jettypod 4.4.118 → 4.4.121

package/apps/dashboard/electron/preload.js

@@ -1,123 +0,0 @@
-const { contextBridge, ipcRenderer } = require('electron');
-
-// Expose IPC methods to renderer process via window.electronAPI
-contextBridge.exposeInMainWorld('electronAPI', {
-  // Database operations
-  db: {
-    // Kanban
-    getKanbanData: (doneLimit) => ipcRenderer.invoke('db:getKanbanData', doneLimit),
-
-    // Work items
-    getAllWorkItems: () => ipcRenderer.invoke('db:getAllWorkItems'),
-    getWorkItem: (id) => ipcRenderer.invoke('db:getWorkItem', id),
-    getChildWorkItems: (parentId) => ipcRenderer.invoke('db:getChildWorkItems', parentId),
-    updateWorkItemTitle: (id, title) => ipcRenderer.invoke('db:updateWorkItemTitle', id, title),
-    updateWorkItemStatus: (id, status) => ipcRenderer.invoke('db:updateWorkItemStatus', id, status),
-    updateWorkItemOrder: (id, displayOrder) => ipcRenderer.invoke('db:updateWorkItemOrder', id, displayOrder),
-    updateWorkItemEpic: (id, epicId) => ipcRenderer.invoke('db:updateWorkItemEpic', id, epicId),
-
-    // Decisions
-    getDecision: (id) => ipcRenderer.invoke('db:getDecision', id),
-    getDecisionsForWorkItem: (workItemId) => ipcRenderer.invoke('db:getDecisionsForWorkItem', workItemId),
-
-    // Sessions
-    listSessions: () => ipcRenderer.invoke('db:listSessions'),
-    createSession: (title) => ipcRenderer.invoke('db:createSession', title),
-    getSession: (sessionId) => ipcRenderer.invoke('db:getSession', sessionId),
-    closeSession: (sessionId) => ipcRenderer.invoke('db:closeSession', sessionId),
-    closeSessionByWorkItem: (workItemId) => ipcRenderer.invoke('db:closeSessionByWorkItem', workItemId),
-    linkSession: (sessionId, workItemId) => ipcRenderer.invoke('db:linkSession', sessionId, workItemId),
-    isLinkableWorkItem: (workItemId) => ipcRenderer.invoke('db:isLinkableWorkItem', workItemId),
-    getActiveSessionByWorkItem: (workItemId) => ipcRenderer.invoke('db:getActiveSessionByWorkItem', workItemId),
-    getOrCreateSessionForWorkItem: (workItemId) => ipcRenderer.invoke('db:getOrCreateSessionForWorkItem', workItemId),
-    countActiveSessions: () => ipcRenderer.invoke('db:countActiveSessions'),
-    cleanupStaleSessions: (retentionDays) => ipcRenderer.invoke('db:cleanupStaleSessions', retentionDays),
-
-    // Session content
-    getSessionContent: (sessionId) => ipcRenderer.invoke('db:getSessionContent', sessionId),
-    getSessionContentByWorkItem: (workItemId) => ipcRenderer.invoke('db:getSessionContentByWorkItem', workItemId),
-    appendSessionContent: (sessionId, turn) => ipcRenderer.invoke('db:appendSessionContent', sessionId, turn),
-    appendSessionContentByWorkItem: (workItemId, turn) => ipcRenderer.invoke('db:appendSessionContentByWorkItem', workItemId, turn),
-
-    // Environment variables
-    getEnvVars: () => ipcRenderer.invoke('db:getEnvVars'),
-    setEnvVar: (name, value) => ipcRenderer.invoke('db:setEnvVar', name, value),
-    deleteEnvVar: (name) => ipcRenderer.invoke('db:deleteEnvVar', name),
-
-    // Project info
-    getProjectName: () => ipcRenderer.invoke('db:getProjectName'),
-
-  },
-
-  // Claude subprocess management
-  claude: {
-    spawn: (sessionId, cwd) => ipcRenderer.invoke('claude:spawn', sessionId, cwd),
-    write: (sessionId, text) => ipcRenderer.invoke('claude:write', sessionId, text),
-    kill: (sessionId) => ipcRenderer.invoke('claude:kill', sessionId),
-    onOutput: (callback) => {
-      ipcRenderer.on('claude:output', (event, data) => callback(data));
-      // Return cleanup function
-      return () => ipcRenderer.removeAllListeners('claude:output');
-    },
-  },
-
