offwatch 0.5.12 → 0.5.13

package/src/index.ts

@@ -1,182 +0,0 @@
-import { Command } from "commander";
-import { onboard } from "./commands/onboard.js";
-import { doctor } from "./commands/doctor.js";
-import { envCommand } from "./commands/env.js";
-import { configure } from "./commands/configure.js";
-import { addAllowedHostname } from "./commands/allowed-hostname.js";
-import { heartbeatRun } from "./commands/heartbeat-run.js";
-import { runCommand } from "./commands/run.js";
-import { bootstrapCeoInvite } from "./commands/auth-bootstrap-ceo.js";
-import { dbBackupCommand } from "./commands/db-backup.js";
-import { registerContextCommands } from "./commands/client/context.js";
-import { registerCompanyCommands } from "./commands/client/company.js";
-import { registerIssueCommands } from "./commands/client/issue.js";
-import { registerAgentCommands } from "./commands/client/agent.js";
-import { registerApprovalCommands } from "./commands/client/approval.js";
-import { registerActivityCommands } from "./commands/client/activity.js";
-import { registerDashboardCommands } from "./commands/client/dashboard.js";
-import { registerRoutineCommands } from "./commands/routines.js";
-import { registerFeedbackCommands } from "./commands/client/feedback.js";
-import { applyDataDirOverride, type DataDirOptionLike } from "./config/data-dir.js";
-import { loadPaperclipEnvFile } from "./config/env.js";
-import { initTelemetryFromConfigFile, flushTelemetry } from "./telemetry.js";
-import { registerWorktreeCommands } from "./commands/worktree.js";
-import { registerPluginCommands } from "./commands/client/plugin.js";
-import { registerClientAuthCommands } from "./commands/client/auth.js";
-import { cliVersion } from "./version.js";
-
-const program = new Command();
-const DATA_DIR_OPTION_HELP =
-  "Paperclip data directory root (isolates state from ~/.paperclip)";
-
-program
-  .name("paperclipai")
-  .description("Paperclip CLI — setup, diagnose, and configure your instance")
-  .version(cliVersion);
-
-program.hook("preAction", (_thisCommand, actionCommand) => {
-  const options = actionCommand.optsWithGlobals() as DataDirOptionLike;
-  const optionNames = new Set(actionCommand.options.map((option) => option.attributeName()));
-  applyDataDirOverride(options, {
-    hasConfigOption: optionNames.has("config"),
-    hasContextOption: optionNames.has("context"),
-  });
-  loadPaperclipEnvFile(options.config);
-  initTelemetryFromConfigFile(options.config);
-});
-
-program
-  .command("onboard")
-  .description("Interactive first-run setup wizard")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("--bind <mode>", "Quickstart reachability preset (loopback, lan, tailnet)")
-  .option("-y, --yes", "Accept quickstart defaults (trusted local loopback unless --bind is set) and start immediately", false)
-  .option("--run", "Start Paperclip immediately after saving config", false)
-  .action(onboard);
-
-program
-  .command("doctor")
-  .description("Run diagnostic checks on your Paperclip setup")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("--repair", "Attempt to repair issues automatically")
-  .alias("--fix")
-  .option("-y, --yes", "Skip repair confirmation prompts")
-  .action(async (opts) => {
-    await doctor(opts);
-  });
-
-program
-  .command("env")
-  .description("Print environment variables for deployment")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .action(envCommand);
-
-program
-  .command("configure")
-  .description("Update configuration sections")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("-s, --section <section>", "Section to configure (llm, database, logging, server, storage, secrets)")
-  .action(configure);
