kanbo-cli 0.1.0 → 0.1.1

package/README.md

@@ -34,8 +34,7 @@ This creates `.kanbo/board.db`, binds the project to it in `.kanbo/binding.json`
 ```bash
 kanbo card create --column to_do --title "Add rate limiting" --description "60 requests per minute per client"
 kanbo ready
-export KANBO_SERVE_TOKEN="$(openssl rand -hex 16)"
-kanbo serve                     # open http://127.0.0.1:4318 and paste the token into the Token field
+kanbo serve                     # opens the board in your browser
 ```
 
 Now start your agent in the project. It reads the instruction block, runs `kanbo prime`, takes a card from `kanbo ready`, and works it. When it runs `kanbo card wait-approval`, you answer with `kanbo approve <card>` or `kanbo return <card> --comment "..."` — or with the buttons on the board page.

package/dist/cli.cjs

@@ -3083,7 +3083,7 @@ var import_picocolors = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 * `package.version`. A build carries it as a literal; running from source
 * (tests, `tsx`) reads the package's own `package.json` instead.
 */
-const KANBO_PACKAGE_VERSION = "0.1.0";
+const KANBO_PACKAGE_VERSION = "0.1.1";
 /**
 * Every exit code this tool promises, and what it means — the capabilities
 * manifest's `exitCodes` reads this rather than naming the codes again. `0` and
@@ -22777,6 +22777,33 @@ function readCardNumber(session, reference) {
 	return reference.slice(0, separator).toUpperCase() === prefix ? Number(digits) : null;
 }
 //#endregion
+//#region src/domain/card-display-title.ts
+/**
+* What a card is called wherever a person or an agent reads it by name.
+*
+* A card written as a description alone is titled with its own key (every
+* writer does that). Named by its key, such a card says nothing — so its name
+* is the first line of its description instead. A browser bundle that does not
+* load this package keeps the same rule on its own, tested with the same
+* examples.
+*/
+/** How long a description line may run before it is cut with an ellipsis. */
+const DESCRIPTION_LINE_LIMIT = 120;
+function cardDisplayTitle(card) {
+	if (card.title !== card.id) return card.title;
+	return descriptionFirstLine(card.description) ?? card.title;
+}
+function descriptionFirstLine(description) {
+	for (const rawLine of (description ?? "").split("\n")) {
+		const line = stripMarkdown(rawLine);
+		if (line) return line.length > DESCRIPTION_LINE_LIMIT ? `${line.slice(0, 119).trimEnd()}…` : line;
+	}
+	return null;
+}
+function stripMarkdown(line) {
+	return line.replace(/^\s*(?:>\s*)+/, "").replace(/^\s*#{1,6}\s+/, "").replace(/^\s*(?:[-*+]|\d+[.)])\s+(?:\[[ x]\]\s+)?/i, "").replace(/!\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/<[^>]+>/g, "").replace(/[*_~`]/g, "").replace(/\s+/g, " ").trim();
+}
+//#endregion
 //#region src/cli/view.ts
 /** Every field `kanbo card list|get --json` may ask for, in listing order. */
 const CARD_VIEW_FIELDS = [
@@ -22893,16 +22920,16 @@ function projectRun(run) {
 		launchedByKind: run.launchedByKind
 	};
 }
-/** One card per line: the key, the column it is in, and what it is called. */
+/** One card per line: the key, the column it is in, and what it is called (`cardDisplayTitle`). */
 function describeCards(cards) {
 	if (cards.length === 0) return "No cards";
 	const keyWidth = Math.max(...cards.map((card) => card.id.length));
 	const columnWidth = Math.max(...cards.map((card) => (card.column ?? "—").length));
-	return cards.map((card) => `${card.id.padEnd(keyWidth)}  ${(card.column ?? "—").padEnd(columnWidth)}  ${card.title}`).join("\n");
+	return cards.map((card) => `${card.id.padEnd(keyWidth)}  ${(card.column ?? "—").padEnd(columnWidth)}  ${cardDisplayTitle(card)}`).join("\n");
 }
 /** The whole card, for a person who asked about exactly one. */
 function describeCard(card) {
-	const lines = [`${card.id}  ${card.column ?? "—"}  ${card.executionMode}`, card.title];
+	const lines = [`${card.id}  ${card.column ?? "—"}  ${card.executionMode}`, cardDisplayTitle(card)];
 	if (card.description) lines.push("", card.description);
 	const facts = [
 		card.statusLine ? `status line: ${card.statusLine}` : null,
@@ -42512,12 +42539,11 @@ async function startKanboServer(options) {
 }
 /**
 * Who may act for a person on this server, said once when it starts: only a
-* request presenting the token does, and a server with no token, or started
-* from an agent's shell, has nobody who may.
+* request presenting the token does, and a server started from an agent's
+* shell has nobody who may.
 */
-function describePersonRights(actors, token) {
+function describePersonRights(actors) {
 	if (!actors.person) return "no request acts for a person (started from an agent's shell)";
-	if (!token) return "no request acts for a person (no token; set KANBO_SERVE_TOKEN to allow it)";
 	return `a request with the token acts for ${actors.person.id}`;