-  // Dev server management for app preview
-  devServer: {
-    spawn: (projectPath, command, port) => ipcRenderer.invoke('devServer:spawn', projectPath, command, port),
-    kill: (projectPath) => ipcRenderer.invoke('devServer:kill', projectPath),
-    status: (projectPath) => ipcRenderer.invoke('devServer:status', projectPath),
-    list: () => ipcRenderer.invoke('devServer:list'),
-    onOutput: (callback) => {
-      ipcRenderer.on('devServer:output', (event, data) => callback(data));
-      // Return cleanup function
-      return () => ipcRenderer.removeAllListeners('devServer:output');
-    },
-  },
-
-  // Project operations
-  project: {
-    openDialog: () => ipcRenderer.invoke('dialog:openProject'),
-    newProject: () => ipcRenderer.invoke('dialog:newProject'),
-    getRecent: () => ipcRenderer.invoke('projects:getRecent'),
-    addRecent: (path) => ipcRenderer.invoke('projects:addRecent', path),
-    openRecent: (path) => ipcRenderer.invoke('projects:openRecent', path),
-  },
-
-  // Claude Code operations
-  claudeCode: {
-    install: () => ipcRenderer.invoke('claudeCode:install'),
-    isInstalled: () => ipcRenderer.invoke('claudeCode:isInstalled'),
-    isAuthenticated: () => ipcRenderer.invoke('claudeCode:isAuthenticated'),
-    login: () => ipcRenderer.invoke('claudeCode:login'),
-    update: () => ipcRenderer.invoke('claudeCode:update'),
-  },
-
-  // Subscription gating (legacy)
-  subscription: {
-    createCheckout: (plan) => ipcRenderer.invoke('subscription:createCheckout', plan),
-    activate: (customerId) => ipcRenderer.invoke('subscription:activate', customerId),
-    getStatus: () => ipcRenderer.invoke('subscription:getStatus'),
-  },
-
-  // Billing
-  billing: {
-    openCustomerPortal: () => ipcRenderer.invoke('billing:openCustomerPortal'),
-  },
-
-  // Auth (JWT-based)
-  auth: {
-    loginWithGoogle: () => ipcRenderer.invoke('auth:loginWithGoogle'),
-    saveToken: (token, user) => ipcRenderer.invoke('auth:saveToken', token, user),
-    getStatus: () => ipcRenderer.invoke('auth:getStatus'),
-    getToken: () => ipcRenderer.invoke('auth:getToken'),
-    logout: () => ipcRenderer.invoke('auth:logout'),
-  },
-
-  // Shell operations
-  shell: {
-    openPath: (filePath) => ipcRenderer.invoke('shell:openPath', filePath),
-  },
-
-  // Check if running in Electron
-  isElectron: true,
-});

package/apps/dashboard/electron/session-manager.js

@@ -1,141 +0,0 @@
-const fs = require('fs');
-const path = require('path');
-const { app } = require('electron');
-
-const UPDATE_SERVER_URL = 'https://jettypod-update-server.spangbaryn2.workers.dev';
-const HEARTBEAT_INTERVAL_MS = 4 * 60 * 60 * 1000; // 4 hours
-
-let heartbeatInterval = null;
-let updaterHeaders = {};
-let log = console.log;
-
-function setLogger(logFn) {
-  log = logFn;
-}
-
-function getAuthPath() {
-  return path.join(app.getPath('userData'), 'auth.json');
-}
-
-function readAuth() {
-  const authPath = getAuthPath();
-  if (!fs.existsSync(authPath)) return null;
-  try {
-    return JSON.parse(fs.readFileSync(authPath, 'utf-8'));
-  } catch {
-    return null;
-  }
-}
-
-function saveAuth(data) {
-  const authPath = getAuthPath();
-  const dir = path.dirname(authPath);
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
-  }
-  fs.writeFileSync(authPath, JSON.stringify(data, null, 2));
-}
-
-function decodeJWT(token) {
-  const parts = token.split('.');
-  if (parts.length !== 3) return null;
-  try {
-    const payload = parts[1].replace(/-/g, '+').replace(/_/g, '/');
-    return JSON.parse(Buffer.from(payload, 'base64').toString('utf-8'));
-  } catch {
-    return null;
-  }
-}
-
-function updateAutoUpdaterHeaders() {
