vibe-roast 0.98.0

package/src/sources/vscode-tasks.js

@@ -0,0 +1,142 @@
+const path = require("node:path");
+
+const { walkFiles } = require("../lib/jsonl");
+const { isInRange } = require("../lib/dates");
+const {
+  emptyTotals,
+  emptyReport,
+  addTotals,
+  usageFromObject,
+  cleanText,
+  toIsoTimestamp,
+  readJsonFile,
+  resolveVscodeGlobalStorage,
+} = require("./common");
+
+async function inspectVscodeTaskStore({
+  source,
+  extensionId,
+  root,
+  range,
+  home,
+  platform,
+  env,
+  appNames = ["Code", "Code - Insiders", "Cursor", "Windsurf"],
+} = {}) {
+  const roots = root
+    ? [root]
+    : appNames.map((appName) =>
+        resolveVscodeGlobalStorage({ home, platform, env, appName, parts: [extensionId, "tasks"] }),
+      );
+
+  const prompts = [];
+  const tokenTotals = emptyTotals();
+  let filesScanned = 0;
+  const notes = [];
+  let usedRoot = roots[0] || null;
+
+  for (const tasksRoot of roots) {
+    const files = await walkFiles(
+      tasksRoot,
+      (_filePath, name) =>
+        name === "ui_messages.json" ||
+        name === "api_conversation_history.json" ||
+        name.endsWith(".json"),
+    );
+    if (!files.length) continue;
+    usedRoot = tasksRoot;
+    for (const file of files) {
+      const base = path.basename(file);
+      if (
+        base !== "ui_messages.json" &&
+        base !== "api_conversation_history.json" &&
+        !/messages?/i.test(base)
+      ) {
+        continue;
+      }
+      filesScanned += 1;
+      const data = await readJsonFile(file);
+      const rows = normalizeMessageRows(data);
+      for (const row of rows) {
+        const text = extractTaskUserText(row);
+        if (!text) continue;
+        const timestamp = toIsoTimestamp(row.ts || row.timestamp || row.time || row.createdAt || row.date);
+        if (!isInRange(timestamp, range)) continue;
+        prompts.push({
+          source,
+          timestamp,
+          session_file: file,
+          text,
+        });
+        addTotals(tokenTotals, usageFromObject(row));
+      }
+    }
+    if (filesScanned > 0) break;
+  }
+
+  if (!filesScanned && !root) {
+    notes.push(
+      `No ${source} task transcripts found under VS Code/Cursor globalStorage (${extensionId}/tasks).`,
+    );
+  }
+
+  return {
+    ...(emptyReport(source, usedRoot, notes)),
+    files_scanned: filesScanned,
+    prompt_count: prompts.length,
+    token_totals: tokenTotals,
+    prompts,
+  };
+}
+
+function normalizeMessageRows(data) {
+  if (Array.isArray(data)) return data;
+  if (!data || typeof data !== "object") return [];
+  if (Array.isArray(data.messages)) return data.messages;
+  if (Array.isArray(data.clineMessages)) return data.clineMessages;
+  if (Array.isArray(data.history)) return data.history;
+  return [];
+}
+
+function extractTaskUserText(row) {
+  if (!row || typeof row !== "object") return "";
+  const type = String(row.type || row.role || row.say || row.ask || "").toLowerCase();
+  const say = String(row.say || "").toLowerCase();
+  const ask = String(row.ask || "").toLowerCase();
+  const role = String(row.role || "").toLowerCase();
+
+  const looksUser =
+    role === "user" ||
+    type === "user" ||
+    type === "human" ||
+    say === "user_feedback" ||
+    say === "text" && role !== "assistant" ||
+    ask === "followup" ||
+    ask === "command" ||
+    (type === "ask" && !/tool|error|completion/i.test(ask));
+
+  if (!looksUser) {
+    // api_conversation_history style
+    if (role !== "user" && type !== "user") return "";
+  }
+
+  const candidates = [
+    row.text,
+    row.content,
+    row.message,
+    row.userContent,
+    row.ask === "followup" ? row.text : null,
+    Array.isArray(row.content) ? row.content : null,
+  ];
+  for (const candidate of candidates) {
+    const text = cleanText(candidate);
+    if (text) return text;
+  }
+  return "";
+}
+
+module.exports = {
+  inspectVscodeTaskStore,
+  extractTaskUserText,
+  normalizeMessageRows,
+};

