.", `Drop --dry-run to release it on ${repo}.`]
         : [
             "Nothing was published: name a repository to release it on.",
-            `  failproofai publish ${entry} --repo <owner>/<repo> --version ${version}`,
+            // Just the repository. It used to spell out the entry file and the
+            // version too — naming ONE of the files it had that moment finished
+            // bundling, and pinning a version it works out by counting the
+            // repository's own releases. Both were wrong the moment they were
+            // printed, and both taught the reader that publishing needs flags
+            // it does not need.
+            "  failproofai publish --repo <owner>/<repo>",
           ]),
     ]);
   }

package/.next/standalone/.next/server/chunks/[root-of-the-server]__1l-khtb._.js

@@ -1,3 +0,0 @@
-module.exports=[22734,(e,r,t)=>{r.exports=e.x("fs",()=>require("fs"))},24868,(e,r,t)=>{r.exports=e.x("fs/promises",()=>require("fs/promises"))},70406,(e,r,t)=>{r.exports=e.x("next/dist/compiled/@opentelemetry/api",()=>require("next/dist/compiled/@opentelemetry/api"))},18622,(e,r,t)=>{r.exports=e.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(e,r,t)=>{r.exports=e.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},93695,(e,r,t)=>{r.exports=e.x("next/dist/shared/lib/no-fallback-error.external.js",()=>require("next/dist/shared/lib/no-fallback-error.external.js"))},12714,(e,r,t)=>{r.exports=e.x("node:fs/promises",()=>require("node:fs/promises"))},50227,(e,r,t)=>{r.exports=e.x("node:path",()=>require("node:path"))},81111,(e,r,t)=>{r.exports=e.x("node:stream",()=>require("node:stream"))},46786,(e,r,t)=>{r.exports=e.x("os",()=>require("os"))},14747,(e,r,t)=>{r.exports=e.x("path",()=>require("path"))},91301,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1qb590j._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(30441)))},16341,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1shcqgr._.js"].map(r=>e.l(r))).then(()=>r(93114)))},37352,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1jm9fw6._.js"].map(r=>e.l(r))).then(()=>r(36203)))},18944,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__17g9wh7._.js","server/chunks/src_hooks_fp-home_ts_09kv0bn._.js"].map(r=>e.l(r))).then(()=>r(57232)))},71809,e=>{"use strict";async function r(e,r){let t=Array(e.length),s=0;async function o(){for(;s<e.length;){let r=s++;try{t[r]={status:"fulfilled",value:await e[r]()}}catch(e){t[r]={status:"rejected",reason:e}}}}let a=Array.from({length:Math.min(r,e.length)},()=>o());return await Promise.all(a),t}e.s(["batchAll",0,r])},5807,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1w9zl9-._.js"].map(r=>e.l(r))).then(()=>r(55851)))},21476,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1legmza._.js"].map(r=>e.l(r))).then(()=>r(78166)))},97452,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1ou2ehh._.js"].map(r=>e.l(r))).then(()=>r(46413)))},23414,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0rv7m0k._.js"].map(r=>e.l(r))).then(()=>r(72094)))},52400,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0g6bbuw._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(79364)))},53229,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1ffkmds._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(40375)))},62998,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0q0qzx1._.js"].map(r=>e.l(r))).then(()=>r(69391)))},95231,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0--lkk6._.js"].map(r=>e.l(r))).then(()=>r(28246)))},28557,e=>{"use strict";e.s(["formatDate",0,function(e){return new