gipity 1.0.407 → 1.0.409

package/dist/updater/bootstrap.js

@@ -1,8 +1,7 @@
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
-import { spawnSync } from 'child_process';
 import { join } from 'path';
 import { LOCAL_DIR, LOCAL_ENTRY, LOCAL_PKG_DIR, writeState, readState } from './state.js';
-import { resolveCommand } from '../platform.js';
+import { resolveCommand, spawnSyncCommand } from '../platform.js';
 export function isBootstrapped() {
     return existsSync(LOCAL_ENTRY);
 }
@@ -26,7 +25,7 @@ export function bootstrap(version, quiet = false) {
     // --ignore-scripts: don't run install lifecycle hooks (gipity ships
     // precompiled, deps need no build), so a compromised package can't execute
     // code during this self-managed install.
-    const res = spawnSync(resolveCommand('npm'), ['install', '--no-audit', '--no-fund', '--ignore-scripts', `gipity@${version}`], {
+    const res = spawnSyncCommand(resolveCommand('npm'), ['install', '--no-audit', '--no-fund', '--ignore-scripts', `gipity@${version}`], {
         cwd: LOCAL_DIR,
         stdio: ['ignore', 'pipe', 'pipe'],
         encoding: 'utf-8',
@@ -53,7 +52,7 @@ export function bootstrap(version, quiet = false) {
     state.installedVersion = version;
     writeState(state);
     if (!quiet)
-        process.stderr.write(`Done.\n\n`);
+        process.stderr.write(`Done.\n`);
     return true;
 }
 export { LOCAL_PKG_DIR };

