onbuzz 3.3.0

package/node_modules/rimraf/dist/esm/use-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-native.js","sourceRoot":"","sources":["../../src/use-native.ts"],"names":[],"mappings":"AAEA,oBAAoB;AACpB,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO;KAC3C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;KACjB,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC5B,MAAM,SAAS,GAAG,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,CAAA;AAE7D,oEAAoE;AACpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GACpB,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC1C,GAAG,EAAE,CAAC,KAAK;IACb,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,CAAA;AACvC,MAAM,CAAC,MAAM,aAAa,GACxB,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC1C,GAAG,EAAE,CAAC,KAAK;IACb,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,CAAA","sourcesContent":["import { RimrafAsyncOptions, RimrafOptions } from './index.js'\n\n/* c8 ignore next */\nconst [major = 0, minor = 0] = process.version\n  .replace(/^v/, '')\n  .split('.')\n  .map(v => parseInt(v, 10))\nconst hasNative = major > 14 || (major === 14 && minor >= 14)\n\n// we do NOT use native by default on Windows, because Node's native\n// rm implementation is less advanced.  Change this code if that changes.\nexport const useNative: (opt?: RimrafAsyncOptions) => boolean =\n  !hasNative || process.platform === 'win32' ?\n    () => false\n  : opt => !opt?.signal && !opt?.filter\nexport const useNativeSync: (opt?: RimrafOptions) => boolean =\n  !hasNative || process.platform === 'win32' ?\n    () => false\n  : opt => !opt?.signal && !opt?.filter\n"]}

package/node_modules/rimraf/package.json

@@ -0,0 +1,92 @@
+{
+  "name": "rimraf",
+  "version": "6.1.2",
+  "type": "module",
+  "tshy": {
+    "main": true,
+    "exports": {
+      "./package.json": "./package.json",
+      ".": "./src/index.ts"
+    }
+  },
+  "bin": "./dist/esm/bin.mjs",
+  "main": "./dist/commonjs/index.js",
+  "types": "./dist/commonjs/index.d.ts",
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "import": {
+        "types": "./dist/esm/index.d.ts",
+        "default": "./dist/esm/index.js"
+      },
+      "require": {
+        "types": "./dist/commonjs/index.d.ts",
+        "default": "./dist/commonjs/index.js"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "description": "A deep deletion module for node (like `rm -rf`)",
+  "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+  "license": "BlueOak-1.0.0",
+  "repository": "git@github.com:isaacs/rimraf.git",
+  "scripts": {
+    "preversion": "npm test",
+    "postversion": "npm publish",
+    "prepublishOnly": "git push origin --follow-tags",
+    "prepare": "tshy",
+    "pretest": "npm run prepare",
+    "presnap": "npm run prepare",
+    "test": "tap",
+    "snap": "tap",
+    "format": "prettier --write . --log-level warn",
+    "benchmark": "node benchmark/index.js",
+    "typedoc": "typedoc --tsconfig .tshy/esm.json ./src/*.ts"
+  },
+  "prettier": {
+    "experimentalTernaries": true,
+    "semi": false,
+    "printWidth": 80,
+    "tabWidth": 2,
+    "useTabs": false,
+    "singleQuote": true,
+    "jsxSingleQuote": false,
+    "bracketSameLine": true,
+    "arrowParens": "avoid",
+    "endOfLine": "lf"
+  },
+  "devDependencies": {
+    "@types/node": "^24.9.2",
+    "mkdirp": "^3.0.1",
+    "prettier": "^3.6.2",
+    "tap": "^21.1.1",
+    "tshy": "^3.0.3",
+    "typedoc": "^0.28.14"
+  },
+  "funding": {
+    "url": "https://github.com/sponsors/isaacs"
+  },
+  "engines": {
+    "node": "20 || >=22"
+  },
+  "dependencies": {
+    "glob": "^13.0.0",
+    "package-json-from-dist": "^1.0.1"
+  },
+  "keywords": [
+    "rm",
+    "rm -rf",
+    "rm -fr",
+    "remove",
+    "directory",
+    "cli",
+    "rmdir",
+    "recursive"
+  ],
+  "module": "./dist/esm/index.js",
+  "tap": {
+    "coverage-map": "map.js"
+  }
+}

