247-cli 2.21.1 → 2.23.2

package/agent/dist/routes/pair.js

@@ -0,0 +1,381 @@
+/**
+ * Pairing routes: Allow users to pair their agent with the dashboard.
+ * Provides a web page with pairing link, QR code, and 6-digit fallback code.
+ */
+import { Router } from 'express';
+import { createHmac } from 'crypto';
+import { config } from '../config.js';
+const pairingCodes = new Map();
+// Clean up expired codes every minute
+setInterval(() => {
+    const now = Date.now();
+    for (const [code, data] of pairingCodes.entries()) {
+        if (data.expiresAt < now) {
+            pairingCodes.delete(code);
+        }
+    }
+}, 60 * 1000);
+// Generate a 6-digit code
+function generateCode() {
+    const code = Math.floor(100000 + Math.random() * 900000).toString();
+    // Ensure uniqueness
+    if (pairingCodes.has(code)) {
+        return generateCode();
+    }
+    return code;
+}
+// Create a signed token
+function createToken(payload, secret, expiresInMs) {
+    const exp = Date.now() + expiresInMs;
+    const data = { ...payload, iat: Date.now(), exp };
+    const payloadStr = Buffer.from(JSON.stringify(data)).toString('base64url');
+    const signature = createHmac('sha256', secret).update(payloadStr).digest('base64url');
+    return `${payloadStr}.${signature}`;
+}
+// Verify and decode a token
+export function verifyToken(token, secret) {
+    try {
+        const [payloadStr, signature] = token.split('.');
+        if (!payloadStr || !signature) {
+            return { valid: false, error: 'Invalid token format' };
+        }
+        const expectedSignature = createHmac('sha256', secret).update(payloadStr).digest('base64url');
+        if (signature !== expectedSignature) {
+            return { valid: false, error: 'Invalid signature' };
+        }
+        const payload = JSON.parse(Buffer.from(payloadStr, 'base64url').toString());
+        if (payload.exp && payload.exp < Date.now()) {
+            return { valid: false, error: 'Token expired' };
+        }
+        return { valid: true, payload };
+    }
+    catch {
+        return { valid: false, error: 'Failed to parse token' };
+    }
+}
+// Get agent URL - prefer config, fallback to localhost
+function getAgentUrl() {
+    if (config.agent?.url) {
+        return config.agent.url;
+    }
+    const port = config.agent?.port || 4678;
+    return `localhost:${port}`;
+}
+// Get dashboard URL
+function getDashboardUrl() {
+    // Use config if available, otherwise default to production
+    if (config.dashboard?.apiUrl) {
+        // Extract base URL from API URL (remove /api suffix)
+        return config.dashboard.apiUrl.replace(/\/api\/?$/, '');
+    }
+    return 'https://247.quivr.com';
+}
+// Generate QR code as SVG using a simple implementation
+function generateQRCodeSVG(data) {
+    // Use a simple QR code approach - encode the URL in a data URI
+    // For production, you'd use a proper QR library like 'qrcode'
+    // Here we'll use Google Charts API as a simple fallback
+    const encoded = encodeURIComponent(data);
+    return `<img src="https://api.qrserver.com/v1/create-qr-code/?size=200x200&data=${encoded}" alt="QR Code" width="200" height="200" style="image-rendering: pixelated;" />`;
+}
+export function createPairRoutes() {
+    const router = Router();
+    // GET /pair - HTML page with pairing info
+    router.get('/', (_req, res) => {
+        const machineId = config.machine.id;
+        const machineName = config.machine.name;
+        const agentUrl = getAgentUrl();
+        const dashboardUrl = getDashboardUrl();
+        // Create token (10 minute expiry)
+        const token = createToken({
+            mid: machineId,
+            mn: machineName,
+            url: agentUrl,
+        }, machineId, 10 * 60 * 1000);
+        // Generate or reuse existing code for this machine
+        let existingCode;
+        for (const [code, data] of pairingCodes.entries()) {
+            if (data.machineId === machineId && data.expiresAt > Date.now()) {
+                existingCode = code;
+                break;
+            }
+        }
+        const code = existingCode ||
+            (() => {
+                const newCode = generateCode();
+                pairingCodes.set(newCode, {
+                    code: newCode,
+                    machineId,
+                    machineName,
+                    agentUrl,
+                    createdAt: Date.now(),
+                    expiresAt: Date.now() + 10 * 60 * 1000,
+                });
+                return newCode;
+            })();
+        const pairingLink = `${dashboardUrl}/connect?token=${encodeURIComponent(token)}`;
+        const qrCodeSvg = generateQRCodeSVG(pairingLink);
+        // Calculate time remaining
+        const codeData = pairingCodes.get(code);
+        const secondsRemaining = Math.floor((codeData.expiresAt - Date.now()) / 1000);
+        const html = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Pair Agent - ${machineName}</title>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      background: linear-gradient(135deg, #0a0a10 0%, #1a1a2e 100%);
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      padding: 20px;
+      color: #fff;
+    }
+    .container {
+      background: rgba(255, 255, 255, 0.03);
+      border: 1px solid rgba(255, 255, 255, 0.1);
+      border-radius: 24px;
+      padding: 40px;
+      max-width: 480px;
+      width: 100%;
+      text-align: center;
+    }
+    .machine-icon {
+      width: 80px;
+      height: 80px;
+      background: linear-gradient(135deg, #f97316 0%, #f59e0b 100%);
+      border-radius: 20px;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      margin: 0 auto 24px;
+      font-size: 40px;
+    }
+    h1 {
+      font-size: 24px;
+      font-weight: 600;
+      margin-bottom: 8px;
+    }
+    .machine-name {
+      color: #f97316;
+      font-size: 20px;
+      font-weight: 500;
+      margin-bottom: 32px;
+    }
+    .qr-section {
+      background: #fff;
+      border-radius: 16px;
+      padding: 20px;
+      margin-bottom: 24px;
+      display: inline-block;
+    }
+    .qr-section img {
+      display: block;
+    }
+    .link-section {