package/dist/updater/check.js

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 // Background updater. Invoked detached by the shim; can also be invoked
 // directly by `gipity update --force`.
-import { spawnSync } from 'child_process';
 import { appendFileSync, existsSync } from 'fs';
 import { LOCAL_DIR, LOCAL_ENTRY, UPDATE_LOG, readState, writeState, updatesDisabled } from './state.js';
-import { resolveCommand } from '../platform.js';
+import { resolveCommand, spawnSyncCommand } from '../platform.js';
 const CHECK_INTERVAL_MS = 4 * 60 * 60 * 1000; // 4 hours
 function log(line) {
     try {
@@ -38,7 +37,7 @@ function installVersion(version) {
     // --ignore-scripts: this runs unattended in the background, so don't let a
     // compromised package's install lifecycle hooks execute. gipity ships
     // precompiled (dist/) and its deps need no build step, so nothing is lost.
-    const res = spawnSync(resolveCommand('npm'), ['install', '--silent', '--no-audit', '--no-fund', '--ignore-scripts', `gipity@${version}`], {
+    const res = spawnSyncCommand(resolveCommand('npm'), ['install', '--silent', '--no-audit', '--no-fund', '--ignore-scripts', `gipity@${version}`], {
         cwd: LOCAL_DIR,
         stdio: 'ignore',
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gipity",
-  "version": "1.0.407",
+  "version": "1.0.409",
   "description": "The full-stack platform tuned for AI agents. Database, storage, auth, functions, deploy, and drop-in kits - all agent-tuned. Pair with Claude Code or use standalone.",
   "bin": {
     "gipity": "dist/updater/shim.js",
@@ -13,7 +13,7 @@
     "postbuild": "node scripts/gen-build-info.mjs",
     "dev": "tsc --watch",
     "test": "npm run test:smoke",
-    "test:smoke": "tsc && node --test dist/__tests__/utils.test.js dist/__tests__/colors.test.js dist/__tests__/config.test.js dist/__tests__/sync.test.js dist/__tests__/sync-apply.test.js dist/__tests__/sync-lock.test.js dist/__tests__/auth-lock.test.js dist/__tests__/api-401-retry.test.js dist/__tests__/push-cas.test.js dist/__tests__/upload.test.js dist/__tests__/progress.test.js dist/__tests__/updater.test.js dist/__tests__/cli-smoke.test.js dist/__tests__/claude-noninteractive.test.js dist/__tests__/claude-trust.test.js dist/__tests__/relay-state.test.js dist/__tests__/relay-daemon.test.js dist/__tests__/relay-installers.test.js dist/__tests__/relay-bridge-abort.test.js dist/__tests__/relay-redact.test.js dist/__tests__/relay-machine-id.test.js dist/__tests__/stream-json.test.js dist/__tests__/relay-ingest-contract.test.js dist/__tests__/prompts.test.js dist/__tests__/capture-transcript.test.js dist/__tests__/flag-aliases.test.js dist/__tests__/client-context.test.js dist/__tests__/adopt-cwd.test.js dist/__tests__/cli-cmd-agent.test.js dist/__tests__/cli-cmd-approval.test.js dist/__tests__/cli-cmd-audit.test.js dist/__tests__/cli-cmd-chat.test.js dist/__tests__/cli-cmd-credits.test.js dist/__tests__/cli-cmd-db.test.js dist/__tests__/cli-cmd-deploy.test.js dist/__tests__/cli-cmd-domain.test.js dist/__tests__/cli-cmd-email.test.js dist/__tests__/cli-cmd-file.test.js dist/__tests__/cli-cmd-fn.test.js dist/__tests__/cli-cmd-service.test.js dist/__tests__/cli-cmd-job.test.js dist/__tests__/cli-cmd-generate.test.js dist/__tests__/cli-cmd-gmail.test.js dist/__tests__/cli-cmd-info.test.js dist/__tests__/cli-cmd-init.test.js dist/__tests__/cli-cmd-location.test.js dist/__tests__/cli-cmd-text.test.js dist/__tests__/cli-cmd-login.test.js dist/__tests__/cli-cmd-logout.test.js dist/__tests__/cli-cmd-token.test.js dist/__tests__/cli-cmd-logs.test.js dist/__tests__/cli-cmd-memory.test.js dist/__tests__/cli-cmd-page.test.js dist/__tests__/cli-cmd-plan.test.js dist/__tests__/cli-cmd-project.test.js dist/__tests__/cli-cmd-rbac.test.js dist/__tests__/cli-cmd-realtime.test.js dist/__tests__/cli-cmd-records.test.js dist/__tests__/cli-cmd-relay.test.js dist/__tests__/cli-cmd-doctor.test.js dist/__tests__/claude-setup.test.js dist/__tests__/cli-cmd-sandbox.test.js dist/__tests__/cli-cmd-add.test.js dist/__tests__/cli-cmd-remove.test.js dist/__tests__/cli-cmd-skill.test.js dist/__tests__/cli-cmd-test.test.js dist/__tests__/cli-cmd-workflow.test.js dist/__tests__/setup-skills-block.test.js dist/__tests__/setup-hooks.test.js",