Intl.DateTimeFormat("en-US",{month:"short",day:"numeric",year:"numeric",hour:"numeric",minute:"2-digit",hour12:!0}).format(e)}])},31854,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__08w4wmd._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(69164)))},49081,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1xuedea._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(36618)))},67347,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__06cuf1y._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(64828)))},32359,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0jnjf2t._.js","server/chunks/_1vslkoe._.js"].map(r=>e.l(r))).then(()=>r(3605)))},40911,e=>{"use strict";let r={info:0,warn:1,error:2};function t(e){return r[e]>=r.warn}function s(e){return`[failproofai${new Date().toISOString()}] ${e}`}e.s(["logActivity",0,function(e,r,o){if(!t("info"))return;let a=[`user=${e}`,`action=${r}`];o&&a.push(o),console.log(s("ACTIVITY"),a.join(" "))},"logError",0,function(e,r){void 0!==r?console.error(s("ERROR"),e,r):console.error(s("ERROR"),e)},"logWarn",0,function(e,r){t("warn")&&(void 0!==r?console.warn(s("WARN"),e,r):console.warn(s("WARN"),e))}])},38978,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__04_h-a5._.js"].map(r=>e.l(r))).then(()=>r(90624)))},26435,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0-219ec._.js"].map(r=>e.l(r))).then(()=>r(64199)))},82978,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1mhmdzs._.js"].map(r=>e.l(r))).then(()=>r(35435)))},82859,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__1qxztj-._.js"].map(r=>e.l(r))).then(()=>r(99440)))},81580,e=>{"use strict";var r=e.i(46786),t=e.i(14747);e.s(["decodeFolderName",0,function(e){return/^[A-Za-z]--/.test(e)?e[0]+":/"+e.slice(3).replace(/-/g,"/"):e.replace(/-/g,"/")},"encodeFolderName",0,function(e){let r=/^([A-Za-z]):[\\/](.*)$/.exec(e);return r?r[1]+"--"+r[2].replace(/[\\/]/g,"-"):e.replace(/[\\/]/g,"-")},"getClaudeProjectsPath",0,function(){let e=process.env.CLAUDE_PROJECTS_PATH;return e||(0,t.join)((0,r.homedir)(),".claude","projects")}])},45093,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0f7mikp._.js"].map(r=>e.l(r))).then(()=>r(19791)))},41330,e=>{e.v(r=>Promise.all(["server/chunks/[root-of-the-server]__0q-v9z2._.js"].map(r=>e.l(r))).then(()=>r(85116)))},56936,e=>{"use strict";var r=e.i(12714),t=e.i(50227),s=e.i(81580),o=e.i(83534),a=e.i(71809),n=e.i(40911),i=e.i(28557);let l=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;async function c(e,t){try{return(await (0,r.stat)(e)).mtime}catch(e){return(0,n.logWarn)(`Failed to stat ${t}:`,e),new Date(0)}}async function u(e){try{if(!(await (0,r.stat)(e)).isDirectory())return null;return await (0,r.readdir)(e,{withFileTypes:!0})}catch{return null}}async function h(){try{let e=(0,s.getClaudeProjectsPath)(),r=await u(e);if(!r)return[];let o=(await (0,a.batchAll)(r.filter(e=>e.isDirectory()).map(r=>async()=>{let s=(0,t.join)(e,r.name),o=await c(s,r.name);return{name:r.name,path:s,isDirectory:!0,lastModified:o,lastModifiedFormatted:(0,i.formatDate)(o),cli:["claude"]}}),16)).filter(e=>"fulfilled"===e.status).map(e=>e.value);return o.sort((e,r)=>r.lastModified.getTime()-e.lastModified.getTime()),o}catch(e){return(0,n.logError)("Error reading Claude project folders:",e),[]}}async function d(){let[{getCodexProjects:r},{getCopilotProjects:t},{getCursorProjects:s},{getOpenCodeProjects:o},{getPiProjects:a},{getHermesProjects:i},{getOpenClawProjects:l},{getFactoryProjects:c},{getDevinProjects:u},{getAntigravityProjects:d},{getGooseProjects:m}]=await Promise.all([e.A(37352),e.A(5807),e.A(97452),e.A(82978),e.A(45093),e.A(67347),e.A(38978),e.A(62998),e.A(52400),e.A(91301),e.A(31854)]),[f,p,v,_,j,g,x,k,w,y,P,E]=await