package/package.json

@@ -0,0 +1,152 @@
+{
+  "name": "onbuzz",
+  "version": "3.3.0",
+  "description": "Loxia OnBuzz — Your AI Fleet",
+  "type": "module",
+  "main": "src/index.js",
+  "bin": {
+    "onbuzz": "./bin/cli.js"
+  },
+  "scripts": {
+    "start": "node src/index.js",
+    "dev": "node --inspect src/index.js",
+    "terminal-ui": "node bin/loxia-terminal.js",
+    "terminal-ui-v2": "node bin/loxia-terminal-v2.js",
+    "start:terminal": "node bin/start-with-terminal.js",
+    "test": "NODE_OPTIONS='--experimental-vm-modules' jest",
+    "lint": "eslint src/",
+    "typecheck": "echo 'No TypeScript - skipping typecheck'",
+    "build": "npm run build:web-ui",
+    "build:web-ui": "cd web-ui && npm install && npm run build && cd ..",
+    "build:binary": "pkg . --compress GZip",
+    "build:binary:win": "pkg . --target node20-win-x64 --output dist/loxia.exe --compress GZip",
+    "build:binary:mac": "pkg . --target node20-macos-x64 --output dist/loxia-macos --compress GZip",
+    "build:binary:linux": "pkg . --target node20-linux-x64 --output dist/loxia-linux --compress GZip",
+    "docs": "jsdoc -c jsdoc.config.json",
+    "postinstall": "node scripts/install-scanners.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "ai",
+    "agents",
+    "automation",
+    "coding-assistant",
+    "no-code",
+    "vibe-code"
+  ],
+  "author": "Loxia AI",
+  "license": "SEE LICENSE IN LICENSE",
+  "files": [
+    "bin/",
+    "src/",
+    "web-ui/build/",
+    "web-ui/dist/",
+    "scripts/",
+    "README.md",
+    "LICENSE"
+  ],
+  "bundledDependencies": [
+    "glob",
+    "rimraf"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "dependencies": {
+    "@babel/parser": "^7.28.5",
+    "@babel/traverse": "^7.28.5",
+    "blessed": "^0.1.81",
+    "blessed-contrib": "^4.11.0",
+    "chalk": "^5.6.2",
+    "docx": "^9.5.3",
+    "exceljs": "^4.4.0",
+    "express": "^4.18.2",
+    "ghost-cursor": "^1.4.2",
+    "glob": "^13.0.0",
+    "http-proxy-middleware": "^3.0.5",
+    "ink": "^5.2.1",
+    "jsonrepair": "^3.13.2",
+    "mammoth": "^1.11.0",
+    "node-telegram-bot-api": "^0.67.0",
+    "ollama": "^0.6.3",
+    "pdf2json": "^3.1.4",
+    "postcss": "^8.5.6",
+    "postcss-less": "^6.0.0",
+    "postcss-scss": "^4.0.9",
+    "prettier": "^3.6.2",
+    "puppeteer": "^24.25.0",
+    "puppeteer-extra": "^3.3.6",
+    "puppeteer-extra-plugin-stealth": "^2.11.2",
+    "react": "^18.3.1",
+    "rimraf": "^6.0.0",
+    "sparrow-sast": "^1.0.1",
+    "strip-ansi": "^7.1.2",
+    "stylelint": "^16.25.0",
+    "stylelint-config-standard": "^39.0.1",
+    "tiktoken": "^1.0.15",
+    "typescript": "^5.9.3",
+    "uuid": "^11.1.0",
+    "ws": "^8.16.0"
+  },
+  "optionalDependencies": {
+    "whatsapp-web.js": "^1.34.6"
+  },
+  "devDependencies": {
+    "@types/blessed": "^0.1.25",
+    "@yao-pkg/pkg": "^6.0.0",
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
+    "esbuild": "^0.24.0",
+    "eslint": "^8.57.1",
+    "eslint-plugin-security": "^3.0.1",
+    "jest": "^29.7.0",
+    "jsdoc": "^4.0.2"
+  },
+  "pkg": {
+    "scripts": [
+      "src/**/*.js",
+      "bin/**/*.js"
+    ],
+    "assets": [
+      "web-ui/build/**/*",
+      "config/**/*",
+      "node_modules/tiktoken/**/*",
+      "node_modules/puppeteer/**/*"
+    ],
+    "targets": [
+      "node20-win-x64",
+      "node20-macos-x64",
+      "node20-linux-x64"
+    ],
+    "outputPath": "dist"
+  },
+  "jest": {
+    "testEnvironment": "node",
+    "transform": {},
+    "collectCoverageFrom": [
+      "src/**/*.js",
+      "!src/**/*.test.js"
+    ]
+  },
+  "eslintConfig": {
+    "env": {
+      "node": true,
+      "es2022": true
+    },
+    "extends": [
+      "eslint:recommended"
+    ],
+    "parserOptions": {
+      "ecmaVersion": 2022,
+      "sourceType": "module"
+    },
+    "rules": {
+      "no-unused-vars": "warn",
+      "no-console": "off"
+    }
+  },
+  "bundleDependencies": [
+    "glob",
+    "rimraf"
+  ]
+}

