whale-code 6.4.0

package/dist/cli/services/config-store.js

@@ -0,0 +1,79 @@
+/**
+ * Config Store
+ *
+ * Persistent configuration at ~/.swagmanager/config.json
+ *
+ * v2.0: Raw Supabase/Anthropic keys (for MCP server env vars)
+ * v2.1: Auth tokens from login flow (for CLI chat/status)
+ *
+ * Environment variables always override file-based config for MCP server mode.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+// ============================================================================
+// PATHS
+// ============================================================================
+const CONFIG_DIR = join(homedir(), ".swagmanager");
+const CONFIG_PATH = join(CONFIG_DIR, "config.json");
+// ============================================================================
+// READ / WRITE
+// ============================================================================
+export function loadConfig() {
+    try {
+        if (existsSync(CONFIG_PATH)) {
+            return JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
+        }
+    }
+    catch (err) {
+        // Log warning for corrupted config — user may need to re-login
+        console.error(`[config] Warning: Failed to parse ${CONFIG_PATH}: ${err instanceof Error ? err.message : err}`);
+        console.error("[config] Using empty config. You may need to re-login with: whale login");
+    }
+    return {};
+}
+export function saveConfig(config) {
+    if (!existsSync(CONFIG_DIR)) {
+        mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    }
+    writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + "\n", {
+        encoding: "utf-8",
+        mode: 0o600,
+    });
+}
+export function updateConfig(partial) {
+    const existing = loadConfig();
+    saveConfig({ ...existing, ...partial });
+}
+export function clearConfig() {
+    try {
+        if (existsSync(CONFIG_PATH))
+            unlinkSync(CONFIG_PATH);
+    }
+    catch { /* ignore */ }
+}
+/** Default Fly.io agent server URL */
+export const WHALE_SERVER_URL = "https://whale-agent.fly.dev";
+/** Default Supabase URL — fallback when env var and config are both empty */
+const DEFAULT_SUPABASE_URL = "https://uaednwpxursknmwdeejn.supabase.co";
+export function resolveConfig() {
+    const file = loadConfig();
+    return {
+        supabaseUrl: process.env.SUPABASE_URL || file.supabase_url || DEFAULT_SUPABASE_URL,
+        // User JWT preferred over legacy service role key from config file;
+        // env var SUPABASE_SERVICE_ROLE_KEY still wins (explicit MCP setup)
+        supabaseKey: process.env.SUPABASE_SERVICE_ROLE_KEY || file.access_token || file.supabase_key || "",
+        storeId: process.env.STORE_ID || file.store_id || "",
+        anthropicApiKey: process.env.ANTHROPIC_API_KEY || file.anthropic_api_key || "",
+        defaultAgentId: file.default_agent_id || "",
+        serverUrl: process.env.WHALE_SERVER_URL || WHALE_SERVER_URL,
+        platformUrl: process.env.WHALETOOLS_PLATFORM_URL || file.platform_url || "https://whaletools.dev",
+    };
+}
+export function getConfigPath() {
+    return CONFIG_PATH;
+}
+/** Lazy proxy URL — avoids reading config at import time */
+export function getProxyUrl() {
+    return resolveConfig().serverUrl;
+}

package/dist/cli/services/debug-log.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Debug Logging — structured JSONL debug output
+ *
+ * Writes to ~/.swagmanager/debug/{sessionId}.log
+ * Categories: api, tools, context, hooks, sandbox
+ * Enabled via --debug flag or --debug api,tools (selective)
+ */
+export declare function initDebugLog(sessionId: string, filter?: string): void;
+export declare function isDebugEnabled(): boolean;
+export declare function debugLog(category: string, message: string, data?: Record<string, unknown>): void;

