ninja-terminals 2.0.0 → 2.1.0

package/lib/prompt-delivery.js

@@ -0,0 +1,127 @@
+const fs = require('fs');
+const path = require('path');
+
+const BACKEND_URL = process.env.NINJA_BACKEND_URL || 'https://emtchat-backend.onrender.com';
+const SESSION_MARKER = '.ninja-prompt-session';
+
+/**
+ * Fetch orchestrator prompt from backend based on user's subscription tier.
+ * @param {string} token - JWT auth token
+ * @param {string} projectDir - User's CWD where prompts will be written
+ * @returns {Promise<{promptLevel: string, filesWritten: string[]}>}
+ */
+async function fetchAndWritePrompt(token, projectDir) {
+  const fetch = require('node-fetch');
+
+  const response = await fetch(`${BACKEND_URL}/api/ninja/orchestrator-prompt`, {
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    }
+  });
+
+  if (!response.ok) {
+    const error = await response.text();
+    throw new Error(`Failed to fetch prompt: ${response.status} - ${error}`);
+  }
+
+  const data = await response.json();
+  const { promptLevel, prompt, workerRules, orchestratorFiles } = data;
+  const filesWritten = [];
+
+  // Free tier: no prompts delivered
+  if (promptLevel === 'none') {
+    return { promptLevel, filesWritten };
+  }
+
+  // Standard tier (lite): write ORCHESTRATOR-PROMPT.md only
+  if (promptLevel === 'lite' && prompt) {
+    const promptPath = path.join(projectDir, 'ORCHESTRATOR-PROMPT.md');
+    fs.writeFileSync(promptPath, prompt, 'utf8');
+    filesWritten.push('ORCHESTRATOR-PROMPT.md');
+  }
+
+  // Pro tier (full): write ORCHESTRATOR-PROMPT.md + orchestrator/ directory
+  if (promptLevel === 'full') {
+    if (prompt) {
+      const promptPath = path.join(projectDir, 'ORCHESTRATOR-PROMPT.md');
+      fs.writeFileSync(promptPath, prompt, 'utf8');
+      filesWritten.push('ORCHESTRATOR-PROMPT.md');
+    }
+
+    if (orchestratorFiles && typeof orchestratorFiles === 'object') {
+      const orchestratorDir = path.join(projectDir, 'orchestrator');
+      if (!fs.existsSync(orchestratorDir)) {
+        fs.mkdirSync(orchestratorDir, { recursive: true });
+      }
+
+      for (const [filename, content] of Object.entries(orchestratorFiles)) {
+        const filePath = path.join(orchestratorDir, filename);
+        fs.writeFileSync(filePath, content, 'utf8');
+        filesWritten.push(`orchestrator/${filename}`);
+      }
+    }
+  }
+
+  // Write session marker so we know these prompts were delivered (not user-owned)
+  if (filesWritten.length > 0) {
+    const markerPath = path.join(projectDir, SESSION_MARKER);
+    const markerData = {
+      deliveredAt: new Date().toISOString(),
+      promptLevel,
+      files: filesWritten
+    };
+    fs.writeFileSync(markerPath, JSON.stringify(markerData, null, 2), 'utf8');
+  }
+
+  return { promptLevel, filesWritten };
+}
+
+/**
+ * Clean up delivered prompts on session end / logout.
+ * Only deletes files that we delivered (tracked via session marker).
+ * @param {string} projectDir - User's CWD
+ * @returns {Promise<{cleaned: boolean, filesRemoved: string[]}>}
+ */
+async function cleanupPrompts(projectDir) {
+  const markerPath = path.join(projectDir, SESSION_MARKER);
+  const filesRemoved = [];
+
+  // Check if we delivered prompts in this session
+  if (!fs.existsSync(markerPath)) {
+    return { cleaned: false, filesRemoved };
+  }
+
+  try {
+    const markerData = JSON.parse(fs.readFileSync(markerPath, 'utf8'));
+    const deliveredFiles = markerData.files || [];
+
+    // Remove each delivered file
+    for (const file of deliveredFiles) {
+      const filePath = path.join(projectDir, file);
+      if (fs.existsSync(filePath)) {
+        fs.unlinkSync(filePath);
+        filesRemoved.push(file);
+      }
+    }
+
+    // Remove orchestrator directory if it's now empty
+    const orchestratorDir = path.join(projectDir, 'orchestrator');
+    if (fs.existsSync(orchestratorDir)) {
+      const remaining = fs.readdirSync(orchestratorDir);
+      if (remaining.length === 0) {
+        fs.rmdirSync(orchestratorDir);
+      }
+    }
+
+    // Remove the session marker
+    fs.unlinkSync(markerPath);
+
+    return { cleaned: true, filesRemoved };
+  } catch (err) {
+    console.error('Error cleaning up prompts:', err.message);
+    return { cleaned: false, filesRemoved };
+  }
+}
+
+module.exports = { fetchAndWritePrompt, cleanupPrompts };