+    "test:smoke": "tsc && node --test dist/__tests__/utils.test.js dist/__tests__/platform.test.js dist/__tests__/colors.test.js dist/__tests__/config.test.js dist/__tests__/sync.test.js dist/__tests__/sync-apply.test.js dist/__tests__/sync-lock.test.js dist/__tests__/auth-lock.test.js dist/__tests__/api-401-retry.test.js dist/__tests__/push-cas.test.js dist/__tests__/upload.test.js dist/__tests__/progress.test.js dist/__tests__/updater.test.js dist/__tests__/cli-smoke.test.js dist/__tests__/claude-noninteractive.test.js dist/__tests__/claude-trust.test.js dist/__tests__/relay-state.test.js dist/__tests__/relay-daemon.test.js dist/__tests__/relay-installers.test.js dist/__tests__/relay-bridge-abort.test.js dist/__tests__/relay-redact.test.js dist/__tests__/relay-machine-id.test.js dist/__tests__/stream-json.test.js dist/__tests__/relay-ingest-contract.test.js dist/__tests__/prompts.test.js dist/__tests__/capture-transcript.test.js dist/__tests__/flag-aliases.test.js dist/__tests__/client-context.test.js dist/__tests__/adopt-cwd.test.js dist/__tests__/cli-cmd-agent.test.js dist/__tests__/cli-cmd-approval.test.js dist/__tests__/cli-cmd-audit.test.js dist/__tests__/cli-cmd-chat.test.js dist/__tests__/cli-cmd-credits.test.js dist/__tests__/cli-cmd-db.test.js dist/__tests__/cli-cmd-deploy.test.js dist/__tests__/cli-cmd-domain.test.js dist/__tests__/cli-cmd-email.test.js dist/__tests__/cli-cmd-file.test.js dist/__tests__/cli-cmd-fn.test.js dist/__tests__/cli-cmd-service.test.js dist/__tests__/cli-cmd-job.test.js dist/__tests__/cli-cmd-generate.test.js dist/__tests__/cli-cmd-gmail.test.js dist/__tests__/cli-cmd-info.test.js dist/__tests__/cli-cmd-init.test.js dist/__tests__/cli-cmd-location.test.js dist/__tests__/cli-cmd-text.test.js dist/__tests__/cli-cmd-login.test.js dist/__tests__/cli-cmd-logout.test.js dist/__tests__/cli-cmd-token.test.js dist/__tests__/cli-cmd-logs.test.js dist/__tests__/cli-cmd-memory.test.js dist/__tests__/cli-cmd-page.test.js dist/__tests__/cli-cmd-plan.test.js dist/__tests__/cli-cmd-project.test.js dist/__tests__/cli-cmd-rbac.test.js dist/__tests__/cli-cmd-realtime.test.js dist/__tests__/cli-cmd-records.test.js dist/__tests__/cli-cmd-relay.test.js dist/__tests__/cli-cmd-doctor.test.js dist/__tests__/claude-setup.test.js dist/__tests__/cli-cmd-sandbox.test.js dist/__tests__/cli-cmd-add.test.js dist/__tests__/cli-cmd-remove.test.js dist/__tests__/cli-cmd-skill.test.js dist/__tests__/cli-cmd-test.test.js dist/__tests__/cli-cmd-workflow.test.js dist/__tests__/setup-skills-block.test.js dist/__tests__/setup-hooks.test.js",
     "test:e2e": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-live.test.js dist/__tests__/cli-e2e-sync-live.test.js dist/__tests__/cli-e2e-services-media-live.test.js dist/__tests__/cli-e2e-workflow-live.test.js dist/__tests__/cli-e2e-sandbox-live.test.js dist/__tests__/cli-e2e-page-fetch-live.test.js dist/__tests__/cli-e2e-page-test-live.test.js",
     "test:e2e:sync": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-sync-live.test.js",
     "test:e2e:sandbox": "tsc && GIPITY_E2E=1 node --test --test-timeout=180000 dist/__tests__/cli-e2e-sandbox-live.test.js"
@@ -33,8 +33,7 @@
   },
   "files": [
     "dist/**/*.js",
-    "!dist/__tests__/**",
-    "hooks"
+    "!dist/__tests__/**"
   ],
   "license": "MIT"
 }

