vigthoria-cli 1.10.47 → 1.10.49

package/dist/utils/config.js

@@ -0,0 +1,269 @@
+/**
+ * Configuration Manager for Vigthoria CLI
+ */
+import Conf from 'conf';
+import { secureFileMode } from './cli-state.js';
+const defaultConfig = {
+    apiUrl: 'https://coder.vigthoria.io',
+    modelsApiUrl: 'https://api.vigthoria.io', // Direct AI Models API - no proxying through Coder
+    wsUrl: 'wss://coder.vigthoria.io/ws',
+    selfHostedModelsApiUrl: null,
+    authToken: null,
+    refreshToken: null,
+    userId: null,
+    email: null,
+    v3ServiceKey: null,
+    subscription: {
+        plan: null,
+        status: null,
+        expiresAt: null,
+    },
+    preferences: {
+        defaultModel: 'code',
+        theme: 'dark',
+        autoApplyFixes: false,
+        showDiffs: true,
+        contextLines: 3,
+        maxTokens: 4096,
+    },
+    persona: 'default',
+    project: {
+        rootPath: null,
+        ignorePatterns: [
+            'node_modules',
+            '.git',
+            'dist',
+            'build',
+            '__pycache__',
+            '.venv',
+            'venv',
+            '.env',
+            '*.log',
+        ],
+    },
+};
+export class Config {
+    store;
+    static OPERATOR_PLANS = new Set(['enterprise', 'admin', 'master_admin']);
+    static CLOUD_PLANS = new Set(['pro', 'professional', 'ultra', 'enterprise', 'master_admin', 'admin']);
+    constructor() {
+        // `Conf` defaults to 0o644 on POSIX which would leave auth tokens
+        // readable by every local user.  We post-process the file in
+        // `secureOnDisk()` to enforce 0o600 ownership.  The `fileMode`
+        // option exists on newer `conf` releases — supply it via a cast so
+        // older type-defs do not reject the field.
+        this.store = new Conf({
+            projectName: 'vigthoria-cli',
+            defaults: defaultConfig,
+            ...{ fileMode: 0o600 },
+            schema: {
+                apiUrl: { type: 'string' },
+                modelsApiUrl: { type: 'string' },
+                wsUrl: { type: 'string' },
+                selfHostedModelsApiUrl: { type: ['string', 'null'] },
+                authToken: { type: ['string', 'null'] },
+                refreshToken: { type: ['string', 'null'] },
+                userId: { type: ['string', 'null'] },
+                email: { type: ['string', 'null'] },
+                v3ServiceKey: { type: ['string', 'null'] },
+                subscription: {
+                    type: 'object',
+                    properties: {
+                        plan: { type: ['string', 'null'] },
+                        status: { type: ['string', 'null'] },
+                        expiresAt: { type: ['string', 'null'] },
+                    },
+                },
+                preferences: {
+                    type: 'object',
+                    properties: {
+                        defaultModel: { type: 'string' },
+                        theme: { type: 'string', enum: ['dark', 'light'] },
+                        autoApplyFixes: { type: 'boolean' },
+                        showDiffs: { type: 'boolean' },
+                        contextLines: { type: 'number' },
+                        maxTokens: { type: 'number' },
+                    },
+                },
+                persona: { type: 'string', enum: ['default', 'wiener_grant'] },
+                project: {
+                    type: 'object',
+                    properties: {
+                        rootPath: { type: ['string', 'null'] },
+                        ignorePatterns: { type: 'array', items: { type: 'string' } },
+                    },
+                },
+            },
+        });
+        // Defence-in-depth: re-apply 0600 every time we instantiate Config so
+        // that an older install which created the file with 0644 gets locked
+        // down on next startup.
+        try {
+            secureFileMode(this.store.path);
+        }
+        catch { /* best-effort */ }
+    }
+    /**
+     * Re-apply secure POSIX permissions to the on-disk config file.  Safe
+     * to call repeatedly; no-op on Windows.
