@covro/covro 0.2.0-beta.1 → 0.2.1-beta.1

package/dist/server/workspaces.js

@@ -0,0 +1,138 @@
+import { accessSync, constants, mkdirSync, realpathSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { eq } from "drizzle-orm";
+import { AppError } from "../shared/errors.js";
+import { operations, sessionWorkspaces } from "./db/schema.js";
+import { containsPath } from "./projects.js";
+class WorkspaceRegistry {
+  constructor(database, projects, root) {
+    this.database = database;
+    this.projects = projects;
+    this.root = root;
+  }
+  database;
+  projects;
+  root;
+  unavailable(cause) {
+    return new AppError(
+      "WORKSPACE_UNAVAILABLE",
+      cause instanceof Error ? `\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${cause.message}` : "\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u53EF\u7528",
+      409
+    );
+  }
+  defaultsDirectory() {
+    if (!this.root) throw this.unavailable();
+    try {
+      mkdirSync(this.root, { recursive: true, mode: 448 });
+      const root = realpathSync(this.root);
+      accessSync(root, constants.R_OK | constants.W_OK | constants.X_OK);
+      return root;
+    } catch (error) {
+      throw this.unavailable(error);
+    }
+  }
+  allocations() {
+    return this.database.select().from(sessionWorkspaces).all();
+  }
+  /** A dedicated directory lets us identify a creation whose RPC receipt was lost. */
+  recoverCreation(threadId, cwd) {
+    const canonical = realpathSync(cwd);
+    const row = this.allocations().find((entry) => entry.canonicalRoot === canonical);
+    if (!row || row.threadId !== null && row.threadId !== threadId) return;
+    const operation = this.database.select().from(operations).where(eq(operations.clientOperationId, row.operationId)).get();
+    if (operation?.state !== "unknown" || !["thread.create", "thread.fork"].includes(operation.kind))
+      return;
+    this.bind(row.operationId, threadId, cwd);
+    return row.operationId;
+  }
+  inspect(row) {
+    try {
+      if (realpathSync(row.rootPath) !== row.canonicalRoot || !statSync(row.canonicalRoot).isDirectory())
+        throw new Error("\u76EE\u5F55\u4E0D\u5B58\u5728\u6216\u771F\u5B9E\u8DEF\u5F84\u5DF2\u6539\u53D8");
+      accessSync(row.canonicalRoot, constants.R_OK | constants.X_OK);
+      return {
+        projectId: null,
+        cwd: row.canonicalRoot,
+        rootPath: row.rootPath,
+        canonicalRoot: row.canonicalRoot,
+        workspaceKey: row.canonicalRoot
+      };
+    } catch (error) {
+      throw this.unavailable(error);
+    }
+  }
+  allocate(operationId) {
+    const existing = this.database.select().from(sessionWorkspaces).where(eq(sessionWorkspaces.operationId, operationId)).get();
+    if (existing) return this.inspect(existing);
+    const root = this.defaultsDirectory();
+    const rootPath = join(root, operationId);
+    try {
+      mkdirSync(rootPath, { mode: 448 });
+      const row = {
+        operationId,
+        threadId: null,
+        rootPath,
+        canonicalRoot: realpathSync(rootPath),
+        createdAt: Date.now()
+      };
+      this.database.insert(sessionWorkspaces).values(row).run();
+      return this.inspect(row);
+    } catch (error) {
+      throw this.unavailable(error);
+    }
+  }
+  bind(operationId, threadId, cwd) {
+    const row = this.database.select().from(sessionWorkspaces).where(eq(sessionWorkspaces.operationId, operationId)).get();