-  const auth = readAuth();
-  if (auth && auth.token) {
-    updaterHeaders = { 'Authorization': `Bearer ${auth.token}` };
-  } else {
-    updaterHeaders = {};
-  }
-  return updaterHeaders;
-}
-
-async function heartbeat() {
-  const auth = readAuth();
-  if (!auth || !auth.token) {
-    log('[Session] No auth token for heartbeat');
-    return;
-  }
-
-  log('[Session] Heartbeat: checking /auth/me...');
-  try {
-    const response = await fetch(`${UPDATE_SERVER_URL}/auth/me`, {
-      headers: { 'Authorization': `Bearer ${auth.token}` },
-    });
-
-    if (!response.ok) {
-      log(`[Session] Heartbeat failed: ${response.status}`);
-      return;
-    }
-
-    const data = await response.json();
-
-    // If server returned a new token (plan changed), save it
-    if (data.token) {
-      const payload = decodeJWT(data.token);
-      const user = payload
-        ? { id: payload.sub, email: payload.email, plan: payload.plan }
-        : auth.user;
-      saveAuth({ token: data.token, user, savedAt: new Date().toISOString() });
-      log('[Session] Token refreshed from server');
-    } else if (data.user && data.user.plan !== auth.user?.plan) {
-      // Plan changed but no new token — update user info
-      saveAuth({ ...auth, user: data.user, savedAt: new Date().toISOString() });
-      log(`[Session] Plan updated: ${auth.user?.plan} → ${data.user.plan}`);
-    }
-
-    updateAutoUpdaterHeaders();
-  } catch (error) {
-    log(`[Session] Heartbeat error: ${error.message}`);
-  }
-}
-
-function start() {
-  log('[Session] Starting session manager...');
-  updateAutoUpdaterHeaders();
-
-  // Run first heartbeat after a short delay (don't block startup)
-  setTimeout(heartbeat, 5000);
-
-  // Schedule periodic heartbeats
-  heartbeatInterval = setInterval(heartbeat, HEARTBEAT_INTERVAL_MS);
-
-  log('[Session] Session manager started (heartbeat every 4 hours)');
-  return true;
-}
-
-function stop() {
-  if (heartbeatInterval) {
-    clearInterval(heartbeatInterval);
-    heartbeatInterval = null;
-  }
-  log('[Session] Session manager stopped');
-}
-
-function isRunning() {
-  return heartbeatInterval !== null;
-}
-
-function getUpdaterHeaders() {
-  return updaterHeaders;
-}
-
-module.exports = {
-  start,
-  stop,
-  heartbeat,
-  readAuth,
-  saveAuth,
-  updateAutoUpdaterHeaders,
-  isRunning,
-  getUpdaterHeaders,
-  setLogger,
-  getAuthPath,
-};

package/apps/dashboard/electron-builder.config.js

@@ -1,357 +0,0 @@
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const { execSync } = require('child_process');
-
-// Minimum disk space required for build (2GB in bytes)
-const MIN_DISK_SPACE_GB = 2;
-const MIN_DISK_SPACE_BYTES = MIN_DISK_SPACE_GB * 1024 * 1024 * 1024;
-
-/**
- * Get available disk space in bytes for the given path
- * @param {string} dirPath - Directory to check
- * @returns {number} Available space in bytes
- */
-function getAvailableDiskSpace(dirPath) {
-  try {
-    // Use df command to get disk space (works on macOS and Linux)
-    const output = execSync(`df -k "${dirPath}"`, { encoding: 'utf-8' });
-    const lines = output.trim().split('\n');
-    if (lines.length < 2) return Infinity; // Can't parse, assume OK
-
-    // Parse the output (second line, fourth column is available space in KB)
-    const parts = lines[1].split(/\s+/);
-    const availableKB = parseInt(parts[3], 10);
-    if (isNaN(availableKB)) return Infinity; // Can't parse, assume OK
-
-    return availableKB * 1024; // Convert to bytes
-  } catch (error) {
-    // If we can't check, don't block the build
-    console.warn('⚠️  Could not check disk space:', error.message);
-    return Infinity;
-  }
-}
-