-
-program
-  .command("db:backup")
-  .description("Create a one-off database backup using current config")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("--dir <path>", "Backup output directory (overrides config)")
-  .option("--retention-days <days>", "Retention window used for pruning", (value) => Number(value))
-  .option("--filename-prefix <prefix>", "Backup filename prefix", "paperclip")
-  .option("--json", "Print backup metadata as JSON")
-  .action(async (opts) => {
-    await dbBackupCommand(opts);
-  });
-
-program
-  .command("allowed-hostname")
-  .description("Allow a hostname for authenticated/private mode access")
-  .argument("<host>", "Hostname to allow (for example dotta-macbook-pro)")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .action(addAllowedHostname);
-
-program
-  .command("run")
-  .description("Bootstrap local setup (onboard + doctor) and run Paperclip")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("-i, --instance <id>", "Local instance id (default: default)")
-  .option("--bind <mode>", "On first run, use onboarding reachability preset (loopback, lan, tailnet)")
-  .option("--repair", "Attempt automatic repairs during doctor", true)
-  .option("--no-repair", "Disable automatic repairs during doctor")
-  .action(runCommand);
-
-const heartbeat = program.command("heartbeat").description("Heartbeat utilities");
-
-heartbeat
-  .command("run")
-  .description("Run one agent heartbeat and stream live logs")
-  .requiredOption("-a, --agent-id <agentId>", "Agent ID to invoke")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("--context <path>", "Path to CLI context file")
-  .option("--profile <name>", "CLI context profile name")
-  .option("--api-base <url>", "Base URL for the Paperclip server API")
-  .option("--api-key <token>", "Bearer token for agent-authenticated calls")
-  .option(
-    "--source <source>",
-    "Invocation source (timer | assignment | on_demand | automation)",
-    "on_demand",
-  )
-  .option("--trigger <trigger>", "Trigger detail (manual | ping | callback | system)", "manual")
-  .option("--timeout-ms <ms>", "Max time to wait before giving up", "0")
-  .option("--json", "Output raw JSON where applicable")
-  .option("--debug", "Show raw adapter stdout/stderr JSON chunks")
-  .action(heartbeatRun);
-
-registerContextCommands(program);
-registerCompanyCommands(program);
-registerIssueCommands(program);
-registerAgentCommands(program);
-registerApprovalCommands(program);
-registerActivityCommands(program);
-registerDashboardCommands(program);
-registerRoutineCommands(program);
-registerFeedbackCommands(program);
-registerWorktreeCommands(program);
-registerPluginCommands(program);
-
-const auth = program.command("auth").description("Authentication and bootstrap utilities");
-
-auth
-  .command("bootstrap-ceo")
-  .description("Create a one-time bootstrap invite URL for first instance admin")
-  .option("-c, --config <path>", "Path to config file")
-  .option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP)
-  .option("--force", "Create new invite even if admin already exists", false)
-  .option("--expires-hours <hours>", "Invite expiration window in hours", (value) => Number(value))
-  .option("--base-url <url>", "Public base URL used to print invite link")
-  .action(bootstrapCeoInvite);
-
-registerClientAuthCommands(auth);
-
-async function main(): Promise<void> {
-  let failed = false;
-  try {
-    await program.parseAsync();
-  } catch (err) {
-    failed = true;
-    console.error(err instanceof Error ? err.message : String(err));
-  } finally {
-    await flushTelemetry();
-  }
-
-  if (failed) {
-    process.exit(1);
-  }
-}
-
-void main();

