openwolf-enhanced 1.16.2 → 1.16.4

package/dist/src/utils/remote.js

@@ -0,0 +1,226 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { readJSON, writeJSON } from "./fs-safe.js";
+import { blocksFor, entryId } from "./recall.js";
+import { assertSafeBaseUrl } from "../daemon/llm-provider.js";
+export function remoteTokenPath(wolfDir) {
+    return path.join(wolfDir, "remote-token");
+}
+export function readRemoteToken(wolfDir) {
+    try {
+        return fs.readFileSync(remoteTokenPath(wolfDir), "utf-8").trim();
+    }
+    catch {
+        return "";
+    }
+}
+export function writeRemoteToken(wolfDir, token) {
+    const p = remoteTokenPath(wolfDir);
+    fs.writeFileSync(p, token, { mode: 0o600 });
+    try {
+        fs.chmodSync(p, 0o600);
+    }
+    catch { /* best effort on platforms without chmod */ }
+}
+export function clearRemoteToken(wolfDir) {
+    try {
+        fs.unlinkSync(remoteTokenPath(wolfDir));
+    }
+    catch { /* already gone */ }
+}
+// Read openwolf.remote from config.json. Returns null when the project was never linked.
+export function getRemoteConfig(wolfDir) {
+    const cfg = readJSON(path.join(wolfDir, "config.json"), {});
+    const r = cfg.openwolf?.remote;
+    if (!r || !r.base_url)
+        return null;
+    return { enabled: r.enabled !== false, baseUrl: String(r.base_url), project: r.project };
+}
+// Persist the link. The token is NOT written here — config.json gets committed to git.
+export function setRemoteConfig(wolfDir, remote) {
+    const p = path.join(wolfDir, "config.json");
+    const cfg = readJSON(p, {});
+    cfg.openwolf = { ...(cfg.openwolf ?? {}), remote: { ...remote } };
+    writeJSON(p, cfg);
+}
+// A linked project must have BOTH a base url and a token — either alone is a half-configured state
+// that would fail at the first request with a confusing error.
+export function isLinked(wolfDir) {
+    const cfg = getRemoteConfig(wolfDir);
+    return !!cfg && cfg.enabled && !!readRemoteToken(wolfDir);
+}
+// One hardened request. Reuses assertSafeBaseUrl() from the LLM provider — the SSRF fix from 1.15.1
+// (https-only unless loopback, no private/link-local/metadata hosts) applies here for free, and
+// redirect:"error" keeps a 3xx from carrying the bearer token to another host.
+export async function apiFetch(cfg, token, route, opts = {}) {
+    assertSafeBaseUrl(cfg.baseUrl);
+    const url = cfg.baseUrl.replace(/\/+$/, "") + route;
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? 20_000);
+    try {
+        const res = await fetch(url, {
+            method: opts.method ?? "GET",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${token}`,
+            },
+            body: opts.body === undefined ? undefined : JSON.stringify(opts.body),
+            signal: ac.signal,
+            redirect: "error",
+        });
+        let data = null;
+        try {
+            data = await res.json();
+        }
+        catch { /* empty or non-JSON body */ }
+        if (!res.ok) {
+            const msg = res.status === 401 ? "invalid or revoked token" :
+                res.status === 402 ? "workspace plan limit reached (Free = 1 project)" :
+                    res.status === 403 ? "this token is read-only" :
+                        data?.error || `HTTP ${res.status}`;
+            return { ok: false, status: res.status, data: null, error: msg };
+        }
+        return { ok: true, status: res.status, data: data };
+    }
+    catch (e) {
+        const msg = e.name === "AbortError" ? "timed out" : e.message;
+        return { ok: false, status: 0, data: null, error: msg };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// Team citation ids are shown with a `t-` prefix.
+//
+// Both systems mint ids of the shape `c-3f9a2b`, from DIFFERENT hashes over DIFFERENT text — so a
+// local `c-3f9a2b` and a team `c-3f9a2b` can coexist and mean unrelated things. Models already
+// invent citation ids; handing them two colliding namespaces would make every citation unverifiable.
+// One prefix, and the ambiguity is gone.
+export function teamId(cite) {
+    const suffix = (cite ?? "").replace(/^c-/, "");
+    return suffix ? `t-${suffix}` : "t-?";
+}
+/**
+ * `t-3f9a2b` → `c-3f9a2b` (what the workspace knows it as).
+ * Also accepts a bare `c-…` — that is what someone pastes from the workspace's web UI, and
+ * blindly prefixing it would ask the server for `c-c-3f9a2b`, which exists nowhere.
+ */
+export function teamCiteFromId(id) {
+    return "c-" + id.replace(/^[tc]-/, "");
+}
+export async function teamRecall(cfg, token, query, limit) {