+      margin-bottom: 24px;
+    }
+    .pair-button {
+      display: inline-block;
+      background: linear-gradient(135deg, #f97316 0%, #f59e0b 100%);
+      color: #fff;
+      text-decoration: none;
+      padding: 16px 32px;
+      border-radius: 12px;
+      font-weight: 600;
+      font-size: 16px;
+      transition: transform 0.2s, box-shadow 0.2s;
+    }
+    .pair-button:hover {
+      transform: translateY(-2px);
+      box-shadow: 0 8px 24px rgba(249, 115, 22, 0.3);
+    }
+    .divider {
+      display: flex;
+      align-items: center;
+      margin: 24px 0;
+      color: rgba(255, 255, 255, 0.4);
+      font-size: 14px;
+    }
+    .divider::before, .divider::after {
+      content: '';
+      flex: 1;
+      height: 1px;
+      background: rgba(255, 255, 255, 0.1);
+    }
+    .divider span {
+      padding: 0 16px;
+    }
+    .code-section {
+      background: rgba(255, 255, 255, 0.05);
+      border: 1px solid rgba(255, 255, 255, 0.1);
+      border-radius: 12px;
+      padding: 20px;
+    }
+    .code-label {
+      font-size: 14px;
+      color: rgba(255, 255, 255, 0.6);
+      margin-bottom: 12px;
+    }
+    .code {
+      font-family: 'SF Mono', Monaco, monospace;
+      font-size: 36px;
+      font-weight: 700;
+      letter-spacing: 8px;
+      color: #f97316;
+    }
+    .expires {
+      font-size: 12px;
+      color: rgba(255, 255, 255, 0.4);
+      margin-top: 12px;
+    }
+    .refresh-note {
+      font-size: 12px;
+      color: rgba(255, 255, 255, 0.3);
+      margin-top: 24px;
+    }
+    .agent-info {
+      font-size: 12px;
+      color: rgba(255, 255, 255, 0.4);
+      margin-top: 16px;
+      padding-top: 16px;
+      border-top: 1px solid rgba(255, 255, 255, 0.1);
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="machine-icon">💻</div>
+    <h1>Pair Your Agent</h1>
+    <p class="machine-name">${machineName}</p>
+
+    <div class="qr-section">
+      ${qrCodeSvg}
+    </div>
+
+    <div class="link-section">
+      <a href="${pairingLink}" class="pair-button" target="_blank">Open Dashboard to Pair</a>
+    </div>
+
+    <div class="divider"><span>or enter this code</span></div>
+
+    <div class="code-section">
+      <p class="code-label">Pairing Code</p>
+      <p class="code">${code}</p>
+      <p class="expires">Expires in <span id="countdown">${Math.floor(secondsRemaining / 60)}:${String(secondsRemaining % 60).padStart(2, '0')}</span></p>
+    </div>
+
+    <p class="refresh-note">Page will auto-refresh when code expires</p>
+
+    <p class="agent-info">
+      Agent URL: ${agentUrl}<br>
+      Machine ID: ${machineId}
+    </p>
+  </div>
+
+  <script>
+    let remaining = ${secondsRemaining};
+    const countdown = document.getElementById('countdown');
+
+    setInterval(() => {
+      remaining--;
+      if (remaining <= 0) {
+        location.reload();
+        return;
+      }
+      const mins = Math.floor(remaining / 60);
+      const secs = remaining % 60;
+      countdown.textContent = mins + ':' + String(secs).padStart(2, '0');
+    }, 1000);
+  </script>
+</body>
+</html>`;
+        res.setHeader('Content-Type', 'text/html');
+        res.send(html);
+    });
+    // GET /pair/info - JSON API for pairing info
+    router.get('/info', (_req, res) => {
+        const machineId = config.machine.id;
+        const machineName = config.machine.name;
+        const agentUrl = getAgentUrl();
+        const dashboardUrl = getDashboardUrl();
+        // Create token (10 minute expiry)
+        const token = createToken({
+            mid: machineId,
+            mn: machineName,
+            url: agentUrl,
+        }, machineId, 10 * 60 * 1000);
+        // Generate or reuse existing code
+        let existingCode;
+        for (const [code, data] of pairingCodes.entries()) {
+            if (data.machineId === machineId && data.expiresAt > Date.now()) {
+                existingCode = code;
+                break;
+            }
+        }
+        const code = existingCode ||
+            (() => {
+                const newCode = generateCode();
+                pairingCodes.set(newCode, {
+                    code: newCode,
+                    machineId,
+                    machineName,
+                    agentUrl,
+                    createdAt: Date.now(),
+                    expiresAt: Date.now() + 10 * 60 * 1000,
+                });
+                return newCode;
+            })();
+        const codeData = pairingCodes.get(code);
+        res.json({
+            machineId,
+            machineName,
+            agentUrl,
+            token,
+            code,
+            pairingLink: `${dashboardUrl}/connect?token=${encodeURIComponent(token)}`,
+            expiresAt: codeData.expiresAt,
+        });
+    });
+    // GET /pair/code/:code - Lookup a pairing code (for dashboard to verify)
+    router.get('/code/:code', (req, res) => {
+        const { code } = req.params;
+        const data = pairingCodes.get(code);
+        if (!data || data.expiresAt < Date.now()) {
+            return res.status(404).json({ error: 'Code not found or expired' });
+        }
+        res.json({
+            machineId: data.machineId,
+            machineName: data.machineName,
+            agentUrl: data.agentUrl,
+            expiresAt: data.expiresAt,
+        });
+    });
+    // POST /pair/verify - Verify a token (for dashboard to validate)
+    router.post('/verify', (req, res) => {
+        const { token } = req.body;
+        if (!token || typeof token !== 'string') {
+            return res.status(400).json({ error: 'Token is required' });
+        }
+        const machineId = config.machine.id;
+        const result = verifyToken(token, machineId);
+        if (!result.valid) {
+            return res.status(401).json({ error: result.error });
+        }
+        res.json({
+            valid: true,
+            machineId: result.payload?.mid,
+            machineName: result.payload?.mn,
+            agentUrl: result.payload?.url,
+        });
+    });
+    return router;
+}
+// Export for testing
+export { pairingCodes, generateCode, createToken, getAgentUrl, getDashboardUrl };
+//# sourceMappingURL=pair.js.map