package/src/prompts/database.ts

@@ -1,157 +0,0 @@
-import * as p from "@clack/prompts";
-import type { DatabaseConfig } from "../config/schema.js";
-import {
-  resolveDefaultBackupDir,
-  resolveDefaultEmbeddedPostgresDir,
-  resolvePaperclipInstanceId,
-} from "../config/home.js";
-
-export async function promptDatabase(current?: DatabaseConfig): Promise<DatabaseConfig> {
-  const instanceId = resolvePaperclipInstanceId();
-  const defaultEmbeddedDir = resolveDefaultEmbeddedPostgresDir(instanceId);
-  const defaultBackupDir = resolveDefaultBackupDir(instanceId);
-  const base: DatabaseConfig = current ?? {
-    mode: "embedded-postgres",
-    embeddedPostgresDataDir: defaultEmbeddedDir,
-    embeddedPostgresPort: 54329,
-    backup: {
-      enabled: true,
-      intervalMinutes: 60,
-      retentionDays: 30,
-      dir: defaultBackupDir,
-    },
-  };
-
-  const mode = await p.select({
-    message: "Database mode",
-    options: [
-      { value: "embedded-postgres" as const, label: "Embedded PostgreSQL (managed locally)", hint: "recommended" },
-      { value: "postgres" as const, label: "PostgreSQL (external server)" },
-    ],
-    initialValue: base.mode,
-  });
-
-  if (p.isCancel(mode)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  let connectionString: string | undefined = base.connectionString;
-  let embeddedPostgresDataDir = base.embeddedPostgresDataDir || defaultEmbeddedDir;
-  let embeddedPostgresPort = base.embeddedPostgresPort || 54329;
-
-  if (mode === "postgres") {
-    const value = await p.text({
-      message: "PostgreSQL connection string",
-      defaultValue: base.connectionString ?? "",
-      placeholder: "postgres://user:pass@localhost:5432/paperclip",
-      validate: (val) => {
-        if (!val) return "Connection string is required for PostgreSQL mode";
-        if (!val.startsWith("postgres")) return "Must be a postgres:// or postgresql:// URL";
-      },
-    });
-
-    if (p.isCancel(value)) {
-      p.cancel("Setup cancelled.");
-      process.exit(0);
-    }
-
-    connectionString = value;
-  } else {
-    const dataDir = await p.text({
-      message: "Embedded PostgreSQL data directory",
-      defaultValue: base.embeddedPostgresDataDir || defaultEmbeddedDir,
-      placeholder: defaultEmbeddedDir,
-    });
-
-    if (p.isCancel(dataDir)) {
-      p.cancel("Setup cancelled.");
-      process.exit(0);
-    }
-
-    embeddedPostgresDataDir = dataDir || defaultEmbeddedDir;
-
-    const portValue = await p.text({
-      message: "Embedded PostgreSQL port",
-      defaultValue: String(base.embeddedPostgresPort || 54329),
-      placeholder: "54329",
-      validate: (val) => {
-        const n = Number(val);
-        if (!Number.isInteger(n) || n < 1 || n > 65535) return "Port must be an integer between 1 and 65535";
-      },
-    });
-
-    if (p.isCancel(portValue)) {
-      p.cancel("Setup cancelled.");
-      process.exit(0);
-    }
-
-    embeddedPostgresPort = Number(portValue || "54329");
-    connectionString = undefined;
-  }
-
-  const backupEnabled = await p.confirm({
-    message: "Enable automatic database backups?",
-    initialValue: base.backup.enabled,
-  });
-  if (p.isCancel(backupEnabled)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  const backupDirInput = await p.text({
-    message: "Backup directory",
-    defaultValue: base.backup.dir || defaultBackupDir,
-    placeholder: defaultBackupDir,
-    validate: (val) => (!val || val.trim().length === 0 ? "Backup directory is required" : undefined),
-  });
-  if (p.isCancel(backupDirInput)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  const backupIntervalInput = await p.text({
-    message: "Backup interval (minutes)",
-    defaultValue: String(base.backup.intervalMinutes || 60),
-    placeholder: "60",
-    validate: (val) => {
-      const n = Number(val);
-      if (!Number.isInteger(n) || n < 1) return "Interval must be a positive integer";
-      if (n > 10080) return "Interval must be 10080 minutes (7 days) or less";
-      return undefined;
-    },
-  });
-  if (p.isCancel(backupIntervalInput)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  const backupRetentionInput = await p.text({
-    message: "Backup retention (days)",
-    defaultValue: String(base.backup.retentionDays || 30),
-    placeholder: "30",
-    validate: (val) => {
-      const n = Number(val);
-      if (!Number.isInteger(n) || n < 1) return "Retention must be a positive integer";
-      if (n > 3650) return "Retention must be 3650 days or less";
-      return undefined;
-    },
-  });
-  if (p.isCancel(backupRetentionInput)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  return {
-    mode,
-    connectionString,
-    embeddedPostgresDataDir,
-    embeddedPostgresPort,
-    backup: {
-      enabled: backupEnabled,
-      intervalMinutes: Number(backupIntervalInput || "60"),
-      retentionDays: Number(backupRetentionInput || "30"),
-      dir: backupDirInput || defaultBackupDir,
-    },
-  };
-}

package/src/prompts/llm.ts

@@ -1,43 +0,0 @@
-import * as p from "@clack/prompts";
-import type { LlmConfig } from "../config/schema.js";
-
-export async function promptLlm(): Promise<LlmConfig | undefined> {
-  const configureLlm = await p.confirm({
-    message: "Configure an LLM provider now?",
-    initialValue: false,
-  });
-
-  if (p.isCancel(configureLlm)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  if (!configureLlm) return undefined;
-
-  const provider = await p.select({
-    message: "LLM provider",
-    options: [
-      { value: "claude" as const, label: "Claude (Anthropic)" },
-      { value: "openai" as const, label: "OpenAI" },
-    ],
-  });
-
-  if (p.isCancel(provider)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  const apiKey = await p.password({
-    message: `${provider === "claude" ? "Anthropic" : "OpenAI"} API key`,
-    validate: (val) => {
-      if (!val) return "API key is required";
-    },
-  });
-
-  if (p.isCancel(apiKey)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  return { provider, apiKey };
-}