package/dist/coding-guidelines.js

@@ -1,52 +0,0 @@
-/**
- * Shared coding guidelines for Gipity-hosted projects.
- * Single source of truth used by:
- *   - server/src/services/skills/web-app-basics.ts (web CLI agent)
- *   - tools/gipity-cli/src/setup.ts (CLAUDE.md template for Claude Code)
- *
- * The CLI build copies this file before compiling (see justfile cli-build).
- */
-export const CODING_GUIDELINES = `## File Structure
-- **Use src/ convention**: All app files live under \`src/\` — \`src/index.html\`, \`src/css/styles.css\`, \`src/js/main.js\`, \`src/images/\`
-- **Separate files**: Split into \`index.html\`, \`styles.css\`, and \`app.js\` (or \`main.js\`). Never inline large blocks of CSS or JS in HTML.
-- If the app grows, organize into folders: \`src/css/\`, \`src/js/\`, \`src/assets/\`, \`src/sounds/\`, \`src/images/\`, etc.
-- **Use subfolders — don't flatten**: Reference assets from their folders (e.g. \`sounds/click.ogg\`, \`images/logo.png\`). Never copy files to the root just for convenience — deployed apps serve the full directory tree.
-- Keep \`index.html\` clean — it should be structure/markup, not behavior or styling
-
-## HTML
-- Use semantic elements: \`<header>\`, \`<nav>\`, \`<main>\`, \`<section>\`, \`<footer>\`, \`<article>\`
-- Always include \`<meta name="viewport" content="width=device-width, initial-scale=1.0">\`
-- Add a proper \`<title>\` and favicon link
-- Unless the user specifies a different CSS framework, include Water.css for automatic styling: \`<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/water.css@2/out/water.css">\`
-- Water.css styles semantic HTML automatically (buttons, tables, forms, nav, cards) — no classes needed. It supports dark/light themes automatically. Add custom CSS on top for app-specific tweaks.
-
-## CSS
-- When using Water.css, it handles base styling, resets, and typography — don't duplicate what it provides
-- Water.css exposes CSS variables for theming — override them in \`:root\` for custom colors/fonts
-- Use CSS custom properties (variables) for app-specific colors, spacing, and fonts
-- Add smooth transitions on interactive elements (buttons, links, hover states)
-
-## JavaScript
-- Use \`const\`/\`let\`, arrow functions, template literals, and modern ES6+ syntax
-- Wait for DOM: wrap in \`DOMContentLoaded\` or place script at end of body
-- Keep functions small and focused
-- Use \`addEventListener\` — never inline \`onclick\` attributes in HTML
-
-## Code Quality
-- **Keep files under ~400 lines** unless the content genuinely requires it (e.g. a long data table, template string, or config object). When logic grows beyond that, split into focused modules (e.g. \`utils.js\`, \`api.js\`, \`ui.js\`).
-- **Don't duplicate code.** If the same logic appears twice, extract it into a shared function. Before writing a new helper, check if one already exists or could be extended.
-- **One responsibility per file.** A file that handles both UI rendering and API calls should be split.
-- **Name things clearly.** Functions, variables, and files should describe what they do — no \`temp\`, \`data2\`, \`stuff.js\`.
-- **Prefer simple, readable code** over clever code that hides bugs. Flat over nested — use early returns, avoid deep nesting.
-- **Centralize configuration.** App settings, API URLs, feature flags, and magic numbers should live in a dedicated config file (e.g. \`config.js\` or \`constants.js\`), not scattered across the codebase.
-- **Write utility functions** for repeated operations (formatting, validation, API calls). Keep them in a \`utils.js\` or \`helpers.js\` file. Small, pure functions are easy to test and reuse.
-
-## Testing
-- **Write tests for new functions** — especially utility/helper functions. Cover the happy path and edge cases (empty input, null, boundary values).
-- **Don't mock unless absolutely required.** Tests should exercise real code paths. Only mock external paid services (APIs that cost money per call).
-- **E2E tests should hit real infrastructure** (real API, real DB) — just clean up test data when done.
-- **Test file naming**: \`*.test.js\` for unit tests, \`*.e2e.test.js\` for end-to-end tests.
-
-## Deployment
-- **src/ detection**: If a \`src/\` directory exists, only \`src/\` is deployed. Otherwise the full project root is deployed.`;
-//# sourceMappingURL=coding-guidelines.js.map