package/lib/settings-gen.js

@@ -7,6 +7,45 @@ const path = require('path');
 // Worker settings generator
 // ---------------------------------------------------------------------------
 
+// ---------------------------------------------------------------------------
+// Tier-based permission definitions
+// ---------------------------------------------------------------------------
+
+const TIER_PERMISSIONS = {
+  // Free tier: basic file operations only
+  free: {
+    tools: ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep'],
+    mcp: [], // No MCP tools
+    network: false,
+    agents: false,
+  },
+  // Standard tier: + network tools
+  standard: {
+    tools: ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep'],
+    mcp: [], // No MCP tools
+    network: true, // WebFetch, WebSearch
+    agents: true,
+  },
+  // Pro tier: full access including all MCP tools
+  pro: {
+    tools: ['Read', 'Write', 'Edit', 'Bash', 'Glob', 'Grep'],
+    mcp: [
+      'mcp__studychat__*',
+      'mcp__postforme__*',
+      'mcp__render-billing__*',
+      'mcp__netlify-billing__*',
+      'mcp__chrome-devtools__*',
+      'mcp__gkchatty-production__*',
+      'mcp__builder-pro-mcp__*',
+      'mcp__gmail__*',
+      'mcp__c2c__*',
+      'mcp__atlas-architect__*',
+    ],
+    network: true,
+    agents: true,
+  },
+};
+
 /**
  * Generate a Claude Code worker settings object for a terminal.
  *
@@ -14,15 +53,20 @@ const path = require('path');
  * @param {string|string[]} scope    - File scope path(s), or '*'/'' for unrestricted
  * @param {Object}          [options={}]
  * @param {number}          [options.port=3000]          - Server port for hook URLs
+ * @param {string}          [options.tier='pro']         - User tier: 'free', 'standard', 'pro'
  * @param {string[]}        [options.additionalAllow=[]] - Extra allow rules to merge
  * @param {string[]}        [options.additionalDeny=[]]  - Extra deny rules to merge
  * @returns {Object} Settings object suitable for `.claude/settings.local.json`
  */
 function generateWorkerSettings(terminalId, scope, options = {}) {
   const port = options.port || 3000;
+  const tier = options.tier || 'pro';
   const additionalAllow = options.additionalAllow || [];
   const additionalDeny = options.additionalDeny || [];
 
+  // Get tier permissions (default to free if unknown tier)
+  const tierPerms = TIER_PERMISSIONS[tier] || TIER_PERMISSIONS.free;
+
   // Build Edit/Write rules based on scope
   const editWriteRules = [];
   const unrestricted = !scope || scope === '*' || (Array.isArray(scope) && scope.length === 0);
@@ -39,12 +83,13 @@ function generateWorkerSettings(terminalId, scope, options = {}) {
     }
   }
 
