offwatch 0.5.12 → 0.5.13

package/src/commands/allowed-hostname.ts

@@ -1,40 +0,0 @@
-import * as p from "@clack/prompts";
-import pc from "picocolors";
-import { normalizeHostnameInput } from "../config/hostnames.js";
-import { readConfig, resolveConfigPath, writeConfig } from "../config/store.js";
-
-export async function addAllowedHostname(host: string, opts: { config?: string }): Promise<void> {
-  const configPath = resolveConfigPath(opts.config);
-  const config = readConfig(opts.config);
-
-  if (!config) {
-    p.log.error(`No config found at ${configPath}. Run ${pc.cyan("paperclip onboard")} first.`);
-    return;
-  }
-
-  const normalized = normalizeHostnameInput(host);
-  const current = new Set((config.server.allowedHostnames ?? []).map((value) => value.trim().toLowerCase()).filter(Boolean));
-  const existed = current.has(normalized);
-  current.add(normalized);
-
-  config.server.allowedHostnames = Array.from(current).sort();
-  config.$meta.updatedAt = new Date().toISOString();
-  config.$meta.source = "configure";
-  writeConfig(config, opts.config);
-
-  if (existed) {
-    p.log.info(`Hostname ${pc.cyan(normalized)} is already allowed.`);
-  } else {
-    p.log.success(`Added allowed hostname: ${pc.cyan(normalized)}`);
-    p.log.message(
-      pc.dim("Restart the Paperclip server for this change to take effect."),
-    );
-  }
-
-  if (!(config.server.deploymentMode === "authenticated" && config.server.exposure === "private")) {
-    p.log.message(
-      pc.dim("Note: allowed hostnames are enforced only in authenticated/private mode."),
-    );
-  }
-}
-

package/src/commands/auth-bootstrap-ceo.ts

@@ -1,138 +0,0 @@
-import { createHash, randomBytes } from "node:crypto";
-import * as p from "@clack/prompts";
-import pc from "picocolors";
-import { and, eq, gt, isNull } from "drizzle-orm";
-import { createDb, instanceUserRoles, invites } from "@paperclipai/db";
-import { inferBindModeFromHost } from "@paperclipai/shared";
-import { loadPaperclipEnvFile } from "../config/env.js";
-import { readConfig, resolveConfigPath } from "../config/store.js";
-
-function hashToken(token: string) {
-  return createHash("sha256").update(token).digest("hex");
-}
-
-function createInviteToken() {
-  return `pcp_bootstrap_${randomBytes(24).toString("hex")}`;
-}
-
-function resolveDbUrl(configPath?: string, explicitDbUrl?: string) {
-  if (explicitDbUrl) return explicitDbUrl;
-  const config = readConfig(configPath);
-  if (process.env.DATABASE_URL) return process.env.DATABASE_URL;
-  if (config?.database.mode === "postgres" && config.database.connectionString) {
-    return config.database.connectionString;
-  }
-  if (config?.database.mode === "embedded-postgres") {
-    const port = config.database.embeddedPostgresPort ?? 54329;
-    return `postgres://paperclip:paperclip@127.0.0.1:${port}/paperclip`;
-  }
-  return null;
-}
-
-function resolveBaseUrl(configPath?: string, explicitBaseUrl?: string) {
-  if (explicitBaseUrl) return explicitBaseUrl.replace(/\/+$/, "");
-  const fromEnv =
-    process.env.PAPERCLIP_PUBLIC_URL ??
-    process.env.PAPERCLIP_AUTH_PUBLIC_BASE_URL ??
-    process.env.BETTER_AUTH_URL ??
