freebuff-autocontinue 0.1.7 → 0.2.0

package/Formula/freebuff-autocontinue.rb

@@ -1,39 +1,40 @@
-require "json"
-
 class FreebuffAutocontinue < Formula
   desc "Autonomous session supervisor for Freebuff CLI with smart model fallback"
   homepage "https://github.com/kelvindesman/freebuff-autocontinue"
   # NOTE: the tag-driven release workflow patches `url` + `sha256` on every
   # version tag. The placeholder below is only for local `brew install --build-from-source` checks.
-  url "https://github.com/kelvindesman/freebuff-autocontinue/releases/download/v0.1.7/freebuff-autocontinue-v0.1.7.tar.gz"
-  sha256 "e1a63802a3b2f31bd0929ed0d9b4a1647d88483992feb54434779648a1d925d3"
+  url "https://github.com/kelvindesman/freebuff-autocontinue/releases/download/v0.1.8/freebuff-autocontinue-v0.1.8.tar.gz"
+  sha256 "77ef88dced2b327a63495f504812af0f49ee05da95593b8d9efd9685c4150c41"
   license "MIT"
   head "https://github.com/kelvindesman/freebuff-autocontinue.git", branch: "main"
 
+  livecheck do
+    url :stable
+    strategy :github_latest
+  end
+
   depends_on "node"
   depends_on "tmux"
 
   def install
+    # NOTE: `brew audit` suggests `std_npm_args`, but that API does not exist
+    # in Homebrew <= 7.0.7 (including this machine). Revisit on core feedback.
     system "npm", "install", *Language::Node.std_npm_install_args(libexec)
 
-    # Homebrew's npm install omits devDependencies, but the `prepare` build
-    # needs them (esbuild). Install pinned build tools from package.json,
-    # then build explicitly. Versions are read from package.json so they
-    # can never drift.
-    pkg = JSON.parse((buildpath/"package.json").read)
-    # Keep the semver ranges from package.json (npm resolves them); stripping
-    # `^` would pin nonexistent exact versions (e.g. typescript has no 5.6.0).
-    build_tools = pkg.fetch("devDependencies", {}).map do |name, ver|
-      "#{name}@#{ver}"
-    end
-    system "npm", "install", "--prefix=#{libexec}", "--no-save",
-           "--no-audit", "--no-fund", *build_tools
+    # Homebrew's npm install omits devDependencies, but the build needs them
+    # (esbuild). Install them deterministically from the committed lockfile,
+    # copied from the source tree (`files` deliberately excludes it from the
+    # published npm tarball), then build explicitly.
+    pkgdir = libexec/"lib/node_modules/freebuff-autocontinue"
+    cp buildpath/"package-lock.json", pkgdir/"package-lock.json"
+    system "npm", "ci", "--prefix=#{pkgdir}", "--no-audit", "--no-fund",
+           "--ignore-scripts"
 
     # `npm install` honors the `files` whitelist, so `src/` never lands in
     # libexec. Build from the extracted source (buildpath) into the installed
     # package dir, with absolute paths (no cwd dependence).
-    pkgdir = libexec/"lib/node_modules/freebuff-autocontinue"
-    esbuild = libexec/"node_modules/.bin/esbuild"
+    # (`npm ci` above installs node_modules inside pkgdir.)
+    esbuild = pkgdir/"node_modules/.bin/esbuild"
     system esbuild, "#{buildpath}/src/cli.ts", "--bundle", "--platform=node",
            "--format=esm", "--outfile=#{pkgdir}/dist/cli.js"
     system esbuild, "#{buildpath}/src/index.ts", "--bundle", "--platform=node",

package/README.md

@@ -5,7 +5,7 @@
 [![Dependencies](https://img.shields.io/badge/dependencies-0%20(zero)-brightgreen.svg?style=flat-square)](./package.json)
 [![Platform](https://img.shields.io/badge/platform-macOS%20%7C%20Linux%20%7C%20Windows%20(WSL)-lightgrey.svg?style=flat-square)](#platform-compatibility)
 [![CI Matrix](https://img.shields.io/badge/CI-Ubuntu%20%7C%20macOS%20%7C%20Windows-success.svg?style=flat-square)](./.github/workflows/ci.yml)
-[![Telemetry](https://img.shields.io/badge/telemetry-100%25%20local%20(none)-blueviolet.svg?style=flat-square)](#is-this-secure)
+[![Telemetry](https://img.shields.io/badge/telemetry-off%20by%20default%20(opt--in)-blueviolet.svg?style=flat-square)](#is-this-secure)
 
