greprag 5.49.10 → 5.49.11

package/dist/front-desk-mail.js

@@ -1,206 +0,0 @@
-"use strict";
-/** "You've got mail" — the front-desk turn notification (Chip B).
- *
- *  A turn-based announcement, NOT a live watcher interrupt: each turn the hook
- *  asks the server for ENVELOPE-ONLY pending front-desk mail and, for any
- *  arrival it hasn't announced yet this machine, injects a one-line "you've got
- *  mail from X" notice. It feeds the human sign-off gate — it announces that a
- *  record arrived; it NEVER ingests body content (front-desk store contract
- *  invariant 2/3). The envelope type carries no `body` field, so body-leakage is
- *  impossible by construction here, and the server's `/v1/email/pending`
- *  projection withholds body too — defense at both ends.
- *
- *  De-dupe: each record id is announced once (stamped in ~/.greprag/state.json),
- *  so a still-unread message doesn't re-nag every single turn — only genuinely
- *  new arrivals fire. The agent makes it stop by acting on the mail
- *  (`greprag email`), which marks it read and drops it from `pending`.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.sanitizeEnvelopeText = sanitizeEnvelopeText;
-exports.renderFrontDeskNotice = renderFrontDeskNotice;
-exports.fetchPendingMail = fetchPendingMail;
-exports.filterUnannounced = filterUnannounced;
-exports.stampAnnounced = stampAnnounced;
-exports.buildFrontDeskNotice = buildFrontDeskNotice;
-const path = __importStar(require("path"));
-const fs = __importStar(require("fs"));
-const SUBJECT_MAX = 80;
-const FROM_MAX = 60;
-/** Strip control chars / newlines and truncate untrusted envelope text before
- *  it enters the agent's context. The subject + from are attacker-controllable;
- *  rendering them on one clean line (no embedded newlines / escape sequences)
- *  blunts the obvious injection shapes without pretending the text is trusted.
- *
- *  Done as a codepoint scan rather than a control-char regex on purpose — it is
- *  unambiguous in source (no literal control bytes in the file) and replaces
- *  every C0 control char + DEL with a space. */
-function sanitizeEnvelopeText(text, max) {
-    if (!text)
-        return '';
-    let out = '';
-    for (const ch of text) {
-        const code = ch.codePointAt(0) ?? 0;
-        out += (code < 0x20 || code === 0x7f) ? ' ' : ch;
-    }
-    const oneLine = out.replace(/\s+/g, ' ').trim();
-    return oneLine.length > max ? oneLine.slice(0, max - 1) + '…' : oneLine;
-}
-function verdictTag(v) {
-    switch (v) {
-        case 'verified': return 'verified';
-        case 'failed': return '⚠ FAILED-AUTH';
-        case 'unverified': return 'unverified';
-        default: return 'unverified';
-    }
-}
-/** Render the envelope-only notice. Pure: takes envelopes, returns a string (or
- *  null when there's nothing to announce). Provably body-free — `FrontDeskEnvelope`
- *  has no body field to render. */
-function renderFrontDeskNotice(envelopes) {
-    if (!envelopes || envelopes.length === 0)
-        return null;
-    const n = envelopes.length;
-    const lines = [];
-    lines.push(`📬 You've got mail — ${n} new front-desk message${n === 1 ? '' : 's'} (envelope only; body stays sealed until you sign off):`);
-    for (const e of envelopes) {
-        const from = sanitizeEnvelopeText(e.from, FROM_MAX) || '(unknown sender)';
-        const subject = sanitizeEnvelopeText(e.subject, SUBJECT_MAX) || '(no subject)';
-        const att = e.attachmentCount > 0
-            ? ` (${e.attachmentCount} attachment${e.attachmentCount === 1 ? '' : 's'})`
-            : '';
-        lines.push(`  · [${verdictTag(e.trustVerdict)}] from ${from} — "${subject}"${att}`);
-    }
-    lines.push(`Act on it: \`greprag email\` reads the body deliberately. unverified/failed mail never auto-acts — you sign off first.`);
-    return lines.join('\n');
-}
-/** Fetch envelope-only pending front-desk mail. Returns [] on any error so the
- *  hook never blocks a turn. */
-async function fetchPendingMail(apiUrl, apiKey) {
-    try {
-        const url = `${apiUrl.replace(/\/+$/, '')}/v1/email/pending`;
-        const res = await fetch(url, { headers: { Authorization: `Bearer ${apiKey}` } });
-        if (!res.ok)
-            return [];
-        const data = await res.json();
-        return (data.pending || []).map(r => ({
-            id: r.id,
-            nodeId: r.node_id,
-            from: r.from,
-            subject: r.subject,
-            trustVerdict: r.trust_verdict,
-            attachmentCount: r.attachment_count ?? 0,
-            createdAt: r.created_at,
-        }));
-    }
-    catch {
-        return [];
-    }
-}
-// ---- Once-per-arrival de-dupe (state.json) ---------------------------------
-const ANNOUNCE_TTL_MS = 30 * 86_400_000; // prune stamps older than 30 days
-function statePath() {
-    const home = process.env.HOME || process.env.USERPROFILE || '';
-    if (!home)
-        return null;
-    return path.join(home, '.greprag', 'state.json');
-}
-function readState() {
-    const file = statePath();
-    if (!file)
-        return {};
-    try {
-        const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
-        return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {};
-    }
-    catch {
-        return {};
-    }
-}
-function readAnnouncedStamps(state) {
-    const stamps = state.frontDeskAnnounced;
-    return stamps && typeof stamps === 'object' && !Array.isArray(stamps)
-        ? stamps
-        : {};
-}
-/** Filter envelopes to those NOT yet announced. Pure given `stamps`. */
-function filterUnannounced(envelopes, stamps) {
-    return envelopes.filter(e => !stamps[e.id]);
-}
-/** Mark a batch of ids announced and persist (pruning stale stamps). Best-effort. */
-function stampAnnounced(ids) {
-    const file = statePath();
-    if (!file || ids.length === 0)
-        return;
-    try {
-        const state = readState();
-        const stamps = readAnnouncedStamps(state);
-        const nowIso = new Date().toISOString();
-        const nowMs = Date.now();
-        for (const id of ids)
-            stamps[id] = nowIso;
-        // Prune stale stamps so the map can't grow without bound.
-        for (const [id, iso] of Object.entries(stamps)) {
-            const ms = Date.parse(iso);
-            if (Number.isFinite(ms) && nowMs - ms > ANNOUNCE_TTL_MS)
-                delete stamps[id];
-        }
-        state.frontDeskAnnounced = stamps;
-        const dir = path.dirname(file);
-        if (!fs.existsSync(dir))
-            fs.mkdirSync(dir, { recursive: true });
-        fs.writeFileSync(file, JSON.stringify(state, null, 2) + '\n');
-    }
-    catch {
-        /* best-effort — a missed stamp just means a possible re-announce */
-    }
-}
-/** End-to-end: fetch pending mail, drop already-announced ids, render the
- *  envelope-only notice, stamp the freshly-announced ids. Returns null when
- *  there's nothing new. The data path is body-free throughout. */
-async function buildFrontDeskNotice(apiUrl, apiKey) {
-    const envelopes = await fetchPendingMail(apiUrl, apiKey);
-    if (envelopes.length === 0)
-        return null;
-    const stamps = readAnnouncedStamps(readState());
-    const fresh = filterUnannounced(envelopes, stamps);
-    if (fresh.length === 0)
-        return null;
-    const notice = renderFrontDeskNotice(fresh);
-    if (notice)
-        stampAnnounced(fresh.map(e => e.id));
-    return notice;
-}
-//# sourceMappingURL=front-desk-mail.js.map