package/scripts/install-scanners.js

@@ -0,0 +1,258 @@
+#!/usr/bin/env node
+/**
+ * Post-install script to set up security scanners
+ * Automatically installs required scanners for the platform
+ */
+
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import https from 'https';
+import http from 'http';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { createWriteStream } from 'fs';
+import { pipeline } from 'stream/promises';
+
+const execAsync = promisify(exec);
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const SCANNER_DIR = path.join(__dirname, '..', 'node_modules', '.scanners');
+const SEMGREP_VERSION = 'v1.55.0';
+
+console.log('═══════════════════════════════════════════════════════════');
+console.log('  Installing Security Scanners');
+console.log(`  Platform: ${process.platform} (${process.arch})`);
+console.log('═══════════════════════════════════════════════════════════\n');
+
+/**
+ * Main installation function
+ */
+async function installScanners() {
+  // Ensure scanner directory exists
+  await fs.promises.mkdir(SCANNER_DIR, { recursive: true });
+
+  // 1. Check ESLint Security Plugin (should be in package.json)
+  await checkESLintSecurity();
+
+  // 2. Install Semgrep standalone binary
+  await installSemgrep();
+
+  // 3. Optionally install Python scanners if Python is available
+  await installPythonScanners();
+
+  console.log('\n═══════════════════════════════════════════════════════════');
+  console.log('  Installation Complete');
+  console.log('═══════════════════════════════════════════════════════════\n');
+}
+
+/**
+ * Check if ESLint Security Plugin is installed
+ */
+async function checkESLintSecurity() {
+  console.log('📦 Checking ESLint Security Plugin...');
+  try {
+    await import('eslint-plugin-security');
+    console.log('   ✅ eslint-plugin-security is installed\n');
+  } catch (error) {
+    console.log('   ⚠️  eslint-plugin-security not found');
+    console.log('   Run: npm install --save-dev eslint-plugin-security\n');
+  }
+}
+
+/**
+ * Install Semgrep standalone binary for the current platform
+ */
+async function installSemgrep() {
+  console.log('🔍 Installing Semgrep...');
+
+  const platform = process.platform;
+  const arch = process.arch;
+
+  // Check if semgrep is already installed globally
+  try {
+    const result = await execAsync('semgrep --version', { timeout: 5000 });
+    console.log(`   ✅ Semgrep already installed: ${result.stdout.trim()}`);
+    console.log('   Using system-installed Semgrep\n');
+    return;
+  } catch (error) {
+    console.log('   Semgrep not found in PATH, installing standalone binary...');
+  }
+
+  // Determine download URL based on platform
+  const binaryInfo = getSemgrepBinaryInfo(platform, arch);
+
+  if (!binaryInfo) {
+    console.log(`   ⚠️  No Semgrep binary available for ${platform}-${arch}`);
+    console.log('   Please install manually: https://semgrep.dev/docs/getting-started/\n');
+    return;
+  }
+
+  try {
+    const binaryPath = path.join(SCANNER_DIR, 'semgrep');
+
+    console.log(`   Downloading from ${binaryInfo.url}...`);
+    await downloadFile(binaryInfo.url, binaryPath);
+
+    // Make executable
+    await fs.promises.chmod(binaryPath, 0o755);
+
+    console.log('   ✅ Semgrep installed successfully');
+    console.log(`   Location: ${binaryPath}\n`);
+
+    // Add to PATH environment note
+    console.log('   Note: To use system-wide, add to PATH or install globally:');
+    console.log('   pip install semgrep\n');
+  } catch (error) {
+    console.log(`   ⚠️  Failed to install Semgrep: ${error.message}`);
+    console.log('   You can install manually: pip install semgrep\n');
+  }
+}
+
+/**
+ * Get Semgrep binary info for platform
+ */
+function getSemgrepBinaryInfo(platform, arch) {
+  // Semgrep binary URLs (using latest stable release)
+  // Note: Semgrep doesn't provide standalone binaries anymore for all platforms
+  // They recommend using pip install or Docker
+
+  // For now, we'll provide instructions rather than downloading
+  // The actual implementation would use Semgrep's Python package
+
+  return null; // Will trigger manual installation message
+}
+
