npm - @covro/covro - Versions diffs - 0.4.0-beta.1 → 0.4.1-dev.1 - Mend

@covro/covro 0.4.0-beta.1 → 0.4.1-dev.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (114) hide show

package/dist/server/config.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/server/config.ts"],
-  "sourcesContent": ["import { readFile } from 'node:fs/promises';\nimport { dirname, isAbsolute, resolve } from 'node:path';\nimport { z } from 'zod';\nimport { AppError } from '../shared/errors.js';\nimport { DEFAULT_MAX_LINE_BYTES } from '../codex/transport.js';\nimport type { GatewayConfig } from '../shared/gateway-config.js';\nconst origin = z\n  .string()\n  .regex(/^https?:\\/\\/[^/?#\\\\\\s]+\\/?$/i, 'Expected an exact HTTP(S) origin')\n  .pipe(z.string().url())\n  .transform((value, context) => {\n    const url = new URL(value);\n    if (\n      !['http:', 'https:'].includes(url.protocol) ||\n      url.hostname.includes('*') ||\n      value.includes('@') ||\n      url.username ||\n      url.password ||\n      url.pathname !== '/' ||\n      url.search ||\n      url.hash\n    ) {\n      context.addIssue({\n        code: 'custom',\n        message:\n          'Expected an exact HTTP(S) origin without wildcard, path, credentials, query or hash',\n      });\n      return z.NEVER;\n    }\n    return url.origin;\n  });\nconst project = z\n  .object({\n    id: z.string().regex(/^[a-zA-Z0-9_-]+$/),\n    name: z.string().min(1),\n    path: z.string().refine(isAbsolute, 'Project path must be absolute'),\n  })\n  .strict();\nexport const configSchema = z\n  .object({\n    host: z.string().default('127.0.0.1'),\n    port: z.number().int().min(1).max(65535).default(8787),\n    publicOrigin: z\n      .array(origin)\n      .min(1)\n      .default(['http://127.0.0.1:8787'])\n      .transform((values) => [...new Set(values)]),\n    developmentOrigins: z.array(origin).default([]),\n    dataDir: z.string().min(1).default('./.local/codex-web'),\n    codex: z\n      .object({\n        binary: z.string().min(1).default('codex'),\n        home: z.string().refine(isAbsolute).optional(),\n        requestTimeoutMs: z.number().int().min(100).max(300_000).default(30_000),\n        maxLineBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(256 * 1024 * 1024)\n          .default(DEFAULT_MAX_LINE_BYTES),\n      })\n      .strict()\n      .default({ binary: 'codex', requestTimeoutMs: 30_000, maxLineBytes: DEFAULT_MAX_LINE_BYTES }),\n    auth: z\n      .discriminatedUnion('mode', [\n        z.object({ mode: z.literal('local') }).strict(),\n        z\n          .object({\n            mode: z.literal('cloudflare-access'),\n            issuer: z.string().url(),\n            audience: z.string().min(1),\n          })\n          .strict(),\n      ])\n      .default({ mode: 'local' }),\n    projects: z.array(project).default([]),\n    limits: z\n      .object({\n        eventBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(64 * 1024 * 1024)\n          .default(16 * 1024 * 1024),\n        wsBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(16 * 1024 * 1024)\n          .default(4 * 1024 * 1024),\n        itemBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(8 * 1024 * 1024)\n          .default(2 * 1024 * 1024),\n      })\n      .strict()\n      .default({\n        eventBytes: 16 * 1024 * 1024,\n        wsBytes: 4 * 1024 * 1024,\n        itemBytes: 2 * 1024 * 1024,\n      }),\n  })\n  .strict();\nexport type AppConfig = z.infer<typeof configSchema> & { demo: boolean };\nconst sources = new WeakMap<AppConfig, { path: string; development: boolean }>();\nexport const configSource = (config: AppConfig) => sources.get(config);\nexport function isLoopback(hostname: string): boolean {\n  return ['127.0.0.1', 'localhost', '::1', '[::1]'].includes(hostname);\n}\nexport function parseFileConfig(value: unknown): GatewayConfig {\n  const parsed = configSchema.safeParse(value);\n  if (!parsed.success)\n    throw new AppError(\n      'INVALID_CONFIG',\n      parsed.error.issues\n        .map((issue) => `${issue.path.join('.') || '\u914D\u7F6E'}: ${issue.message}`)\n        .join('\\n'),\n    );\n  const config = parsed.data;\n  if (new Set(config.projects.map((p) => p.id)).size !== config.projects.length)\n    throw new AppError('INVALID_CONFIG', 'Project IDs must be unique');\n  if (config.auth.mode === 'local' && !isLoopback(config.host))\n    throw new AppError('INVALID_CONFIG', 'Local mode requires a loopback host');\n  if (config.developmentOrigins.some((o) => !isLoopback(new URL(o).hostname)))\n    throw new AppError('INVALID_CONFIG', 'Development origins must be loopback');\n  if (config.auth.mode === 'cloudflare-access') {\n    const issuer = new URL(config.auth.issuer);\n    if (\n      issuer.protocol !== 'https:' ||\n      !issuer.hostname.endsWith('.cloudflareaccess.com') ||\n      issuer.pathname !== '/' ||\n      issuer.search ||\n      issuer.hash ||\n      issuer.username ||\n      issuer.password\n    )\n      throw new AppError(\n        'INVALID_CONFIG',\n        'Access issuer must be https://<team>.cloudflareaccess.com',\n      );\n    if (config.publicOrigin.some((value) => new URL(value).protocol !== 'https:'))\n      throw new AppError('INVALID_CONFIG', 'All Access public origins must use HTTPS');\n    config.auth.issuer = issuer.origin;\n  }\n  return config;\n}\nexport function parseConfig(value: unknown, filename: string, development = false): AppConfig {\n  const config = parseFileConfig(value);\n  const result: AppConfig = {\n    ...config,\n    developmentOrigins: development ? config.developmentOrigins : [],\n    dataDir: resolve(dirname(filename), config.dataDir),\n    demo: false,\n  };\n  sources.set(result, { path: resolve(filename), development });\n  return result;\n}\nexport function cliOptions(args = process.argv.slice(2)): {\n  configPath: string;\n  development: boolean;\n} {\n  const remaining = args.filter((arg) => arg !== '--');\n  let configPath = 'config.local.json';\n  let development = false;\n  for (let i = 0; i < remaining.length; i++) {\n    const arg = remaining[i];\n    if (arg === '--dev') development = true;\n    else if (arg === '--config' && remaining[i + 1]) configPath = remaining[++i]!;\n    else throw new AppError('INVALID_ARGUMENT', `Unknown or incomplete argument: ${arg}`);\n  }\n  return { configPath: resolve(configPath), development };\n}\nexport async function loadConfig(options = cliOptions()): Promise<AppConfig> {\n  return parseConfig(\n    JSON.parse(await readFile(options.configPath, 'utf8')),\n    options.configPath,\n    options.development,\n  );\n}\n"],