package/dist/cli/services/debug-log.js

@@ -0,0 +1,52 @@
+/**
+ * Debug Logging — structured JSONL debug output
+ *
+ * Writes to ~/.swagmanager/debug/{sessionId}.log
+ * Categories: api, tools, context, hooks, sandbox
+ * Enabled via --debug flag or --debug api,tools (selective)
+ */
+import { existsSync, mkdirSync, appendFileSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+const DEBUG_DIR = join(homedir(), ".swagmanager", "debug");
+let debugSessionId = null;
+let debugFilter = null; // null = all categories
+let debugEnabled = false;
+export function initDebugLog(sessionId, filter) {
+    debugEnabled = true;
+    debugSessionId = sessionId;
+    if (filter && filter !== "true" && filter !== "1") {
+        debugFilter = new Set(filter.split(",").map(s => s.trim()));
+    }
+    else {
+        debugFilter = null; // all categories
+    }
+    if (!existsSync(DEBUG_DIR))
+        mkdirSync(DEBUG_DIR, { recursive: true });
+}
+export function isDebugEnabled() {
+    return debugEnabled;
+}
+export function debugLog(category, message, data) {
+    if (!debugEnabled || !debugSessionId)
+        return;
+    if (debugFilter && !debugFilter.has(category))
+        return;
+    const entry = {
+        ts: new Date().toISOString(),
+        cat: category,
+        msg: message,
+        ...data,
+    };
+    const logPath = join(DEBUG_DIR, `${debugSessionId}.log`);
+    try {
+        appendFileSync(logPath, JSON.stringify(entry) + "\n");
+    }
+    catch {
+        // Best effort
+    }
+    // Also write to stderr for --print mode visibility
+    if (process.env.WHALE_DEBUG_STDERR === "1") {
+        process.stderr.write(`[${category}] ${message}\n`);
+    }
+}

package/dist/cli/services/error-logger.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Error Logger — fire-and-forget error capture to error_events table
+ *
+ * Sentry replacement built on our own Supabase infrastructure.
+ * Mirrors the Swift WhaleErrorLogger: same fingerprinting, same table, same schema.
+ * Reuses the telemetry.ts Supabase client pattern.
+ */
+export interface ErrorLoggerConfig {
+    serviceName: string;
+    serviceVersion?: string;
+    platform?: "typescript" | "deno";
+    environment?: "development" | "staging" | "production";
+    maxBreadcrumbs?: number;
+}
+export interface Breadcrumb {
+    timestamp: string;
+    category: string;
+    message: string;
+    level: string;
+    data?: Record<string, string>;
+}
+export interface CaptureErrorOptions {
+    error?: Error;
+    errorType?: string;
+    errorMessage?: string;
+    errorCode?: string;
+    severity?: "debug" | "info" | "warning" | "error" | "fatal";
+    file?: string;
+    line?: number;
+    function?: string;
+    tags?: Record<string, string>;
+    extra?: Record<string, string>;
+    traceId?: string;
+    spanId?: string;
+    storeId?: string;
+    userId?: string;
+    userEmail?: string;
+}
+/**
+ * Initialize the error logger. Call once at CLI startup.
+ */
+export declare function initErrorLogger(cfg: ErrorLoggerConfig): void;
+/**
+ * Update user context (called after auth).
+ */
+export declare function setErrorLoggerUser(userId?: string, email?: string, storeId?: string): void;
+/**
+ * Add a breadcrumb to the ring buffer.
+ */
+export declare function addBreadcrumb(category: string, message: string, level?: string, data?: Record<string, string>): void;
+/**
+ * Capture an error event. Fire-and-forget.
+ */
+export declare function captureError(opts: CaptureErrorOptions): void;
+/**
+ * Convenience: capture a message (non-Error).
+ */
+export declare function captureMessage(message: string, severity?: "debug" | "info" | "warning" | "error" | "fatal", extra?: Record<string, string>): void;