+    if (!row || row.threadId !== null && row.threadId !== threadId) throw this.unavailable();
+    const scope = this.inspect(row);
+    if (realpathSync(cwd) !== scope.cwd) throw this.unavailable();
+    this.database.update(sessionWorkspaces).set({ threadId }).where(eq(sessionWorkspaces.operationId, operationId)).run();
+  }
+  assertOwnership(projectId, cwd, threadId) {
+    if (projectId !== null) {
+      const ownership = this.projects.assertOwnership(projectId, cwd);
+      this.assertOutsideManaged(ownership.cwd);
+      return {
+        ...ownership,
+        projectId,
+        rootPath: ownership.project.rootPath,
+        canonicalRoot: ownership.project.canonicalRoot
+      };
+    }
+    const row = this.database.select().from(sessionWorkspaces).where(eq(sessionWorkspaces.threadId, threadId)).get();
+    if (!row) throw new AppError("PROJECT_OWNERSHIP", "\u4F1A\u8BDD\u6CA1\u6709\u5DF2\u5206\u914D\u7684\u5DE5\u4F5C\u76EE\u5F55", 403);
+    const scope = this.inspect(row);
+    if (realpathSync(cwd) !== scope.cwd)
+      throw new AppError("PROJECT_OWNERSHIP", "\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u4E0E\u5DF2\u4FDD\u5B58\u7684\u5173\u8054\u4E0D\u4E00\u81F4", 403);
+    return scope;
+  }
+  assertProjectDirectory(cwd) {
+    let canonical;
+    try {
+      canonical = realpathSync(cwd);
+    } catch {
+      return;
+    }
+    this.assertOutsideManaged(canonical);
+  }
+  assertOutsideManaged(cwd) {
+    let root = this.root;
+    try {
+      if (root) root = realpathSync(root);
+    } catch {
+    }
+    if (root && containsPath(root, cwd) || this.allocations().some((row) => containsPath(row.canonicalRoot, cwd)))
+      throw new AppError("PROJECT_OWNERSHIP", "\u5E94\u7528\u7BA1\u7406\u7684\u4F1A\u8BDD\u76EE\u5F55\u4E0D\u80FD\u5F52\u5165\u9879\u76EE", 403);
+  }
+  findOwner(cwd, threadId) {
+    const row = this.database.select().from(sessionWorkspaces).where(eq(sessionWorkspaces.threadId, threadId)).get();
+    if (row) return this.assertOwnership(null, cwd, threadId);
+    this.assertOutsideManaged(realpathSync(cwd));
+    const ownership = this.projects.findOwner(cwd);
+    return this.assertOwnership(ownership.project.id, cwd, threadId);
+  }
+}
+export {
+  WorkspaceRegistry
+};
+//# sourceMappingURL=workspaces.js.map

package/dist/server/workspaces.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/server/workspaces.ts"],
+  "sourcesContent": ["import { accessSync, constants, mkdirSync, realpathSync, statSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { eq } from 'drizzle-orm';\nimport { AppError } from '../shared/errors.js';\nimport type { AppDatabase } from './db/index.js';\nimport { operations, sessionWorkspaces } from './db/schema.js';\nimport { containsPath, ProjectRegistry } from './projects.js';\n\ntype Allocation = typeof sessionWorkspaces.$inferSelect;\nexport interface WorkspaceOwnership {\n  projectId: string | null;\n  cwd: string;\n  rootPath: string;\n  canonicalRoot: string;\n  workspaceKey: string;\n}\n\n/** A project association and a server-owned session directory are separate identities. */\nexport class WorkspaceRegistry {\n  constructor(\n    private readonly database: AppDatabase,\n    private readonly projects: ProjectRegistry,\n    private readonly root?: string,\n  ) {}\n\n  private unavailable(cause?: unknown): AppError {\n    return new AppError(\n      'WORKSPACE_UNAVAILABLE',\n      cause instanceof Error ? `\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u53EF\u7528\uFF1A${cause.message}` : '\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u53EF\u7528',\n      409,\n    );\n  }\n\n  defaultsDirectory(): string {\n    if (!this.root) throw this.unavailable();\n    try {\n      mkdirSync(this.root, { recursive: true, mode: 0o700 });\n      const root = realpathSync(this.root);\n      accessSync(root, constants.R_OK | constants.W_OK | constants.X_OK);\n      return root;\n    } catch (error) {\n      throw this.unavailable(error);\n    }\n  }\n\n  allocations(): Allocation[] {\n    return this.database.select().from(sessionWorkspaces).all();\n  }\n\n  /** A dedicated directory lets us identify a creation whose RPC receipt was lost. */\n  recoverCreation(threadId: string, cwd: string): string | undefined {\n    const canonical = realpathSync(cwd);\n    const row = this.allocations().find((entry) => entry.canonicalRoot === canonical);\n    if (!row || (row.threadId !== null && row.threadId !== threadId)) return;\n    const operation = this.database\n      .select()\n      .from(operations)\n      .where(eq(operations.clientOperationId, row.operationId))\n      .get();\n    if (\n      operation?.state !== 'unknown' ||\n      !['thread.create', 'thread.fork'].includes(operation.kind)\n    )\n      return;\n    this.bind(row.operationId, threadId, cwd);\n    return row.operationId;\n  }\n\n  private inspect(row: Allocation): WorkspaceOwnership {\n    try {\n      if (\n        realpathSync(row.rootPath) !== row.canonicalRoot ||\n        !statSync(row.canonicalRoot).isDirectory()\n      )\n        throw new Error('\u76EE\u5F55\u4E0D\u5B58\u5728\u6216\u771F\u5B9E\u8DEF\u5F84\u5DF2\u6539\u53D8');\n      accessSync(row.canonicalRoot, constants.R_OK | constants.X_OK);\n      return {\n        projectId: null,\n        cwd: row.canonicalRoot,\n        rootPath: row.rootPath,\n        canonicalRoot: row.canonicalRoot,\n        workspaceKey: row.canonicalRoot,\n      };\n    } catch (error) {\n      throw this.unavailable(error);\n    }\n  }\n\n  allocate(operationId: string): WorkspaceOwnership {\n    const existing = this.database\n      .select()\n      .from(sessionWorkspaces)\n      .where(eq(sessionWorkspaces.operationId, operationId))\n      .get();\n    if (existing) return this.inspect(existing);\n    const root = this.defaultsDirectory();\n    const rootPath = join(root, operationId);\n    try {\n      // Never reuse an unrecorded directory, including one left by a crashed mkdir.\n      mkdirSync(rootPath, { mode: 0o700 });\n      const row = {\n        operationId,\n        threadId: null,\n        rootPath,\n        canonicalRoot: realpathSync(rootPath),\n        createdAt: Date.now(),\n      };\n      this.database.insert(sessionWorkspaces).values(row).run();\n      return this.inspect(row);\n    } catch (error) {\n      throw this.unavailable(error);\n    }\n  }\n\n  bind(operationId: string, threadId: string, cwd: string): void {\n    const row = this.database\n      .select()\n      .from(sessionWorkspaces)\n      .where(eq(sessionWorkspaces.operationId, operationId))\n      .get();\n    if (!row || (row.threadId !== null && row.threadId !== threadId)) throw this.unavailable();\n    const scope = this.inspect(row);\n    if (realpathSync(cwd) !== scope.cwd) throw this.unavailable();\n    this.database\n      .update(sessionWorkspaces)\n      .set({ threadId })\n      .where(eq(sessionWorkspaces.operationId, operationId))\n      .run();\n  }\n\n  assertOwnership(projectId: string | null, cwd: string, threadId: string): WorkspaceOwnership {\n    if (projectId !