kryptheon 0.1.37 → 0.1.39

package/bin/kryptheon.js

@@ -2537,6 +2537,88 @@ function openInBrowser(url) {
   }
 }
 
+/**
+ * The person's own folder picker, on this computer: the one Windows or the
+ * Mac shows everywhere else. Resolves to the folder, or null when it was
+ * closed. KRYPTHEON_CHOOSE_FOLDER answers instead, for the checks - no
+ * window is shown then.
+ *
+ * Found when the first person paid: the dashboard opened from Win+R is for
+ * a kryptheon-tests folder, and nothing on it said how to point it at an
+ * app whose code is on this computer.
+ */
+function chooseFolder() {
+  if (process.env.KRYPTHEON_CHOOSE_FOLDER !== undefined) return Promise.resolve(process.env.KRYPTHEON_CHOOSE_FOLDER || null);
+  return new Promise((resolve) => {
+    let cmd;
+    let args;
+    if (process.platform === 'win32') {
+      // A form kept on top owns the dialog, or it opens behind the browser.
+      const script = [
+        '[Console]::OutputEncoding = [Text.Encoding]::UTF8',
+        'Add-Type -AssemblyName System.Windows.Forms',
+        '$owner = New-Object System.Windows.Forms.Form -Property @{ TopMost = $true; ShowInTaskbar = $false }',
+        '$f = New-Object System.Windows.Forms.FolderBrowserDialog',
+        "$f.Description = 'Choose your app''s folder - the one with its package.json'",
+        '$f.ShowNewFolderButton = $false',
+        "if ($f.ShowDialog($owner) -eq 'OK') { [Console]::Out.Write($f.SelectedPath) }",
+      ].join('; ');
+      cmd = 'powershell.exe';
+      args = ['-NoProfile', '-STA', '-ExecutionPolicy', 'Bypass', '-Command', script];
+    } else if (process.platform === 'darwin') {
+      cmd = 'osascript';
+      args = ['-e', 'POSIX path of (choose folder with prompt "Choose your app\'s folder - the one with its package.json")'];
+    } else {
+      return resolve(null);
+    }
+    let out = '';
+    const child = spawn(cmd, args, { stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true });
+    child.stdout.on('data', (c) => (out += c));
+    child.on('error', () => resolve(null));
+    child.on('close', () => {
+      const folder = out.trim().replace(/\/$/, '');
+      resolve(folder && fs.existsSync(folder) && fs.statSync(folder).isDirectory() ? folder : null);
+    });
+  });
+}
+
+/**
+ * A dashboard for that folder, in a window of its own - the same line as
+ * Win+R, started there. The port this one holds is taken, so that one picks
+ * a free port and opens its own browser tab. KRYPTHEON_OPEN_FOLDER_LOG names
+ * a file the folder is written to instead, for the checks.
+ */
+function openFolderDashboard(folder) {
+  const where = path.resolve(folder);
+  const plan = project.setupPlan(where);
+  if (plan.action === 'refuse') {
+    return { ok: false, why: plan.reason === 'system' ? 'that is a system folder, not an app' : 'that folder cannot be used' };
+  }
+  if (process.env.KRYPTHEON_OPEN_FOLDER_LOG) {
+    fs.appendFileSync(process.env.KRYPTHEON_OPEN_FOLDER_LOG, where + '\n');
+    return { ok: true, opened: path.basename(where) };
+  }