package/dist/cli/services/error-logger.js

@@ -0,0 +1,269 @@
+/**
+ * Error Logger — fire-and-forget error capture to error_events table
+ *
+ * Sentry replacement built on our own Supabase infrastructure.
+ * Mirrors the Swift WhaleErrorLogger: same fingerprinting, same table, same schema.
+ * Reuses the telemetry.ts Supabase client pattern.
+ */
+import { createClient } from "@supabase/supabase-js";
+import { createRequire } from "module";
+import { createHash } from "crypto";
+import os from "os";
+import { resolveConfig } from "./config-store.js";
+import { getValidToken, createAuthenticatedClient } from "./auth-service.js";
+const require = createRequire(import.meta.url);
+const PKG_VERSION = require("../../../package.json").version;
+// ============================================================================
+// STATE
+// ============================================================================
+let config = {
+    serviceName: "whale-code",
+    serviceVersion: PKG_VERSION,
+    platform: "typescript",
+    environment: "production",
+    maxBreadcrumbs: 25,
+};
+let breadcrumbs = [];
+let supabaseClient = null;
+// User context (set externally)
+let currentUserId;
+let currentUserEmail;
+let currentStoreId;
+// ============================================================================
+// INIT
+// ============================================================================
+/**
+ * Initialize the error logger. Call once at CLI startup.
+ */
+export function initErrorLogger(cfg) {
+    config = {
+        ...config,
+        ...cfg,
+        serviceVersion: cfg.serviceVersion || PKG_VERSION,
+        environment: cfg.environment || (process.env.NODE_ENV === "development" ? "development" : "production"),
+    };
+}
+/**
+ * Update user context (called after auth).
+ */
+export function setErrorLoggerUser(userId, email, storeId) {
+    currentUserId = userId;
+    currentUserEmail = email;
+    currentStoreId = storeId;
+}
+// ============================================================================
+// BREADCRUMBS
+// ============================================================================
+/**
+ * Add a breadcrumb to the ring buffer.
+ */
+export function addBreadcrumb(category, message, level = "info", data) {
+    breadcrumbs.push({
+        timestamp: new Date().toISOString(),
+        category,
+        message,
+        level,
+        data,
+    });
+    const max = config.maxBreadcrumbs || 25;
+    if (breadcrumbs.length > max) {
+        breadcrumbs = breadcrumbs.slice(-max);
+    }
+}
+// ============================================================================
+// CAPTURE
+// ============================================================================
+/**
+ * Capture an error event. Fire-and-forget.
+ */
+export function captureError(opts) {
+    _captureError(opts).catch((err) => {
+        if (process.env.DEBUG_TELEMETRY) {
+            process.stderr.write(`[error-logger] capture failed: ${err.message}\n`);
+        }
+    });
+}
+/**
+ * Convenience: capture a message (non-Error).
+ */
+export function captureMessage(message, severity = "info", extra) {
+    captureError({
+        errorType: "Message",
+        errorMessage: message,
+        severity,
+        extra,
+    });
+}
+// ============================================================================
+// INTERNAL
+// ============================================================================
+async function _captureError(opts) {
+    const client = await getClient();
+    if (!client) {
+        if (process.env.DEBUG_TELEMETRY) {
+            process.stderr.write(`[error-logger] no client available\n`);
+        }
+        return;
+    }
+    const error = opts.error;
+    const errorType = opts.errorType || (error ? error.constructor.name : "UnknownError");
+    const errorMessage = opts.errorMessage || (error ? error.message : "Unknown error");
+    const stackTrace = error?.stack;
+    const normalizedMessage = normalizeMessage(errorMessage);
+    const sourceLocation = opts.file && opts.function
+        ? `${opts.file}:${opts.function}`
+        : extractSourceFromStack(stackTrace);
+    const fingerprint = computeFingerprint(errorType, normalizedMessage, sourceLocation);
+    // Parse source from stack if not provided
+    const parsedSource = parseSourceFromStack(stackTrace);
+    const event = {
+        fingerprint,
+        severity: opts.severity || "error",
+        error_type: errorType,
+        error_message: errorMessage,
+        error_code: opts.errorCode,
+        source_file: opts.file || parsedSource.file,
+        source_line: opts.line || parsedSource.line,
+        source_function: opts.function || parsedSource.function,
+        stack_trace: stackTrace,
+        stack_frames: stackTrace ? parseStackFrames(stackTrace) : undefined,
+        breadcrumbs: [...breadcrumbs],
+        platform: config.platform || "typescript",
+        service_name: config.serviceName,
+        service_version: config.serviceVersion,
