quilltap 3.3.0-dev → 3.3.0-dev.111

package/README.md

@@ -89,6 +89,23 @@ Quilltap stores its database, files, and logs in a platform-specific directory:
 
 Override with `--data-dir` or the `QUILLTAP_DATA_DIR` environment variable.
 
+## Theme Management
+
+The CLI includes theme management commands:
+
+```bash
+quilltap themes list                    # List all installed themes
+quilltap themes install my.qtap-theme   # Install a .qtap-theme bundle
+quilltap themes validate my.qtap-theme  # Validate a bundle
+quilltap themes uninstall my-theme      # Uninstall a bundle theme
+quilltap themes export earl-grey        # Export any theme as a bundle
+quilltap themes create sunset           # Scaffold a new theme
+quilltap themes search "dark"           # Search registries
+quilltap themes update                  # Check for theme updates
+quilltap themes registry list           # List configured registries
+quilltap themes registry add <url>      # Add a registry source
+```
+
 ## Requirements
 
 - Node.js 18 or later
@@ -96,7 +113,7 @@ Override with `--data-dir` or the `QUILLTAP_DATA_DIR` environment variable.
 ## Other Ways to Run Quilltap
 
 - **Electron desktop app** (macOS, Windows) - [Download](https://github.com/foundry-9/quilltap/releases)
-- **Docker** - `docker run -d -p 3000:3000 -v /path/to/data:/app/quilltap csebold/quilltap`
+- **Docker** - `docker run -d -p 3000:3000 -v /path/to/data:/app/quilltap foundry9/quilltap`
 
 ## Links
 

package/bin/quilltap.js

@@ -57,6 +57,7 @@ function parseArgs(argv) {
         opts.help = true;
         break;
       default:
+        // Allow subcommands to pass through (they're handled before parseArgs)
         console.error(`Unknown argument: ${args[i]}`);
         console.error('Run "quilltap --help" for usage information.');
         process.exit(1);
@@ -73,6 +74,10 @@ Quilltap - Self-hosted AI workspace
 
 Usage: quilltap [options]
 
+Subcommands:
+  db                            Query encrypted databases
+  themes                        Manage theme bundles
+
 Options:
   -p, --port <number>     Port to listen on (default: 3000)
   -d, --data-dir <path>   Data directory (default: platform-specific)
@@ -131,20 +136,21 @@ function resolveModuleDir(moduleName) {
 function ensureNativeModules() {
   const needsRebuild = [];
 
-  // Check better-sqlite3: it lazy-loads the native .node binary only when you
-  // create a Database, so a bare require('better-sqlite3') always succeeds.
+  // Check better-sqlite3-multiple-ciphers (provides SQLCipher encryption support).
+  // The main app depends on this via an npm alias as 'better-sqlite3', so we must
+  // ensure the SQLCipher-capable version is available and link it as 'better-sqlite3'.
   // We must load the native binding directly to detect NODE_MODULE_VERSION mismatches.
-  // Use require.resolve to find it regardless of npm hoisting.
   try {
-    const modDir = resolveModuleDir('better-sqlite3');
+    const modDir = resolveModuleDir('better-sqlite3-multiple-ciphers')
+                || resolveModuleDir('better-sqlite3');
     if (!modDir) throw Object.assign(new Error('not found'), { code: 'MODULE_NOT_FOUND' });
     const bindingsPath = path.join(modDir, 'build', 'Release', 'better_sqlite3.node');
     require(bindingsPath);
   } catch (err) {
     if (err.message && err.message.includes('NODE_MODULE_VERSION')) {
-      needsRebuild.push('better-sqlite3');
+      needsRebuild.push('better-sqlite3-multiple-ciphers');
     } else if (err.code === 'MODULE_NOT_FOUND') {
-      needsRebuild.push('better-sqlite3');
+      needsRebuild.push('better-sqlite3-multiple-ciphers');
     }
   }
 
@@ -223,8 +229,10 @@ function linkNativeModules(standaloneDir) {
     }
   }
 
-  // Link better-sqlite3
-  const betterSqlite3Dir = resolveModuleDir('better-sqlite3');
+  // Link better-sqlite3-multiple-ciphers as 'better-sqlite3' (the app imports it
+  // via npm alias). Prefer the SQLCipher build; fall back to plain better-sqlite3.
+  const betterSqlite3Dir = resolveModuleDir('better-sqlite3-multiple-ciphers')
+                        || resolveModuleDir('better-sqlite3');
   linkModule('better-sqlite3', betterSqlite3Dir);
 
   // Link sharp
@@ -383,10 +391,59 @@ function resolveDataDir(overrideDir) {
   return path.join(home, '.quilltap', 'data');
 }
 