+  try {
+    let child;
+    if (process.platform === 'win32') {
+      // start's first quoted word is the window's title; /d is where it runs.
+      child = spawn('cmd.exe', ['/c', 'start "Kryptheon - ' + path.basename(where).replace(/["%^&|<>]/g, '') + '" /d "' + where + '" cmd /k npx -y kryptheon@latest dashboard'],
+        { detached: true, stdio: 'ignore', windowsVerbatimArguments: true, env: Object.assign({}, process.env, { KRYPTHEON_FOLDER_CHOSEN: '1' }) });
+    } else if (process.platform === 'darwin') {
+      const line = 'cd ' + JSON.stringify(where) + ' && KRYPTHEON_FOLDER_CHOSEN=1 npx -y kryptheon@latest dashboard';
+      child = spawn('osascript', ['-e', 'tell application "Terminal" to do script ' + JSON.stringify(line), '-e', 'tell application "Terminal" to activate'],
+        { detached: true, stdio: 'ignore' });
+    } else {
+      return { ok: false, why: 'open a terminal in that folder and run: npx kryptheon@latest dashboard' };
+    }
+    child.on('error', () => {});
+    child.unref();
+    return { ok: true, opened: path.basename(where) };
+  } catch (err) {
+    return { ok: false, why: 'the new window could not be opened: ' + err.message };
+  }
+}
+
 /**
  * Whether this project's dashboard is already running on the usual port -
  * started at sign-in, most likely - by asking it which project it shows.
@@ -2625,6 +2707,26 @@ async function dashboardCommand() {
   if (!here.ok) {
     const plan = project.setupPlan(USER_DIR);
     if (plan.action === 'home') return await dashboardFromHome(plan);
+    // A folder of the person's own with no package.json - a site exported
+    // from a builder, or one chosen on the dashboard's "Choose its folder" -
+    // is set up the way record sets one up: said first, asked once.
+    if (plan.action === 'create') {
+      for (const line of project.setupLines(plan)) console.log(line);
+      // Without a keyboard to ask, only a window the person opened for this
+      // folder - "Choose its folder" marks it - is taken as a yes. Anything
+      // else run here unattended writes nothing.
+      const question = project.setupQuestion(plan);
+      const yes = process.stdin.isTTY
+        ? project.answeredYes(await askLine(question.text), question.yesByDefault)
+        : process.env.KRYPTHEON_FOLDER_CHOSEN === '1';
+      if (!yes || !makeReady(USER_DIR)) {
+        console.log('');
+        console.log('  Nothing was changed.');
+        console.log('');
+        return 1;
+      }
+      return await dashboardCommand();
+    }
     for (const line of project.noProjectLines(here)) console.error(line);
     return 1;
   }
@@ -2651,6 +2753,8 @@ async function dashboardCommand() {
     record: (address, say, options) => recordFromDashboard(address, say, options),
     db: (action, connection, say) => databaseFromDashboard(action, connection, say),
     words: (connection) => nightWords(connection),
+    chooseFolder: () => chooseFolder(),
+    openFolder: (folder) => openFolderDashboard(folder),
   });
   let port;
   try {