package/dist/commands/browser.js

@@ -1,84 +0,0 @@
-import { Command } from 'commander';
-import { post } from '../api.js';
-import { resolveProjectContext } from '../config.js';
-import { formatSize } from '../utils.js';
-import { brand, bold, error as clrError, warning, muted, info } from '../colors.js';
-import { run } from '../helpers/index.js';
-function shortUrl(url) {
-    try {
-        const u = new URL(url);
-        return u.pathname + u.search;
-    }
-    catch {
-        return url.length > 60 ? url.slice(-60) : url;
-    }
-}
-export const browserCommand = new Command('browser')
-    .description('Inspect a URL: console errors, performance, failed resources')
-    .argument('<url>', 'URL to inspect')
-    .option('--wait <ms>', 'Wait before capture in ms', '3000')
-    .option('--json', 'Output as JSON')
-    .action((url, opts) => run('Browser inspect', async () => {
-    const { config } = await resolveProjectContext();
-    const waitMs = parseInt(opts.wait, 10) || 3000;
-    const res = await post(`/projects/${config.projectGuid}/browser/inspect`, { url, waitMs });
-    const b = res.data;
-    if (opts.json) {
-        console.log(JSON.stringify(b));
-        return;
-    }
-    const timing = b.timing || { ttfb: 0, domReady: 0, load: 0 };
-    // ── Page Info ──
-    console.log(`\n${brand('Inspecting')} ${bold(b.url || url)}`);
-    console.log(`  ${muted('Title:')} ${b.title || '(none)'}`);
-    console.log(`  ${muted('Elements:')} ${b.elementCount || 0}`);
-    console.log(`  ${muted('Page weight:')} ${info(formatSize(b.totalBytes || 0))}`);
-    // ── Timing ──
-    console.log(`\n  ${bold('Timing:')}`);
-    console.log(`    ${muted('TTFB:')} ${timing.ttfb}ms`);
-    console.log(`    ${muted('DOM ready:')} ${timing.domReady}ms`);
-    console.log(`    ${muted('Load:')} ${timing.load}ms`);
-    if (b.lcp) {
-        console.log(`    LCP: ${b.lcp.time}ms (${b.lcp.element}${b.lcp.url ? ' ' + shortUrl(b.lcp.url) : ''})`);
-    }
-    // ── Console ──
-    if (b.console?.length > 0) {
-        console.log(`\n  ${bold('Console')} ${muted(`(${b.console.length})`)}:`);
-        for (const line of b.console) {
-            console.log(`    ${warning(line)}`);
-        }
-    }
-    else {
-        console.log(`\n  ${bold('Console:')} ${muted('(clean)')}`);
-    }
-    // ── Failed Resources ──
-    if (b.failedResources?.length > 0) {
-        console.log(`\n  ${clrError(`Failed resources (${b.failedResources.length}):`)}`);
-        for (const r of b.failedResources) {
-            console.log(`    ${clrError(r)}`);
-        }
-    }
-    // ── Render Blocking ──
-    if (b.renderBlocking?.length > 0) {
-        console.log(`\n  ${warning(`Render-blocking (${b.renderBlocking.length}):`)}`);
-        for (const r of b.renderBlocking) {
-            console.log(`    ${shortUrl(r)}`);
-        }
-    }
-    // ── Large Resources ──
-    if (b.largeResources?.length > 0) {
-        console.log(`\n  ${warning(`Large resources >100KB (${b.largeResources.length}):`)}`);
-        for (const r of b.largeResources) {
-            console.log(`    ${info(formatSize(r.size).padEnd(10))} ${muted(r.type.padEnd(8))} ${shortUrl(r.url)}`);
-        }
-    }
-    // ── Oversized Images ──
-    if (b.oversizedImages?.length > 0) {
-        console.log(`\n  ${warning(`Oversized images (${b.oversizedImages.length}):`)}`);
-        for (const img of b.oversizedImages) {
-            console.log(`    ${img.natural} served, ${img.displayed} displayed — ${shortUrl(img.src)}`);
-        }
-    }
-    console.log('');
-}));
-//# sourceMappingURL=browser.js.map