-/**
- * Clean up partial build artifacts
- * @param {string} distDir - Distribution directory to clean
- */
-function cleanupPartialArtifacts(distDir) {
-  try {
-    if (fs.existsSync(distDir)) {
-      const files = fs.readdirSync(distDir);
-      for (const file of files) {
-        if (file.includes('.tmp') || file.includes('.partial') || file.endsWith('.blockmap')) {
-          const filePath = path.join(distDir, file);
-          fs.unlinkSync(filePath);
-          console.log(`  Cleaned up: ${file}`);
-        }
-      }
-    }
-  } catch (error) {
-    console.warn('⚠️  Could not clean up artifacts:', error.message);
-  }
-}
-
-/**
- * electron-builder configuration
- * @type {import('electron-builder').Configuration}
- */
-module.exports = {
-  // Pre-build validation hook
-  beforeBuild: async (context) => {
-    // Check disk space for all platforms
-    const projectDir = __dirname;
-    const distDir = path.join(projectDir, 'dist');
-    const availableSpace = getAvailableDiskSpace(projectDir);
-    const availableGB = (availableSpace / (1024 * 1024 * 1024)).toFixed(2);
-
-    if (availableSpace < MIN_DISK_SPACE_BYTES) {
-      console.error('\n❌ ERROR: Insufficient disk space');
-      console.error('');
-      console.error(`Available: ${availableGB} GB`);
-      console.error(`Required:  ${MIN_DISK_SPACE_GB} GB minimum`);
-      console.error('');
-      console.error('Electron builds require significant disk space for:');
-      console.error('  - Node modules packaging');
-      console.error('  - Native module compilation');
-      console.error('  - DMG/installer creation');
-      console.error('');
-      console.error('Free up disk space and try again.');
-
-      // Clean up any partial artifacts
-      console.error('\nCleaning up partial build artifacts...');
-      cleanupPartialArtifacts(distDir);
-
-      process.exit(1);
-    }
-
-    // Only check macOS-specific requirements for mac builds
-    if (context.platform.name === 'mac') {
-      // Check for signing certificate (skip if CSC_IDENTITY_AUTO_DISCOVERY=false for local dev)
-      const skipSigning = process.env.CSC_IDENTITY_AUTO_DISCOVERY === 'false';
-
-      if (skipSigning) {
-        console.warn('\n⚠️  WARNING: Code signing disabled (CSC_IDENTITY_AUTO_DISCOVERY=false)');
-        console.warn('Build will be unsigned - for local development only.\n');
-      } else if (!process.env.CSC_LINK && !process.env.CSC_NAME) {
-        console.error('\n❌ ERROR: Code signing certificate not configured');
-        console.error('');
-        console.error('To sign macOS builds, you need to set one of:');
-        console.error('  CSC_LINK - Path to .p12 certificate file (or base64 encoded)');
-        console.error('  CSC_NAME - Name of certificate in Keychain');
-        console.error('');
-        console.error('And if using CSC_LINK:');
-        console.error('  CSC_KEY_PASSWORD - Password for the .p12 certificate');
-        console.error('');
-        console.error('Unsigned builds are not allowed. Aborting.');
-        process.exit(1);
-      }
-
-      // If CSC_LINK is set, also need CSC_KEY_PASSWORD (skip if signing disabled)
-      if (!skipSigning && process.env.CSC_LINK && !process.env.CSC_KEY_PASSWORD) {
-        console.error('\n❌ ERROR: CSC_KEY_PASSWORD not set');
-        console.error('');
-        console.error('CSC_LINK is configured but CSC_KEY_PASSWORD is missing.');
-        console.error('Set CSC_KEY_PASSWORD to the password for your .p12 certificate.');
-        console.error('');
-        console.error('Aborting build.');
-        process.exit(1);
-      }
-
-      // Warn if notarization credentials are missing (skip if signing disabled)