package/dist/front-desk-mail.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"front-desk-mail.js","sourceRoot":"","sources":["../src/front-desk-mail.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BH,oDASC;AAcD,sDAeC;AAgBD,4CAkBC;AA+BD,8CAKC;AAGD,wCAqBC;AAKD,oDASC;AA3KD,2CAA6B;AAC7B,uCAAyB;AAazB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB;;;;;;;gDAOgD;AAChD,SAAgB,oBAAoB,CAAC,IAAmB,EAAE,GAAW;IACnE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,CAAoC;IACtD,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,UAAU,CAAC,CAAG,OAAO,UAAU,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAK,OAAO,eAAe,CAAC;QAC1C,KAAK,YAAY,CAAC,CAAC,OAAO,YAAY,CAAC;QACvC,OAAO,CAAC,CAAW,OAAO,YAAY,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;mCAEmC;AACnC,SAAgB,qBAAqB,CAAC,SAA8B;IAClE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yDAAyD,CAAC,CAAC;IAC3I,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,kBAAkB,CAAC;QAC1E,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,cAAc,CAAC;QAC/E,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,GAAG,CAAC;YAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,cAAc,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;YAC3E,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,IAAI,OAAO,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,wHAAwH,CAAC,CAAC;IACrI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAcD;gCACgC;AACzB,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,CAAC,CAAC,aAAa;YAC7B,eAAe,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC;YACxC,SAAS,EAAE,CAAC,CAAC,UAAU;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,eAAe,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,kCAAkC;AAE3E,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA8B;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACxC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACnE,CAAC,CAAC,MAAgC;QAClC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,wEAAwE;AACxE,SAAgB,iBAAiB,CAC/B,SAA8B,EAC9B,MAA8B;IAE9B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,qFAAqF;AACrF,SAAgB,cAAc,CAAC,GAAa;IAC1C,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAC1C,0DAA0D;QAC1D,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,eAAe;gBAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED;;kEAEkE;AAC3D,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAc;IACvE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM;QAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC"}