package/src/prompts/logging.ts

@@ -1,37 +0,0 @@
-import * as p from "@clack/prompts";
-import type { LoggingConfig } from "../config/schema.js";
-import { resolveDefaultLogsDir, resolvePaperclipInstanceId } from "../config/home.js";
-
-export async function promptLogging(): Promise<LoggingConfig> {
-  const defaultLogDir = resolveDefaultLogsDir(resolvePaperclipInstanceId());
-  const mode = await p.select({
-    message: "Logging mode",
-    options: [
-      { value: "file" as const, label: "File-based logging", hint: "recommended" },
-      { value: "cloud" as const, label: "Cloud logging", hint: "coming soon" },
-    ],
-  });
-
-  if (p.isCancel(mode)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  if (mode === "file") {
-    const logDir = await p.text({
-      message: "Log directory",
-      defaultValue: defaultLogDir,
-      placeholder: defaultLogDir,
-    });
-
-    if (p.isCancel(logDir)) {
-      p.cancel("Setup cancelled.");
-      process.exit(0);
-    }
-
-    return { mode: "file", logDir: logDir || defaultLogDir };
-  }
-
-  p.note("Cloud logging is coming soon. Using file-based logging for now.");
-  return { mode: "file", logDir: defaultLogDir };
-}

package/src/prompts/secrets.ts

@@ -1,99 +0,0 @@
-import * as p from "@clack/prompts";
-import type { SecretProvider } from "@paperclipai/shared";
-import type { SecretsConfig } from "../config/schema.js";
-import { resolveDefaultSecretsKeyFilePath, resolvePaperclipInstanceId } from "../config/home.js";
-
-function defaultKeyFilePath(): string {
-  return resolveDefaultSecretsKeyFilePath(resolvePaperclipInstanceId());
-}
-
-export function defaultSecretsConfig(): SecretsConfig {
-  const keyFilePath = defaultKeyFilePath();
-  return {
-    provider: "local_encrypted",
-    strictMode: false,
-    localEncrypted: {
-      keyFilePath,
-    },
-  };
-}
-
-export async function promptSecrets(current?: SecretsConfig): Promise<SecretsConfig> {
-  const base = current ?? defaultSecretsConfig();
-
-  const provider = await p.select({
-    message: "Secrets provider",
-    options: [
-      {
-        value: "local_encrypted" as const,
-        label: "Local encrypted (recommended)",
-        hint: "best for single-developer installs",
-      },
-      {
-        value: "aws_secrets_manager" as const,
-        label: "AWS Secrets Manager",
-        hint: "requires external adapter integration",
-      },
-      {
-        value: "gcp_secret_manager" as const,
-        label: "GCP Secret Manager",
-        hint: "requires external adapter integration",
-      },
-      {
-        value: "vault" as const,
-        label: "HashiCorp Vault",
-        hint: "requires external adapter integration",
-      },
-    ],
-    initialValue: base.provider,
-  });
-
-  if (p.isCancel(provider)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  const strictMode = await p.confirm({
-    message: "Require secret refs for sensitive env vars?",
-    initialValue: base.strictMode,
-  });
-
-  if (p.isCancel(strictMode)) {
-    p.cancel("Setup cancelled.");
-    process.exit(0);
-  }
-
-  const fallbackDefault = defaultKeyFilePath();
-  let keyFilePath = base.localEncrypted.keyFilePath || fallbackDefault;
-  if (provider === "local_encrypted") {
-    const keyPath = await p.text({
-      message: "Local encrypted key file path",
-      defaultValue: keyFilePath,
-      placeholder: fallbackDefault,
-      validate: (value) => {
-        if (!value || value.trim().length === 0) return "Key file path is required";
-      },
-    });
-
-    if (p.isCancel(keyPath)) {
-      p.cancel("Setup cancelled.");
-      process.exit(0);
-    }
-    keyFilePath = keyPath.trim();
-  }
-
-  if (provider !== "local_encrypted") {
-    p.note(
-      `${provider} is not fully wired in this build yet. Keep local_encrypted unless you are actively implementing that adapter.`,
-      "Heads up",
-    );
-  }
-
-  return {
-    provider: provider as SecretProvider,
-    strictMode,
-    localEncrypted: {
-      keyFilePath,
-    },
-  };
-}