+     */
+    secureOnDisk() {
+        try {
+            secureFileMode(this.store.path);
+        }
+        catch { /* best-effort */ }
+    }
+    get(key) {
+        return this.store.get(key);
+    }
+    set(key, value) {
+        this.store.set(key, value);
+    }
+    getAll() {
+        return this.store.store;
+    }
+    reset() {
+        this.store.clear();
+    }
+    isAuthenticated() {
+        return this.store.get('authToken') !== null;
+    }
+    hasValidSubscription() {
+        const sub = this.store.get('subscription');
+        if (!sub.status || sub.status !== 'active')
+            return false;
+        if (sub.expiresAt) {
+            const expires = new Date(sub.expiresAt);
+            return expires > new Date();
+        }
+        return true;
+    }
+    getNormalizedPlan() {
+        return (this.store.get('subscription').plan || '').trim().toLowerCase();
+    }
+    hasOperatorAccess() {
+        return Config.OPERATOR_PLANS.has(this.getNormalizedPlan());
+    }
+    hasCloudAccess() {
+        return Config.CLOUD_PLANS.has(this.getNormalizedPlan());
+    }
+    getConfigPath() {
+        return this.store.path;
+    }
+    // Auth helpers
+    setAuth(data) {
+        this.store.set('authToken', data.token);
+        if (data.refreshToken) {
+            this.store.set('refreshToken', data.refreshToken);
+        }
+        this.store.set('userId', data.userId);
+        this.store.set('email', data.email);
+        // Tighten permissions whenever the token rotates so a brand-new
+        // install (which may have created the file under a previous default
+        // umask) becomes 0600 immediately after first login.
+        this.secureOnDisk();
+    }
+    clearAuth() {
+        this.store.set('authToken', null);
+        this.store.set('refreshToken', null);
+        this.store.set('userId', null);
+        this.store.set('email', null);
+        this.store.set('subscription', {
+            plan: null,
+            status: null,
+            expiresAt: null,
+        });
+    }
+    setSubscription(data) {
+        this.store.set('subscription', {
+            plan: data.plan,
+            status: data.status,
+            expiresAt: data.expiresAt || null,
+        });
+    }
+    // Model selection - Vigthoria Models (internal routing IDs only)
+    getAvailableModels() {
+        const sub = this.store.get('subscription');
+        const plan = (sub.plan || '').toLowerCase();
+        void plan;
+        // ═══════════════════════════════════════════════════════════════
+        // Vigthoria server infrastructure operational models
+        // ═══════════════════════════════════════════════════════════════
+        const models = [
+            { id: 'code', name: 'Vigthoria v3 Code 35B', description: 'Native 35B coding model on Blackwell (V3 pipeline)', tier: 'local', backendModel: 'vigthoria-v3-code-35b' },
+            { id: 'code-35b', name: 'Vigthoria v3 Code 35B', description: 'Same flagship model as code', tier: 'local', backendModel: 'vigthoria-v3-code-35b' },
+            { id: 'code-9b', name: 'Vigthoria v3 Code 9B', description: 'Efficient coding specialist for quick tasks', tier: 'local', backendModel: 'vigthoria-v3-code-9b' },
+            { id: 'balanced', name: 'Vigthoria Balanced 4B', description: 'Balanced general-purpose local model', tier: 'local', backendModel: 'vigthoria-v3-balanced-4b' },
+            { id: 'balanced-4b', name: 'Vigthoria Balanced 4B', description: 'Efficient 4B general-purpose model (Qwen3.5-4B based)', tier: 'local', backendModel: 'vigthoria-v3-balanced-4b' },
+        ];
+        if (this.hasCloudAccess()) {
+            models.push({ id: 'cloud-fast', name: 'Vigthoria Cloud Fast', description: 'Fast cloud responses for lighter work', tier: 'cloud', backendModel: 'vigthoria-cloud-fast' }, { id: 'cloud-balanced', name: 'Vigthoria Cloud Balanced', description: 'Default quality/cost balance for chat and coding', tier: 'cloud', backendModel: 'vigthoria-cloud-balanced' }, { id: 'cloud-code', name: 'Vigthoria Cloud Code', description: 'Economical cloud coding and completion', tier: 'cloud', backendModel: 'vigthoria-cloud-code' }, { id: 'cloud-power', name: 'Vigthoria Cloud Power', description: 'Premium general intelligence for demanding work', tier: 'cloud', backendModel: 'vigthoria-cloud-power' }, { id: 'cloud-maximum', name: 'Vigthoria Cloud Maximum', description: 'Maximum power for complex architecture and reviews', tier: 'cloud', backendModel: 'vigthoria-cloud-maximum' }, 