-    process.env.BETTER_AUTH_BASE_URL;
-  if (fromEnv?.trim()) return fromEnv.trim().replace(/\/+$/, "");
-  const config = readConfig(configPath);
-  if (config?.auth.baseUrlMode === "explicit" && config.auth.publicBaseUrl) {
-    return config.auth.publicBaseUrl.replace(/\/+$/, "");
-  }
-  const bind = config?.server.bind ?? inferBindModeFromHost(config?.server.host);
-  const host =
-    bind === "custom"
-      ? config?.server.customBindHost ?? config?.server.host ?? "localhost"
-      : config?.server.host ?? "localhost";
-  const port = config?.server.port ?? 3100;
-  const publicHost = host === "0.0.0.0" || bind === "lan" ? "localhost" : host;
-  return `http://${publicHost}:${port}`;
-}
-
-export async function bootstrapCeoInvite(opts: {
-  config?: string;
-  force?: boolean;
-  expiresHours?: number;
-  baseUrl?: string;
-  dbUrl?: string;
-}) {
-  const configPath = resolveConfigPath(opts.config);
-  loadPaperclipEnvFile(configPath);
-  const config = readConfig(configPath);
-  if (!config) {
-    p.log.error(`No config found at ${configPath}. Run ${pc.cyan("paperclip onboard")} first.`);
-    return;
-  }
-
-  if (config.server.deploymentMode !== "authenticated") {
-    p.log.info("Deployment mode is local_trusted. Bootstrap CEO invite is only required for authenticated mode.");
-    return;
-  }
-
-  const dbUrl = resolveDbUrl(configPath, opts.dbUrl);
-  if (!dbUrl) {
-    p.log.error(
-      "Could not resolve database connection for bootstrap.",
-    );
-    return;
-  }
-
-  const db = createDb(dbUrl);
-  const closableDb = db as typeof db & {
-    $client?: {
-      end?: (options?: { timeout?: number }) => Promise<void>;
-    };
-  };
-  try {
-    const existingAdminCount = await db
-      .select()
-      .from(instanceUserRoles)
-      .where(eq(instanceUserRoles.role, "instance_admin"))
-      .then((rows) => rows.length);
-
-    if (existingAdminCount > 0 && !opts.force) {
-      p.log.info("Instance already has an admin user. Use --force to generate a new bootstrap invite.");
-      return;
-    }
-
-    const now = new Date();
-    await db
-      .update(invites)
-      .set({ revokedAt: now, updatedAt: now })
-      .where(
-        and(
-          eq(invites.inviteType, "bootstrap_ceo"),
-          isNull(invites.revokedAt),
-          isNull(invites.acceptedAt),
-          gt(invites.expiresAt, now),
-        ),
-      );
-
-    const token = createInviteToken();
-    const expiresHours = Math.max(1, Math.min(24 * 30, opts.expiresHours ?? 72));
-    const created = await db
-      .insert(invites)
-      .values({
-        inviteType: "bootstrap_ceo",
-        tokenHash: hashToken(token),
-        allowedJoinTypes: "human",
-        expiresAt: new Date(Date.now() + expiresHours * 60 * 60 * 1000),
-        invitedByUserId: "system",
-      })
-      .returning()
-      .then((rows) => rows[0]);
-
-    const baseUrl = resolveBaseUrl(configPath, opts.baseUrl);
-    const inviteUrl = `${baseUrl}/invite/${token}`;
-    p.log.success("Created bootstrap CEO invite.");
-    p.log.message(`Invite URL: ${pc.cyan(inviteUrl)}`);
-    p.log.message(`Expires: ${pc.dim(created.expiresAt.toISOString())}`);
-  } catch (err) {
-    p.log.error(`Could not create bootstrap invite: ${err instanceof Error ? err.message : String(err)}`);
-    p.log.info("If using embedded-postgres, start the Paperclip server and run this command again.");
-  } finally {
-    await closableDb.$client?.end?.({ timeout: 5 }).catch(() => undefined);
-  }
-}

package/src/commands/client/activity.ts

@@ -1,71 +0,0 @@
-import { Command } from "commander";
-import type { ActivityEvent } from "@paperclipai/shared";
-import {
-  addCommonClientOptions,
-  formatInlineRecord,
-  handleCommandError,
-  printOutput,
-  resolveCommandContext,
-  type BaseClientOptions,
-} from "./common.js";
-
-interface ActivityListOptions extends BaseClientOptions {
-  companyId?: string;
-  agentId?: string;
-  entityType?: string;
-  entityId?: string;
-}
-
-export function registerActivityCommands(program: Command): void {
