amosblomqvist
b18294948d
The owner needs exact new-user simulation as a one-command launch (repeatable first-run BYOK testing). Option A, owner-approved: env-hiding switch + launcher script. Fix 1 — LH_IGNORE_ENV_KEYS=1 in the keys seam: when set, every env key is invisible app-wide; only auth.json counts. The mechanism is boot-time DELETION, not seam-local filtering: pi-ai resolves provider keys from process.env NATIVELY at every request (verified — auth/context.js's defaultProviderAuthContext reads live env, no boot snapshot), so deleting the managed vars from process.env in initAuthEnv is the ONE mechanism that hides keys from every consumer — model engines included, plus the three direct process.env readers (visual-maker, pdf-reader, openRouterApiKey). realEnv stays EMPTY under the switch (nothing counts as env), and the fill-gap still reflects auth.json keys so a fresh user can add keys mid-session and engines see them with no restart. keyValue reads file-only under the switch as belt-and-suspenders (a post-boot env reintroduction stays invisible to the seam). Unset switch = today's behavior, byte-for-byte (server-keys.test.ts pins it). Fix 2 — scripts/dev-fresh.sh (npm run dev:fresh): fresh throwaway LH_DATA_DIR (.fresh-data/, wiped each launch, --keep preserves), and — the subtle bit — LH_AUTH_FILE redirected INTO the fresh dir: dev's AUTH_FILE default is the repo-root auth.json, which may symlink the real keys; the fresh instance must never see it. Sets the switch, dedicated port (default 3005, --port overrideable, standing assignments 3000-3004 refused), prints URL + data dir, safe to rerun. .fresh-data/ gitignored. Test: tests/fresh-env-keys.test.ts (own process — the switch is boot-time): the engine-path deletion asserted directly, the env/file collision resolved to the file, status rows report file sources only, mid-session saveKey/deleteKey round-trip, idempotent re-init, and the unset-switch env-wins read seam live-checked. Live-verified on 3005 via the launcher: zero federated models, all providers keyPresent false, no present keys, no auth.json/settings.json in the fresh dir; then mid-session ZAI save → 7 zai models federate instantly, source 'file' — while .env.local's real keys stayed invisible throughout. Gates: typecheck, lint, 863/863, build.
85 lines
2.6 KiB
JSON
85 lines
2.6 KiB
JSON
{
|
|
"name": "learning-harness",
|
|
"version": "0.2.0",
|
|
"description": "A standalone learning harness: a teacher agent (AI SDK) with quiz/ask interactions, session artifacts, and a derived knowledge graph of what the learner knows.",
|
|
"type": "module",
|
|
"private": true,
|
|
"main": "electron/main.cjs",
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"test": "NODE_ENV=test tsx --test tests/*.test.ts tests/*.test.tsx",
|
|
"lint": "eslint .",
|
|
"typecheck": "tsc --noEmit",
|
|
"desktop:dev": "concurrently -k \"next dev\" \"LH_DEV_URL=http://localhost:3000 electron .\"",
|
|
"dev:fresh": "bash scripts/dev-fresh.sh",
|
|
"desktop:dist": "next build && node scripts/build-server.mjs && electron-builder --mac --arm64"
|
|
},
|
|
"dependencies": {
|
|
"@ai-sdk/react": "^4.0.79",
|
|
"@earendil-works/pi-agent-core": "^0.85.1",
|
|
"@earendil-works/pi-ai": "^0.85.1",
|
|
"@huggingface/transformers": "^4.2.0",
|
|
"@mozilla/readability": "^0.6.0",
|
|
"@radix-ui/react-use-controllable-state": "^1.2.6",
|
|
"@rive-app/react-webgl2": "^4.32.1",
|
|
"@streamdown/cjk": "^1.0.3",
|
|
"@streamdown/code": "^1.1.1",
|
|
"@streamdown/math": "^1.0.2",
|
|
"@streamdown/mermaid": "^1.0.2",
|
|
"@xyflow/react": "^12.11.3",
|
|
"ai": "^7.0.76",
|
|
"ansi-to-react": "^6.2.6",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"d3-force": "^3.0.0",
|
|
"d3-selection": "^3.0.0",
|
|
"d3-shape": "^3.2.0",
|
|
"d3-zoom": "^3.0.0",
|
|
"dagre-d3-es": "7.0.14",
|
|
"embla-carousel-react": "^8.6.0",
|
|
"katex": "^0.16.47",
|
|
"linkedom": "^0.18.13",
|
|
"lucide-react": "^1.33.0",
|
|
"media-chrome": "^4.19.2",
|
|
"mermaid": "^11.17.0",
|
|
"motion": "^13.1.1",
|
|
"nanoid": "^6.0.1",
|
|
"next": "^16.3.2",
|
|
"next-themes": "^0.4.6",
|
|
"pdfjs-dist": "^6.3.289",
|
|
"puppeteer-core": "^25.8.0",
|
|
"radix-ui": "^1.6.7",
|
|
"react": "^19.2.8",
|
|
"react-dom": "^19.2.8",
|
|
"react-jsx-parser": "^2.4.1",
|
|
"remark-breaks": "^4.0.0",
|
|
"streamdown": "^2.5.0",
|
|
"tailwind-merge": "^3.6.0",
|
|
"tokenlens": "^1.3.1",
|
|
"turndown": "^7.2.4",
|
|
"use-stick-to-bottom": "^1.1.6",
|
|
"zod": "^4.4.3"
|
|
},
|
|
"devDependencies": {
|
|
"@next/eslint-plugin-next": "^16.3.3",
|
|
"@tailwindcss/postcss": "^4.3.3",
|
|
"@types/node": "^24.0.0",
|
|
"@types/react": "^19.2.18",
|
|
"@types/react-dom": "^19.2.4",
|
|
"@types/turndown": "^5.0.6",
|
|
"@typescript-eslint/parser": "^8.68.0",
|
|
"concurrently": "^10.0.5",
|
|
"electron": "^44.4.1",
|
|
"electron-builder": "^26.15.3",
|
|
"eslint": "^9.39.5",
|
|
"eslint-import-resolver-typescript": "^4.4.5",
|
|
"eslint-plugin-import": "^2.32.0",
|
|
"tailwindcss": "^4.3.3",
|
|
"tsx": "^4.19.0",
|
|
"typescript": "^5.6.0"
|
|
}
|
|
}
|