Promise.all([h(),r().catch(e=>((0,n.logError)("Error reading Codex projects:",e),[])),t().catch(e=>((0,n.logError)("Error reading Copilot projects:",e),[])),s().catch(e=>((0,n.logError)("Error reading Cursor projects:",e),[])),o().catch(e=>((0,n.logError)("Error reading OpenCode projects:",e),[])),a().catch(e=>((0,n.logError)("Error reading Pi projects:",e),[])),i().catch(e=>((0,n.logError)("Error reading Hermes projects:",e),[])),l().catch(e=>((0,n.logError)("Error reading OpenClaw projects:",e),[])),c().catch(e=>((0,n.logError)("Error reading Factory projects:",e),[])),u().catch(e=>((0,n.logError)("Error reading Devin projects:",e),[])),d().catch(e=>((0,n.logError)("Error reading Antigravity projects:",e),[])),m().catch(e=>((0,n.logError)("Error reading Goose projects:",e),[]))]);return function(...e){let r=new Map;for(let t of e)for(let e of t){let t=r.get(e.name);if(!t){r.set(e.name,{...e,cli:[...e.cli]});continue}let s=[...t.cli];for(let r of e.cli)s.includes(r)||s.push(r);let o=e.lastModified.getTime()>t.lastModified.getTime()?e:t;r.set(e.name,{...t,cli:s,lastModified:o.lastModified,lastModifiedFormatted:o.lastModifiedFormatted,sessionCount:void 0===t.sessionCount&&void 0===e.sessionCount?void 0:(t.sessionCount??0)+(e.sessionCount??0)})}let t=Array.from(r.values());return t.sort((e,r)=>r.lastModified.getTime()-e.lastModified.getTime()),t}(f,p,v,_,j,g,x,k,w,y,P,E)}function m(e){if(!e)throw RangeError("Empty project name");if(/^[/\\]/.test(e))throw RangeError("Absolute project name");let r=(0,t.resolve)((0,s.getClaudeProjectsPath)()),o=(0,t.resolve)((0,t.join)(r,e));if(!o.startsWith(r+t.sep))throw RangeError("Project path escapes root");return o}function f(e){let r=e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i);return r?r[0]:void 0}async function p(e){try{let r=await u(e);if(!r)return[];let s=r.filter(e=>e.isFile()&&e.name.endsWith(".jsonl")&&f(e.name)),o=(await (0,a.batchAll)(s.map(r=>async()=>{let s=(0,t.join)(e,r.name),o=await c(s,r.name);return{name:r.name,path:s,lastModified:o,lastModifiedFormatted:(0,i.formatDate)(o),sessionId:f(r.name),cli:"claude"}}),16)).filter(e=>"fulfilled"===e.status).map(e=>e.value);return o.sort((e,r)=>r.lastModified.getTime()-e.lastModified.getTime()),o}catch(e){return(0,n.logError)("Error reading session files:",e),[]}}(0,o.runtimeCache)(d,30),(0,o.runtimeCache)(e=>p(e),30),e.s(["UUID_RE",0,l,"resolveProjectPath",0,m,"resolveSessionFilePath",0,function(e,r){if(!l.test(r))throw RangeError("Invalid session ID");let s=m(e);return(0,t.join)(s,`${r}.jsonl`)}])},83534,e=>{"use strict";e.s(["runtimeCache",0,function(e,r,t){let s=new Map,o=new Map,a=t?.maxSize;return async(...t)=>{let n=JSON.stringify(t),i=s.get(n);if(i&&Date.now()<i.expiry)return i.data;let l=o.get(n);if(l)return l;let c=e(...t).then(e=>{if(o.delete(n),a&&s.size>=a){let e=s.keys().next().value;s.delete(e)}return s.set(n,{data:e,expiry:Date.now()+1e3*r}),e},e=>{throw o.delete(n),e});return o.set(n,c),c}}])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__1l-khtb._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__1mhmdzs._.js

@@ -1,3 +0,0 @@