package/kryptheon-dashboard-page.js

@@ -51,6 +51,7 @@
     arrow: 'M5 12h14m-6-6l6 6-6 6',
     sun: 'M12 16a4 4 0 100-8 4 4 0 000 8zM12 2v2m0 16v2M4.9 4.9l1.4 1.4m11.4 11.4l1.4 1.4M2 12h2m16 0h2M4.9 19.1l1.4-1.4M17.7 6.3l1.4-1.4',
     terminal: 'M4 5h16v14H4zM7 9l3 3-3 3M13 15h4',
+    folder: 'M3 6h6l2 2h10v11H3z',
     dot: 'M12 12h.01',
   };
   function icon(name, size) {
@@ -155,6 +156,12 @@
   recordInput.placeholder = 'http://localhost:3000';
   recordInput.setAttribute('aria-label', 'Your app address');
   recordInput.spellcheck = false;
+  // The app's web address, at the top of the page: kept like the others.
+  var appInput = el('input', 'field');
+  appInput.type = 'url';
+  appInput.placeholder = 'https://my-app.lovable.app';
+  appInput.setAttribute('aria-label', 'Your app\'s web address');
+  appInput.spellcheck = false;
   // Kept like the box beside it, so a page refresh does not untick it.
   var phoneBox = el('input');
   phoneBox.type = 'checkbox';
@@ -624,12 +631,10 @@
     { id: 'claude-code', name: 'Claude Code', tested: true,
       steps: ['Run this once, in any terminal. That is the whole set-up.'],
       code: 'claude mcp add kryptheon -- npx -y kryptheon-mcp', file: 'terminal' },
+    // No "Add to Cursor" button: it was never seen working end to end, and
+    // the person asked for it to go. By hand, as for every other tool.
     { id: 'cursor', name: 'Cursor', tested: false,
-      // Cursor's own install page, as on kryptheon.tech: it opens Cursor, and
-      // where Cursor does not open - not installed, or blocked - it shows the
-      // config to paste, rather than a click that does nothing at all.
-      oneClick: { href: 'https://cursor.com/en/install-mcp?name=kryptheon&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImtyeXB0aGVvbi1tY3AiXX0=', label: 'Add to Cursor' },
-      steps: ['Press Add to Cursor. Cursor\'s page opens and hands it to Cursor, which asks you to confirm - say yes. Cursor has to be installed on this computer.', 'Or by hand: paste the config into mcp.json in the .cursor folder of your home folder.'],
+      steps: ['Open Cursor Settings, then MCP, and press Add new MCP server - Cursor opens its mcp.json.', 'Paste the config and save. It lives in the .cursor folder of your home folder.'],
       code: MCP_JSON, file: '~/.cursor/mcp.json' },
     { id: 'vscode', name: 'VS Code', tested: false,
       oneClick: { href: 'vscode:mcp/install?' + encodeURIComponent(JSON.stringify({ name: 'kryptheon', command: 'npx', args: ['-y', 'kryptheon-mcp'] })), label: 'Install in VS Code' },
@@ -1105,11 +1110,71 @@
     if (!busy) { clear(run); run.appendChild(icon('play', 15)); run.appendChild(el('span', null, 'Run checks')); }
   }
 
+  /* ------------------------------ your app ------------------------------ */
+
+  // Found when the first person paid: the dashboard opened from Win+R is for
+  // a kryptheon-tests folder, and nothing said which app it checks or how to
+  // point it at one. Said first: the app's web address - all a Lovable app
+  // has - and, for code on this computer, its folder.
+  function renderApp() {
+    var box = byId('appBox');
+    if (!box) return;
+    var app = state.app || {};
+    clear(box);
+    if (document.activeElement !== appInput && !appInput.value && app.address) appInput.value = app.address;
+    if (!recordInput.value && app.address) recordInput.value = app.address;
+
+    if (!app.webOnly) {
+      var here = el('p', 'app-here');
+      here.appendChild(document.createTextNode('This dashboard checks the code in '));
+      here.appendChild(el('b', null, (state.project && state.project.name) || 'this folder'));
+      here.appendChild(el('small', 'app-path', app.folder || ''));
+      box.appendChild(here);
+    }
+    var label = el('label', 'app-label', app.webOnly ? 'Your app\'s web address' : 'Its web address - optional, for recording it');
+    box.appendChild(label);
+    var row = el('div', 'field-row');
+    row.appendChild(appInput);
+    var save = button('sun sm', 'check', app.address ? 'Save' : 'Save the address', function () {
+      post('/api/app', { address: appInput.value.trim() }).then(function (r) {
+        appInput.value = r.address || '';
+        if (!recordInput.value || recordInput.value === app.address) recordInput.value = r.address || '';
+        toast(r.address ? 'Saved. Record starts from ' + r.address : 'Cleared.');
+        load();
+      }, function (err) { toast(err.message); });
+    });
+    row.appendChild(save);
+    box.appendChild(row);
+    box.appendChild(el('div', 'fallback', app.address
+      ? 'Saved: ' + app.address + ' - Record and the checks start from it.'
+      : 'The address you open your app at. For a Lovable app it ends in .lovable.app. That is all Kryptheon needs.'));
+
+    if (app.canChooseFolder) {
+      var other = el('div', 'app-folder');
+      other.appendChild(el('p', null, app.webOnly
+        ? 'Is your app\'s code on this computer - from Cursor, Bolt or GitHub?'
+        : 'Another app on this computer?'));
+      var pick = button('', 'folder', app.webOnly ? 'Choose its folder...' : 'Open another app\'s folder...', function () {
+        pick.disabled = true;
+        toast('A folder picker is opening - it may be behind this window.');
+        post('/api/choose-folder', {}).then(function (r) {
+          toast('Opening a dashboard for ' + r.opened + ' in a new window. It opens in your browser by itself.');
+        }, function (err) {
+          toast(/no folder was chosen/.test(err.message) ? 'No folder chosen.' : 'It did not open: ' + err.message);
+        }).then(function () { pick.disabled = false; });
+      });
+      other.appendChild(pick);
+      other.appendChild(el('div', 'fallback', 'Its own dashboard opens in a new window, for that folder: recordings and checks then live beside your code, and Kryptheon can read it.'));
+      box.appendChild(other);
+    }
+  }
+
   function render(next) {
     if (!next) return;
     state = next;
     renderSide();
     renderTop();
+    renderApp();
     renderNow();
     renderSteps();
     renderKeep();