+        environment: config.environment || "production",
+        device_info: collectDeviceInfo(),
+        runtime_info: collectRuntimeInfo(),
+        store_id: opts.storeId || currentStoreId,
+        user_id: opts.userId || currentUserId,
+        user_email: opts.userEmail || currentUserEmail,
+        trace_id: opts.traceId,
+        span_id: opts.spanId,
+        tags: opts.tags || {},
+        extra: opts.extra || {},
+        occurred_at: new Date().toISOString(),
+    };
+    const { error: dbError } = await client.from("error_events").insert(event);
+    if (dbError && process.env.DEBUG_TELEMETRY) {
+        process.stderr.write(`[error-logger] db error: ${dbError.message}\n`);
+    }
+}
+// ============================================================================
+// SUPABASE CLIENT (lazy init, same pattern as telemetry.ts)
+// ============================================================================
+async function getClient() {
+    if (supabaseClient)
+        return supabaseClient;
+    const cfg = resolveConfig();
+    // Prefer service role key
+    if (cfg.supabaseUrl && cfg.supabaseKey) {
+        supabaseClient = createClient(cfg.supabaseUrl, cfg.supabaseKey, {
+            auth: { persistSession: false, autoRefreshToken: false },
+        });
+        return supabaseClient;
+    }
+    // Fallback: user JWT
+    const token = await getValidToken();
+    if (token) {
+        supabaseClient = createAuthenticatedClient(token);
+        return supabaseClient;
+    }
+    return null;
+}
+// ============================================================================
+// FINGERPRINTING (identical algorithm to Swift)
+// ============================================================================
+function computeFingerprint(errorType, message, source) {
+    const input = `${errorType}|${message}|${source}`;
+    return createHash("sha256").update(input).digest("hex");
+}
+/**
+ * Strip volatile data from error messages for stable grouping.
+ * Must match Swift's normalizeMessage exactly for cross-platform grouping.
+ */
+function normalizeMessage(message) {
+    return message
+        // UUIDs
+        .replace(/[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/g, "<UUID>")
+        // URLs
+        .replace(/https?:\/\/[^\s"']+/g, "<URL>")
+        // Emails
+        .replace(/[\w.+-]+@[\w.-]+\.[a-zA-Z]{2,}/g, "<EMAIL>")
+        // IP addresses
+        .replace(/\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g, "<IP>")
+        // Standalone numbers (2+ digits)
+        .replace(/\b\d{2,}\b/g, "<N>")
+        // Quoted strings
+        .replace(/"[^"]*"/g, '"<STR>"');
+}
+// ============================================================================
+// STACK PARSING
+// ============================================================================
+function parseStackFrames(stack) {
+    return stack
+        .split("\n")
+        .slice(0, 20)
+        .map((line) => {
+        // V8 format: "    at functionName (file:line:column)"
+        const match = line.match(/at\s+(.+?)\s+\((.+?):(\d+):(\d+)\)/);
+        if (match) {
+            return {
+                function: match[1],
+                file: match[2],
+                line: parseInt(match[3], 10),
+                column: parseInt(match[4], 10),
+            };
+        }
+        // Anonymous: "    at file:line:column"
+        const anonMatch = line.match(/at\s+(.+?):(\d+):(\d+)/);
+        if (anonMatch) {
+            return {
+                file: anonMatch[1],
+                line: parseInt(anonMatch[2], 10),
+                column: parseInt(anonMatch[3], 10),
+            };
+        }
+        return { function: line.trim() };
+    });
+}
+function extractSourceFromStack(stack) {
+    if (!stack)
+        return "unknown";
+    const parsed = parseSourceFromStack(stack);
+    return parsed.file && parsed.function
+        ? `${parsed.file}:${parsed.function}`
+        : parsed.file || "unknown";
+}
+function parseSourceFromStack(stack) {
+    if (!stack)
+        return {};
+    // Get the first meaningful frame (skip "Error" line)
+    const lines = stack.split("\n");
+    for (const line of lines) {
+        const match = line.match(/at\s+(.+?)\s+\((.+?):(\d+):(\d+)\)/);
+        if (match) {
+            return {
+                function: match[1],
+                file: match[2],
+                line: parseInt(match[3], 10),
+            };
+        }
+    }
+    return {};
+}
+// ============================================================================
+// DEVICE / RUNTIME INFO
+// ============================================================================
+function collectDeviceInfo() {
+    return {
+        os: process.platform,
+        os_version: os.release(),
+        arch: process.arch,
+        memory_gb: (os.totalmem() / 1_073_741_824).toFixed(1),
+    };
+}
+function collectRuntimeInfo() {
+    return {
+        node_version: process.version,
+    };
+}