+/**
+ * Install Python-based scanners (Bandit, pip-audit) if Python is available
+ */
+async function installPythonScanners() {
+  console.log('🐍 Checking Python scanners...');
+
+  // Check if Python is available
+  let pythonCommand = null;
+
+  try {
+    await execAsync('python3 --version', { timeout: 5000 });
+    pythonCommand = 'python3';
+  } catch (error) {
+    try {
+      await execAsync('python --version', { timeout: 5000 });
+      pythonCommand = 'python';
+    } catch (error2) {
+      console.log('   ⚠️  Python not found - skipping Python scanners');
+      console.log('   To enable Python scanning, install Python and run:');
+      console.log('   pip install semgrep bandit pip-audit checkov yamllint\n');
+      return;
+    }
+  }
+
+  console.log(`   ✅ Python found: ${pythonCommand}`);
+
+  // Security scanners
+  await installViaPip('semgrep', pythonCommand);
+  await installViaPip('bandit', pythonCommand);
+  await installViaPip('pip-audit', pythonCommand);
+
+  // Config validation tools
+  await installViaPip('checkov', pythonCommand);
+  await installViaPip('yamllint', pythonCommand);
+
+  console.log('');
+}
+
+/**
+ * Check if Python is from Homebrew installation (macOS)
+ * Homebrew Python doesn't support --user flag
+ */
+async function isHomebrewPython(pythonCommand) {
+  try {
+    const { stdout } = await execAsync(`${pythonCommand} -c "import sys; print(sys.prefix)"`, {
+      timeout: 5000
+    });
+    return stdout.includes('/opt/homebrew') || stdout.includes('/usr/local/Cellar');
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Install a Python package via pip
+ * Automatically detects Homebrew Python and skips --user flag
+ */
+async function installViaPip(packageName, pythonCommand) {
+  try {
+    // Check if already installed
+    const checkResult = await execAsync(`${pythonCommand} -m pip show ${packageName}`, {
+      timeout: 5000
+    });
+    console.log(`   ✅ ${packageName} already installed`);
+    return true;
+  } catch (error) {
+    // Not installed, try to install
+    console.log(`   Installing ${packageName}...`);
+    try {
+      // Detect if using Homebrew Python (skip --user flag)
+      const isHomebrew = await isHomebrewPython(pythonCommand);
+      const userFlag = isHomebrew ? '' : '--user';
+
+      const installCmd = `${pythonCommand} -m pip install ${userFlag} ${packageName}`.replace(/\s+/g, ' ').trim();
+      await execAsync(installCmd, {
+        timeout: 60000
+      });
+      console.log(`   ✅ ${packageName} installed successfully`);
+      return true;
+    } catch (installError) {
+      console.log(`   ⚠️  Failed to install ${packageName}: ${installError.message}`);
+      console.log(`   You can install manually: pip install ${packageName}`);
+      return false;
+    }
+  }
+}
+
+/**
+ * Download a file from URL
+ */
+async function downloadFile(url, outputPath) {
+  return new Promise((resolve, reject) => {
+    const client = url.startsWith('https') ? https : http;
+
+    client.get(url, (response) => {
+      if (response.statusCode === 302 || response.statusCode === 301) {
+        // Follow redirect
+        downloadFile(response.headers.location, outputPath)
+          .then(resolve)
+          .catch(reject);
+        return;
+      }
+
+      if (response.statusCode !== 200) {
+        reject(new Error(`Failed to download: HTTP ${response.statusCode}`));
+        return;
+      }
+
+      const fileStream = createWriteStream(outputPath);
+      response.pipe(fileStream);
+
+      fileStream.on('finish', () => {
+        fileStream.close();
+        resolve();
+      });
+
+      fileStream.on('error', (error) => {
+        fs.unlink(outputPath, () => {}); // Delete partial file
+        reject(error);
+      });
+    }).on('error', reject);
+  });
+}
+
+// Run installation
+installScanners().catch((error) => {
+  console.error('❌ Installation failed:', error.message);
+  console.error('\nYou can manually install scanners:');
+  console.error('  npm install --save-dev eslint-plugin-security');
+  console.error('  pip install semgrep bandit pip-audit');
+  process.exit(0); // Don't fail npm install
+});