package/kryptheon-dashboard.html

@@ -289,6 +289,15 @@
   .field { flex: 1; min-width: 220px; width: 100%; padding: 10px 12px; font: 13px/1.4 var(--mono); color: var(--on-light); background: var(--white); border: 1px solid var(--on-light); border-radius: 0; }
   .field-row .btn { margin-top: 0; }
   .field-note { font-size: 13px; line-height: 1.55; color: var(--muted); }
+  /* --- your app: which app this dashboard checks ----------------------------- */
+  .app-card { margin-bottom: 26px; }
+  #appBox { display: grid; gap: 10px; max-width: 760px; margin-top: 16px; }
+  .app-label { font: 11px var(--mono); letter-spacing: 0.08em; text-transform: uppercase; color: var(--muted); }
+  .app-here { font-size: 15px; line-height: 1.5; }
+  .app-path { display: block; margin-top: 2px; font: 11px var(--mono); color: var(--muted); overflow-wrap: anywhere; }
+  .app-folder { display: grid; gap: 10px; margin-top: 14px; padding-top: 16px; border-top: 1px solid var(--line); }
+  .app-folder p { font-size: 15px; line-height: 1.5; }
+  .app-folder .btn { justify-self: start; }
   .controls pre { margin: 0; padding: 14px 16px; font: 12px/1.65 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; }
   .controls pre.help { color: var(--on-light); background: rgba(18, 22, 29, 0.05); border-left: 2px solid var(--on-light); }
   .controls pre.warn { color: var(--orange-deep); background: rgba(255, 77, 0, 0.06); border-left: 2px solid var(--orange); }
@@ -351,6 +360,10 @@
     <section class="job" id="job" hidden aria-live="polite"></section>
 
     <section class="view" id="view-dashboard">
+      <div class="card app-card" id="appCard">
+        <div class="card-head"><div><h3>Your app</h3><div class="c-sub">What this dashboard checks</div></div></div>
+        <div id="appBox"></div>
+      </div>
       <div class="sky" id="sky">
         <div class="s-chip" id="skyIcon"></div>
         <div class="s-text">

package/kryptheon-dashboard.js

@@ -200,6 +200,13 @@ const EVERY_CHANGE = 'after every change';
 function startSteps(checks, seen) {
   const on = (id) => (checks.find((c) => c.id === id) || {}).enabled;
   const nightly = seen.nightly || null;
+  // With no code on this computer - the home folder's dashboard - there is
+  // no code to read, and "Read your frontend code" would only say it read
+  // nothing. The app is checked by its address.
+  return startStepList(on, seen, nightly).filter((s) => !(seen.webOnly && s.id === 'frontend'));
+}
+
+function startStepList(on, seen, nightly) {
   return [
     {
       id: 'frontend',
@@ -508,7 +515,9 @@ function buildState(root, env) {
     };
   });
 