 > **Autonomous session supervisor for the [Freebuff CLI](https://freebuff.com/cli) AI coding agent.**  
 > Runs inside a detached, isolated `tmux` session with smart model fallback, Pacific Midnight refill scheduling, graceful midway account switching, and zero external runtime dependencies.
@@ -145,6 +145,23 @@ freebuff-autocontinue --attach
 ```
 *(Detach anytime with `Ctrl+B, d` without interrupting the supervisor).*
 
+### 8. Question Handling (`--auto-answer`)
+When the agent pauses mid-turn to ask a question, the supervisor prints the
+question, then submits the recommended option:
+```text
+============================================================================
+[autocontinue] [QUESTION] Freebuff is asking a question:
+----------------------------------------------------------------------------
+Which ticket should I pick?
+----------------------------------------------------------------------------
+Attach to tmux directly: tmux -L freebuff-auto attach -t fb-auto
+============================================================================
+```
+- Press `1`-`9` then Enter to pick an option, or `a` to attach and answer yourself.
+- No input within `--question-timeout` seconds → the recommended option is submitted.
+- `--no-auto-answer` never answers; it waits for a human (with a nudge every 30s).
+- `--question-timeout 0` answers immediately without waiting.
+
 ---
 
 ## 🔒 Is This Secure?
@@ -154,7 +171,7 @@ freebuff-autocontinue --attach
 1. **Zero Runtime Dependencies**: The package specifies `"dependencies": {}`. No third-party npm libraries are downloaded or executed at runtime, eliminating supply-chain attack vectors.
 2. **Dedicated Socket Isolation**: Runs in `tmux -L freebuff-auto`, completely isolated from your personal tmux sessions.
 3. **No Shell Injection**: Subprocesses are spawned using discrete argument arrays (`child_process.spawnSync("tmux", ["-L", ...])`). Never passes strings to `/bin/sh`.
-4. **100% Local & No Telemetry**: Absolutely no data, prompts, or credentials are sent over any external network.
+4. **Local by Default, Opt-In Telemetry**: No data leaves your machine unless you opt in with `--telemetry-opt-in`. Even then, only version, platform, flag names, duration, exit code, and sanitized crash classes are recorded — never prompts, paths, or URLs. See [TELEMETRY.md](./TELEMETRY.md).
 5. **Ethical Compliance**: Fully complies with [freebuff.com](https://freebuff.com) and [freebuff.com/web](https://freebuff.com/web) terms. Halts on bans (`banned`), country blocks (`country-blocked`), or IP caps (`ip-capped`).
 
 For more details, see [SECURITY.md](./SECURITY.md).
@@ -190,6 +207,12 @@ For more details, see [SECURITY.md](./SECURITY.md).
 | `--kill-on-exit` | `boolean` | `false` | Kill tmux session on exit (default leaves running) |
 | `--allow-risky` | `boolean` | `false` | Consider TEST/peak-window tiers in model fallback |
 | `--no-banner` | `boolean` | `false` | Silence rotating community reminders |
+| `--auto-answer` | `boolean` | `true` | Auto-submit the recommended option when the agent asks a question |
+| `--no-auto-answer` | `boolean` | `false` | Never auto-answer questions; wait for a human to attach |
+| `--question-timeout` | `sec` | `30` | Seconds to wait for a human choice before auto-selecting (`0` = instant) |
+| `--telemetry-opt-in` | `boolean` | `false` | Opt in to anonymous usage + crash reports |
+| `--telemetry-opt-out` | `boolean` | `false` | Opt out and clear stored consent |
+| `--telemetry-status` | `boolean` | `false` | Print the current telemetry consent state |
 | `--attach` | `boolean` | `false` | Attach directly to the tmux session |
 | `--self-test` | `boolean` | `false` | Run internal pattern detection tests |
 | `--dry-run` | `boolean` | `false` | Classify sample transcript and preview actions |