package/agent/dist/routes/pair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.js","sourceRoot":"","sources":["../../src/routes/pair.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAYtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEpD,sCAAsC;AACtC,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACzB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;AAEd,0BAA0B;AAC1B,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,oBAAoB;IACpB,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wBAAwB;AACxB,SAAS,WAAW,CAAC,OAAe,EAAE,MAAc,EAAE,WAAmB;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtF,OAAO,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC;AACtC,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9F,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE5E,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,WAAW;IAClB,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC;IACxC,OAAO,aAAa,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,oBAAoB;AACpB,SAAS,eAAe;IACtB,2DAA2D;IAC3D,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC7B,qDAAqD;QACrD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,wDAAwD;AACxD,SAAS,iBAAiB,CAAC,IAAY;IACrC,+DAA+D;IAC/D,8DAA8D;IAC9D,wDAAwD;IACxD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,2EAA2E,OAAO,iFAAiF,CAAC;AAC7K,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,0CAA0C;IAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QAEvC,kCAAkC;QAClC,MAAM,KAAK,GAAG,WAAW,CACvB;YACE,GAAG,EAAE,SAAS;YACd,EAAE,EAAE,WAAW;YACf,GAAG,EAAE,QAAQ;SACd,EACD,SAAS,EACT,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;QAEF,mDAAmD;QACnD,IAAI,YAAgC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAChE,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GACR,YAAY;YACZ,CAAC,GAAG,EAAE;gBACJ,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;gBAC/B,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE;oBACxB,IAAI,EAAE,OAAO;oBACb,SAAS;oBACT,WAAW;oBACX,QAAQ;oBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;iBACvC,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,WAAW,GAAG,GAAG,YAAY,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,SAAS,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAEjD,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAE9E,MAAM,IAAI,GAAG;;;;;wBAKO,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAiIL,WAAW;;;QAGjC,SAAS;;;;iBAIA,WAAW;;;;;;;wBAOJ,IAAI;2DAC+B,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;;;;;;mBAM3H,QAAQ;oBACP,SAAS;;;;;sBAKP,gBAAgB;;;;;;;;;;;;;;;QAe9B,CAAC;QAEL,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QAEvC,kCAAkC;QAClC,MAAM,KAAK,GAAG,WAAW,CACvB;YACE,GAAG,EAAE,SAAS;YACd,EAAE,EAAE,WAAW;YACf,GAAG,EAAE,QAAQ;SACd,EACD,SAAS,EACT,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;QAEF,kCAAkC;QAClC,IAAI,YAAgC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAChE,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GACR,YAAY;YACZ,CAAC,GAAG,EAAE;gBACJ,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;gBAC/B,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE;oBACxB,IAAI,EAAE,OAAO;oBACb,SAAS;oBACT,WAAW;oBACX,QAAQ;oBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;iBACvC,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAEzC,GAAG,CAAC,IAAI,CAAC;YACP,SAAS;YACT,WAAW;YACX,QAAQ;YACR,KAAK;YACL,IAAI;YACJ,WAAW,EAAE,GAAG,YAAY,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE;YACzE,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG;YAC9B,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE;YAC/B,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qBAAqB;AACrB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC"}