package/scripts/watchdog.js

@@ -0,0 +1,147 @@
+#!/usr/bin/env node
+/**
+ * Watchdog Script - External process for restarting Loxia Autopilot
+ *
+ * This script is spawned as an independent process before the main Loxia
+ * process terminates. It waits for the specified delay, then restarts
+ * Loxia using the configured command.
+ *
+ * Usage:
+ *   node watchdog.js [options]
+ *
+ * Options:
+ *   --delay <ms>      Delay before restart in milliseconds (default: 5000)
+ *   --command <cmd>   Command to run (default: "loxia web")
+ *   --pid <pid>       Parent PID to wait for (optional)
+ *
+ * Examples:
+ *   node watchdog.js --delay 3000 --command "loxia web"
+ *   node watchdog.js --command "npx @loxia-labs/loxia-autopilot-one web"
+ *   node watchdog.js --delay 5000 --command "loxia web --port 3000"
+ */
+
+const { spawn, execSync } = require('child_process');
+const path = require('path');
+const fs = require('fs');
+
+// Log to file for debugging (since stdio might be ignored)
+// Use script directory for reliable location
+const logFile = path.join(__dirname, 'watchdog.log');
+function log(message) {
+  const timestamp = new Date().toISOString();
+  const line = `[${timestamp}] ${message}\n`;
+  console.log(message);
+  try {
+    fs.appendFileSync(logFile, line);
+  } catch (e) {
+    // Ignore file write errors
+  }
+}
+
+// Log startup immediately
+log('[Watchdog] Script loaded');
+
+// Parse command line arguments
+function parseArgs() {
+  const args = process.argv.slice(2);
+  const options = {
+    delay: 5000,
+    command: 'loxia web',
+    pid: null
+  };
+
+  for (let i = 0; i < args.length; i++) {
+    switch (args[i]) {
+      case '--delay':
+        options.delay = parseInt(args[++i], 10) || 5000;
+        break;
+      case '--command':
+        options.command = args[++i] || 'loxia web';
+        break;
+      case '--pid':
+        options.pid = parseInt(args[++i], 10) || null;
+        break;
+    }
+  }
+
+  return options;
+}
+
+// Check if a process is still running
+function isProcessRunning(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
+
+// Wait for parent process to terminate (optional)
+async function waitForParentExit(pid, timeout = 30000) {
+  if (!pid) return;
+
+  const startTime = Date.now();
+
+  while (isProcessRunning(pid)) {
+    if (Date.now() - startTime > timeout) {
+      log(`[Watchdog] Parent process ${pid} still running after ${timeout}ms, proceeding anyway`);
+      return;
+    }
+    await new Promise(resolve => setTimeout(resolve, 500));
+  }
+
+  log(`[Watchdog] Parent process ${pid} has terminated`);
+}
+
+// Main execution
+async function main() {
+  const options = parseArgs();
+
+  log(`[Watchdog] Started with options:`, {
+    delay: options.delay,
+    command: options.command,
+    pid: options.pid
+  });
+
+  // Wait for parent to exit if PID provided
+  if (options.pid) {
+    log(`[Watchdog] Waiting for parent process ${options.pid} to exit...`);
+    await waitForParentExit(options.pid);
+  }
+
+  // Wait for configured delay
+  log(`[Watchdog] Waiting ${options.delay}ms before restart...`);
+  await new Promise(resolve => setTimeout(resolve, options.delay));
+
+  // Parse command and arguments
+  const parts = options.command.split(' ');
+  const cmd = parts[0];
+  const args = parts.slice(1);
+
+  log(`[Watchdog] Executing: ${cmd} ${args.join(' ')}`);
+
+  // Spawn the new process
+  // Use shell on all platforms for proper resolution of npm global commands (like 'loxia')
+  const isWindows = process.platform === 'win32';
+
+  const child = spawn(cmd, args, {
+    detached: true,
+    stdio: 'ignore',   // Ignore stdio - Loxia web server will be accessible via browser
+    shell: true,       // Use shell for command resolution (npm globals, PATH, etc.)
+    windowsHide: false // Show console on Windows so user knows it's running
+  });
+
+  child.unref();
+
+  log(`[Watchdog] Loxia restarted with PID ${child.pid}`);
+  log(`[Watchdog] Watchdog exiting...`);
+
+  // Give the child process a moment to start
+  setTimeout(() => process.exit(0), 1000);
+}
+
+main().catch(error => {
+  log(`[Watchdog] Error: ${error.message}`);
+  process.exit(1);
+});