package/dist/commands/checkpoint.js

@@ -1,68 +0,0 @@
-import { Command } from 'commander';
-import { get, post } from '../api.js';
-import { requireConfig } from '../config.js';
-import { syncDown } from '../sync.js';
-import { formatAge } from '../utils.js';
-import { error as clrError, muted, success } from '../colors.js';
-export const checkpointCommand = new Command('checkpoint')
-    .description('Manage file checkpoints (snapshots for undo/restore)');
-checkpointCommand
-    .command('list')
-    .description('List checkpoints')
-    .option('--limit <n>', 'Max results', '20')
-    .option('--json', 'Output as JSON')
-    .action(async (opts) => {
-    try {
-        const config = requireConfig();
-        const limit = parseInt(opts.limit, 10) || 20;
-        const res = await get(`/projects/${config.projectGuid}/checkpoints?limit=${limit}`);
-        if (opts.json) {
-            console.log(JSON.stringify(res.data));
-        }
-        else {
-            if (res.data.length === 0) {
-                console.log('No checkpoints.');
-            }
-            else {
-                for (const cp of res.data) {
-                    const age = formatAge(cp.created_at);
-                    const branch = cp.branched ? ' (branched)' : '';
-                    console.log(`  ${muted(cp.guid)}  ${cp.label || muted('(auto)')}  ${cp.fileCount} files  ${muted(age)}${branch}`);
-                }
-            }
-        }
-    }
-    catch (err) {
-        console.error(clrError(`List failed: ${err.message}`));
-        process.exit(1);
-    }
-});
-checkpointCommand
-    .command('restore <guid>')
-    .description('Restore files to a checkpoint (creates a backup checkpoint first)')
-    .option('--json', 'Output as JSON')
-    .action(async (guid, opts) => {
-    try {
-        const config = requireConfig();
-        const res = await post(`/projects/${config.projectGuid}/checkpoints/restore`, {
-            checkpoint_guid: guid,
-        });
-        // Sync down restored files (confirm deletions — restore may remove files)
-        const syncResult = await syncDown({ confirmDeletions: true });
-        if (opts.json) {
-            console.log(JSON.stringify({ ...res.data, synced: syncResult.pulled }));
-        }
-        else {
-            console.log(success(`Restored to ${res.data.restoredTo}`));
-            console.log(`Backup created: ${res.data.backupCheckpoint}`);
-            if (syncResult.pulled > 0) {
-                console.log(`Pulled ${syncResult.pulled} files to local.`);
-            }
-        }
-    }
-    catch (err) {
-        console.error(clrError(`Restore failed: ${err.message}`));
-        process.exit(1);
-    }
-});
-//# sourceMappingURL=checkpoint.js.map