+  // Base permissions for all tiers
   const allow = [
     'Read',
     'Glob',
     'Grep',
     ...editWriteRules,
-    // Safe bash commands
+    // Safe bash commands (all tiers)
     'Bash(npm test *)',
     'Bash(npm run *)',
     'Bash(node *)',
@@ -59,22 +104,23 @@ function generateWorkerSettings(terminalId, scope, options = {}) {
     'Bash(tail *)',
     'Bash(mkdir *)',
     'Bash(cp *)',
-    // MCP tools — all enabled servers
-    'mcp__studychat__*',
-    'mcp__postforme__*',
-    'mcp__render-billing__*',
-    'mcp__netlify-billing__*',
-    'mcp__chrome-devtools__*',
-    'mcp__gkchatty-production__*',
-    'mcp__builder-pro-mcp__*',
-    'mcp__gmail__*',
-    'mcp__c2c__*',
-    'mcp__atlas-architect__*',
-    // Network and research
-    'WebFetch(*)',
-    'WebSearch(*)',
-    // Additional bash
-    'Bash(curl *)',
+  ];
+
+  // Add tier-specific permissions
+  if (tierPerms.network) {
+    allow.push('WebFetch(*)', 'WebSearch(*)');
+    allow.push('Bash(curl *)');
+  }
+
+  if (tierPerms.agents) {
+    allow.push('Agent(*)');
+  }
+
+  // Add MCP tools for the tier
+  allow.push(...tierPerms.mcp);
+
+  // Additional bash commands (all tiers)
+  allow.push(
     'Bash(cd *)',
     'Bash(grep *)',
     'Bash(find *)',
@@ -86,10 +132,10 @@ function generateWorkerSettings(terminalId, scope, options = {}) {
     'Bash(git add *)',
     'Bash(git commit *)',
     'Bash(git push *)',
-    // Sub-agents
-    'Agent(*)',
-    ...additionalAllow,
-  ];
+  );
+
+  // Merge additional allows
+  allow.push(...additionalAllow);
 
   const deny = [
     'Bash(rm -rf *)',
@@ -121,6 +167,7 @@ function generateWorkerSettings(terminalId, scope, options = {}) {
  * @param {string}        projectDir - Absolute path to the project directory
  * @param {string|string[]} scope    - File scope path(s)
  * @param {Object}        [options={}]
+ * @param {string}        [options.tier='pro'] - User tier for permission gating
  * @returns {string} Absolute path to the written settings file
  */
 function writeWorkerSettings(terminalId, projectDir, scope, options = {}) {
@@ -145,15 +192,27 @@ function writeWorkerSettings(terminalId, projectDir, scope, options = {}) {
   const mergedAllow = [...new Set([...(existing.permissions?.allow || []), ...settings.permissions.allow])];
   const mergedDeny = [...new Set([...(existing.permissions?.deny || []), ...settings.permissions.deny])];
 
+  // Build hooks for self-improvement loop (matches Claude Code's nested format)
+  const ninjaDir = path.resolve(__dirname, '..');
+  const hooks = {
+    PostToolUse: [{
+      matcher: '',
+      hooks: [{
+        type: 'command',
+        command: path.join(ninjaDir, '.claude/hooks/track-tool.sh'),
+      }],
+    }],
+  };
+
   const merged = {
     ...existing,
     permissions: { allow: mergedAllow, deny: mergedDeny },
+    hooks,
     sandbox: settings.sandbox,
-    // Preserve existing hooks, enabledMcpjsonServers, etc.
   };
 
   fs.writeFileSync(settingsPath, JSON.stringify(merged, null, 2) + '\n', 'utf8');
   return settingsPath;
 }
 
-module.exports = { generateWorkerSettings, writeWorkerSettings };
+module.exports = { generateWorkerSettings, writeWorkerSettings, TIER_PERMISSIONS };

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "ninja-terminals",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Multi-terminal Claude Code orchestrator with DAG task management, permission hooks, and resilience",
   "main": "server.js",
   "bin": {
-    "ninja-terminals": "./cli.js"
+    "ninja-terminals": "cli.js"
   },
   "scripts": {
     "start": "node server.js"
@@ -12,11 +12,9 @@
   "files": [
     "lib/",
     "public/",
-    "orchestrator/",
     "cli.js",
     "server.js",
-    "CLAUDE.md",
-    "ORCHESTRATOR-PROMPT.md"
+    "CLAUDE.md"
   ],
   "keywords": [
     "claude",
@@ -31,7 +29,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/davidmorin/ninja-terminals"
+    "url": "git+https://github.com/dmos82/ninja-terminals.git"
   },
   "homepage": "https://ninjaterminals.com",
   "engines": {
@@ -39,7 +37,11 @@
   },
   "type": "commonjs",
   "dependencies": {
+    "@anthropic-ai/sdk": "^0.80.0",
+    "cheerio": "^1.2.0",
     "express": "^5.2.1",
+    "multer": "^2.1.1",
+    "node-fetch": "^2.7.0",
     "node-pty": "^1.2.0-beta.10",
     "ws": "^8.19.0"
   }