-  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,SAAS,YAAY,eAAe;AAC7C,SAAS,SAAS;AAClB,SAAS,gBAAgB;AACzB,SAAS,8BAA8B;AAEvC,MAAM,SAAS,EACZ,OAAO,EACP,MAAM,gCAAgC,kCAAkC,EACxE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EACrB,UAAU,CAAC,OAAO,YAAY;AAC7B,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,MACE,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,KAC1C,IAAI,SAAS,SAAS,GAAG,KACzB,MAAM,SAAS,GAAG,KAClB,IAAI,YACJ,IAAI,YACJ,IAAI,aAAa,OACjB,IAAI,UACJ,IAAI,MACJ;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SACE;AAAA,IACJ,CAAC;AACD,WAAO,EAAE;AAAA,EACX;AACA,SAAO,IAAI;AACb,CAAC;AACH,MAAM,UAAU,EACb,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,OAAO,YAAY,+BAA+B;AACrE,CAAC,EACA,OAAO;AACH,MAAM,eAAe,EACzB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,EAAE,QAAQ,IAAI;AAAA,EACrD,cAAc,EACX,MAAM,MAAM,EACZ,IAAI,CAAC,EACL,QAAQ,CAAC,uBAAuB,CAAC,EACjC,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC;AAAA,EAC7C,oBAAoB,EAAE,MAAM,MAAM,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,oBAAoB;AAAA,EACvD,OAAO,EACJ,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,OAAO;AAAA,IACzC,MAAM,EAAE,OAAO,EAAE,OAAO,UAAU,EAAE,SAAS;AAAA,IAC7C,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAO,EAAE,QAAQ,GAAM;AAAA,IACvE,cAAc,EACX,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,MAAM,OAAO,IAAI,EACrB,QAAQ,sBAAsB;AAAA,EACnC,CAAC,EACA,OAAO,EACP,QAAQ,EAAE,QAAQ,SAAS,kBAAkB,KAAQ,cAAc,uBAAuB,CAAC;AAAA,EAC9F,MAAM,EACH,mBAAmB,QAAQ;AAAA,IAC1B,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC,EAAE,OAAO;AAAA,IAC9C,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,mBAAmB;AAAA,MACnC,QAAQ,EAAE,OAAO,EAAE,IAAI;AAAA,MACvB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAC5B,CAAC,EACA,OAAO;AAAA,EACZ,CAAC,EACA,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAAA,EAC5B,UAAU,EAAE,MAAM,OAAO,EAAE,QAAQ,CAAC,CAAC;AAAA,EACrC,QAAQ,EACL,OAAO;AAAA,IACN,YAAY,EACT,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,KAAK,OAAO,IAAI,EACpB,QAAQ,KAAK,OAAO,IAAI;AAAA,IAC3B,SAAS,EACN,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,KAAK,OAAO,IAAI,EACpB,QAAQ,IAAI,OAAO,IAAI;AAAA,IAC1B,WAAW,EACR,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,IAAI,OAAO,IAAI,EACnB,QAAQ,IAAI,OAAO,IAAI;AAAA,EAC5B,CAAC,EACA,OAAO,EACP,QAAQ;AAAA,IACP,YAAY,KAAK,OAAO;AAAA,IACxB,SAAS,IAAI,OAAO;AAAA,IACpB,WAAW,IAAI,OAAO;AAAA,EACxB,CAAC;AACL,CAAC,EACA,OAAO;AAEV,MAAM,UAAU,oBAAI,QAA2D;AACxE,MAAM,eAAe,CAAC,WAAsB,QAAQ,IAAI,MAAM;AAC9D,SAAS,WAAW,UAA2B;AACpD,SAAO,CAAC,aAAa,aAAa,OAAO,OAAO,EAAE,SAAS,QAAQ;AACrE;AACO,SAAS,gBAAgB,OAA+B;AAC7D,QAAM,SAAS,aAAa,UAAU,KAAK;AAC3C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR;AAAA,MACA,OAAO,MAAM,OACV,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,cAAI,KAAK,MAAM,OAAO,EAAE,EAClE,KAAK,IAAI;AAAA,IACd;AACF,QAAM,SAAS,OAAO;AACtB,MAAI,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,OAAO,SAAS;AACrE,UAAM,IAAI,SAAS,kBAAkB,4BAA4B;AACnE,MAAI,OAAO,KAAK,SAAS,WAAW,CAAC,WAAW,OAAO,IAAI;AACzD,UAAM,IAAI,SAAS,kBAAkB,qCAAqC;AAC5E,MAAI,OAAO,mBAAmB,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,QAAQ,CAAC;AACxE,UAAM,IAAI,SAAS,kBAAkB,sCAAsC;AAC7E,MAAI,OAAO,KAAK,SAAS,qBAAqB;AAC5C,UAAM,SAAS,IAAI,IAAI,OAAO,KAAK,MAAM;AACzC,QACE,OAAO,aAAa,YACpB,CAAC,OAAO,SAAS,SAAS,uBAAuB,KACjD,OAAO,aAAa,OACpB,OAAO,UACP,OAAO,QACP,OAAO,YACP,OAAO;AAEP,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AACF,QAAI,OAAO,aAAa,KAAK,CAACA,WAAU,IAAI,IAAIA,MAAK,EAAE,aAAa,QAAQ;AAC1E,YAAM,IAAI,SAAS,kBAAkB,0CAA0C;AACjF,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AACA,SAAO;AACT;AACO,SAAS,YAAY,OAAgB,UAAkB,cAAc,OAAkB;AAC5F,QAAM,SAAS,gBAAgB,KAAK;AACpC,QAAM,SAAoB;AAAA,IACxB,GAAG;AAAA,IACH,oBAAoB,cAAc,OAAO,qBAAqB,CAAC;AAAA,IAC/D,SAAS,QAAQ,QAAQ,QAAQ,GAAG,OAAO,OAAO;AAAA,IAClD,MAAM;AAAA,EACR;AACA,UAAQ,IAAI,QAAQ,EAAE,MAAM,QAAQ,QAAQ,GAAG,YAAY,CAAC;AAC5D,SAAO;AACT;AACO,SAAS,WAAW,OAAO,QAAQ,KAAK,MAAM,CAAC,GAGpD;AACA,QAAM,YAAY,KAAK,OAAO,CAAC,QAAQ,QAAQ,IAAI;AACnD,MAAI,aAAa;AACjB,MAAI,cAAc;AAClB,WAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAM,MAAM,UAAU,CAAC;AACvB,QAAI,QAAQ,QAAS,eAAc;AAAA,aAC1B,QAAQ,cAAc,UAAU,IAAI,CAAC,EAAG,cAAa,UAAU,EAAE,CAAC;AAAA,QACtE,OAAM,IAAI,SAAS,oBAAoB,mCAAmC,GAAG,EAAE;AAAA,EACtF;AACA,SAAO,EAAE,YAAY,QAAQ,UAAU,GAAG,YAAY;AACxD;AACA,eAAsB,WAAW,UAAU,WAAW,GAAuB;AAC3E,SAAO;AAAA,IACL,KAAK,MAAM,MAAM,SAAS,QAAQ,YAAY,MAAM,CAAC;AAAA,IACrD,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;",
+  "sourcesContent": ["import { readFile } from 'node:fs/promises';\nimport { dirname, isAbsolute, resolve } from 'node:path';\nimport { z } from 'zod';\nimport { AppError } from '../shared/errors.js';\nimport { DEFAULT_MAX_LINE_BYTES } from '../codex/transport.js';\nimport type { GatewayConfig } from '../shared/gateway-config.js';\nconst origin = z\n  .string()\n  .regex(/^https?:\\/\\/[^/?#\\\\\\s]+\\/?$/i, 'Expected an exact HTTP(S) origin')\n  .pipe(z.string().url())\n  .transform((value, context) => {\n    const url = new URL(value);\n    if (\n      !['http:', 'https:'].includes(url.protocol) ||\n      url.hostname.includes('*') ||\n      value.includes('@') ||\n      url.username ||\n      url.password ||\n      url.pathname !== '/' ||\n      url.search ||\n      url.hash\n    ) {\n      context.addIssue({\n        code: 'custom',\n        message:\n          'Expected an exact HTTP(S) origin without wildcard, path, credentials, query or hash',\n      });\n      return z.NEVER;\n    }\n    return url.origin;\n  });\nconst project = z\n  .object({\n    id: z.string().regex(/^[a-zA-Z0-9_-]+$/),\n    name: z.string().min(1),\n    path: z.string().refine(isAbsolute, 'Project path must be absolute'),\n  })\n  .strict();\nexport const configSchema = z\n  .object({\n    host: z.string().default('127.0.0.1'),\n    port: z.number().int().min(1).max(65535).default(8787),\n    publicOrigin: z\n      .array(origin)\n      .min(1)\n      .default(['http://127.0.0.1:8787'])\n      .transform((values) => [...new Set(values)]),\n    developmentOrigins: z.array(origin).default([]),\n    dataDir: z.string().min(1).default('./.local/codex-web'),\n    workDir: z\n      .string()\n      .trim()\n      .max(4096)\n      .refine(\n        (path) => isAbsolute(path) && !path.includes('\\0'),\n        'workDir \u5FC5\u987B\u662F\u670D\u52A1\u4E3B\u673A\u4E0A\u7684\u7EDD\u5BF9\u76EE\u5F55\u8DEF\u5F84',\n      )\n      .optional(),\n    codex: z\n      .object({\n        binary: z.string().min(1).default('codex'),\n        home: z.string().refine(isAbsolute).optional(),\n        requestTimeoutMs: z.number().int().min(100).max(300_000).default(30_000),\n        maxLineBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(256 * 1024 * 1024)\n          .default(DEFAULT_MAX_LINE_BYTES),\n      })\n      .strict()\n      .default({ binary: 'codex', requestTimeoutMs: 30_000, maxLineBytes: DEFAULT_MAX_LINE_BYTES }),\n    auth: z\n      .discriminatedUnion('mode', [\n        z.object({ mode: z.literal('local') }).strict(),\n        z\n          .object({\n            mode: z.literal('cloudflare-access'),\n            issuer: z.string().url(),\n            audience: z.string().min(1),\n          })\n          .strict(),\n      ])\n      .default({ mode: 'local' }),\n    projects: z.array(project).default([]),\n    limits: z\n      .object({\n        eventBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(64 * 1024 * 1024)\n          .default(16 * 1024 * 1024),\n        wsBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(16 * 1024 * 1024)\n          .default(4 * 1024 * 1024),\n        itemBytes: z\n          .number()\n          .int()\n          .min(1024)\n          .max(8 * 1024 * 1024)\n          .default(2 * 1024 * 1024),\n      })\n      .strict()\n      .default({\n        eventBytes: 16 * 1024 * 1024,\n        wsBytes: 4 * 1024 * 1024,\n        itemBytes: 2 * 1024 * 1024,\n      }),\n  })\n  .strict();\nexport type AppConfig = z.infer<typeof configSchema> & { demo: boolean };\nconst sources = new WeakMap<AppConfig, { path: string; development: boolean }>();\nexport const configSource = (config: AppConfig) => sources.get(config);\nexport function isLoopback(hostname: string): boolean {\n  return ['127.0.0.1', 'localhost', '::1', '[::1]'].includes(hostname);\n}\nexport function parseFileConfig(value: unknown): GatewayConfig {\n  const parsed = configSchema.safeParse(value);\n  if (!parsed.success)\n    throw new AppError(\n      'INVALID_CONFIG',\n      parsed.error.issues\n        .map((issue) => `${issue.path.join('.') || '\u914D\u7F6E'}: ${issue.message}`)\n        .join('\\n'),\n    );\n  const config = parsed.data;\n  if (new Set(config.projects.map((p) => p.id)).size !