+            // Legacy aliases
+            { id: 'cloud', name: 'Vigthoria Cloud Balanced', description: 'Legacy alias for cloud-balanced', tier: 'cloud', backendModel: 'vigthoria-cloud-balanced' }, { id: 'cloud-reason', name: 'Vigthoria Cloud Balanced', description: 'Legacy alias for cloud-balanced', tier: 'cloud', backendModel: 'vigthoria-cloud-balanced' }, { id: 'ultra', name: 'Vigthoria Cloud Maximum', description: 'Legacy alias for cloud-maximum', tier: 'cloud', backendModel: 'vigthoria-cloud-maximum' });
+        }
+        const hubPrefs = this.store.get('hubModelPrefs');
+        if (hubPrefs?.enabledCloudModels?.length) {
+            return this.filterModelsByHubPreferences(models, hubPrefs.enabledCloudModels);
+        }
+        return models;
+    }
+    async refreshHubModelPreferences() {
+        const token = this.store.get('authToken');
+        const apiUrl = String(this.store.get('apiUrl') || '').replace(/\/$/, '');
+        if (!token || !apiUrl)
+            return;
+        try {
+            const response = await fetch(`${apiUrl}/api/user/credits/model-preferences`, {
+                headers: { Authorization: `Bearer ${token}` },
+                signal: AbortSignal.timeout(8000),
+            });
+            if (!response.ok)
+                return;
+            const prefs = await response.json();
+            if (prefs?.success === false)
+                return;
+            this.store.set('hubModelPrefs', {
+                enabledCloudModels: Array.isArray(prefs.enabledCloudModels) ? prefs.enabledCloudModels : [],
+                defaultCloudModel: typeof prefs.defaultCloudModel === 'string' ? prefs.defaultCloudModel : undefined,
+                defaultLocalModel: typeof prefs.defaultLocalModel === 'string' ? prefs.defaultLocalModel : undefined,
+                balance: typeof prefs.balance === 'number' ? prefs.balance : undefined,
+                fetchedAt: new Date().toISOString(),
+            });
+        }
+        catch {
+            // Non-fatal: CLI can still run with default model catalog.
+        }
+    }
+    // Check if a model is a "Cloud" tier model
+    isCloudModel(modelId) {
+        const cloudModels = ['cloud-fast', 'cloud-balanced', 'cloud-code', 'cloud-power', 'cloud-maximum', 'cloud', 'cloud-reason', 'ultra'];
+        return cloudModels.includes(modelId) || modelId.includes('cloud');
+    }
+    filterModelsByHubPreferences(models, enabledCloudModels) {
+        if (!enabledCloudModels || !enabledCloudModels.length)
+            return models;
+        const enabled = new Set(enabledCloudModels);
+        return models.filter((model) => model.tier !== 'cloud' || enabled.has(model.backendModel));
+    }
+    // Check if task is complex enough to suggest Cloud upgrade
+    isComplexTask(prompt) {
+        const complexIndicators = [
+            /refactor/i, /architect/i, /redesign/i, /migrate/i,
+            /multi.?file/i, /multiple files/i, /entire.*project/i,
+            /all files/i, /whole.*codebase/i, /implement.*feature/i,
+            /create.*system/i, /build.*from.*scratch/i,
+            /analyze.*project/i, /review.*codebase/i,
+            /audit.*project/i, /audit.*workspace/i,
+            /full overview/i, /analyse.*workspace/i,
+            /analy[sz]e.*entire/i, /deep audit/i,
+        ];
+        return complexIndicators.some(pattern => pattern.test(prompt));
+    }
+    shouldUseCloudForHeavyTask(prompt) {
+        // DISABLED: Cloud routing is now EXPLICIT ONLY (--model cloud or /cloud command)
+        // Do NOT auto-route based on keywords. User must opt-in.
+        // If user wants cloud: they'll use --model cloud or request it explicitly.
+        void prompt;
+        return false;
+    }
+}