package/dist/commands/hook-capture.js

@@ -1,215 +0,0 @@
-/**
- * Hidden subcommand invoked by Claude Code hooks (see setup.ts HOOKS_SETTINGS).
- * Reads Claude's hook JSON on stdin and POSTs a capture event to Gipity.
- *
- * The target conversation is identified by the `GIPITY_CONVERSATION_GUID`
- * env var, which `gipity claude` exports before spawning Claude Code.
- * Every capture event is tagged with that conv_guid — no server-side
- * placeholder adoption, no guessing.
- *
- * Must never fail loudly — a hook that errors would degrade Claude Code's
- * UX. All errors are swallowed (optionally logged to
- * .gipity/hook-capture.log for debugging).
- */
-import { Command } from 'commander';
-import { readFileSync, writeFileSync, existsSync, mkdirSync, statSync, appendFileSync } from 'fs';
-import { resolve, dirname } from 'path';
-import { getConfig } from '../config.js';
-import { getAuth } from '../auth.js';
-import { post } from '../api.js';
-function readStdin() {
-    return new Promise((r) => {
-        let data = '';
-        process.stdin.setEncoding('utf-8');
-        process.stdin.on('data', (c) => (data += c));
-        process.stdin.on('end', () => r(data));
-        process.stdin.on('error', () => r(data));
-    });
-}
-function debugLog(msg) {
-    if (!process.env.GIPITY_HOOK_DEBUG)
-        return;
-    try {
-        const cfg = getConfig();
-        if (!cfg)
-            return;
-        const logPath = resolve(process.cwd(), '.gipity', 'hook-capture.log');
-        mkdirSync(dirname(logPath), { recursive: true });
-        appendFileSync(logPath, `${new Date().toISOString()} ${msg}\n`);
-    }
-    catch { /* ignore */ }
-}
-const TTY = !!process.stderr.isTTY;
-const dim = (s) => TTY ? `\x1b[2m${s}\x1b[0m` : s;
-const cyan = (s) => TTY ? `\x1b[36m${s}\x1b[0m` : s;
-const red = (s) => TTY ? `\x1b[31m${s}\x1b[0m` : s;
-function hhmmss() {
-    const d = new Date();
-    const p = (n) => String(n).padStart(2, '0');
-    return `${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`;
-}
-function friendlyLabel(path) {
-    const m = path.match(/\/remote-sessions\/[^/]+\/(.+)$/);
-    return m ? m[1] : path;
-}
-function summarize(body) {
-    if (!body || typeof body !== 'object')
-        return '';
-    const b = body;
-    if (typeof b.prompt === 'string') {
-        const p = b.prompt.replace(/\s+/g, ' ').trim();
-        return p.length > 80 ? `"${p.slice(0, 77)}…"` : `"${p}"`;
-    }
-    if (typeof b.tool_name === 'string')
-        return b.tool_name;
-    if (Array.isArray(b.entries))
-        return `${b.entries.length} transcript entr${b.entries.length === 1 ? 'y' : 'ies'}`;
-    if (typeof b.trigger === 'string')
-        return b.trigger;
-    if (typeof b.source === 'string')
-        return b.source;
-    return '';
-}
-async function safePost(path, body) {
-    const label = friendlyLabel(path);
-    const detail = summarize(body);
-    process.stderr.write(`${dim(hhmmss())} ${cyan('↗ gipity')}  ${label}${detail ? '  ' + dim(detail) : ''}\n`);
-    try {
-        await post(path, body);
-    }
-    catch (err) {
-        process.stderr.write(`${dim(hhmmss())} ${red('✗ gipity')}  ${label}  ${dim(err?.message || String(err))}\n`);
-        debugLog(`POST ${path} failed: ${err?.message || err}`);
-    }
-}
-function offsetPath(sessionId) {
-    return resolve(process.cwd(), '.gipity', 'transcripts', `${sessionId}.offset`);
-}
-function readOffset(sessionId) {
-    try {
-        return parseInt(readFileSync(offsetPath(sessionId), 'utf-8'), 10) || 0;
-    }
-    catch {
-        return 0;
-    }
-}
-function writeOffset(sessionId, offset) {
-    const p = offsetPath(sessionId);
-    mkdirSync(dirname(p), { recursive: true });
-    writeFileSync(p, String(offset));
-}
-/** Parse JSONL delta from transcript_path starting at stored offset. */
-function readTranscriptDelta(transcriptPath, sessionId) {
-    if (!existsSync(transcriptPath))
-        return { entries: [], newOffset: 0 };
-    const size = statSync(transcriptPath).size;
-    let offset = readOffset(sessionId);
-    if (offset > size)
-        offset = 0; // regressed — rescan
-    if (offset === size)
-        return { entries: [], newOffset: offset };
-    const fd = readFileSync(transcriptPath);
-    const slice = fd.slice(offset).toString('utf-8');
-    const lines = slice.split('\n').filter((l) => l.trim());
-    const entries = [];
-    for (const line of lines) {
-        try {
-            entries.push(JSON.parse(line));
-        }
-        catch { /* skip partial */ }
-    }
-    return { entries, newOffset: size };
-}
-/** Preflight: hooks are no-ops when we're not in a Gipity project, not
- *  authed, or (crucially) when the parent `gipity claude` never exported
- *  a conv_guid (unpaired device, failed create, etc.). Without the
- *  conv_guid there is no conversation to attach events to. */
-function preflight() {
-    if (!getConfig())
-        return null;
-    if (!getAuth())
-        return null;
-    const convGuid = process.env.GIPITY_CONVERSATION_GUID;
-    if (!convGuid)
-        return null;
-    return { convGuid };
-}
-async function handleStart(payload, convGuid) {
-    const { session_id, cwd, source } = payload;
-    if (!session_id)
-        return;
-    // Attach this Claude Code run's session_id to the conv. Idempotent
-    // server-side; harmless to call multiple times (e.g. after --resume).
-    await safePost(`/remote-sessions/${encodeURIComponent(convGuid)}/attach-session`, {
-        session_id,
-        cwd: cwd || process.cwd(),
-        source: source || 'startup',
-    });
-}
-async function handlePrompt(payload, convGuid) {
-    const { prompt } = payload;
-    await safePost(`/remote-sessions/${encodeURIComponent(convGuid)}/prompt`, {
-        prompt: prompt || '',
-        ts: new Date().toISOString(),
-    });
-}
-async function handleTool(payload, convGuid) {
-    const { tool_name, tool_input, tool_response } = payload;
-    if (!tool_name)
-        return;
-    await safePost(`/remote-sessions/${encodeURIComponent(convGuid)}/tool`, {
-        tool_name,
-        tool_input: tool_input ?? null,
-        tool_response: tool_response ?? null,
-    });
-}
-async function handleStop(payload, convGuid) {
-    const { session_id, transcript_path } = payload;
-    if (!session_id || !transcript_path)
-        return;
-    const { entries, newOffset } = readTranscriptDelta(transcript_path, session_id);
-    if (entries.length === 0)
-        return;
-    await safePost(`/remote-sessions/${encodeURIComponent(convGuid)}/transcript`, { entries });
-    writeOffset(session_id, newOffset);
-}
-async function handleEnd(_payload, convGuid) {
-    await safePost(`/remote-sessions/${encodeURIComponent(convGuid)}/end`, {});
-}
-async function handleCompact(payload, convGuid) {
-    const { trigger } = payload;
-    await safePost(`/remote-sessions/${encodeURIComponent(convGuid)}/compact`, {
-        trigger: trigger || 'auto',
-    });
-}
-async function run(event) {
-    const pre = preflight();
-    if (!pre)
-        return;
-    const raw = await readStdin();
-    let payload;
-    try {
-        payload = JSON.parse(raw);
-    }
-    catch {
-        debugLog(`bad JSON on ${event}`);
-        return;
-    }
-    switch (event) {
-        case 'start': return handleStart(payload, pre.convGuid);
-        case 'prompt': return handlePrompt(payload, pre.convGuid);
-        case 'tool': return handleTool(payload, pre.convGuid);
-        case 'stop': return handleStop(payload, pre.convGuid);
-        case 'end': return handleEnd(payload, pre.convGuid);
-        case 'compact': return handleCompact(payload, pre.convGuid);
-    }
-}
-export const hookCaptureCommand = new Command('hook-capture')
-    .description('Internal: capture Claude Code hook events and forward to Gipity')
-    .argument('<event>', 'hook event: start|prompt|tool|stop|end|compact')
-    .action(async (event) => {
-    await run(event);
-    // Always succeed quietly — hooks must not surface errors to Claude Code.
-    process.exit(0);
-});
-//# sourceMappingURL=hook-capture.js.map