package/src/sources/windsurf.js

@@ -0,0 +1,109 @@
+const os = require("node:os");
+const path = require("node:path");
+
+const { walkFiles, readJsonl } = require("../lib/jsonl");
+const { isInRange } = require("../lib/dates");
+const {
+  emptyTotals,
+  emptyReport,
+  addTotals,
+  usageFromObject,
+  cleanText,
+  toIsoTimestamp,
+  readJsonFile,
+} = require("./common");
+
+async function inspectWindsurf({ root, range, home = os.homedir() } = {}) {
+  const windsurfRoot = root || path.join(home, ".codeium", "windsurf");
+  const files = await walkFiles(
+    windsurfRoot,
+    (_filePath, name) =>
+      name.endsWith(".json") ||
+      name.endsWith(".jsonl") ||
+      name.endsWith(".md") ||
+      name.endsWith(".pb"),
+  );
+
+  const prompts = [];
+  const tokenTotals = emptyTotals();
+  let readableFiles = 0;
+  let encryptedPb = 0;
+
+  for (const file of files) {
+    if (file.endsWith(".pb")) {
+      encryptedPb += 1;
+      continue;
+    }
+    readableFiles += 1;
+    if (file.endsWith(".jsonl")) {
+      await readJsonl(file, (obj) => {
+        const text = extractWindsurfUserText(obj);
+        if (!text) return;
+        const timestamp = toIsoTimestamp(obj.timestamp || obj.time || obj.createdAt);
+        if (!isInRange(timestamp, range)) return;
+        prompts.push({
+          source: "windsurf",
+          timestamp,
+          session_file: file,
+          text,
+        });
+        addTotals(tokenTotals, usageFromObject(obj));
+      });
+      continue;
+    }
+
+    if (file.endsWith(".md")) {
+      // Exported Cascade markdown — treat lines after "## User" / "### User" as prompts.
+      // Keep lightweight: only explicit user headings.
+      continue;
+    }
+
+    const data = await readJsonFile(file);
+    const rows = Array.isArray(data)
+      ? data
+      : Array.isArray(data?.messages)
+        ? data.messages
+        : Array.isArray(data?.trajectory)
+          ? data.trajectory
+          : Array.isArray(data?.steps)
+            ? data.steps
+            : [];
+    for (const row of rows) {
+      const text = extractWindsurfUserText(row);
+      if (!text) continue;
+      const timestamp = toIsoTimestamp(row.timestamp || row.time || row.createdAt || data?.createdAt);
+      if (!isInRange(timestamp, range)) continue;
+      prompts.push({
+        source: "windsurf",
+        timestamp,
+        session_file: file,
+        text,
+      });
+      addTotals(tokenTotals, usageFromObject(row));
+    }
+  }
+
+  const notes = [];
+  if (encryptedPb > 0 && prompts.length === 0) {
+    notes.push(
+      `Found ${encryptedPb} encrypted Cascade .pb trajectory file(s); plaintext JSON/JSONL exports are required for prompt extraction.`,
+    );
+  }
+
+  return {
+    ...(emptyReport("windsurf", windsurfRoot, notes)),
+    files_scanned: readableFiles + encryptedPb,
+    prompt_count: prompts.length,
+    token_totals: tokenTotals,
+    prompts,
+  };
+}
+
+function extractWindsurfUserText(row) {
+  if (!row || typeof row !== "object") return "";
+  const role = String(row.role || row.type || row.author || row.kind || "").toLowerCase();
+  if (role && !/(user|human|prompt|input)/.test(role)) return "";
+  return cleanText(row.text ?? row.content ?? row.message ?? row.prompt ?? "");
+}
+
+module.exports = { inspectWindsurf, extractWindsurfUserText };

package/worker/README.md

@@ -0,0 +1,96 @@
+# Vibe Roast Auth · Cloudflare Worker
+
+This Worker is the production OAuth broker and hosted free-roast gateway for
+the public npm client. It keeps GitHub secrets off user machines, stores OAuth
+flows and one-time tickets in a SQLite-backed Durable Object, and invokes
+Cloudflare Workers AI through a server-only binding.
+
+## Configure
+
+Authenticate Wrangler:
+
+```bash
+npm run worker:login
+```
+
+Set the two server-only secrets:
+
+```bash
+npm run worker:secret:github
+npm run worker:secret:session
+```
+
+- `GITHUB_CLIENT_SECRET`: the GitHub App client secret.
+- `AUTH_BROKER_SESSION_SECRET`: at least 32 random bytes; for example,
+  `openssl rand -base64 48`.
+
+The public GitHub App client ID lives in `wrangler.jsonc`. Override it there if
+the app registration changes.
+
+## Deploy
+
+```bash
+npm run worker:deploy
+```
+
+Wrangler binds the Worker to the configured Cloudflare Custom Domain:
+
+```text
+https://auth.pinktalk.online
+```
+
+Configure the GitHub App callback with this exact URL:
+
+```text
+https://auth.pinktalk.online/oauth/github/callback
+```
+
+The public npm app uses `https://auth.pinktalk.online` automatically. Users do
+not need to configure `VIBE_WRAPPER_AUTH_BROKER_URL`; that variable is only an
+override for local development or a self-hosted broker.
+
+`AUTH_BROKER_PUBLIC_URL` pins OAuth redirects to the Custom Domain even when
+the `workers.dev` preview URL is also enabled. It is not confidential.
+
+## Hosted free AI
+
+`POST /v1/chat/completions` is an OpenAI-compatible internal endpoint used by
+the localhost npm server. It requires the signed broker session returned after
+GitHub OAuth; it is not an anonymous public inference endpoint.
+
+- Model: `@cf/qwen/qwen3-30b-a3b-fp8`
+- Default quota: 9 model calls per GitHub account per UTC day
+- Configuration: `FREE_AI_DAILY_CALLS` in `wrangler.jsonc`
+- Limits: at most 8 messages, 50,000 characters of prompt text, and 1,800
+  output tokens per call
+
+The local roast writer spends one model call per roast. It validates the
+bilingual JSON/schema but does not run a post-generation grounding/style audit,
+editor pass, or repair call. Raw prompts and local paths are never sent; only
+the aggregate `roast_evidence` packet is used.
+
+The localhost client also sends a compact behavioral snapshot header. The
+Durable Object binds the generated roast to the authenticated GitHub identity
+and reuses it without consuming quota while the profile remains materially
+equivalent. Token growth and minor score movement do not invalidate the cache;
+type changes, large axis/radar/category shifts, a substantially different
+concept set, or a changed top Agent do. The cache contains aggregate snapshot
+fields and generated copy, never raw prompts.
+
+## Local development
+
+Create an ignored `worker/.dev.vars`:
+
+```dotenv
+GITHUB_CLIENT_SECRET=...
+AUTH_BROKER_SESSION_SECRET=...
+AUTH_BROKER_PUBLIC_URL=http://localhost:8787
+```
+
+Then run:
+
+```bash
+npm run worker:dev
+```
+
+The GitHub App must include the matching local callback URL while testing.