package/dist/cli/services/file-history.d.ts

@@ -0,0 +1,21 @@
+/**
+ * File History — backup files before modification
+ *
+ * On every write_file/edit_file/multi_edit, the original content is saved to:
+ *   ~/.swagmanager/file-history/{sessionId}/{timestamp}-{basename}
+ *
+ * Limit: 100 backups per session (FIFO cleanup).
+ */
+export declare function setFileHistorySessionId(sessionId: string): void;
+/**
+ * Save a backup of a file before it is modified.
+ * No-op if the file doesn't exist yet (new file creation).
+ */
+export declare function backupFile(filePath: string): void;
+/**
+ * List backups for the current session.
+ */
+export declare function listBackups(): Array<{
+    name: string;
+    path: string;
+}>;

package/dist/cli/services/file-history.js

@@ -0,0 +1,83 @@
+/**
+ * File History — backup files before modification
+ *
+ * On every write_file/edit_file/multi_edit, the original content is saved to:
+ *   ~/.swagmanager/file-history/{sessionId}/{timestamp}-{basename}
+ *
+ * Limit: 100 backups per session (FIFO cleanup).
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, unlinkSync } from "fs";
+import { join, basename } from "path";
+import { homedir } from "os";
+const HISTORY_BASE = join(homedir(), ".swagmanager", "file-history");
+const MAX_BACKUPS_PER_SESSION = 100;
+let currentSessionId = null;
+export function setFileHistorySessionId(sessionId) {
+    currentSessionId = sessionId;
+}
+function getSessionDir() {
+    if (!currentSessionId)
+        return null;
+    const dir = join(HISTORY_BASE, currentSessionId);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    return dir;
+}
+/**
+ * Save a backup of a file before it is modified.
+ * No-op if the file doesn't exist yet (new file creation).
+ */
+export function backupFile(filePath) {
+    if (!currentSessionId)
+        return;
+    if (!existsSync(filePath))
+        return;
+    try {
+        const dir = getSessionDir();
+        if (!dir)
+            return;
+        const content = readFileSync(filePath);
+        const ts = Date.now();
+        const name = basename(filePath);
+        const backupName = `${ts}-${name}`;
+        const backupPath = join(dir, backupName);
+        writeFileSync(backupPath, content);
+        // FIFO cleanup
+        cleanupOldBackups(dir);
+    }
+    catch {
+        // Best effort — don't fail the actual operation
+    }
+}
+function cleanupOldBackups(dir) {
+    try {
+        const files = readdirSync(dir).sort();
+        if (files.length > MAX_BACKUPS_PER_SESSION) {
+            const toRemove = files.slice(0, files.length - MAX_BACKUPS_PER_SESSION);
+            for (const f of toRemove) {
+                try {
+                    unlinkSync(join(dir, f));
+                }
+                catch { /* skip */ }
+            }
+        }
+    }
+    catch { /* skip */ }
+}
+/**
+ * List backups for the current session.
+ */
+export function listBackups() {
+    const dir = getSessionDir();
+    if (!dir || !existsSync(dir))
+        return [];
+    try {
+        return readdirSync(dir)
+            .sort()
+            .reverse()
+            .map(name => ({ name, path: join(dir, name) }));
+    }
+    catch {
+        return [];
+    }
+}

package/dist/cli/services/format-server-response.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Server Response Formatter — converts raw JSON to readable markdown
+ *
+ * Transforms server tool JSON responses into:
+ * - Markdown tables for arrays of flat objects
+ * - Bold key-value pairs for single objects
+ * - JSON fences for complex nested data
+ */
+/**
+ * Format a server tool response as readable markdown.
+ *
+ * @param data - The raw response data (parsed JSON)
+ * @param toolName - Optional tool name for smart column selection
+ * @returns Formatted markdown string
+ */
+export declare function formatServerResponse(data: unknown, toolName?: string): string;