+    const qs = new URLSearchParams({ q: query, limit: String(limit) });
+    if (cfg.project)
+        qs.set("project", cfg.project);
+    const res = await apiFetch(cfg, token, `/api/memory?${qs}`);
+    if (!res.ok)
+        throw new Error(res.error || "recall failed");
+    return res.data?.entries ?? [];
+}
+export async function teamResolve(cfg, token, id) {
+    const qs = new URLSearchParams({ cite: teamCiteFromId(id) });
+    const res = await apiFetch(cfg, token, `/api/memory?${qs}`);
+    if (!res.ok)
+        return null;
+    return res.data?.entries?.[0] ?? null;
+}
+// Which cerebrum sections map to which remote type.
+//
+// memory.md is deliberately NOT a source: it is mostly mechanical ("Edited foo.ts, 3→5 lines").
+// Pushing that into a shared brain is noise, and noise is what makes people stop reading it.
+// User Preferences are also skipped by default — they describe how *this person* wants to be worked
+// with, which is not the team's business unless they say so (--with-preferences).
+const SECTION_MAP = [
+    { match: /^#+\s*Key Learnings/i, type: "learning", tag: "key-learning" },
+    { match: /^#+\s*Decision Log/i, type: "decision", tag: "decision" },
+    { match: /^#+\s*Do-Not-Repeat/i, type: "learning", tag: "do-not-repeat" },
+    { match: /^#+\s*User Preferences/i, type: "note", tag: "preference", personal: true },
+];
+/** First line of a block, stripped of markdown noise, as a title. */
+export function titleFor(blockText) {
+    const first = blockText.split("\n")[0] || "";
+    return first
+        .replace(/^[-*]\s+/, "")
+        .replace(/^#+\s+/, "")
+        .replace(/\*\*/g, "")
+        .trim()
+        .slice(0, 120);
+}
+/** Cerebrum entries, grouped by the section they live under. */
+export function cerebrumCandidates(content, opts = {}) {
+    const lines = content.split(/\r?\n/);
+    // blocksFor() already blanks <private> regions, so private text can never reach a candidate.
+    const blocks = blocksFor("cerebrum.md", content);
+    const out = [];
+    for (const b of blocks) {
+        // Which section is this block under? Walk backwards to the nearest heading.
+        let section;
+        for (let i = b.start - 1; i >= 0; i--) {
+            const line = lines[i] ?? "";
+            if (!/^#+\s/.test(line))
+                continue;
+            section = SECTION_MAP.find((s) => s.match.test(line));
+            break; // nearest heading decides, even if it maps to nothing
+        }
+        if (!section)
+            continue;
+        if (section.personal && !opts.withPreferences)
+            continue;
+        // The heading itself is a block — don't push the heading as an entry.
+        if (/^#+\s/.test(b.text))
+            continue;
+        const text = b.text.trim();
+        if (text.length < 40)
+            continue; // one-liners are rarely worth a team entry
+        out.push({
+            localId: entryId("cerebrum.md", b.text),
+            type: section.type,
+            title: titleFor(text),
+            body: text,
+            tags: ["openwolf", section.tag],
+        });
+    }
+    return out;
+}
+/** buglog.json entries → type "bug". Auto-detected ones are skipped: they are guesses, not knowledge. */
+export function buglogCandidates(raw) {
+    const bugs = Array.isArray(raw)
+        ? raw
+        : (raw?.bugs ?? []);
+    const out = [];
+    for (const b of bugs) {
+        const tags = b.tags ?? [];
+        if (tags.includes("auto-detected"))
+            continue; // pattern guesses from the write hook, not real findings
+        if (!b.error_message || !b.fix)
+            continue;
+        const body = [
+            b.error_message,
+            b.file ? `File: ${b.file}` : "",
+            b.root_cause ? `Root cause: ${b.root_cause}` : "",
+            `Fix: ${b.fix}`,
+        ].filter(Boolean).join("\n");
+        out.push({
+            localId: entryId("buglog.json", body),
+            type: "bug",
+            title: titleFor(b.error_message),
+            body,
+            tags: ["openwolf", "bug", ...tags.slice(0, 5)],
+        });
+    }
+    return out;
+}
+export function pushStatePath(wolfDir) {
+    return path.join(wolfDir, "remote-pushed.json");
+}
+export function readPushed(wolfDir) {
+    const s = readJSON(pushStatePath(wolfDir), { pushed: [] });
+    return new Set(s.pushed ?? []);
+}
+export function markPushed(wolfDir, ids) {
+    const cur = readPushed(wolfDir);
+    for (const id of ids)
+        cur.add(id);
+    writeJSON(pushStatePath(wolfDir), { pushed: [...cur] });
+}
+//# sourceMappingURL=remote.js.map