-      if (!skipSigning && !process.env.APPLE_TEAM_ID) {
-        console.warn('\n⚠️  WARNING: APPLE_TEAM_ID not set');
-        console.warn('');
-        console.warn('Notarization will be SKIPPED. The DMG will be signed but not notarized.');
-        console.warn('Users may see "unidentified developer" warnings on first launch.');
-        console.warn('');
-        console.warn('To enable notarization, set these environment variables:');
-        console.warn('  APPLE_TEAM_ID - Your Apple Developer Team ID');
-        console.warn('  APPLE_ID - Your Apple ID email (for notarytool)');
-        console.warn('  APPLE_APP_SPECIFIC_PASSWORD - App-specific password');
-        console.warn('');
-        console.warn('Continuing with build (without notarization)...\n');
-      }
-
-      // Check for entitlements file
-      const entitlementsPath = path.join(__dirname, 'build-resources/entitlements.mac.plist');
-      if (!fs.existsSync(entitlementsPath)) {
-        console.error('\n❌ ERROR: Entitlements file not found');
-        console.error('');
-        console.error(`Expected file at: ${entitlementsPath}`);
-        console.error('');
-        console.error('The entitlements file is required for hardened runtime signing.');
-        console.error('Create build-resources/entitlements.mac.plist with the required permissions.');
-        console.error('');
-        console.error('Aborting build.');
-        process.exit(1);
-      }
-    }
-  },
-
-  appId: 'com.jettypod.dashboard',
-  productName: 'JettyPod',
-
-  // Directories
-  directories: {
-    output: 'dist',
-    buildResources: 'build-resources',
-  },
-
-  // Files to include in the app
-  // Note: node_modules is handled via extraFiles (with filter to exclude better-sqlite3)
-  // and extraResources (for better-sqlite3 with proper Electron rebuild)
-  files: [
-    'electron/**/*',
-    'lib/run-migrations.js',
-    'public/**/*',
-    'package.json',
-  ],
-
-  // Extra files to copy to app directory (for dotfiles like .next)
-  extraFiles: [
-    {
-      from: '.next',
-      to: 'Resources/app/.next',
-      filter: [
-        '**/*',
-        // Exclude dev-only caches (not needed for production, breaks codesigning)
-        '!dev/**',
-        '!cache/**',
-      ],
-    },
-    {
-      from: 'node_modules',
-      to: 'Resources/app/node_modules',
-      filter: [
-        '**/*',
-        // Exclude electron/build tooling (better-sqlite3 stays - rebuilt by npmRebuild)
-        '!electron/**',
-        '!electron-builder/**',
-        '!.bin/**',
-        // Exclude cross-platform binaries that break codesigning
-        '!7zip-bin/**',
-        '!app-builder-bin/**',
-        '!electron-winstaller/**',
-        '!dmg-builder/**',
-        // Exclude wrong-architecture native modules (Linux)
-        '!@next/swc-linux-*/**',
-        '!@img/sharp-linux-*/**',
-        '!@tailwindcss/oxide-linux-*/**',
-        '!@unrs/resolver-binding-linux-*/**',
-        '!lightningcss-linux-*/**',
-        // Exclude wrong-architecture native modules (Windows)
-        '!@next/swc-win32-*/**',
-        '!@img/sharp-win32-*/**',
-        '!@tailwindcss/oxide-win32-*/**',
-        '!@unrs/resolver-binding-win32-*/**',
-        '!lightningcss-win32-*/**',
-      ],
-    },
-  ],
-
-  // Extra resources (not bundled into asar)
-  extraResources: [
-    // Bundled Node.js for Claude Code installation (architecture-specific)
-    {
-      from: 'build-resources/node/${arch}',
-      to: 'node',
-      filter: ['**/*'],
-    },
-    // JettyPod CLI - bundled for PATH setup
-    {
-      from: '../../bin/jettypod',