 }
 function stripBrackets(host) {
@@ -42699,12 +42725,58 @@ function sendJson(response, status, value) {
 	response.end(body);
 }
 //#endregion
+//#region src/serve/access.ts
+/** The token given, or one made up for a loopback server; refused off loopback without one. */
+function resolveServeAccess(host, givenToken) {
+	assertServeBinding(host, givenToken);
+	if (givenToken) return {
+		token: givenToken,
+		generated: false
+	};
+	return {
+		token: (0, node_crypto.randomBytes)(24).toString("base64url"),
+		generated: true
+	};
+}
+/**
+* Hand the person the board page: a link printed once, and opened in the
+* browser unless they said not to. A generated token rides in the link's
+* fragment; one they gave is theirs already and is left out.
+*/
+function presentServePage(presentation, output) {
+	const { url, access, open } = presentation;
+	if (presentation.agentShell || !presentation.terminal) {
+		if (access.generated) output.print("kanbo serve: a token was generated for this run and is not shown here; set KANBO_SERVE_TOKEN to choose your own");
+		return;
+	}
+	const link = access.generated ? `${url}/#token=${access.token}` : `${url}/`;
+	output.print(`kanbo serve: board page ${link}`);
+	if (open) output.openInBrowser(link);
+}
+/** Open a link in the default browser, without waiting for it and without failing when there is none. */
+function openInBrowser(url) {
+	const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", [
+		"/c",
+		"start",
+		"\"\"",
+		url
+	]] : ["xdg-open", [url]];
+	try {
+		const child = (0, node_child_process.spawn)(command, args, {
+			detached: true,
+			stdio: "ignore",
+			windowsVerbatimArguments: process.platform === "win32"
+		});
+		child.on("error", () => {});
+		child.unref();
+	} catch {}
+}
+//#endregion
 //#region src/cli/commands/serve.ts
 function registerServeCommand(program) {
-	program.command("serve").description("serve this board over HTTP, with a board page for the browser").option("--port <port>", "port to listen on", String(DEFAULT_SERVE_PORT)).option("--host <host>", "address to bind; anything but loopback needs a token", DEFAULT_SERVE_HOST).option("--db <path>", "board database file to open").option("--database-url <url>", "external Postgres board to serve instead of a board file").option("--workspace <nameOrId>", "workspace the server is about").option("--token <token>", "bearer token every request must carry (or set KANBO_SERVE_TOKEN)").option("--cors-origin <origin>", "let a browser call from this exact origin; repeat for more", collect, []).action(async (options) => {
+	program.command("serve").description("serve this board over HTTP, with a board page for the browser").option("--port <port>", "port to listen on", String(DEFAULT_SERVE_PORT)).option("--host <host>", "address to bind; anything but loopback needs a token", DEFAULT_SERVE_HOST).option("--db <path>", "board database file to open").option("--database-url <url>", "external Postgres board to serve instead of a board file").option("--workspace <nameOrId>", "workspace the server is about").option("--token <token>", "bearer token every request must carry (or set KANBO_SERVE_TOKEN); made up for the run on loopback when absent").option("--cors-origin <origin>", "let a browser call from this exact origin; repeat for more", collect, []).option("--no-open", "print the board page link without opening it in the browser").action(async (options) => {
 		const port = parsePort(options.port);
-		const token = options.token?.trim() || process.env.KANBO_SERVE_TOKEN?.trim() || null;
-		assertServeBinding(options.host, token);
+		const access = resolveServeAccess(options.host, options.token?.trim() || process.env.KANBO_SERVE_TOKEN?.trim() || null);
 		const session = await openBoardSession({
 			db: options.db,
 			databaseUrl: options.databaseUrl,
@@ -42722,15 +42794,25 @@ function registerServeCommand(program) {
 				actors,
 				host: options.host,
 				port,
-				token,
+				token: access.token,
 				corsOrigins: options.corsOrigin
 			});
 		} catch (error) {
 			await session.close();
 			throw error;
 		}
-		console.error(`kanbo serve: ${server.url} — workspace ${session.workspace.id}${token ? ", bearer token required" : ""}`);
-		console.error(`kanbo serve: ${describePersonRights(actors, token)}`);
+		console.error(`kanbo serve: ${server.url} — workspace ${session.workspace.id}, bearer token required${access.generated ? " (generated for this run)" : ""}`);
+		console.error(`kanbo serve: ${describePersonRights(actors)}`);
+		presentServePage({
+			url: server.url,
+			access,
+			agentShell,
+			terminal: process.stdout.isTTY === true,
+			open: options.open
+		}, {
+			print: (line) => console.log(line),
+			openInBrowser
+		});
 		let stopping = false;
 		const stop = async () => {
 			if (stopping) return;