== config.projects.length)\n    throw new AppError('INVALID_CONFIG', 'Project IDs must be unique');\n  if (config.auth.mode === 'local' && !isLoopback(config.host))\n    throw new AppError('INVALID_CONFIG', 'Local mode requires a loopback host');\n  if (config.developmentOrigins.some((o) => !isLoopback(new URL(o).hostname)))\n    throw new AppError('INVALID_CONFIG', 'Development origins must be loopback');\n  if (config.auth.mode === 'cloudflare-access') {\n    const issuer = new URL(config.auth.issuer);\n    if (\n      issuer.protocol !== 'https:' ||\n      !issuer.hostname.endsWith('.cloudflareaccess.com') ||\n      issuer.pathname !== '/' ||\n      issuer.search ||\n      issuer.hash ||\n      issuer.username ||\n      issuer.password\n    )\n      throw new AppError(\n        'INVALID_CONFIG',\n        'Access issuer must be https://<team>.cloudflareaccess.com',\n      );\n    if (config.publicOrigin.some((value) => new URL(value).protocol !== 'https:'))\n      throw new AppError('INVALID_CONFIG', 'All Access public origins must use HTTPS');\n    config.auth.issuer = issuer.origin;\n  }\n  return config;\n}\nexport function parseConfig(value: unknown, filename: string, development = false): AppConfig {\n  const config = parseFileConfig(value);\n  const result: AppConfig = {\n    ...config,\n    developmentOrigins: development ? config.developmentOrigins : [],\n    dataDir: resolve(dirname(filename), config.dataDir),\n    demo: false,\n  };\n  sources.set(result, { path: resolve(filename), development });\n  return result;\n}\nexport function cliOptions(args = process.argv.slice(2)): {\n  configPath: string;\n  development: boolean;\n} {\n  const remaining = args.filter((arg) => arg !== '--');\n  let configPath = 'config.local.json';\n  let development = false;\n  for (let i = 0; i < remaining.length; i++) {\n    const arg = remaining[i];\n    if (arg === '--dev') development = true;\n    else if (arg === '--config' && remaining[i + 1]) configPath = remaining[++i]!;\n    else throw new AppError('INVALID_ARGUMENT', `Unknown or incomplete argument: ${arg}`);\n  }\n  return { configPath: resolve(configPath), development };\n}\nexport async function loadConfig(options = cliOptions()): Promise<AppConfig> {\n  return parseConfig(\n    JSON.parse(await readFile(options.configPath, 'utf8')),\n    options.configPath,\n    options.development,\n  );\n}\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,SAAS,YAAY,eAAe;AAC7C,SAAS,SAAS;AAClB,SAAS,gBAAgB;AACzB,SAAS,8BAA8B;AAEvC,MAAM,SAAS,EACZ,OAAO,EACP,MAAM,gCAAgC,kCAAkC,EACxE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EACrB,UAAU,CAAC,OAAO,YAAY;AAC7B,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,MACE,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,KAC1C,IAAI,SAAS,SAAS,GAAG,KACzB,MAAM,SAAS,GAAG,KAClB,IAAI,YACJ,IAAI,YACJ,IAAI,aAAa,OACjB,IAAI,UACJ,IAAI,MACJ;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SACE;AAAA,IACJ,CAAC;AACD,WAAO,EAAE;AAAA,EACX;AACA,SAAO,IAAI;AACb,CAAC;AACH,MAAM,UAAU,EACb,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,OAAO,YAAY,+BAA+B;AACrE,CAAC,EACA,OAAO;AACH,MAAM,eAAe,EACzB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,EAAE,QAAQ,IAAI;AAAA,EACrD,cAAc,EACX,MAAM,MAAM,EACZ,IAAI,CAAC,EACL,QAAQ,CAAC,uBAAuB,CAAC,EACjC,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC;AAAA,EAC7C,oBAAoB,EAAE,MAAM,MAAM,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,oBAAoB;AAAA,EACvD,SAAS,EACN,OAAO,EACP,KAAK,EACL,IAAI,IAAI,EACR;AAAA,IACC,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,SAAS,IAAI;AAAA,IACjD;AAAA,EACF,EACC,SAAS;AAAA,EACZ,OAAO,EACJ,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,OAAO;AAAA,IACzC,MAAM,EAAE,OAAO,EAAE,OAAO,UAAU,EAAE,SAAS;AAAA,IAC7C,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAO,EAAE,QAAQ,GAAM;AAAA,IACvE,cAAc,EACX,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,MAAM,OAAO,IAAI,EACrB,QAAQ,sBAAsB;AAAA,EACnC,CAAC,EACA,OAAO,EACP,QAAQ,EAAE,QAAQ,SAAS,kBAAkB,KAAQ,cAAc,uBAAuB,CAAC;AAAA,EAC9F,MAAM,EACH,mBAAmB,QAAQ;AAAA,IAC1B,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC,EAAE,OAAO;AAAA,IAC9C,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,mBAAmB;AAAA,MACnC,QAAQ,EAAE,OAAO,EAAE,IAAI;AAAA,MACvB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAC5B,CAAC,EACA,OAAO;AAAA,EACZ,CAAC,EACA,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAAA,EAC5B,UAAU,EAAE,MAAM,OAAO,EAAE,QAAQ,CAAC,CAAC;AAAA,EACrC,QAAQ,EACL,OAAO;AAAA,IACN,YAAY,EACT,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,KAAK,OAAO,IAAI,EACpB,QAAQ,KAAK,OAAO,IAAI;AAAA,IAC3B,SAAS,EACN,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,KAAK,OAAO,IAAI,EACpB,QAAQ,IAAI,OAAO,IAAI;AAAA,IAC1B,WAAW,EACR,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,IAAI,IAAI,OAAO,IAAI,EACnB,QAAQ,IAAI,OAAO,IAAI;AAAA,EAC5B,CAAC,EACA,OAAO,EACP,QAAQ;AAAA,IACP,YAAY,KAAK,OAAO;AAAA,IACxB,SAAS,IAAI,OAAO;AAAA,IACpB,WAAW,IAAI,OAAO;AAAA,EACxB,CAAC;AACL,CAAC,EACA,OAAO;AAEV,MAAM,UAAU,oBAAI,QAA2D;AACxE,MAAM,eAAe,CAAC,WAAsB,QAAQ,IAAI,MAAM;AAC9D,SAAS,WAAW,UAA2B;AACpD,SAAO,CAAC,aAAa,aAAa,OAAO,OAAO,EAAE,SAAS,QAAQ;AACrE;AACO,SAAS,gBAAgB,OAA+B;AAC7D,QAAM,SAAS,aAAa,UAAU,KAAK;AAC3C,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR;AAAA,MACA,OAAO,MAAM,OACV,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,cAAI,KAAK,MAAM,OAAO,EAAE,EAClE,KAAK,IAAI;AAAA,IACd;AACF,QAAM,SAAS,OAAO;AACtB,MAAI,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,OAAO,SAAS;AACrE,UAAM,IAAI,SAAS,kBAAkB,4BAA4B;AACnE,MAAI,OAAO,KAAK,SAAS,WAAW,CAAC,WAAW,OAAO,IAAI;AACzD,UAAM,IAAI,SAAS,kBAAkB,qCAAqC;AAC5E,MAAI,OAAO,mBAAmB,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,QAAQ,CAAC;AACxE,UAAM,IAAI,SAAS,kBAAkB,sCAAsC;AAC7E,MAAI,OAAO,KAAK,SAAS,qBAAqB;AAC5C,UAAM,SAAS,IAAI,IAAI,OAAO,KAAK,MAAM;AACzC,QACE,OAAO,aAAa,YACpB,CAAC,OAAO,SAAS,SAAS,uBAAuB,KACjD,OAAO,aAAa,OACpB,OAAO,UACP,OAAO,QACP,OAAO,YACP,OAAO;AAEP,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AACF,QAAI,OAAO,aAAa,KAAK,CAACA,WAAU,IAAI,IAAIA,MAAK,EAAE,aAAa,QAAQ;AAC1E,YAAM,IAAI,SAAS,kBAAkB,0CAA0C;AACjF,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AACA,SAAO;AACT;AACO,SAAS,YAAY,OAAgB,UAAkB,cAAc,OAAkB;AAC5F,QAAM,SAAS,gBAAgB,KAAK;AACpC,QAAM,SAAoB;AAAA,IACxB,GAAG;AAAA,IACH,oBAAoB,cAAc,OAAO,qBAAqB,CAAC;AAAA,IAC/D,SAAS,QAAQ,QAAQ,QAAQ,GAAG,OAAO,OAAO;AAAA,IAClD,MAAM;AAAA,EACR;AACA,UAAQ,IAAI,QAAQ,EAAE,MAAM,QAAQ,QAAQ,GAAG,YAAY,CAAC;AAC5D,SAAO;AACT;AACO,SAAS,WAAW,OAAO,QAAQ,KAAK,MAAM,CAAC,GAGpD;AACA,QAAM,YAAY,KAAK,OAAO,CAAC,QAAQ,QAAQ,IAAI;AACnD,MAAI,aAAa;AACjB,MAAI,cAAc;AAClB,WAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAM,MAAM,UAAU,CAAC;AACvB,QAAI,QAAQ,QAAS,eAAc;AAAA,aAC1B,QAAQ,cAAc,UAAU,IAAI,CAAC,EAAG,cAAa,UAAU,EAAE,CAAC;AAAA,QACtE,OAAM,IAAI,SAAS,oBAAoB,mCAAmC,GAAG,EAAE;AAAA,EACtF;AACA,SAAO,EAAE,YAAY,QAAQ,UAAU,GAAG,YAAY;AACxD;AACA,eAAsB,WAAW,UAAU,WAAW,GAAuB;AAC3E,SAAO;AAAA,IACL,KAAK,MAAM,MAAM,SAAS,QAAQ,YAAY,MAAM,CAAC;AAAA,IACrD,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;",