package/dist/utils/context-ranker.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Vigthoria CLI — Semantic Context Ranker
  *
@@ -8,13 +7,8 @@
  *
  * No external dependencies — uses only Node.js built-ins.
  */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildSemanticContext = buildSemanticContext;
-const node_fs_1 = __importDefault(require("node:fs"));
-const node_path_1 = __importDefault(require("node:path"));
+import fs from 'node:fs';
+import path from 'node:path';
 const IGNORED_DIRS = new Set([
     '.git', 'node_modules', 'dist', '.next', '__pycache__',
     '.vigthoria', 'coverage', '.cache', '.turbo', 'build', 'out',
@@ -45,8 +39,8 @@ function extractKeywords(prompt) {
 function scoreFile(filePath, keywords) {
     if (keywords.length === 0)
         return 0;
-    const filename = node_path_1.default.basename(filePath).toLowerCase();
-    const parentDir = node_path_1.default.basename(node_path_1.default.dirname(filePath)).toLowerCase();
+    const filename = path.basename(filePath).toLowerCase();
+    const parentDir = path.basename(path.dirname(filePath)).toLowerCase();
     let score = 0;
     for (const kw of keywords) {
         // Filename match (high weight)
@@ -57,7 +51,7 @@ function scoreFile(filePath, keywords) {
             score += 6;
     }
     try {
-        const content = node_fs_1.default.readFileSync(filePath, 'utf-8').slice(0, 300000);
+        const content = fs.readFileSync(filePath, 'utf-8').slice(0, 300000);
         const lower = content.toLowerCase();
         for (const kw of keywords) {
             const escaped = kw.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
@@ -73,14 +67,14 @@ function scoreFile(filePath, keywords) {
 function walkWorkspace(dir, maxFiles = 800) {
     const results = [];
     const stack = [dir];
-    const workspaceRoot = node_path_1.default.resolve(dir);
+    const workspaceRoot = path.resolve(dir);
     while (stack.length > 0 && results.length < maxFiles) {
         const current = stack.pop();
         if (!current)
             continue;
         let entries;
         try {
-            entries = node_fs_1.default.readdirSync(current, { withFileTypes: true });
+            entries = fs.readdirSync(current, { withFileTypes: true });
         }
         catch {
             continue;
@@ -91,12 +85,12 @@ function walkWorkspace(dir, maxFiles = 800) {
                 break;
             if (IGNORED_DIRS.has(entry.name))
                 continue;
-            const fullPath = node_path_1.default.join(current, entry.name);
+            const fullPath = path.join(current, entry.name);
             // Security: skip symlinks that escape workspace root (fixes 8.2)
             if (entry.isSymbolicLink()) {
                 try {
-                    const real = node_fs_1.default.realpathSync(fullPath);
-                    if (!real.startsWith(workspaceRoot + node_path_1.default.sep) && real !== workspaceRoot)
+                    const real = fs.realpathSync(fullPath);
+                    if (!real.startsWith(workspaceRoot + path.sep) && real !== workspaceRoot)
                         continue;
                 }
                 catch {
@@ -106,7 +100,7 @@ function walkWorkspace(dir, maxFiles = 800) {
             if (entry.isDirectory()) {
                 stack.push(fullPath);
             }
-            else if (entry.isFile() && TEXT_EXTENSIONS.has(node_path_1.default.extname(entry.name).toLowerCase())) {
+            else if (entry.isFile() && TEXT_EXTENSIONS.has(path.extname(entry.name).toLowerCase())) {
                 results.push(fullPath);
             }
         }
@@ -117,8 +111,8 @@ function walkWorkspace(dir, maxFiles = 800) {
  * Score and rank workspace files by relevance to the given prompt.
  * Returns the top N files with path, score, and content snippet.
  */
-function buildSemanticContext(workspacePath, prompt, topN = 12) {
-    if (!workspacePath || !node_fs_1.default.existsSync(workspacePath)) {
+export function buildSemanticContext(workspacePath, prompt, topN = 12) {
+    if (!workspacePath || !fs.existsSync(workspacePath)) {
         return { topFiles: [], totalFilesScanned: 0, keywords: [] };
     }
     const keywords = extractKeywords(prompt);
@@ -134,11 +128,11 @@ function buildSemanticContext(workspacePath, prompt, topN = 12) {
     const topFiles = scored.map(({ filePath, score }) => {
         let snippet = '';
         try {
-            snippet = node_fs_1.default.readFileSync(filePath, 'utf-8').slice(0, 600);
+            snippet = fs.readFileSync(filePath, 'utf-8').slice(0, 600);
         }
         catch { /* ignore */ }
         return {
-            path: node_path_1.default.relative(workspacePath, filePath).replace(/\\/g, '/'),
+            path: path.relative(workspacePath, filePath).replace(/\\/g, '/'),
             score,
             snippet,
         };