package/dist/src/utils/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../src/utils/remote.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAqB9D,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAa;IAC7D,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACnC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC/E,CAAC;AAKD,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAwC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IACnG,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3F,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAiB;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAyC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IAClE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,mGAAmG;AACnG,+DAA+D;AAC/D,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AASD,oGAAoG;AACpG,gGAAgG;AAChG,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAiB,EACjB,KAAa,EACb,KAAa,EACb,IAAI,GAA4D,EAAE;IAElE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;IACpD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;YAC5B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;YACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YACrE,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GACP,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;gBACjD,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC;oBACxE,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;wBAC/C,IAAkC,EAAE,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAI,CAAW,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAW,CAAC,OAAO,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAgBD,kDAAkD;AAClD,EAAE;AACF,kGAAkG;AAClG,+FAA+F;AAC/F,qGAAqG;AACrG,yCAAyC;AACzC,MAAM,UAAU,MAAM,CAAC,IAA+B;IACpD,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAiB,EAAE,KAAa,EAAE,KAAa,EAAE,KAAa;IAE9D,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,OAAO;QAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAA4B,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAiB,EAAE,KAAa,EAAE,EAAU;IAE5C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAA4B,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxC,CAAC;AAgBD,oDAAoD;AACpD,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,oGAAoG;AACpG,kFAAkF;AAClF,MAAM,WAAW,GAAgF;IAC/F,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE;IACxE,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACnE,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE;IACzE,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;CACtF,CAAC;AAEF,qEAAqE;AACrE,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,KAAK;SACT,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAI,GAAkC,EAAE;IAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,6FAA6F;IAC7F,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,4EAA4E;QAC5E,IAAI,OAAiD,CAAC;QACtD,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,sDAAsD;QAC/D,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,SAAS;QACxD,sEAAsE;QACtE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAEnC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,SAAS,CAAC,2CAA2C;QAE3E,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC;YACvC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,yGAAyG;AACzG,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAe,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QACzC,CAAC,CAAE,GAAkB;QACrB,CAAC,CAAC,CAAE,GAAoC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,SAAS,CAAC,yDAAyD;QACvG,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,SAAS;QAEzC,MAAM,IAAI,GAAG;YACX,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC/B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;YACjD,QAAQ,CAAC,CAAC,GAAG,EAAE;SAChB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7B,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;YACrC,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;YAChC,IAAI;YACJ,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,MAAM,CAAC,GAAG,QAAQ,CAAY,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAa;IACvD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/utils/wolf-gitignore.js

