litmus-cli 1.4.84-desktop.3 → 1.4.84-desktop.5

package/README.md

@@ -98,12 +98,24 @@ litmus connect <token> --ide claude
 Both configure the same dedicated Litmus SSH key and host alias and verify SSH plus
 remote runtime/capture configuration before handing off. Codex App uses Settings →
 Connections → SSH: enable the printed host and choose `/home/candidate/workspace`.
+If the workspace uses your own AI account, first run
+`ssh -t <litmus-host-alias> codex login --device-auth`, open the printed browser
+link, and enter the one-time code. Enable device code login in ChatGPT security
+settings if prompted. Litmus pre-authenticated workspaces do not need this step.
 Claude Desktop opens its Code tab with that host and folder prefilled (v2.110.0 or
 later); confirm the connection. Neither requires downloading the assessment locally.
 Keep edits in the workspace folder, without a separate worktree, and submit through
 the assessment page. A successful handoff verifies setup, not that an app has attached
 or a prompt has been captured.
 
+For maintainers, merging this support does not activate the new app choices:
+`NEXT_PUBLIC_LITMUS_DESKTOP_CLI_VERSION` stays unset until rollout, hiding both.
+Use a verified published prerelease only on its Preview branch. After merge,
+publish stable `1.4.84` from `main` with the `cli/v1.4.84` release tag, then obtain
+production approval before setting the production gate to that version and
+redeploying. Leave npm `latest` unchanged during preview testing. See the
+[desktop app rollout runbook](https://github.com/litmus-team/litmus/blob/main/docs/runbooks/desktop-app-workspaces.md).
+
 `litmus connect` also asks permission to record supported local AI-agent prompts
 and responses across folders during the assessment, alongside hosted capture.
 A background capture watcher stays on your computer after connect returns. It

package/dist/lib/desktop-app.d.ts

@@ -10,5 +10,8 @@ export declare function claudeDesktopUrl(alias: string): string;
 export declare function desktopAppInstructions(app: DesktopApp, alias: string): string[];
 /** Validate remote configuration without printing credentials or candidate content. */
 export declare function desktopAppConfigurationScript(app: DesktopApp): string;
+/** Exercise the baked recorder, since a valid hook command can still point to an
+ * older image that records prose but drops desktop tool calls and results. */
+export declare function desktopAppCaptureScript(app: DesktopApp): string;
 export declare function desktopAppProbeCommand(app: DesktopApp): string;
 //# sourceMappingURL=desktop-app.d.ts.map

package/dist/lib/desktop-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"desktop-app.d.ts","sourceRoot":"","sources":["../../src/lib/desktop-app.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAA;AAC3C,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AAEnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAc/E;AAED,uFAAuF;AACvF,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAgDrE;AAID,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAQ9D"}
+{"version":3,"file":"desktop-app.d.ts","sourceRoot":"","sources":["../../src/lib/desktop-app.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAA;AAC3C,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AAEnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB/E;AAED,uFAAuF;AACvF,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAgDrE;AAID;8EAC8E;AAC9E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAwB/D;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAS9D"}

package/dist/lib/desktop-app.js

@@ -14,6 +14,9 @@ export function desktopAppInstructions(app, alias) {
             "Use the project folder directly rather than creating a worktree. Submit from your Litmus assessment page.",
         ];
     return [
+        "If this workspace uses your own AI account, sign in to Codex on the workspace first:",
+        `  ssh -t ${alias} codex login --device-auth`,
+        "Open the printed link in your browser and enter the one-time code. Enable device code login in your ChatGPT security settings if needed.",
         "Open Codex App, then Settings > Connections > SSH.",
         `Add or enable SSH host: ${alias}`,
         `Choose project folder: ${DESKTOP_WORKSPACE_FOLDER}`,
@@ -72,13 +75,41 @@ print("ready")
 `;
 }
 function shellQuote(value) { return "'" + value.replace(/'/g, "'\\''") + "'"; }
+/** Exercise the baked recorder, since a valid hook command can still point to an
+ * older image that records prose but drops desktop tool calls and results. */
+export function desktopAppCaptureScript(app) {
+    const rows = app === "claude" ? [
+        { type: "user", message: { content: "desktop capture capability check" } },
+        { type: "assistant", message: { content: [{ type: "tool_use", id: "litmus-capability", name: "Bash", input: { command: "true" } }] } },
+        { type: "user", message: { content: [{ type: "tool_result", tool_use_id: "litmus-capability", content: "ok" }] } },
+    ] : [
+        { type: "event_msg", payload: { type: "user_message", message: "desktop capture capability check" } },
+        { type: "response_item", payload: { type: "function_call", call_id: "litmus-capability", name: "exec_command", arguments: "{}" } },
+        { type: "response_item", payload: { type: "function_call_output", call_id: "litmus-capability", output: "ok" } },
+    ];
+    const transcript = rows.map(row => JSON.stringify(row)).join("\n");
+    return `const assert = require('node:assert/strict');
+const { parseToolEvidence } = require('/opt/litmus/lib/hook-logger.cjs');
+assert.equal(typeof parseToolEvidence, 'function');
+const trace = parseToolEvidence(${JSON.stringify(transcript)}, ${JSON.stringify(app)});
+assert.equal(trace.version, 1);
+assert.equal(trace.complete, true);
+assert.equal(trace.records.length, 2);
+assert.equal(trace.records[0].kind, 'call');
+assert.equal(trace.records[0].id, 'litmus-capability');
+assert.equal(trace.records[0].input.text, ${JSON.stringify(app === "claude" ? '{"command":"true"}' : "{}")});
+assert.equal(trace.records[1].kind, 'result');
+assert.equal(trace.records[1].id, 'litmus-capability');
+assert.equal(trace.records[1].output.text, 'ok');`;
+}
 export function desktopAppProbeCommand(app) {
     const configuration = `python3 -c ${shellQuote(desktopAppConfigurationScript(app))}`;
+    const capture = `node -e ${shellQuote(desktopAppCaptureScript(app))} >/dev/null 2>&1`;
     if (app === "codex") {
         // Reuse the image's exact hook/requirements/node verifier, including root ownership,
         // rather than maintaining another approximation of its shell command contract.
-        return "bash -lc 'command -v codex >/dev/null && codex app-server --help >/dev/null 2>&1' && python3 /opt/litmus/lib/install_codex_hook.py verify --expect-root-owned --expect-node >/dev/null 2>&1 && test -r /opt/litmus/lib/hook-logger.cjs && " + configuration;
+        return "bash -lc 'command -v codex >/dev/null && codex app-server --help >/dev/null 2>&1' && python3 /opt/litmus/lib/install_codex_hook.py verify --expect-root-owned --expect-node >/dev/null 2>&1 && test -r /opt/litmus/lib/hook-logger.cjs && " + capture + " && " + configuration;
     }
-    return "command -v node >/dev/null && test -r /opt/litmus/lib/hook-logger.cjs && " + configuration;
+    return "command -v node >/dev/null && test -r /opt/litmus/lib/hook-logger.cjs && " + capture + " && " + configuration;
 }
 //# sourceMappingURL=desktop-app.js.map