-module.exports=[74533,(e,t,r)=>{t.exports=e.x("node:child_process",()=>require("node:child_process"))},35435,e=>{"use strict";var t=e.i(74533),r=e.i(81580),o=e.i(83534),i=e.i(28557),d=e.i(40911);function n(e){try{let r=(0,t.execFileSync)("opencode",["db","--format","json",e],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","pipe"]});if(!r.trim())return[];let o=JSON.parse(r);if(!Array.isArray(o))return null;return o}catch{return null}}function s(){return n("SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session ORDER BY time_updated DESC LIMIT 1000")}function a(){return n("SELECT id, worktree, vcs, name, time_created, time_updated FROM project")}async function l(){let e=s(),t=a();if(null===e&&null===t)return[];let o=new Map;for(let e of t??[])o.set(e.id,e);let d=new Map;for(let t of e??[]){if(!t.project_id)continue;let e=d.get(t.project_id);e||(e={rows:[],latest:0},d.set(t.project_id,e)),e.rows.push(t),t.time_updated>e.latest&&(e.latest=t.time_updated)}let n=new Set,l=[];for(let[e,t]of d){n.add(e);let d=o.get(e),s=d?.worktree??t.rows[0]?.directory??null,a=s?(0,r.encodeFolderName)(s):e,c=s??"",u=new Date(Math.max(t.latest,d?.time_updated??0));l.push({name:a,path:c,isDirectory:!0,lastModified:u,lastModifiedFormatted:(0,i.formatDate)(u),cli:["opencode"]})}for(let e of t??[]){if(n.has(e.id))continue;let t=e.worktree??"",o=t?(0,r.encodeFolderName)(t):e.id,d=new Date(e.time_updated);l.push({name:o,path:t,isDirectory:!0,lastModified:d,lastModifiedFormatted:(0,i.formatDate)(d),cli:["opencode"]})}return l.sort((e,t)=>t.lastModified.getTime()-e.lastModified.getTime()),l}async function c(e){let t=s();return t?t.filter(t=>t.directory===e).map(e=>{let t=new Date(e.time_updated);return{name:e.title??e.slug??e.id,path:`opencode://${e.id}`,lastModified:t,lastModifiedFormatted:(0,i.formatDate)(t),sessionId:e.id,cli:"opencode"}}):[]}async function u(e){let t,o;try{t=a(),o=s()}catch(e){return(0,d.logWarn)("Failed to read OpenCode DB:",e),{cwd:null,sessions:[]}}if(!t||!o)return{cwd:null,sessions:[]};let n=t.find(t=>t.worktree&&(0,r.encodeFolderName)(t.worktree)===e);if(!n||!n.worktree)return{cwd:null,sessions:[]};let l=o.filter(e=>e.project_id===n.id);return{cwd:n.worktree,sessions:l.map(e=>{let t=new Date(e.time_updated);return{name:e.title??e.slug??e.id,path:`opencode://${e.id}`,lastModified:t,lastModifiedFormatted:(0,i.formatDate)(t),sessionId:e.id,cli:"opencode"}})}}let p=(0,o.runtimeCache)(l,30),m=(0,o.runtimeCache)(e=>c(e),30,{maxSize:50}),f=(0,o.runtimeCache)(e=>u(e),30,{maxSize:50});e.s(["getCachedOpenCodeProjects",0,p,"getCachedOpenCodeSessionsByEncodedName",0,f,"getCachedOpenCodeSessionsForCwd",0,m,"getOpenCodeProjects",0,l,"getOpenCodeSessionsByEncodedName",0,u,"getOpenCodeSessionsForCwd",0,c])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__1mhmdzs._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__1qxztj-._.js

@@ -1,3 +0,0 @@
-module.exports=[74533,(t,e,i)=>{e.exports=t.x("node:child_process",()=>require("node:child_process"))},54214,67405,t=>{"use strict";var e=t.i(24868),i=t.i(14747),n=t.i(81580),s=t.i(56936);async function r(t,n,s,r){let a=`agent-${r}.jsonl`;for(let r of[(0,i.join)(t,n,a),(0,i.join)(t,n,s,a),(0,i.join)(t,n,s,"subagents",a)])if(!(0,i.relative)(t,r).startsWith(".."))try{return await (0,e.access)(r),r}catch(t){if("ENOENT"===t.code)continue;break}return null}var a=t.i(83534),o=t.i(71809),u=t.i(28557);function l(t){if(t<1e3)return`${t}ms`;let e=Math.round(t/100);if(e<600)return`${(e/10).toFixed(1)}s`;let i=Math.round(t/1e3);if(i<3600){let t=Math.floor(i/60);return`${t}m ${i%60}s`}let n=Math.round(t/6e4),s=Math.floor(n/60);return`${s}h ${n%60}m`}function d(t){let e=(0,u.formatDate)(t),i=t.getMilliseconds().toString().padStart(3,"0");return`${e}.${i}`}function m(t,e,i,n){return{_source:n,uuid:t.uuid||"",parentUuid:t.parentUuid??null,timestamp:e,timestampMs:i.getTime(),timestampFormatted:d(i)}}async function p(t,e){let i=t.split("\n").filter(t=>""!