package/agent/dist/routes/projects.d.ts

@@ -1,6 +1,7 @@
 /**
- * Project-related API routes: listing, cloning, folder scanning.
+ * Project-related API routes: listing and folder scanning.
  */
 import { Router } from 'express';
+export declare function isProjectAllowed(project: string): boolean;
 export declare function createProjectRoutes(): Router;
 //# sourceMappingURL=projects.d.ts.map

package/agent/dist/routes/projects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAIjC,wBAAgB,mBAAmB,IAAI,MAAM,CAoE5C"}
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAIjC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIzD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CA4B5C"}

package/agent/dist/routes/projects.js

@@ -1,9 +1,14 @@
 /**
- * Project-related API routes: listing, cloning, folder scanning.
+ * Project-related API routes: listing and folder scanning.
  */
 import { Router } from 'express';
-import { cloneRepo, extractProjectName } from '../git.js';
 import { config } from '../config.js';
+// Helper to check if project is allowed (whitelist empty = allow any)
+export function isProjectAllowed(project) {
+    const whitelist = config.projects.whitelist;
+    const hasWhitelist = whitelist && whitelist.length > 0;
+    return hasWhitelist ? whitelist.includes(project) : true;
+}
 export function createProjectRoutes() {
     const router = Router();
     // List whitelisted projects
@@ -27,43 +32,6 @@ export function createProjectRoutes() {
             res.status(500).json({ error: 'Failed to list folders' });
         }
     });
-    // Clone a git repository
-    router.post('/clone', async (req, res) => {
-        const { repoUrl, projectName } = req.body;
-        if (!repoUrl) {
-            return res.status(400).json({ error: 'Missing repoUrl' });
-        }
-        try {
-            const result = await cloneRepo(repoUrl, config.projects.basePath, projectName);
-            if (result.success) {
-                res.json({
-                    success: true,
-                    projectName: result.projectName,
-                    path: result.path,
-                });
-            }
-            else {
-                res.status(400).json({
-                    success: false,
-                    error: result.error,
-                    projectName: result.projectName,
-                });
-            }
-        }
-        catch (err) {
-            console.error('Clone error:', err);
-            res.status(500).json({ error: 'Internal server error during clone' });
-        }
-    });
-    // Preview what project name would be extracted from a URL
-    router.get('/clone/preview', (req, res) => {
-        const url = req.query.url;
-        if (!url) {
-            return res.status(400).json({ error: 'Missing url parameter' });
-        }
-        const projectName = extractProjectName(url);
-        res.json({ projectName });
-    });
     return router;
 }
 //# sourceMappingURL=projects.js.map

package/agent/dist/routes/projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;YAE1E,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,OAAO;iBACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;iBACrE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC1B,IAAI,EAAE,CAAC;YAEV,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAE/E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC;oBACP,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAa,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAqB,CAAC;IACxD,MAAM,YAAY,GAAG,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,4BAA4B;IAC5B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;YAE1E,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,OAAO;iBACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;iBACrE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC1B,IAAI,EAAE,CAAC;YAEV,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/agent/dist/routes/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/routes/sessions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAsBjC,wBAAgB,mBAAmB,IAAI,MAAM,CAowB5C"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/routes/sessions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAgBjC,wBAAgB,mBAAmB,IAAI,MAAM,CAosB5C"}