package/dist/lib/desktop-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"desktop-app.js","sourceRoot":"","sources":["../../src/lib/desktop-app.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAA;AAEnE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC1F,OAAO,8BAA8B,kBAAkB,CAAC,KAAK,CAAC,eAAe,kBAAkB,CAAC,wBAAwB,CAAC,EAAE,CAAA;AAC7H,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAe,EAAE,KAAa;IACnE,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO;YAC3B,oGAAoG;YACpG,gBAAgB,CAAC,KAAK,CAAC;YACvB,aAAa,KAAK,EAAE;YACpB,mBAAmB,wBAAwB,EAAE;YAC7C,2GAA2G;SAC5G,CAAA;IACD,OAAO;QACL,oDAAoD;QACpD,2BAA2B,KAAK,EAAE;QAClC,0BAA0B,wBAAwB,EAAE;QACpD,+EAA+E;KAChF,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,6BAA6B,CAAC,GAAe;IAC3D,MAAM,MAAM,GAAG;;;;;;;;CAQhB,CAAA;IACC,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;CAkBvC,CAAA;IACC,OAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;CAkBjB,CAAA;AACD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,IAAY,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAA,CAAC,CAAC;AAE9F,MAAM,UAAU,sBAAsB,CAAC,GAAe;IACpD,MAAM,aAAa,GAAG,cAAc,UAAU,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;IACpF,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,qFAAqF;QACrF,+EAA+E;QAC/E,OAAO,4OAA4O,GAAG,aAAa,CAAA;IACrQ,CAAC;IACD,OAAO,2EAA2E,GAAG,aAAa,CAAA;AACpG,CAAC"}
+{"version":3,"file":"desktop-app.js","sourceRoot":"","sources":["../../src/lib/desktop-app.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAA;AAEnE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC1F,OAAO,8BAA8B,kBAAkB,CAAC,KAAK,CAAC,eAAe,kBAAkB,CAAC,wBAAwB,CAAC,EAAE,CAAA;AAC7H,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAe,EAAE,KAAa;IACnE,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO;YAC3B,oGAAoG;YACpG,gBAAgB,CAAC,KAAK,CAAC;YACvB,aAAa,KAAK,EAAE;YACpB,mBAAmB,wBAAwB,EAAE;YAC7C,2GAA2G;SAC5G,CAAA;IACD,OAAO;QACL,sFAAsF;QACtF,YAAY,KAAK,4BAA4B;QAC7C,0IAA0I;QAC1I,oDAAoD;QACpD,2BAA2B,KAAK,EAAE;QAClC,0BAA0B,wBAAwB,EAAE;QACpD,+EAA+E;KAChF,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,6BAA6B,CAAC,GAAe;IAC3D,MAAM,MAAM,GAAG;;;;;;;;CAQhB,CAAA;IACC,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;CAkBvC,CAAA;IACC,OAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;CAkBjB,CAAA;AACD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,IAAY,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAA,CAAC,CAAC;AAE9F;8EAC8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,GAAe;IACrD,MAAM,IAAI,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC;QAC9B,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE;QAC1E,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACtI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;KACnH,CAAC,CAAC,CAAC;QACF,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE;QACrG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;QAClI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;KACjH,CAAA;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClE,OAAO;;;kCAGyB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;;;;;;4CAMxC,IAAI,CAAC,SAAS,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC;;;kDAGxD,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAe;IACpD,MAAM,aAAa,GAAG,cAAc,UAAU,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;IACpF,MAAM,OAAO,GAAG,WAAW,UAAU,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAA;IACrF,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,qFAAqF;QACrF,+EAA+E;QAC/E,OAAO,4OAA4O,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;IACxR,CAAC;IACD,OAAO,2EAA2E,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,CAAA;AACvH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "litmus-cli",
-  "version": "1.4.84-desktop.3",
+  "version": "1.4.84-desktop.5",
   "description": "CLI tool for Litmus engineering assessments",
   "license": "MIT",
   "author": "elenazhao",