+/**
+ * Prompt for a passphrase interactively with hidden input.
+ * Returns a promise that resolves to the entered passphrase.
+ */
+function promptPassphrase(prompt) {
+  return new Promise((resolve, reject) => {
+    const readline = require('readline');
+    if (!process.stdin.isTTY) {
+      reject(new Error('This database requires a passphrase. Use --passphrase <pass> or set QUILLTAP_DB_PASSPHRASE'));
+      return;
+    }
+    process.stdout.write(prompt || 'Passphrase: ');
+    const rl = readline.createInterface({ input: process.stdin, terminal: false });
+    // Disable echo by switching stdin to raw mode
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    let passphrase = '';
+    const onData = (ch) => {
+      const c = ch.toString();
+      if (c === '\n' || c === '\r' || c === '\u0004') {
+        // Enter or Ctrl+D — done
+        process.stdin.setRawMode(false);
+        process.stdin.removeListener('data', onData);
+        process.stdin.pause();
+        rl.close();
+        process.stdout.write('\n');
+        resolve(passphrase);
+      } else if (c === '\u0003') {
+        // Ctrl+C — abort
+        process.stdin.setRawMode(false);
+        process.stdin.removeListener('data', onData);
+        process.stdin.pause();
+        rl.close();
+        process.stdout.write('\n');
+        process.exit(130);
+      } else if (c === '\u007F' || c === '\b') {
+        // Backspace
+        if (passphrase.length > 0) {
+          passphrase = passphrase.slice(0, -1);
+        }
+      } else {
+        passphrase += c;
+      }
+    };
+    process.stdin.on('data', onData);
+  });
+}
+
 /**
  * Read and decrypt the .dbkey file to get the SQLCipher key.
+ * If passphrase is needed and not provided, prompts interactively.
  */
-function loadDbKey(dataDir, passphrase) {
+async function loadDbKey(dataDir, passphrase) {
   const crypto = require('crypto');
   const dbkeyPath = path.join(dataDir, 'quilltap.dbkey');
   if (!fs.existsSync(dbkeyPath)) {
@@ -426,9 +483,17 @@ function loadDbKey(dataDir, passphrase) {
     // Internal passphrase failed — need user passphrase
   }
 
-  // User passphrase required
+  // Check environment variable if no CLI passphrase provided
+  if (!passphrase && process.env.QUILLTAP_DB_PASSPHRASE) {
+    passphrase = process.env.QUILLTAP_DB_PASSPHRASE;
+  }
+
+  // Prompt interactively if still no passphrase
   if (!passphrase) {
-    throw new Error('This database requires a passphrase. Use --passphrase <pass>');
+    passphrase = await promptPassphrase('Database passphrase: ');
+    if (!passphrase) {
+      throw new Error('No passphrase provided');
+    }
   }
 
   return tryDecrypt(passphrase);
@@ -451,12 +516,17 @@ Options:
   --passphrase <pass>   Provide passphrase for encrypted .dbkey
   -h, --help            Show this help
 
+If a passphrase is required and not provided via --passphrase, the tool
+will check the QUILLTAP_DB_PASSPHRASE environment variable, then prompt
+interactively (with hidden input) if a TTY is available.
+
 Examples:
   quilltap db --tables
   quilltap db "SELECT count(*) FROM characters"
   quilltap db --count messages
   quilltap db --repl
   quilltap db --llm-logs --tables
+  QUILLTAP_DB_PASSPHRASE=secret quilltap db --tables
 `);
 }
 
@@ -508,14 +578,19 @@ async function dbCommand(args) {
   // Load encryption key
   let pepper;
   try {
-    pepper = loadDbKey(dataDir, passphrase);
+    pepper = await loadDbKey(dataDir, passphrase);
   } catch (err) {
     console.error(`Error: ${err.message}`);
     process.exit(1);
   }
 
-  // Open database
-  const Database = require('better-sqlite3');
+  // Open database — prefer SQLCipher-capable build
+  let Database;
+  try {
+    Database = require('better-sqlite3-multiple-ciphers');
+  } catch {
+    Database = require('better-sqlite3');
+  }
   const db = new Database(dbPath, { readonly: !repl });
 
   if (pepper) {
@@ -605,6 +680,9 @@ async function dbCommand(args) {
 // Route to subcommand or main
 if (process.argv[2] === 'db') {
   dbCommand(process.argv.slice(3));
+} else if (process.argv[2] === 'themes') {
+  const { themesCommand } = require('../lib/theme-commands');
+  themesCommand(process.argv.slice(3));
 } else {
   main();
 }