-  const activity = program.command("activity").description("Activity log operations");
-
-  addCommonClientOptions(
-    activity
-      .command("list")
-      .description("List company activity log entries")
-      .requiredOption("-C, --company-id <id>", "Company ID")
-      .option("--agent-id <id>", "Filter by agent ID")
-      .option("--entity-type <type>", "Filter by entity type")
-      .option("--entity-id <id>", "Filter by entity ID")
-      .action(async (opts: ActivityListOptions) => {
-        try {
-          const ctx = resolveCommandContext(opts, { requireCompany: true });
-          const params = new URLSearchParams();
-          if (opts.agentId) params.set("agentId", opts.agentId);
-          if (opts.entityType) params.set("entityType", opts.entityType);
-          if (opts.entityId) params.set("entityId", opts.entityId);
-
-          const query = params.toString();
-          const path = `/api/companies/${ctx.companyId}/activity${query ? `?${query}` : ""}`;
-          const rows = (await ctx.api.get<ActivityEvent[]>(path)) ?? [];
-
-          if (ctx.json) {
-            printOutput(rows, { json: true });
-            return;
-          }
-
-          if (rows.length === 0) {
-            printOutput([], { json: false });
-            return;
-          }
-
-          for (const row of rows) {
-            console.log(
-              formatInlineRecord({
-                id: row.id,
-                action: row.action,
-                actorType: row.actorType,
-                actorId: row.actorId,
-                entityType: row.entityType,
-                entityId: row.entityId,
-                createdAt: String(row.createdAt),
-              }),
-            );
-          }
-        } catch (err) {
-          handleCommandError(err);
-        }
-      }),
-    { includeCompany: false },
-  );
-}

package/src/commands/client/agent.ts

@@ -1,315 +0,0 @@
-import { Command } from "commander";
-import type { Agent } from "@paperclipai/shared";
-import {
-  removeMaintainerOnlySkillSymlinks,
-  resolvePaperclipSkillsDir,
-} from "@paperclipai/adapter-utils/server-utils";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import {
-  addCommonClientOptions,
-  formatInlineRecord,
-  handleCommandError,
-  printOutput,
-  resolveCommandContext,
-  type BaseClientOptions,
-} from "./common.js";
-
-interface AgentListOptions extends BaseClientOptions {
-  companyId?: string;
-}
-
-interface AgentLocalCliOptions extends BaseClientOptions {
-  companyId?: string;
-  keyName?: string;
-  installSkills?: boolean;
-}
-
-interface CreatedAgentKey {
-  id: string;
-  name: string;
-  token: string;
-  createdAt: string;
-}
-
-interface SkillsInstallSummary {
-  tool: "codex" | "claude";
-  target: string;
-  linked: string[];
-  removed: string[];
-  skipped: string[];
-  failed: Array<{ name: string; error: string }>;
-}
-
-const __moduleDir = path.dirname(fileURLToPath(import.meta.url));
-
-function codexSkillsHome(): string {
-  const fromEnv = process.env.CODEX_HOME?.trim();
-  const base = fromEnv && fromEnv.length > 0 ? fromEnv : path.join(os.homedir(), ".codex");
-  return path.join(base, "skills");
-}
-
-function claudeSkillsHome(): string {
-  const fromEnv = process.env.CLAUDE_HOME?.trim();
-  const base = fromEnv && fromEnv.length > 0 ? fromEnv : path.join(os.homedir(), ".claude");
-  return path.join(base, "skills");
-}
-
-async function installSkillsForTarget(
-  sourceSkillsDir: string,
-  targetSkillsDir: string,
-  tool: "codex" | "claude",
-): Promise<SkillsInstallSummary> {
-  const summary: SkillsInstallSummary = {
-    tool,
-    target: targetSkillsDir,
-    linked: [],
-    removed: [],
-    skipped: [],
-    failed: [],
-  };
-
-  await fs.mkdir(targetSkillsDir, { recursive: true });
-  const entries = await fs.readdir(sourceSkillsDir, { withFileTypes: true });
-  summary.removed = await removeMaintainerOnlySkillSymlinks(
-    targetSkillsDir,
-    entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name),
-  );
-  for (const entry of entries) {