   "names": ["value"]
 }

package/dist/server/http.js CHANGED Viewed

@@ -10,11 +10,13 @@ import { AppError } from "../shared/errors.js";
 import { IMAGE_REQUEST_BYTES } from "../shared/images.js";
 import * as schemas from "../shared/validation.js";
 import { ConfigStore } from "./config-store.js";
+import { projectPathPreview, resolveProjectPath } from "./project-paths.js";
 import { createAuthenticator } from "./auth.js";
 import { socketHandlers } from "./websocket.js";
 import { z } from "zod";
 import { releaseChannels } from "../shared/updates.js";
 import { settingsSchema, updateRequestSchema } from "../updates/manager.js";
+import { createReleaseNotesLookup, releaseNotesQuery } from "../updates/release-notes.js";
 import { startShellSchema } from "../shared/shell.js";
 function createApp({
   config,
@@ -65,6 +67,11 @@ function createApp({
     );
   }
   if (updates) {
+    const releaseNotes = createReleaseNotesLookup();
+    app.get("/api/updates/release-notes", async (c) => {
+      const { version, refresh } = releaseNotesQuery.parse(c.req.query());
+      return c.json(await releaseNotes(version, refresh === "1"));
+    });
     app.get("/api/updates", async (c) => c.json(await updates.status()));
     app.post("/api/updates/check", async (c) => {
       const input = z.object({ channel: z.enum(releaseChannels).optional() }).strict().parse(await c.req.json());
@@ -88,6 +95,13 @@ function createApp({
   };
   const status = (op) => op.status === "dispatching" || op.status === "accepted" ? 202 : 200;
   const configuration = new ConfigStore(config);
+  app.get("/api/project-path", (c) => {
+    const input = z.object({
+      path: z.string().max(4096).default(""),
+      directory: z.string().max(255).refine((value) => !/[\\/\0]/.test(value) && value !== "." && value !== "..").optional()
+    }).parse({ path: c.req.query("path"), directory: c.req.query("directory") });
+    return c.json(projectPathPreview(input.path.trim(), configuration.workDir, input.directory));
+  });
   app.use("/api/config*", async (c, next) => {
     c.header("Cache-Control", "no-store");
     await next();
@@ -176,7 +190,13 @@ function createApp({
   });
   app.post(
     "/api/project-clones",
-    async (c) => c.json(service.cloneProject(await parse(c, schemas.cloneProjectSchema)), 202)
+    async (c) => c.json(
+      service.cloneProject(
+        await parse(c, schemas.cloneProjectSchema),
+        (path) => resolveProjectPath(path, configuration.workDir)
+      ),
+      202
+    )
   );
   app.get(
     "/api/project-clones/:cloneId",
@@ -205,10 +225,12 @@ function createApp({
     );
     return c.json(op, status(op));
   });
-  app.post(
-    "/api/projects",
-    async (c) => c.json(service.addProject(await parse(c, schemas.createProjectSchema)))
-  );
+  app.post("/api/projects", async (c) => {
+    const input = await parse(c, schemas.createProjectSchema);
+    return c.json(
+      service.addProject({ ...input, path: resolveProjectPath(input.path, configuration.workDir) })
+    );
+  });
   app.post(
     "/api/projects/:projectId/rename",
     async (c) => c.json(
@@ -296,6 +318,12 @@ function createApp({
       await service.getThreadMarkdown(id(c.req.param("threadId")), c.req.query("path"))
     );
   });
+  app.get("/api/threads/:threadId/text", async (c) => {
+    c.header("Cache-Control", "private, no-store");
+    c.header("X-Content-Type-Options", "nosniff");
+    c.header("Cross-Origin-Resource-Policy", "same-origin");
+    return c.json(await service.getThreadText(id(c.req.param("threadId")), c.req.query("path")));
+  });
   app.get("/api/threads/:threadId/json", async (c) => {
     c.header("Cache-Control", "private, no-store");
     c.header("X-Content-Type-Options", "nosniff");

package/dist/server/http.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/server/http.ts"],
-  "sourcesContent": ["import type { BackupController } from '../shared/backups.js';\nimport { backupIdSchema } from '../shared/backups.js';\nimport { backupRequestSchema } from '../backups/manager.js';\nimport { createHash } from 'node:crypto';\nimport { Hono } from 'hono';\nimport { bodyLimit } from 'hono/body-limit';\nimport { serveStatic } from '@hono/node-server/serve-static';\nimport { upgradeWebSocket, type HttpBindings } from '@hono/node-server';\nimport type { ZodType } from 'zod';\nimport { ZodError } from 'zod';\nimport { AppError } from '../shared/errors.js';\nimport { IMAGE_REQUEST_BYTES } from '../shared/images.js';\nimport * as schemas from '../shared/validation.js';\nimport type { Operation } from '../shared/types.js';\nimport type { AppConfig } from './config.js';\nimport { ConfigStore } from './config-store.js';\nimport { createAuthenticator, type Authenticator, type Identity } from './auth.js';\nimport type { GatewayService } from './service.js';\nimport { socketHandlers } from './websocket.js';\nimport { z } from 'zod';\nimport { releaseChannels, type UpdateController } from '../shared/updates.js';\nimport { settingsSchema, updateRequestSchema } from '../updates/manager.js';\nimport { startShellSchema } from '../shared/shell.js';\nexport interface HttpDependencies {\n  config: AppConfig;\n  service: GatewayService;\n  staticDir: string;\n  authenticate?: Authenticator;\n  updates?: UpdateController;\n  backups?: BackupController;\n}\nexport function createApp({\n  config,\n  service,\n  staticDir,\n  authenticate = createAuthenticator(config),\n  updates,\n  backups,\n}: HttpDependencies) {\n  const app = new Hono<{\n    Bindings: HttpBindings;\n    Variables: { identity: Identity; operationId?: string };\n  }>();\n  app.onError((error, c) => {\n    const failure =\n      error instanceof AppError\n        ? error\n        : error instanceof ZodError || error instanceof SyntaxError\n          ? new AppError('VALIDATION_FAILED', 'Invalid request data', 400)\n          : new AppError('INTERNAL_ERROR', 'An internal error occurred', 500);\n    return c.json({ error: failure.toJSON(c.get('operationId')) }, failure.status as 400);\n  });\n  app.get('/api/health', (c) => c.json({ ok: true }));\n  app.use('*', async (c, next) => {\n    c.set('identity', await authenticate(c.req.raw, c.req.path === '/ws'));\n    await next();\n  });\n  app.use('/api/*', (c, next) =>\n    bodyLimit({\n      maxSize: /^\\/api\\/threads\\/[^/]+\\/(turns|steer)$/.test(c.req.path)\n        ? IMAGE_REQUEST_BYTES\n        : 512 * 1024,\n      onError: () => {\n        throw new AppError('BODY_TOO_LARGE', 'Request body exceeds limit', 413);\n      },\n    })(c, next),\n  );\n  app.use('/api/*', async (c, next) => {\n    c.header('Cache-Control', 'no-store');\n    if (\n      service.isInMaintenance() &&\n      !