+  const webOnly = isHomeKept(root, env);
   const steps = startSteps(checks, {
+    webOnly: webOnly,
     codeAt: code ? code.checkedAt : null,
     recordings: recordings,
     lastRunAt: lastRun ? lastRun.runAt : null,
@@ -542,6 +551,15 @@ function buildState(root, env) {
     runs: history.slice().reverse().map((r) => ({ runAt: r.runAt, status: r.status, passed: r.passed, failed: r.failed, durationMs: r.durationMs })),
     recordings: recordings,
     steps: steps,
+    // Which app this dashboard is for: its web address, kept here, and whether
+    // its code is on this computer at all. The dashboard started from the home
+    // folder (Win+R) holds recordings only - the app is a web address.
+    app: {
+      address: readAppAddress(paths),
+      webOnly: webOnly,
+      folder: root,
+      canChooseFolder: process.platform === 'win32' || process.platform === 'darwin',
+    },
     next: nextAction(findings, steps),
     baselines: Object.keys(baselines).length,
     changes: recentChanges(root),
@@ -613,6 +631,33 @@ const JOB_LINES = 400;
  * anything that could be read as an option by the command it is passed to,
  * and anything with a scheme other than http(s).
  */
+/**
+ * The dashboard started from the home folder: the kryptheon-tests folder
+ * there, which holds recordings and nothing of the app's own code.
+ */
+function isHomeKept(root, env) {
+  const environment = env || process.env;
+  const home = environment.USERPROFILE || environment.HOME || require('os').homedir();
+  const tidy = (p) => (process.platform === 'win32' ? path.resolve(p).toLowerCase() : path.resolve(p));
+  return path.basename(root) === 'kryptheon-tests' && tidy(path.dirname(root)) === tidy(home);
+}
+
+/** The app's web address, as saved on the page - or empty. */
+function readAppAddress(paths) {
+  const saved = readJson(path.join(paths.dir, 'app.json'));
+  return saved && typeof saved.address === 'string' ? saved.address : '';
+}
+
+function saveAppAddress(paths, address) {
+  try {
+    fs.mkdirSync(paths.dir, { recursive: true });
+    fs.writeFileSync(path.join(paths.dir, 'app.json'), JSON.stringify({ address: address, savedAt: new Date().toISOString() }, null, 2));
+    return true;
+  } catch (err) {
+    return false;
+  }
+}
+
 function appAddress(value) {
   if (typeof value !== 'string') return null;
   const text = value.trim();
@@ -859,6 +904,26 @@ function createServer(root, options) {
           return begin('db', DB_ACTIONS[action].title, DB_ACTIONS[action].command,
             (say) => opts.db(action, connection, say), secretsOf(connection));
         }
+        if (url.pathname === '/api/app') {
+          // The app's web address: saved for this project, so Record and the
+          // outside check start from it. Empty clears it.
+          const raw = typeof input.address === 'string' ? input.address.trim() : '';
+          const address = raw ? appAddress(raw) : '';
+          if (address === null) return json(res, 400, { ok: false, why: 'that is not a web address - it should look like https://my-app.lovable.app' });
+          const full = address && !/^https?:\/\//i.test(address) ? 'https://' + address : address;
+          return saveAppAddress(store.pathsFor(root, env), full)
+            ? json(res, 200, { ok: true, address: full })
+            : json(res, 500, { ok: false, why: 'it could not be saved on this computer' });
+        }
+        if (url.pathname === '/api/choose-folder' && typeof opts.chooseFolder === 'function' && typeof opts.openFolder === 'function') {
+          // The person's own folder picker, on this computer; then a dashboard
+          // for that folder in a window of its own. Nothing is run in it here.
+          return Promise.resolve(opts.chooseFolder()).then((folder) => {
+            if (!folder) return json(res, 200, { ok: false, cancelled: true, why: 'no folder was chosen' });
+            const opened = opts.openFolder(folder);
+            return json(res, opened.ok ? 200 : 400, Object.assign({ folder: folder }, opened));
+          }, (err) => json(res, 500, { ok: false, why: err.message }));
+        }
         if (url.pathname === '/api/db/words' && typeof opts.words === 'function') {
           // What kryptheon-night itself would say about this string - its help,
           // its consent screens, its warnings - asked of it without connecting.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kryptheon",
-  "version": "0.1.37",
+  "version": "0.1.39",
   "description": "Record what you do in your app and get plain-language reports when it breaks.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "commonjs",