-    if (!entry.isDirectory()) continue;
-    const source = path.join(sourceSkillsDir, entry.name);
-    const target = path.join(targetSkillsDir, entry.name);
-    const existing = await fs.lstat(target).catch(() => null);
-    if (existing) {
-      if (existing.isSymbolicLink()) {
-        let linkedPath: string | null = null;
-        try {
-          linkedPath = await fs.readlink(target);
-        } catch (err) {
-          await fs.unlink(target);
-          try {
-            await fs.symlink(source, target);
-            summary.linked.push(entry.name);
-            continue;
-          } catch (linkErr) {
-            summary.failed.push({
-              name: entry.name,
-              error:
-                err instanceof Error && linkErr instanceof Error
-                  ? `${err.message}; then ${linkErr.message}`
-                  : err instanceof Error
-                    ? err.message
-                    : `Failed to recover broken symlink: ${String(err)}`,
-            });
-            continue;
-          }
-        }
-
-        const resolvedLinkedPath = path.isAbsolute(linkedPath)
-          ? linkedPath
-          : path.resolve(path.dirname(target), linkedPath);
-        const linkedTargetExists = await fs
-          .stat(resolvedLinkedPath)
-          .then(() => true)
-          .catch(() => false);
-
-        if (!linkedTargetExists) {
-          await fs.unlink(target);
-        } else {
-          summary.skipped.push(entry.name);
-          continue;
-        }
-      } else {
-        summary.skipped.push(entry.name);
-        continue;
-      }
-    }
-
-    try {
-      await fs.symlink(source, target);
-      summary.linked.push(entry.name);
-    } catch (err) {
-      summary.failed.push({
-        name: entry.name,
-        error: err instanceof Error ? err.message : String(err),
-      });
-    }
-  }
-
-  return summary;
-}
-
-function buildAgentEnvExports(input: {
-  apiBase: string;
-  companyId: string;
-  agentId: string;
-  apiKey: string;
-}): string {
-  const escaped = (value: string) => value.replace(/'/g, "'\"'\"'");
-  return [
-    `export PAPERCLIP_API_URL='${escaped(input.apiBase)}'`,
-    `export PAPERCLIP_COMPANY_ID='${escaped(input.companyId)}'`,
-    `export PAPERCLIP_AGENT_ID='${escaped(input.agentId)}'`,
-    `export PAPERCLIP_API_KEY='${escaped(input.apiKey)}'`,
-  ].join("\n");
-}
-
-export function registerAgentCommands(program: Command): void {
-  const agent = program.command("agent").description("Agent operations");
-
-  addCommonClientOptions(
-    agent
-      .command("list")
-      .description("List agents for a company")
-      .requiredOption("-C, --company-id <id>", "Company ID")
-      .action(async (opts: AgentListOptions) => {
-        try {
-          const ctx = resolveCommandContext(opts, { requireCompany: true });
-          const rows = (await ctx.api.get<Agent[]>(`/api/companies/${ctx.companyId}/agents`)) ?? [];
-
-          if (ctx.json) {
-            printOutput(rows, { json: true });
-            return;
-          }
-
-          if (rows.length === 0) {
-            printOutput([], { json: false });
-            return;
-          }
-
-          for (const row of rows) {
-            console.log(
-              formatInlineRecord({
-                id: row.id,
-                name: row.name,
-                role: row.role,
-                status: row.status,
-                reportsTo: row.reportsTo,
-                budgetMonthlyCents: row.budgetMonthlyCents,
-                spentMonthlyCents: row.spentMonthlyCents,
-              }),
-            );
-          }
-        } catch (err) {
-          handleCommandError(err);
-        }
-      }),
-    { includeCompany: false },
-  );
-
-  addCommonClientOptions(
-    agent
-      .command("get")
-      .description("Get one agent")
-      .argument("<agentId>", "Agent ID")
-      .action(async (agentId: string, opts: BaseClientOptions) => {
-        try {
-          const ctx = resolveCommandContext(opts);
-          const row = await ctx.api.get<Agent>(`/api/agents/${agentId}`);