package/dist/utils/desktop-bridge-client.d.ts

@@ -0,0 +1,12 @@
+export interface DesktopBridgeStatus {
+    ok: boolean;
+    endpoint: string;
+    service?: string;
+    version?: string;
+    controlEnabled?: boolean;
+    error?: string;
+}
+export declare function getDesktopBridgeStatus(options?: {
+    url?: string;
+    timeoutMs?: number;
+}): Promise<DesktopBridgeStatus>;

package/dist/utils/desktop-bridge-client.js

@@ -0,0 +1,30 @@
+export async function getDesktopBridgeStatus(options = {}) {
+    const endpoint = options.url
+        || process.env.VIGTHORIA_DESKTOP_BRIDGE_URL
+        || `http://${process.env.VIGTHORIA_DESKTOP_HOST || '127.0.0.1'}:${process.env.VIGTHORIA_DESKTOP_PORT || '49160'}`;
+    const timeoutMs = options.timeoutMs ?? 5000;
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const response = await fetch(`${endpoint.replace(/\/$/, '')}/health`, {
+            signal: controller.signal,
+            headers: { Accept: 'application/json' },
+        });
+        clearTimeout(timer);
+        if (!response.ok) {
+            return { ok: false, endpoint, error: `HTTP ${response.status}` };
+        }
+        const data = await response.json();
+        return {
+            ok: true,
+            endpoint,
+            service: typeof data.service === 'string' ? data.service : undefined,
+            version: typeof data.version === 'string' ? data.version : undefined,
+            controlEnabled: data.controlEnabled === true || data.control_enabled === true,
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { ok: false, endpoint, error: message };
+    }
+}

package/dist/utils/files.js

@@ -1,46 +1,10 @@
-"use strict";
 /**
  * File utilities for Vigthoria CLI
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FileUtils = void 0;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const glob_1 = require("glob");
-class FileUtils {
+import * as fs from 'fs';
+import * as path from 'path';
+import { glob } from 'glob';
+export class FileUtils {
     projectRoot;
     ignorePatterns;
     constructor(projectRoot, ignorePatterns = []) {
@@ -130,7 +94,7 @@ class FileUtils {
             if (!fs.existsSync(this.projectRoot)) {
                 return [];
             }
-            const files = await (0, glob_1.glob)(pattern, {
+            const files = await glob(pattern, {
                 cwd: this.projectRoot,
                 ignore: this.ignorePatterns,
                 nodir: true,
@@ -275,4 +239,3 @@ class FileUtils {
         return { added, removed };
     }
 }
-exports.FileUtils = FileUtils;