==t.trim()),n=new Map,s=[],r=[],a=new Set,o=!1;for(let t=0;t<i.length;t++){let u;t>0&&t%200==0&&await new Promise(t=>setImmediate(t));let l=i[t];try{u=JSON.parse(l)}catch{continue}let d={...u,_source:e};r.push(d);let p=u.type,c=u.timestamp;if(!c)continue;let f=new Date(c),g=f.getTime();if("user"===p){let t=u.message;if(Array.isArray(t?.content)){let e=t.content;if(e.some(t=>"tool_result"===t.type)){let t=u.toolUseResult,i="string"==typeof t?.agentId?t.agentId:void 0;for(let t of(i&&/^[a-f0-9]+$/.test(i)&&a.add(i),e)){if("tool_result"!==t.type)continue;let e=t.tool_use_id;if(!e)continue;let{text:s,images:r}=function(t){let e=t.content;if("string"==typeof e)return{text:e};if(Array.isArray(e)){let t=e.filter(t=>"text"===t.type).map(t=>t.text),i=e.filter(t=>"image"===t.type).map(t=>{let e=t.source;return{base64:e.data,mediaType:e.media_type}}).filter(t=>t.base64&&t.mediaType);return{text:t.length>0?t.join("\n"):void 0,images:i.length>0?i:void 0}}return{}}(t);n.set(e,{timestamp:c,timestampMs:g,content:s,images:r,agentId:i})}continue}}let i="string"==typeof t?.content?t.content:"";s.push({type:"user",...m(u,c,f,e),message:{role:"user",content:i}});continue}if("assistant"===p){let t=u.message,i=[];if(Array.isArray(t?.content)&&(i=t.content.filter(t=>["text","tool_use","thinking"].includes(t.type)).map(t=>{if("text"===t.type)return{type:"text",text:t.text};if("tool_use"===t.type){let e=t.input;return{type:"tool_use",id:t.id,name:t.name,input:t.input??{},..."Task"===t.name&&e?{subagentType:e.subagent_type,subagentDescription:e.description}:{}}}return{type:"thinking",thinking:t.thinking,signature:t.signature}})),0===i.length)continue;s.push({type:"assistant",...m(u,c,f,e),message:{role:"assistant",content:i,model:t?.model}});continue}if("file-history-snapshot"===p||"progress"===p||"system"===p){s.push({type:p,...m(u,c,f,e),raw:{...u}});continue}if("queue-operation"===p){let t=o?"Session Resumed":"Session Started";o=!0,s.push({type:"queue-operation",...m(u,c,f,e),label:t});continue}}let u=0;for(let t of s)if("assistant"===t.type)for(let e of(++u%200==0&&await new Promise(t=>setImmediate(t)),t.message.content)){if("tool_use"!==e.type)continue;let i=n.get(e.id);if(!i)continue;let s=new Date(i.timestamp),r=Math.max(0,i.timestampMs-t.timestampMs);e.result={timestamp:i.timestamp,timestampFormatted:d(s),content:i.content,images:i.images,durationMs:r,durationFormatted:l(r)},i.agentId&&(e.subagentId=i.agentId)}return s.length>500&&await new Promise(t=>setImmediate(t)),s.sort((t,e)=>t.timestampMs-e.timestampMs),{entries:s,rawLines:r,subagentIds:Array.from(a)}}async function c(t,e="session"){return(await p(t,e)).entries}async function f(t,a){let u=(0,s.resolveProjectPath)(t),l=(0,n.getClaudeProjectsPath)(),d=(0,i.join)(u,`${a}.jsonl`),m=await (0,e.readFile)(d,"utf-8"),{entries:c,rawLines:f,subagentIds:g}=await p(m,"session");if(0===g.length)return{entries:c,rawLines:f,subagentIds:[]};let y=await (0,o.batchAll)(g.map(i=>async()=>{let n=`agent-${i}`,s=await r(l,t,a,i);if(!s)return null;let o=await (0,e.readFile)(s,"utf-8"),{entries:u,rawLines:d}=await p(o,n);return{entries:u,rawLines:d}}),4),_=[...c],h=[...f];for(let t of y)"fulfilled"===t.status&&t.value&&(_.push(...t.value.entries),h.push(...t.value.rawLines));return _.length>500&&await new Promise(t=>setImmediate(t)),_.sort((t,e)=>t.timestampMs-e.timestampMs),{entries:_,rawLines:h,subagentIds:g}}t.s(["formatDuration",0,l],67405),(0,a.runtimeCache)((t,e)=>f(t,e),60,{maxSize:50}),t.s(["baseEntry",0,m,"formatTimestamp",0,d,"parseLogContent",0,c,"parseRawLines",0,function(t,e){return t.split("\n").filter(t=>""!==t.trim()).flatMap(t=>{try{let i=JSON.parse(t);return void 0!