-          printOutput(row, { json: ctx.json });
-        } catch (err) {
-          handleCommandError(err);
-        }
-      }),
-  );
-
-  addCommonClientOptions(
-    agent
-      .command("local-cli")
-      .description(
-        "Create an agent API key, install local Paperclip skills for Codex/Claude, and print shell exports",
-      )
-      .argument("<agentRef>", "Agent ID or shortname/url-key")
-      .requiredOption("-C, --company-id <id>", "Company ID")
-      .option("--key-name <name>", "API key label", "local-cli")
-      .option(
-        "--no-install-skills",
-        "Skip installing Paperclip skills into ~/.codex/skills and ~/.claude/skills",
-      )
-      .action(async (agentRef: string, opts: AgentLocalCliOptions) => {
-        try {
-          const ctx = resolveCommandContext(opts, { requireCompany: true });
-          const query = new URLSearchParams({ companyId: ctx.companyId ?? "" });
-          const agentRow = await ctx.api.get<Agent>(
-            `/api/agents/${encodeURIComponent(agentRef)}?${query.toString()}`,
-          );
-          if (!agentRow) {
-            throw new Error(`Agent not found: ${agentRef}`);
-          }
-
-          const now = new Date().toISOString().replaceAll(":", "-");
-          const keyName = opts.keyName?.trim() ? opts.keyName.trim() : `local-cli-${now}`;
-          const key = await ctx.api.post<CreatedAgentKey>(`/api/agents/${agentRow.id}/keys`, { name: keyName });
-          if (!key) {
-            throw new Error("Failed to create API key");
-          }
-
-          const installSummaries: SkillsInstallSummary[] = [];
-          if (opts.installSkills !== false) {
-            const skillsDir = await resolvePaperclipSkillsDir(__moduleDir, [path.resolve(process.cwd(), "skills")]);
-            if (!skillsDir) {
-              throw new Error(
-                "Could not locate local Paperclip skills directory. Expected ./skills in the repo checkout.",
-              );
-            }
-
-            installSummaries.push(
-              await installSkillsForTarget(skillsDir, codexSkillsHome(), "codex"),
-              await installSkillsForTarget(skillsDir, claudeSkillsHome(), "claude"),
-            );
-          }
-
-          const exportsText = buildAgentEnvExports({
-            apiBase: ctx.api.apiBase,
-            companyId: agentRow.companyId,
-            agentId: agentRow.id,
-            apiKey: key.token,
-          });
-
-          if (ctx.json) {
-            printOutput(
-              {
-                agent: {
-                  id: agentRow.id,
-                  name: agentRow.name,
-                  urlKey: agentRow.urlKey,
-                  companyId: agentRow.companyId,
-                },
-                key: {
-                  id: key.id,
-                  name: key.name,
-                  createdAt: key.createdAt,
-                  token: key.token,
-                },
-                skills: installSummaries,
-                exports: exportsText,
-              },
-              { json: true },
-            );
-            return;
-          }
-
-          console.log(`Agent: ${agentRow.name} (${agentRow.id})`);
-          console.log(`API key created: ${key.name} (${key.id})`);
-          if (installSummaries.length > 0) {
-            for (const summary of installSummaries) {
-              console.log(
-                `${summary.tool}: linked=${summary.linked.length} removed=${summary.removed.length} skipped=${summary.skipped.length} failed=${summary.failed.length} target=${summary.target}`,
-              );
-              for (const failed of summary.failed) {
-                console.log(`  failed ${failed.name}: ${failed.error}`);
-              }
-            }
-          }
-          console.log("");
-          console.log("# Run this in your shell before launching codex/claude:");
-          console.log(exportsText);
-        } catch (err) {
-          handleCommandError(err);
-        }
-      }),
-    { includeCompany: false },
-  );
-}