['GET', 'HEAD', 'OPTIONS'].includes(c.req.method) &&\n      !c.req.path.startsWith('/api/updates') &&\n      !c.req.path.startsWith('/api/backups')\n    )\n      throw service.maintenanceError();\n    await next();\n  });\n  if (backups) {\n    app.get('/api/backups', async (c) => c.json(await backups.status()));\n    app.post('/api/backups', async (c) =>\n      c.json(await backups.start(backupRequestSchema.parse(await c.req.json())), 202),\n    );\n    app.post('/api/backups/:id/cancel', async (c) =>\n      c.json(await backups.cancel(backupIdSchema.parse(c.req.param('id')))),\n    );\n    app.post('/api/backups/:id/verify', async (c) =>\n      c.json(await backups.verify(backupIdSchema.parse(c.req.param('id')))),\n    );\n  }\n  if (updates) {\n    app.get('/api/updates', async (c) => c.json(await updates.status()));\n    app.post('/api/updates/check', async (c) => {\n      const input = z\n        .object({ channel: z.enum(releaseChannels).optional() })\n        .strict()\n        .parse(await c.req.json());\n      return c.json(await updates.check(input.channel));\n    });\n    app.post('/api/updates/settings', async (c) =>\n      c.json(await updates.configure(settingsSchema.parse(await c.req.json()))),\n    );\n    app.post('/api/updates/run', async (c) =>\n      c.json(await updates.start(updateRequestSchema.parse(await c.req.json())), 202),\n    );\n  }\n  const id = (value: string) => schemas.idSchema.parse(value);\n  const parse = async <T>(\n    c: { req: { json: () => Promise<unknown> }; set: (key: 'operationId', value: string) => void },\n    schema: ZodType<T>,\n  ): Promise<T> => {\n    const value: unknown = await c.req.json();\n    if (\n      value &&\n      typeof value === 'object' &&\n      'clientOperationId' in value &&\n      typeof value.clientOperationId === 'string'\n    )\n      c.set('operationId', value.clientOperationId);\n    return schema.parse(value);\n  };\n  const status = (op: Operation) =>\n    op.status === 'dispatching' || op.status === 'accepted' ? (202 as const) : (200 as const);\n  const configuration = new ConfigStore(config);\n  app.use('/api/config*', async (c, next) => {\n    c.header('Cache-Control', 'no-store');\n    await next();\n  });\n  app.get('/api/config', async (c) => c.json(await configuration.snapshot()));\n  app.post('/api/config', async (c) => c.json(await configuration.save(await c.req.json())));\n  app.post('/api/config/import', async (c) =>\n    c.json(await configuration.previewImport(await c.req.json())),\n  );\n  app.get('/api/config/export', async (c) => {\n    c.header('Content-Disposition', 'attachment; filename=\"codex-web-config.json\"');\n    return c.json(await configuration.export());\n  });\n  app.get('/api/history-cache-context', async (c) => {\n    const identity = c.get('identity');\n    if (config.auth.mode !== 'local' && !identity.subject)\n      throw new AppError('UNAUTHENTICATED', '\u65E0\u6CD5\u786E\u8BA4\u7F13\u5B58\u6240\u5C5E\u7528\u6237', 401);\n    const projects = await service.listProjects();\n    // A restart, user change or project/permission change creates a new namespace.\n    // The subject is hashed on the server and is never exposed to browser storage.\n    const scope = createHash('sha256')\n      .update(\n        JSON.stringify([\n          service.events.serverEpoch,\n          service.getSystem().codexEpoch,\n          config.auth.mode,\n          identity.subject ?? 'local',\n          projects.map((project) => [project.id, project.rootPath, project.available]),\n        ]),\n      )\n      .digest('hex');\n    return c.json({ scope });\n  });\n  app.get('/api/system', (c) => c.json(service.getSystem()));\n  app.get('/api/shell', (c) =>\n    c.json(\n      service.shell.snapshot(\n        c.req.query('epoch'),\n        z.coerce\n          .number()\n          .int()\n          .min(0)\n          .max(Number.MAX_SAFE_INTEGER)\n          .default(0)\n          .parse(c.req.query('after')),\n      ),\n    ),\n  );\n  app.post('/api/projects/:projectId/shell', async (c) => {\n    const op = await service.startShell(\n      id(c.req.param('projectId')),\n      await parse(c, startShellSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/shell/:commandId/interrupt', async (c) => {\n    const op = await service.interruptShell(\n      id(c.req.param('commandId')),\n      await parse(c, schemas.operationSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/system/compatibility/confirm', async (c) => {\n    const op = await service.confirmCompatibility(\n      await parse(c, schemas.confirmCompatibilitySchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.get('/api/projects', async (c) => c.json({ data: await service.listProjects() }));\n  app.get('/api/unassigned/runtime-settings', async (c) =>\n    c.json(await service.readRuntimeSettings(null)),\n  );\n  app.post('/api/unassigned/model-defaults', async (c) => {\n    const op = await service.saveModelDefaults(\n      null,\n      await parse(c, schemas.saveModelDefaultsSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.get('/api/unassigned/threads', async (c) =>\n    c.json(\n      await service.listThreadSummaries(\n        null,\n        c.req.query('cursor') === undefined\n          ? undefined\n          : schemas.cursorSchema.parse(c.req.query('cursor')),\n        schemas.archivedQuerySchema.parse(c.req.query('archived')),\n      ),\n    ),\n  );\n  app.post('/api/unassigned/threads', async (c) => {\n    const op = await service.createThread(null, await parse(c, schemas.createThreadSchema));\n    return c.json(op, status(op));\n  });\n  app.post('/api/project-clones', async (c) =>\n    c.json(service.cloneProject(await parse(c, schemas.cloneProjectSchema)), 202),\n  );\n  app.get('/api/project-clones/:cloneId', (c) =>\n    c.json(service.projectClones.get(id(c.req.param('cloneId')))),\n  );\n  app.post('/api/project-clones/:cloneId/cancel', async (c) => {\n    await parse(c, schemas.removeProjectSchema);\n    return c.json(service.projectClones.cancel(id(c.req.param('cloneId'))));\n  });\n  app.post('/api/project-clones/:cloneId/register', async (c) => {\n    await parse(c, schemas.removeProjectSchema);\n    return c.json(service.projectClones.retryRegistration(id(c.req.param('cloneId'))));\n  });\n  app.post('/api/projects/reorder', async (c) =>\n    c.json(service.reorderProjects(await parse(c, schemas.reorderProjectsSchema))),\n  );\n  app.get('/api/projects/:projectId/runtime-settings', async (c) =>\n    c.json(await service.readRuntimeSettings(id(c.req.param('projectId')))),\n  );\n  app.post('/api/projects/:projectId/model-defaults', async (c) => {\n    const op = await service.saveModelDefaults(\n      id(c.req.param('projectId')),\n      await parse(c, schemas.saveModelDefaultsSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/projects', async (c) =>\n    c.json(service.addProject(await parse(c, schemas.createProjectSchema))),\n  );\n  app.post('/api/projects/:projectId/rename', async (c) =>\n    c.json(\n      service.renameProject(\n        id(c.req.param('projectId')),\n        await parse(c, schemas.renameProjectSchema),\n      ),\n    ),\n  );\n  app.post('/api/projects/:projectId/remove', async (c) => {\n    await parse(c, schemas.removeProjectSchema);\n    return c.json(service.removeProject(id(c.req.param('projectId'))));\n  });\n  app.get('/api/projects/:projectId/threads', async (c) =>\n    c.json(\n      await service.listThreadSummaries(\n        id(c.req.param('projectId')),\n        c.req.query('cursor') === undefined\n          ? undefined\n          : schemas.cursorSchema.parse(c.req.query('cursor')),\n        schemas.archivedQuerySchema.parse(c.req.query('archived')),\n      ),\n    ),\n  );\n  app.get('/api/threads', async (c) =>\n    c.json(\n      await service.listThreads(\n        id(c.req.query('projectId') ?? ''),\n        c.req.query('cursor') === undefined\n          ? undefined\n          : schemas.cursorSchema.parse(c.req.query('cursor')),\n        schemas.archivedQuerySchema.parse(c.req.query('archived')),\n      ),\n    ),\n  );\n  app.post('/api/threads/:threadId/archive', async (c) => {\n    return c.json(\n      await service.setThreadArchived(\n        id(c.req.param('threadId')),\n        await parse(c, schemas.archiveThreadSchema),\n      ),\n    );\n  });\n  app.get('/api/threads/:threadId', async (c) =>\n    c.json(await service.getThread(id(c.req.param('threadId')))),\n  );\n  app.get('/api/threads/:threadId/history', async (c) =>\n    c.json(await service.getThreadHistory(id(c.req.param('threadId')), c.req.query('cursor'))),\n  );\n  app.get('/api/threads/:threadId/metadata', async (c) =>\n    c.json(await service.getThreadMetadata(id(c.req.param('threadId')))),\n  );\n  app.get('/api/threads/:threadId/export', async (c) => {\n    const exported = await service.exportThread(id(c.req.param('threadId')));\n    c.header('Content-Type', 'text/markdown; charset=utf-8');\n    c.header('Content-Disposition', `attachment; filename=\"${exported.filename}\"`);\n    c.header('Cache-Control', 'no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('X-Export-Completeness', exported.partial ? 'partial' : 'saved-history');\n    return c.body(exported.markdown);\n  });\n  app.get('/api/threads/:threadId/images', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    c.header('Content-Security-Policy', \"default-src 'none'; sandbox\");\n    const image = await service.getThreadImage(id(c.req.param('threadId')), c.req.query('path'));\n    // Hash the validated bytes so same-size overwrites with preserved mtimes also invalidate.\n    const etag = `\"${createHash('sha256').update(image.bytes).digest('hex')}\"`;\n    c.header('Cache-Control', 'private, no-cache');\n    c.header('ETag', etag);\n    const ifNoneMatch = c.req.header('If-None-Match');\n    if (\n      ifNoneMatch === '*' ||\n      ifNoneMatch?.split(',').some((tag) => tag.trim().replace(/^W\\//, '') === etag)\n    )\n      return c.body(null, 304);\n    return c.body(image.bytes, 200, {\n      'Content-Type': image.contentType,\n      'Content-Length': String(image.bytes.length),\n    });\n  });\n  app.get('/api/threads/:threadId/markdown', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    return c.json(\n      await service.getThreadMarkdown(id(c.req.param('threadId')), c.req.query('path')),\n    );\n  });\n  app.get('/api/threads/:threadId/json', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    return c.json(await service.getThreadJson(id(c.req.param('threadId')), c.req.query('path')));\n  });\n  app.get('/api/operations/:operationId', (c) =>\n    c.json(service.getOperation(id(c.req.param('operationId')))),\n  );\n  app.post('/api/projects/:projectId/threads', async (c) => {\n    const op = await service.createThread(\n      id(c.req.param('projectId')),\n      await parse(c, schemas.createThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/resume', async (c) => {\n    const op = await service.resumeThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.resumeThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/fork', async (c) => {\n    const op = await service.forkThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.forkThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/rename', async (c) => {\n    const op = await service.renameThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.renameThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/turns', async (c) => {\n    const op = await service.startTurn(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.startTurnSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/review', async (c) => {\n    const op = await service.startReview(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.startReviewSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/steer', async (c) => {\n    const op = await service.steer(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.steerSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/compact', async (c) => {\n    const op = await service.compactThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.operationSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/interrupt', async (c) => {\n    const op = await service.interrupt(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.interruptSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/actions/:actionId/resolve', async (c) => {\n    const op = await service.resolveAction(\n      id(c.req.param('actionId')),\n      await parse(c, schemas.resolveActionSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/operations/:operationId/reconcile', async (c) => {\n    const op = await service.reconcileOperation(\n      id(c.req.param('operationId')),\n      await parse(c, schemas.reconcileSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.get(\n    '/ws',\n    upgradeWebSocket((c) =>\n      socketHandlers(service, config, c.get('identity'), c.req.query('overview') === '1'),\n    ),\n  );\n  app.all('/api/*', () => {\n    throw new AppError('NOT_FOUND', 'API route not found', 404);\n  });\n  app.all('/api', () => {\n    throw new AppError('NOT_FOUND', 'API route not found', 404);\n  });\n  app.all('/ws/*', () => {\n    throw new AppError('NOT_FOUND', 'WebSocket route not found', 404);\n  });\n  app.use('*', async (c, next) => {\n    if (!c.req.path.startsWith('/assets/')) c.header('Cache-Control', 'no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Referrer-Policy', 'same-origin');\n    c.header(\n      'Content-Security-Policy',\n      // Remote Markdown images load directly in the browser, including HTTPS redirects.\n      // Keep scripts, connections and all other resource policies restricted as before.\n      \"default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'\",\n    );\n    await next();\n  });\n  app.get('*', serveStatic({ root: staticDir }));\n  app.get('*', async (c, next) => {\n    if (!c.req.header('accept')?.includes('text/html') || /\\.[^/]+$/.test(c.req.path))\n      return c.json({ error: { code: 'NOT_FOUND', message: 'Resource not found' } }, 404);\n    return serveStatic({ path: `${staticDir}/index.html` })(c, next);\n  });\n  app.notFound((c) => c.json({ error: { code: 'NOT_FOUND', message: 'Resource not found' } }, 404));\n  return app;\n}\n"],