==e&&(i._source=e),[i]}catch{return[]}})}],54214)},99440,t=>{"use strict";var e=t.i(74533),i=t.i(83534),n=t.i(54214),s=t.i(67405);function r(t){try{let i=(0,e.execFileSync)("opencode",["db","--format","json",t],{encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","pipe"]});if(!i.trim())return[];let n=JSON.parse(i);if(!Array.isArray(n))return null;return n}catch{return null}}function a(t){return!!t&&"object"==typeof t&&!Array.isArray(t)}function o(t){if("string"!=typeof t||0===t.length)return null;try{let e=JSON.parse(t);return a(e)?e:null}catch{return null}}async function u(t){if(!t||!/^[A-Za-z0-9_-]+$/.test(t))return null;let e=r(`SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session WHERE id = '${t}'`);if(!e||0===e.length)return null;let i=e[0],u=r(`SELECT id, session_id, time_created, time_updated, data FROM message WHERE session_id = '${t}' ORDER BY time_created ASC`),l=r(`SELECT id, message_id, session_id, time_created, time_updated, data FROM part WHERE session_id = '${t}' ORDER BY time_created ASC`);if(!u)return{entries:[],rawLines:[],cwd:i.directory??void 0,filePath:`opencode://${t}`};let d=new Map;for(let t of l??[]){let e=d.get(t.message_id);e||(e=[],d.set(t.message_id,e)),e.push(t)}let m=[],p=[];for(let t of u){let e=d.get(t.id)??[];m.push(function(t,e,i){let r=o(t.data)??{},u="string"==typeof r.role?r.role:"system",l=new Date(t.time_created),d=l.toISOString(),m={uuid:t.id,parentUuid:null},p=(0,n.baseEntry)(m,d,l,i),c=[],f="";for(let t of e){let e=o(t.data);if(!e)continue;let i="string"==typeof e.type?e.type:"unknown";if("text"===i){let t="string"==typeof e.text?e.text:"string"==typeof e.content?e.content:"";t&&(c.push({type:"text",text:t}),f+=(f?"\n":"")+t);continue}if("tool"===i){let i="string"==typeof e.tool?e.tool:"string"==typeof e.name?e.name:"tool",r=a(e.state)?e.state:null,o=r&&a(r.input)?r.input:a(e.input)?e.input:a(e.args)?e.args:{},u={type:"tool_use",id:t.id,name:i,input:o},l=r&&"string"==typeof r.status?r.status:"";if(r&&("completed"===l||"error"===l)){let e=("error"===l&&"string"==typeof r.error?r.error:null)??r.output,i="string"==typeof e?e:null!=e?JSON.stringify(e):"",o=a(r.time)?r.time:{},d="number"==typeof o.start?o.start:t.time_created,m="number"==typeof o.end?o.end:t.time_updated,p=Math.max(0,m-d),c=new Date(m);u.result={timestamp:c.toISOString(),timestampFormatted:(0,n.formatTimestamp)(c),content:i,durationMs:p,durationFormatted:(0,s.formatDuration)(p)}}c.push(u);continue}c.push({type:"text",text:`[opencode ${i}]`})}if("user"===u)return{...p,type:"user",message:{role:"user",content:f}};if("assistant"===u){let t=a(r.model)?r.model:null,e=t&&"string"==typeof t.modelID?t.modelID:void 0;return{...p,type:"assistant",message:{role:"assistant",content:c,model:e}}}return{...p,type:"system",raw:{id:t.id,role:u,parts:c}}}(t,e,"session"));let i=o(t.data);p.push({id:t.id,session_id:t.session_id,time_created:t.time_created,data:i??t.data})}return{entries:m,rawLines:p,cwd:i.directory??void 0,filePath:`opencode://${t}`}}async function l(t){if(!t||!/^[A-Za-z0-9_-]+$/.test(t))return null;let e=r(`SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session WHERE id = '${t}'`);if(!e||0===e.length)return null;let i=r(`SELECT id, session_id, time_created, time_updated, data FROM message WHERE session_id = '${t}' ORDER BY time_created ASC`),n=r(`SELECT id, message_id, session_id, time_created, time_updated, data FROM part WHERE session_id = '${t}' ORDER BY time_created ASC`);return null===i||null===n?null:{session:e[0],messages:i.map(t=>({...t,data:o(t.data)??t.data})),parts:n.map(t=>({...t,data:o(t.data)??t.data}))}}(0,i.runtimeCache)(t=>u(t),30,{maxSize:50}),t.s(["getOpenCodeSessionExport",0,l,"getOpenCodeSessionLog",0,u])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__1qxztj-._.js.map