== null) {\n      const ownership = this.projects.assertOwnership(projectId, cwd);\n      this.assertOutsideManaged(ownership.cwd);\n      return {\n        ...ownership,\n        projectId,\n        rootPath: ownership.project.rootPath,\n        canonicalRoot: ownership.project.canonicalRoot,\n      };\n    }\n    const row = this.database\n      .select()\n      .from(sessionWorkspaces)\n      .where(eq(sessionWorkspaces.threadId, threadId))\n      .get();\n    if (!row) throw new AppError('PROJECT_OWNERSHIP', '\u4F1A\u8BDD\u6CA1\u6709\u5DF2\u5206\u914D\u7684\u5DE5\u4F5C\u76EE\u5F55', 403);\n    const scope = this.inspect(row);\n    if (realpathSync(cwd) !== scope.cwd)\n      throw new AppError('PROJECT_OWNERSHIP', '\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u4E0E\u5DF2\u4FDD\u5B58\u7684\u5173\u8054\u4E0D\u4E00\u81F4', 403);\n    return scope;\n  }\n\n  assertProjectDirectory(cwd: string): void {\n    let canonical: string;\n    try {\n      canonical = realpathSync(cwd);\n    } catch {\n      return;\n    }\n    this.assertOutsideManaged(canonical);\n  }\n\n  private assertOutsideManaged(cwd: string): void {\n    let root = this.root;\n    try {\n      if (root) root = realpathSync(root);\n    } catch {\n      /* A missing root has no files to adopt. */\n    }\n    if (\n      (root && containsPath(root, cwd)) ||\n      this.allocations().some((row) => containsPath(row.canonicalRoot, cwd))\n    )\n      throw new AppError('PROJECT_OWNERSHIP', '\u5E94\u7528\u7BA1\u7406\u7684\u4F1A\u8BDD\u76EE\u5F55\u4E0D\u80FD\u5F52\u5165\u9879\u76EE', 403);\n  }\n\n  findOwner(cwd: string, threadId: string): WorkspaceOwnership {\n    const row = this.database\n      .select()\n      .from(sessionWorkspaces)\n      .where(eq(sessionWorkspaces.threadId, threadId))\n      .get();\n    if (row) return this.assertOwnership(null, cwd, threadId);\n    this.assertOutsideManaged(realpathSync(cwd));\n    const ownership = this.projects.findOwner(cwd);\n    return this.assertOwnership(ownership.project.id, cwd, threadId);\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,WAAW,WAAW,cAAc,gBAAgB;AACzE,SAAS,YAAY;AACrB,SAAS,UAAU;AACnB,SAAS,gBAAgB;AAEzB,SAAS,YAAY,yBAAyB;AAC9C,SAAS,oBAAqC;AAYvC,MAAM,kBAAkB;AAAA,EAC7B,YACmB,UACA,UACA,MACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EAGX,YAAY,OAA2B;AAC7C,WAAO,IAAI;AAAA,MACT;AAAA,MACA,iBAAiB,QAAQ,+DAAa,MAAM,OAAO,KAAK;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,oBAA4B;AAC1B,QAAI,CAAC,KAAK,KAAM,OAAM,KAAK,YAAY;AACvC,QAAI;AACF,gBAAU,KAAK,MAAM,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrD,YAAM,OAAO,aAAa,KAAK,IAAI;AACnC,iBAAW,MAAM,UAAU,OAAO,UAAU,OAAO,UAAU,IAAI;AACjE,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EAEA,cAA4B;AAC1B,WAAO,KAAK,SAAS,OAAO,EAAE,KAAK,iBAAiB,EAAE,IAAI;AAAA,EAC5D;AAAA;AAAA,EAGA,gBAAgB,UAAkB,KAAiC;AACjE,UAAM,YAAY,aAAa,GAAG;AAClC,UAAM,MAAM,KAAK,YAAY,EAAE,KAAK,CAAC,UAAU,MAAM,kBAAkB,SAAS;AAChF,QAAI,CAAC,OAAQ,IAAI,aAAa,QAAQ,IAAI,aAAa,SAAW;AAClE,UAAM,YAAY,KAAK,SACpB,OAAO,EACP,KAAK,UAAU,EACf,MAAM,GAAG,WAAW,mBAAmB,IAAI,WAAW,CAAC,EACvD,IAAI;AACP,QACE,WAAW,UAAU,aACrB,CAAC,CAAC,iBAAiB,aAAa,EAAE,SAAS,UAAU,IAAI;AAEzD;AACF,SAAK,KAAK,IAAI,aAAa,UAAU,GAAG;AACxC,WAAO,IAAI;AAAA,EACb;AAAA,EAEQ,QAAQ,KAAqC;AACnD,QAAI;AACF,UACE,aAAa,IAAI,QAAQ,MAAM,IAAI,iBACnC,CAAC,SAAS,IAAI,aAAa,EAAE,YAAY;AAEzC,cAAM,IAAI,MAAM,gFAAe;AACjC,iBAAW,IAAI,eAAe,UAAU,OAAO,UAAU,IAAI;AAC7D,aAAO;AAAA,QACL,WAAW;AAAA,QACX,KAAK,IAAI;AAAA,QACT,UAAU,IAAI;AAAA,QACd,eAAe,IAAI;AAAA,QACnB,cAAc,IAAI;AAAA,MACpB;AAAA,IACF,SAAS,OAAO;AACd,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EAEA,SAAS,aAAyC;AAChD,UAAM,WAAW,KAAK,SACnB,OAAO,EACP,KAAK,iBAAiB,EACtB,MAAM,GAAG,kBAAkB,aAAa,WAAW,CAAC,EACpD,IAAI;AACP,QAAI,SAAU,QAAO,KAAK,QAAQ,QAAQ;AAC1C,UAAM,OAAO,KAAK,kBAAkB;AACpC,UAAM,WAAW,KAAK,MAAM,WAAW;AACvC,QAAI;AAEF,gBAAU,UAAU,EAAE,MAAM,IAAM,CAAC;AACnC,YAAM,MAAM;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV;AAAA,QACA,eAAe,aAAa,QAAQ;AAAA,QACpC,WAAW,KAAK,IAAI;AAAA,MACtB;AACA,WAAK,SAAS,OAAO,iBAAiB,EAAE,OAAO,GAAG,EAAE,IAAI;AACxD,aAAO,KAAK,QAAQ,GAAG;AAAA,IACzB,SAAS,OAAO;AACd,YAAM,KAAK,YAAY,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EAEA,KAAK,aAAqB,UAAkB,KAAmB;AAC7D,UAAM,MAAM,KAAK,SACd,OAAO,EACP,KAAK,iBAAiB,EACtB,MAAM,GAAG,kBAAkB,aAAa,WAAW,CAAC,EACpD,IAAI;AACP,QAAI,CAAC,OAAQ,IAAI,aAAa,QAAQ,IAAI,aAAa,SAAW,OAAM,KAAK,YAAY;AACzF,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,aAAa,GAAG,MAAM,MAAM,IAAK,OAAM,KAAK,YAAY;AAC5D,SAAK,SACF,OAAO,iBAAiB,EACxB,IAAI,EAAE,SAAS,CAAC,EAChB,MAAM,GAAG,kBAAkB,aAAa,WAAW,CAAC,EACpD,IAAI;AAAA,EACT;AAAA,EAEA,gBAAgB,WAA0B,KAAa,UAAsC;AAC3F,QAAI,cAAc,MAAM;AACtB,YAAM,YAAY,KAAK,SAAS,gBAAgB,WAAW,GAAG;AAC9D,WAAK,qBAAqB,UAAU,GAAG;AACvC,aAAO;AAAA,QACL,GAAG;AAAA,QACH;AAAA,QACA,UAAU,UAAU,QAAQ;AAAA,QAC5B,eAAe,UAAU,QAAQ;AAAA,MACnC;AAAA,IACF;AACA,UAAM,MAAM,KAAK,SACd,OAAO,EACP,KAAK,iBAAiB,EACtB,MAAM,GAAG,kBAAkB,UAAU,QAAQ,CAAC,EAC9C,IAAI;AACP,QAAI,CAAC,IAAK,OAAM,IAAI,SAAS,qBAAqB,4EAAgB,GAAG;AACrE,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,aAAa,GAAG,MAAM,MAAM;AAC9B,YAAM,IAAI,SAAS,qBAAqB,oGAAoB,GAAG;AACjE,WAAO;AAAA,EACT;AAAA,EAEA,uBAAuB,KAAmB;AACxC,QAAI;AACJ,QAAI;AACF,kBAAY,aAAa,GAAG;AAAA,IAC9B,QAAQ;AACN;AAAA,IACF;AACA,SAAK,qBAAqB,SAAS;AAAA,EACrC;AAAA,EAEQ,qBAAqB,KAAmB;AAC9C,QAAI,OAAO,KAAK;AAChB,QAAI;AACF,UAAI,KAAM,QAAO,aAAa,IAAI;AAAA,IACpC,QAAQ;AAAA,IAER;AACA,QACG,QAAQ,aAAa,MAAM,GAAG,KAC/B,KAAK,YAAY,EAAE,KAAK,CAAC,QAAQ,aAAa,IAAI,eAAe,GAAG,CAAC;AAErE,YAAM,IAAI,SAAS,qBAAqB,8FAAmB,GAAG;AAAA,EAClE;AAAA,EAEA,UAAU,KAAa,UAAsC;AAC3D,UAAM,MAAM,KAAK,SACd,OAAO,EACP,KAAK,iBAAiB,EACtB,MAAM,GAAG,kBAAkB,UAAU,QAAQ,CAAC,EAC9C,IAAI;AACP,QAAI,IAAK,QAAO,KAAK,gBAAgB,MAAM,KAAK,QAAQ;AACxD,SAAK,qBAAqB,aAAa,GAAG,CAAC;AAC3C,UAAM,YAAY,KAAK,SAAS,UAAU,GAAG;AAC7C,WAAO,KAAK,gBAAgB,UAAU,QAAQ,IAAI,KAAK,QAAQ;AAAA,EACjE;AACF;",
+  "names": []
+}

package/dist/shared/workspace-scope.js

@@ -0,0 +1,9 @@
+const UNASSIGNED_SCOPE = "@unassigned";
+const scopeKey = (projectId) => projectId ?? UNASSIGNED_SCOPE;
+const scopeApi = (scope) => scope === UNASSIGNED_SCOPE ? "/api/unassigned" : `/api/projects/${encodeURIComponent(scope)}`;
+export {
+  UNASSIGNED_SCOPE,
+  scopeApi,
+  scopeKey
+};
+//# sourceMappingURL=workspace-scope.js.map

package/dist/shared/workspace-scope.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/shared/workspace-scope.ts"],
+  "sourcesContent": ["/** Navigation keys are distinct from persisted project identities. */\nexport const UNASSIGNED_SCOPE = '@unassigned';\nexport const scopeKey = (projectId: string | null): string => projectId ?? UNASSIGNED_SCOPE;\nexport const scopeApi = (scope: string): string =>\n  scope === UNASSIGNED_SCOPE ? '/api/unassigned' : `/api/projects/${encodeURIComponent(scope)}`;\n"],
+  "mappings": "AACO,MAAM,mBAAmB;AACzB,MAAM,WAAW,CAAC,cAAqC,aAAa;AACpE,MAAM,WAAW,CAAC,UACvB,UAAU,mBAAmB,oBAAoB,iBAAiB,mBAAmB,KAAK,CAAC;",
+  "names": []
+}