@@ -0,0 +1,40 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+// .wolf/.gitignore — keep local secrets out of the repository.
+//
+// The .wolf directory is meant to be committed: that is the whole point of a shared brain. But two
+// files in it must never be, and one of them now grants write access to a team workspace. 0600 file
+// permissions protect against other users on the machine; they do nothing against `git add .wolf`.
+//
+// Written from code, not from src/templates/: npm silently drops files named .gitignore from the
+// published package, so a template would exist in the repo and be missing in every install.
+const ENTRIES = [
+    { pattern: "dashboard-token", why: "bearer token for the local dashboard API" },
+    { pattern: "remote-token", why: "workspace token — grants write access to the team's memory" },
+    { pattern: "remote-pushed.json", why: "per-machine push bookkeeping, not shared state" },
+];
+const HEADER = "# Managed by OpenWolf — local secrets and machine-local state, never commit these.";
+/** Create or extend .wolf/.gitignore. Idempotent: only missing lines are appended. */
+export function ensureWolfGitignore(wolfDir) {
+    const p = path.join(wolfDir, ".gitignore");
+    let existing = "";
+    try {
+        existing = fs.readFileSync(p, "utf-8");
+    }
+    catch { /* not there yet */ }
+    // Compare against the PATTERN, not the raw line: we write `remote-token    # why`, so a naive
+    // line-equality check never matches and every update would append the block again.
+    const present = new Set(existing.split(/\r?\n/).map((l) => l.replace(/#.*$/, "").trim()).filter(Boolean));
+    const missing = ENTRIES.filter((e) => !present.has(e.pattern));
+    if (existing && missing.length === 0)
+        return "ok";
+    const block = missing.map((e) => `${e.pattern}    # ${e.why}`).join("\n");
+    if (!existing) {
+        fs.writeFileSync(p, `${HEADER}\n${block}\n`, "utf-8");
+        return "created";
+    }
+    const sep = existing.endsWith("\n") ? "" : "\n";
+    fs.appendFileSync(p, `${sep}${HEADER}\n${block}\n`, "utf-8");
+    return "updated";
+}
+//# sourceMappingURL=wolf-gitignore.js.map

package/dist/src/utils/wolf-gitignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wolf-gitignore.js","sourceRoot":"","sources":["../../../src/utils/wolf-gitignore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,+DAA+D;AAC/D,EAAE;AACF,mGAAmG;AACnG,oGAAoG;AACpG,mGAAmG;AACnG,EAAE;AACF,iGAAiG;AACjG,4FAA4F;AAC5F,MAAM,OAAO,GAA4C;IACvD,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,0CAA0C,EAAE;IAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,4DAA4D,EAAE;IAC9F,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,EAAE,gDAAgD,EAAE;CACzF,CAAC;AAEF,MAAM,MAAM,GAAG,oFAAoF,CAAC;AAEpG,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE3C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QAAC,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAE7E,8FAA8F;IAC9F,mFAAmF;IACnF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACjF,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,MAAM,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,MAAM,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openwolf-enhanced",
-  "version": "1.16.2",
+  "version": "1.16.4",
   "description": "A second brain for Claude Code, Codex & Gemini — persistent git-native project memory with searchable citations, an MCP server for Claude Desktop, and invisible hook-based context. No database.",
   "type": "module",
   "bin": {

package/src/templates/config.json

@@ -56,6 +56,11 @@
       "enabled": false,
       "log_max_bytes": 131072
     },
+    "remote": {
+      "enabled": false,
+      "base_url": "",
+      "project": ""
+    },
     "session_context": {
       "enabled": true,
       "max_chars": 6000
@@ -85,8 +90,16 @@
     "designqc": {
       "enabled": true,
       "viewports": [
-        { "name": "desktop", "width": 1440, "height": 900 },
-        { "name": "mobile", "width": 375, "height": 812 }
+        {
+          "name": "desktop",
+          "width": 1440,
+          "height": 900
+        },
+        {
+          "name": "mobile",
+          "width": 375,
+          "height": 812
+        }
       ],
       "max_screenshots": 6,
       "chrome_path": null