package/dist/commands/scaffold.js

@@ -1,58 +0,0 @@
-import { Command } from 'commander';
-import { post } from '../api.js';
-import { requireConfig } from '../config.js';
-import { sync } from '../sync.js';
-import { success } from '../colors.js';
-import { run } from '../helpers/index.js';
-// Scaffold types grouped by kind. Mirrors SCAFFOLD_TEMPLATES in
-// platform/packages/shared - kept inline here because the CLI is published
-// as a standalone npm package and can't depend on the private shared
-// workspace. When adding/removing/promoting an entry, update both lists.
-//
-// Templates are minimal wiring (start fresh). Starter apps are working demos.
-// Hidden entries are accepted by the server but not suggested by default -
-// they're shown to the agent in a "do-not-suggest-unsolicited" line so the
-// LLM can still pick one when the user asks for that domain by name.
-const VISIBLE_TEMPLATES = ['web-simple', '3d-engine'];
-const VISIBLE_STARTERS = ['web-fullstack', '2d-game', '3d-world', 'api'];
-const HIDDEN_STARTERS = [
-    { key: 'app-itsm', hint: 'IT service management / helpdesk / ticketing / incident management' },
-];
-const visibleTypeList = [
-    `templates: ${VISIBLE_TEMPLATES.join(', ')}`,
-    `starters: ${VISIBLE_STARTERS.join(', ')}`,
-].join(' | ');
-const hiddenTypeList = HIDDEN_STARTERS.length
-    ? ' | hidden (do NOT suggest unsolicited; use only when the user explicitly asks for that domain): ' +
-        HIDDEN_STARTERS.map(h => `${h.key} (${h.hint})`).join(', ')
-    : '';
-export const scaffoldCommand = new Command('scaffold')
-    .description('Create an app from a template')
-    .argument('[title]', 'App title (defaults to project name)')
-    .requiredOption('--type <type>', `Project type: ${visibleTypeList}${hiddenTypeList}`)
-    .option('--description <desc>', 'App description for meta tags')
-    .option('--json', 'Output as JSON')
-    .action((title, opts) => run('Scaffold', async () => {
-    const config = requireConfig();
-    const appTitle = title || config.projectSlug;
-    const res = await post(`/projects/${config.projectGuid}/scaffold`, {
-        title: appTitle,
-        description: opts.description,
-        type: opts.type,
-    });
-    // Sync down the created files
-    const syncResult = await sync({ interactive: false });
-    if (opts.json) {
-        console.log(JSON.stringify({ ...res.data, synced: syncResult.applied }));
-    }
-    else {
-        console.log(success(`Scaffolded "${res.data.title}" with ${res.data.files.length} files:`));
-        for (const f of res.data.files) {
-            console.log(`  ${f}`);
-        }
-        if (syncResult.applied > 0) {
-            console.log(`\nPulled ${syncResult.applied} files to local.`);
-        }
-    }
-}));
-//# sourceMappingURL=scaffold.js.map

package/dist/commands/skills.js

@@ -1,45 +0,0 @@
-import { Command } from 'commander';
-import { get } from '../api.js';
-import { resolveProjectContext } from '../config.js';
-import { error as clrError, bold, muted } from '../colors.js';
-import { run, printList } from '../helpers/index.js';
-export const skillsCommand = new Command('skills')
-    .description('Read platform docs');
-skillsCommand
-    .command('list')
-    .description('List skills')
-    .option('--json', 'Output as JSON')
-    .action((opts) => run('List', async () => {
-    const { config } = await resolveProjectContext();
-    if (!config.agentGuid) {
-        console.error(clrError('No agent configured for this project. Run `gipity init` to refresh.'));
-        process.exit(1);
-    }
-    const res = await get(`/skills?agent=${config.agentGuid}`);
-    printList(res.data, opts, 'No skills available.', s => `${bold(s.name)}  ${muted(s.description)}`);
-}));
-skillsCommand
-    .command('read <name>')
-    .description('Read a skill')
-    .option('--json', 'Output as JSON')
-    .action((name, opts) => run('Read', async () => {
-    const { config } = await resolveProjectContext();
-    if (!config.agentGuid) {
-        console.error(clrError('No agent configured for this project. Run `gipity init` to refresh.'));
-        process.exit(1);
-    }
-    const listRes = await get(`/skills?agent=${config.agentGuid}`);
-    const match = listRes.data.find(s => s.name.toLowerCase() === name.toLowerCase());
-    if (!match) {
-        console.error(clrError(`Skill "${name}" not found. Run: gipity skills list`));
-        process.exit(1);
-    }
-    const res = await get(`/skills/${match.guid}?agent=${config.agentGuid}`);
-    if (opts.json) {
-        console.log(JSON.stringify(res.data, null, 2));
-    }
-    else {
-        console.log(res.data.content);
-    }
-}));
-//# sourceMappingURL=skills.js.map