-      to: 'bin/jettypod',
-    },
-    {
-      from: '../../jettypod.js',
-      to: 'bin/jettypod.js',
-    },
-    {
-      from: '../../lib',
-      to: 'bin/lib',
-      filter: ['**/*'],
-    },
-    {
-      from: '../../package.json',
-      to: 'bin/package.json',
-    },
-    // JettyPod skills - bundled for auto-sync on launch
-    {
-      from: path.join(os.homedir(), '.claude', 'skills'),
-      to: 'skills',
-      filter: ['**/*'],
-    },
-  ],
-
-  // Don't pack into asar (native modules need filesystem access)
-  asar: false,
-
-  // App icon (electron-builder auto-converts PNG to platform formats)
-  icon: 'build-resources/icon.png',
-
-  // macOS configuration
-  mac: {
-    target: [
-      {
-        target: 'dmg',
-        // Allow BUILD_ARCH env var to override (for local dev builds)
-        arch: process.env.BUILD_ARCH ? [process.env.BUILD_ARCH] : ['arm64', 'x64'],
-      },
-    ],
-    category: 'public.app-category.developer-tools',
-    hardenedRuntime: true,
-    gatekeeperAssess: false,
-    icon: 'build-resources/icon.png',
-
-    // Entitlements for hardened runtime
-    entitlements: 'build-resources/entitlements.mac.plist',
-    entitlementsInherit: 'build-resources/entitlements.mac.plist',
-
-    // Notarization - enabled when APPLE_TEAM_ID, APPLE_ID, and APPLE_APP_SPECIFIC_PASSWORD are set
-    // electron-builder reads these env vars automatically
-    notarize: !!process.env.APPLE_TEAM_ID,
-  },
-
-  // DMG configuration
-  dmg: {
-    contents: [
-      {
-        x: 130,
-        y: 220,
-      },
-      {
-        x: 410,
-        y: 220,
-        type: 'link',
-        path: '/Applications',
-      },
-    ],
-  },
-
-  // Windows configuration
-  win: {
-    target: [
-      {
-        target: 'nsis',
-        arch: ['x64'],
-      },
-    ],
-  },
-
-  // Linux configuration
-  linux: {
-    target: [
-      {
-        target: 'AppImage',
-        arch: ['x64'],
-      },
-    ],
-    category: 'Development',
-  },
-
-  // Rebuild native modules
-  npmRebuild: true,
-
-  // Auto-update configuration - generic provider pointing to update server
-  publish: {
-    provider: 'generic',
-    url: 'https://jettypod-update-server.spangbaryn2.workers.dev/updates',
-  },
-
-  // Hooks for native module handling
-  afterPack: async (context) => {
-    const { rebuild } = require('@electron/rebuild');
-    const { Arch } = require('builder-util');
-
-    // Convert numeric arch enum to string (Arch.arm64=3, Arch.x64=1)
-    const archString = Arch[context.arch]; // "arm64", "x64", etc.
-
-    // macOS: appOutDir is dist/mac-arm64, app is at JettyPod.app/Contents/Resources/app
-    // context.packager.appInfo.productFilename gives us "JettyPod"
-    const appName = context.packager.appInfo.productFilename;
-    const resourcesPath = context.electronPlatformName === 'darwin'
-      ? path.join(context.appOutDir, `${appName}.app`, 'Contents', 'Resources', 'app')
-      : path.join(context.appOutDir, 'resources', 'app');
-
-    const betterSqlitePath = path.join(resourcesPath, 'node_modules', 'better-sqlite3');
-
-    // Only rebuild if better-sqlite3 exists in the output
-    if (fs.existsSync(betterSqlitePath)) {
-      console.log(`Rebuilding better-sqlite3 for ${archString} at ${resourcesPath}...`);
-
-      await rebuild({
-        buildPath: resourcesPath,
-        electronVersion: '32.3.3',
-        arch: archString,
-        onlyModules: ['better-sqlite3'],
-        force: true,
-      });
-
-      console.log('better-sqlite3 rebuilt successfully');
-    } else {
-      console.log(`better-sqlite3 not found at ${betterSqlitePath}, skipping rebuild`);
-    }
-  },
-};