-  "mappings": "AACA,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,mBAAmB;AAC5B,SAAS,wBAA2C;AAEpD,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AACzB,SAAS,2BAA2B;AACpC,YAAY,aAAa;AAGzB,SAAS,mBAAmB;AAC5B,SAAS,2BAA8D;AAEvE,SAAS,sBAAsB;AAC/B,SAAS,SAAS;AAClB,SAAS,uBAA8C;AACvD,SAAS,gBAAgB,2BAA2B;AACpD,SAAS,wBAAwB;AAS1B,SAAS,UAAU;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe,oBAAoB,MAAM;AAAA,EACzC;AAAA,EACA;AACF,GAAqB;AACnB,QAAM,MAAM,IAAI,KAGb;AACH,MAAI,QAAQ,CAAC,OAAO,MAAM;AACxB,UAAM,UACJ,iBAAiB,WACb,QACA,iBAAiB,YAAY,iBAAiB,cAC5C,IAAI,SAAS,qBAAqB,wBAAwB,GAAG,IAC7D,IAAI,SAAS,kBAAkB,8BAA8B,GAAG;AACxE,WAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,OAAO,EAAE,IAAI,aAAa,CAAC,EAAE,GAAG,QAAQ,MAAa;AAAA,EACtF,CAAC;AACD,MAAI,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AAClD,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,MAAE,IAAI,YAAY,MAAM,aAAa,EAAE,IAAI,KAAK,EAAE,IAAI,SAAS,KAAK,CAAC;AACrE,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAAU,CAAC,GAAG,SACpB,UAAU;AAAA,MACR,SAAS,yCAAyC,KAAK,EAAE,IAAI,IAAI,IAC7D,sBACA,MAAM;AAAA,MACV,SAAS,MAAM;AACb,cAAM,IAAI,SAAS,kBAAkB,8BAA8B,GAAG;AAAA,MACxE;AAAA,IACF,CAAC,EAAE,GAAG,IAAI;AAAA,EACZ;AACA,MAAI,IAAI,UAAU,OAAO,GAAG,SAAS;AACnC,MAAE,OAAO,iBAAiB,UAAU;AACpC,QACE,QAAQ,gBAAgB,KACxB,CAAC,CAAC,OAAO,QAAQ,SAAS,EAAE,SAAS,EAAE,IAAI,MAAM,KACjD,CAAC,EAAE,IAAI,KAAK,WAAW,cAAc,KACrC,CAAC,EAAE,IAAI,KAAK,WAAW,cAAc;AAErC,YAAM,QAAQ,iBAAiB;AACjC,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI,SAAS;AACX,QAAI,IAAI,gBAAgB,OAAO,MAAM,EAAE,KAAK,MAAM,QAAQ,OAAO,CAAC,CAAC;AACnE,QAAI;AAAA,MAAK;AAAA,MAAgB,OAAO,MAC9B,EAAE,KAAK,MAAM,QAAQ,MAAM,oBAAoB,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,GAAG,GAAG;AAAA,IAChF;AACA,QAAI;AAAA,MAAK;AAAA,MAA2B,OAAO,MACzC,EAAE,KAAK,MAAM,QAAQ,OAAO,eAAe,MAAM,EAAE,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC;AAAA,IACtE;AACA,QAAI;AAAA,MAAK;AAAA,MAA2B,OAAO,MACzC,EAAE,KAAK,MAAM,QAAQ,OAAO,eAAe,MAAM,EAAE,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC;AAAA,IACtE;AAAA,EACF;AACA,MAAI,SAAS;AACX,QAAI,IAAI,gBAAgB,OAAO,MAAM,EAAE,KAAK,MAAM,QAAQ,OAAO,CAAC,CAAC;AACnE,QAAI,KAAK,sBAAsB,OAAO,MAAM;AAC1C,YAAM,QAAQ,EACX,OAAO,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,CAAC,EACtD,OAAO,EACP,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC;AAC3B,aAAO,EAAE,KAAK,MAAM,QAAQ,MAAM,MAAM,OAAO,CAAC;AAAA,IAClD,CAAC;AACD,QAAI;AAAA,MAAK;AAAA,MAAyB,OAAO,MACvC,EAAE,KAAK,MAAM,QAAQ,UAAU,eAAe,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;AAAA,IAC1E;AACA,QAAI;AAAA,MAAK;AAAA,MAAoB,OAAO,MAClC,EAAE,KAAK,MAAM,QAAQ,MAAM,oBAAoB,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,GAAG,GAAG;AAAA,IAChF;AAAA,EACF;AACA,QAAM,KAAK,CAAC,UAAkB,QAAQ,SAAS,MAAM,KAAK;AAC1D,QAAM,QAAQ,OACZ,GACA,WACe;AACf,UAAM,QAAiB,MAAM,EAAE,IAAI,KAAK;AACxC,QACE,SACA,OAAO,UAAU,YACjB,uBAAuB,SACvB,OAAO,MAAM,sBAAsB;AAEnC,QAAE,IAAI,eAAe,MAAM,iBAAiB;AAC9C,WAAO,OAAO,MAAM,KAAK;AAAA,EAC3B;AACA,QAAM,SAAS,CAAC,OACd,GAAG,WAAW,iBAAiB,GAAG,WAAW,aAAc,MAAiB;AAC9E,QAAM,gBAAgB,IAAI,YAAY,MAAM;AAC5C,MAAI,IAAI,gBAAgB,OAAO,GAAG,SAAS;AACzC,MAAE,OAAO,iBAAiB,UAAU;AACpC,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI,IAAI,eAAe,OAAO,MAAM,EAAE,KAAK,MAAM,cAAc,SAAS,CAAC,CAAC;AAC1E,MAAI,KAAK,eAAe,OAAO,MAAM,EAAE,KAAK,MAAM,cAAc,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;AACzF,MAAI;AAAA,IAAK;AAAA,IAAsB,OAAO,MACpC,EAAE,KAAK,MAAM,cAAc,cAAc,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,EAC9D;AACA,MAAI,IAAI,sBAAsB,OAAO,MAAM;AACzC,MAAE,OAAO,uBAAuB,8CAA8C;AAC9E,WAAO,EAAE,KAAK,MAAM,cAAc,OAAO,CAAC;AAAA,EAC5C,CAAC;AACD,MAAI,IAAI,8BAA8B,OAAO,MAAM;AACjD,UAAM,WAAW,EAAE,IAAI,UAAU;AACjC,QAAI,OAAO,KAAK,SAAS,WAAW,CAAC,SAAS;AAC5C,YAAM,IAAI,SAAS,mBAAmB,gEAAc,GAAG;AACzD,UAAM,WAAW,MAAM,QAAQ,aAAa;AAG5C,UAAM,QAAQ,WAAW,QAAQ,EAC9B;AAAA,MACC,KAAK,UAAU;AAAA,QACb,QAAQ,OAAO;AAAA,QACf,QAAQ,UAAU,EAAE;AAAA,QACpB,OAAO,KAAK;AAAA,QACZ,SAAS,WAAW;AAAA,QACpB,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,QAAQ,UAAU,QAAQ,SAAS,CAAC;AAAA,MAC7E,CAAC;AAAA,IACH,EACC,OAAO,KAAK;AACf,WAAO,EAAE,KAAK,EAAE,MAAM,CAAC;AAAA,EACzB,CAAC;AACD,MAAI,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,QAAQ,UAAU,CAAC,CAAC;AACzD,MAAI;AAAA,IAAI;AAAA,IAAc,CAAC,MACrB,EAAE;AAAA,MACA,QAAQ,MAAM;AAAA,QACZ,EAAE,IAAI,MAAM,OAAO;AAAA,QACnB,EAAE,OACC,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,OAAO,gBAAgB,EAC3B,QAAQ,CAAC,EACT,MAAM,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,gBAAgB;AAAA,IACjC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,mCAAmC,OAAO,MAAM;AACvD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,qCAAqC,OAAO,MAAM;AACzD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,MAAM,MAAM,GAAG,QAAQ,0BAA0B;AAAA,IACnD;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,EAAE,MAAM,MAAM,QAAQ,aAAa,EAAE,CAAC,CAAC;AACpF,MAAI;AAAA,IAAI;AAAA,IAAoC,OAAO,MACjD,EAAE,KAAK,MAAM,QAAQ,oBAAoB,IAAI,CAAC;AAAA,EAChD;AACA,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB;AAAA,MACA,MAAM,MAAM,GAAG,QAAQ,uBAAuB;AAAA,IAChD;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAA2B,OAAO,MACxC,EAAE;AAAA,MACA,MAAM,QAAQ;AAAA,QACZ;AAAA,QACA,EAAE,IAAI,MAAM,QAAQ,MAAM,SACtB,SACA,QAAQ,aAAa,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC;AAAA,QACpD,QAAQ,oBAAoB,MAAM,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,2BAA2B,OAAO,MAAM;AAC/C,UAAM,KAAK,MAAM,QAAQ,aAAa,MAAM,MAAM,MAAM,GAAG,QAAQ,kBAAkB,CAAC;AACtF,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IAAK;AAAA,IAAuB,OAAO,MACrC,EAAE,KAAK,QAAQ,aAAa,MAAM,MAAM,GAAG,QAAQ,kBAAkB,CAAC,GAAG,GAAG;AAAA,EAC9E;AACA,MAAI;AAAA,IAAI;AAAA,IAAgC,CAAC,MACvC,EAAE,KAAK,QAAQ,cAAc,IAAI,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,EAC9D;AACA,MAAI,KAAK,uCAAuC,OAAO,MAAM;AAC3D,UAAM,MAAM,GAAG,QAAQ,mBAAmB;AAC1C,WAAO,EAAE,KAAK,QAAQ,cAAc,OAAO,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,EACxE,CAAC;AACD,MAAI,KAAK,yCAAyC,OAAO,MAAM;AAC7D,UAAM,MAAM,GAAG,QAAQ,mBAAmB;AAC1C,WAAO,EAAE,KAAK,QAAQ,cAAc,kBAAkB,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,EACnF,CAAC;AACD,MAAI;AAAA,IAAK;AAAA,IAAyB,OAAO,MACvC,EAAE,KAAK,QAAQ,gBAAgB,MAAM,MAAM,GAAG,QAAQ,qBAAqB,CAAC,CAAC;AAAA,EAC/E;AACA,MAAI;AAAA,IAAI;AAAA,IAA6C,OAAO,MAC1D,EAAE,KAAK,MAAM,QAAQ,oBAAoB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC,CAAC,CAAC;AAAA,EACxE;AACA,MAAI,KAAK,2CAA2C,OAAO,MAAM;AAC/D,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,QAAQ,uBAAuB;AAAA,IAChD;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IAAK;AAAA,IAAiB,OAAO,MAC/B,EAAE,KAAK,QAAQ,WAAW,MAAM,MAAM,GAAG,QAAQ,mBAAmB,CAAC,CAAC;AAAA,EACxE;AACA,MAAI;AAAA,IAAK;AAAA,IAAmC,OAAO,MACjD,EAAE;AAAA,MACA,QAAQ;AAAA,QACN,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,QAC3B,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,mCAAmC,OAAO,MAAM;AACvD,UAAM,MAAM,GAAG,QAAQ,mBAAmB;AAC1C,WAAO,EAAE,KAAK,QAAQ,cAAc,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC,CAAC,CAAC;AAAA,EACnE,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAAoC,OAAO,MACjD,EAAE;AAAA,MACA,MAAM,QAAQ;AAAA,QACZ,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,QAC3B,EAAE,IAAI,MAAM,QAAQ,MAAM,SACtB,SACA,QAAQ,aAAa,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC;AAAA,QACpD,QAAQ,oBAAoB,MAAM,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACA,MAAI;AAAA,IAAI;AAAA,IAAgB,OAAO,MAC7B,EAAE;AAAA,MACA,MAAM,QAAQ;AAAA,QACZ,GAAG,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE;AAAA,QACjC,EAAE,IAAI,MAAM,QAAQ,MAAM,SACtB,SACA,QAAQ,aAAa,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC;AAAA,QACpD,QAAQ,oBAAoB,MAAM,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,WAAO,EAAE;AAAA,MACP,MAAM,QAAQ;AAAA,QACZ,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,QAC1B,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAA0B,OAAO,MACvC,EAAE,KAAK,MAAM,QAAQ,UAAU,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC;AAAA,EAC7D;AACA,MAAI;AAAA,IAAI;AAAA,IAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,QAAQ,iBAAiB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC,CAAC;AAAA,EAC3F;AACA,MAAI;AAAA,IAAI;AAAA,IAAmC,OAAO,MAChD,EAAE,KAAK,MAAM,QAAQ,kBAAkB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC;AAAA,EACrE;AACA,MAAI,IAAI,iCAAiC,OAAO,MAAM;AACpD,UAAM,WAAW,MAAM,QAAQ,aAAa,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC;AACvE,MAAE,OAAO,gBAAgB,8BAA8B;AACvD,MAAE,OAAO,uBAAuB,yBAAyB,SAAS,QAAQ,GAAG;AAC7E,MAAE,OAAO,iBAAiB,UAAU;AACpC,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,yBAAyB,SAAS,UAAU,YAAY,eAAe;AAChF,WAAO,EAAE,KAAK,SAAS,QAAQ;AAAA,EACjC,CAAC;AACD,MAAI,IAAI,iCAAiC,OAAO,MAAM;AACpD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,MAAE,OAAO,2BAA2B,6BAA6B;AACjE,UAAM,QAAQ,MAAM,QAAQ,eAAe,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;AAE3F,UAAM,OAAO,IAAI,WAAW,QAAQ,EAAE,OAAO,MAAM,KAAK,EAAE,OAAO,KAAK,CAAC;AACvE,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,QAAQ,IAAI;AACrB,UAAM,cAAc,EAAE,IAAI,OAAO,eAAe;AAChD,QACE,gBAAgB,OAChB,aAAa,MAAM,GAAG,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,QAAQ,QAAQ,EAAE,MAAM,IAAI;AAE7E,aAAO,EAAE,KAAK,MAAM,GAAG;AACzB,WAAO,EAAE,KAAK,MAAM,OAAO,KAAK;AAAA,MAC9B,gBAAgB,MAAM;AAAA,MACtB,kBAAkB,OAAO,MAAM,MAAM,MAAM;AAAA,IAC7C,CAAC;AAAA,EACH,CAAC;AACD,MAAI,IAAI,mCAAmC,OAAO,MAAM;AACtD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,WAAO,EAAE;AAAA,MACP,MAAM,QAAQ,kBAAkB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;AAAA,IAClF;AAAA,EACF,CAAC;AACD,MAAI,IAAI,+BAA+B,OAAO,MAAM;AAClD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,WAAO,EAAE,KAAK,MAAM,QAAQ,cAAc,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC;AAAA,EAC7F,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAAgC,CAAC,MACvC,EAAE,KAAK,QAAQ,aAAa,GAAG,EAAE,IAAI,MAAM,aAAa,CAAC,CAAC,CAAC;AAAA,EAC7D;AACA,MAAI,KAAK,oCAAoC,OAAO,MAAM;AACxD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAC3C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iCAAiC,OAAO,MAAM;AACrD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAC3C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,+BAA+B,OAAO,MAAM;AACnD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,gBAAgB;AAAA,IACzC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iCAAiC,OAAO,MAAM;AACrD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAC3C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,gCAAgC,OAAO,MAAM;AACpD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iCAAiC,OAAO,MAAM;AACrD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,iBAAiB;AAAA,IAC1C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,gCAAgC,OAAO,MAAM;AACpD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,WAAW;AAAA,IACpC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,oCAAoC,OAAO,MAAM;AACxD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AAAA,IAC5C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,0CAA0C,OAAO,MAAM;AAC9D,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,aAAa,CAAC;AAAA,MAC7B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MAAiB,CAAC,MAChB,eAAe,SAAS,QAAQ,EAAE,IAAI,UAAU,GAAG,EAAE,IAAI,MAAM,UAAU,MAAM,GAAG;AAAA,IACpF;AAAA,EACF;AACA,MAAI,IAAI,UAAU,MAAM;AACtB,UAAM,IAAI,SAAS,aAAa,uBAAuB,GAAG;AAAA,EAC5D,CAAC;AACD,MAAI,IAAI,QAAQ,MAAM;AACpB,UAAM,IAAI,SAAS,aAAa,uBAAuB,GAAG;AAAA,EAC5D,CAAC;AACD,MAAI,IAAI,SAAS,MAAM;AACrB,UAAM,IAAI,SAAS,aAAa,6BAA6B,GAAG;AAAA,EAClE,CAAC;AACD,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,QAAI,CAAC,EAAE,IAAI,KAAK,WAAW,UAAU,EAAG,GAAE,OAAO,iBAAiB,UAAU;AAC5E,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,mBAAmB,aAAa;AACzC,MAAE;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA,IACF;AACA,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI,IAAI,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC,CAAC;AAC7C,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,QAAI,CAAC,EAAE,IAAI,OAAO,QAAQ,GAAG,SAAS,WAAW,KAAK,WAAW,KAAK,EAAE,IAAI,IAAI;AAC9E,aAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,SAAS,qBAAqB,EAAE,GAAG,GAAG;AACpF,WAAO,YAAY,EAAE,MAAM,GAAG,SAAS,cAAc,CAAC,EAAE,GAAG,IAAI;AAAA,EACjE,CAAC;AACD,MAAI,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,SAAS,qBAAqB,EAAE,GAAG,GAAG,CAAC;AAChG,SAAO;AACT;",
+  "sourcesContent": ["import type { BackupController } from '../shared/backups.js';\nimport { backupIdSchema } from '../shared/backups.js';\nimport { backupRequestSchema } from '../backups/manager.js';\nimport { createHash } from 'node:crypto';\nimport { Hono } from 'hono';\nimport { bodyLimit } from 'hono/body-limit';\nimport { serveStatic } from '@hono/node-server/serve-static';\nimport { upgradeWebSocket, type HttpBindings } from '@hono/node-server';\nimport type { ZodType } from 'zod';\nimport { ZodError } from 'zod';\nimport { AppError } from '../shared/errors.js';\nimport { IMAGE_REQUEST_BYTES } from '../shared/images.js';\nimport * as schemas from '../shared/validation.js';\nimport type { Operation } from '../shared/types.js';\nimport type { AppConfig } from './config.js';\nimport { ConfigStore } from './config-store.js';\nimport { projectPathPreview, resolveProjectPath } from './project-paths.js';\nimport { createAuthenticator, type Authenticator, type Identity } from './auth.js';\nimport type { GatewayService } from './service.js';\nimport { socketHandlers } from './websocket.js';\nimport { z } from 'zod';\nimport { releaseChannels, type UpdateController } from '../shared/updates.js';\nimport { settingsSchema, updateRequestSchema } from '../updates/manager.js';\nimport { createReleaseNotesLookup, releaseNotesQuery } from '../updates/release-notes.js';\nimport { startShellSchema } from '../shared/shell.js';\nexport interface HttpDependencies {\n  config: AppConfig;\n  service: GatewayService;\n  staticDir: string;\n  authenticate?: Authenticator;\n  updates?: UpdateController;\n  backups?: BackupController;\n}\nexport function createApp({\n  config,\n  service,\n  staticDir,\n  authenticate = createAuthenticator(config),\n  updates,\n  backups,\n}: HttpDependencies) {\n  const app = new Hono<{\n    Bindings: HttpBindings;\n    Variables: { identity: Identity; operationId?: string };\n  }>();\n  app.onError((error, c) => {\n    const failure =\n      error instanceof AppError\n        ? error\n        : error instanceof ZodError || error instanceof SyntaxError\n          ? new AppError('VALIDATION_FAILED', 'Invalid request data', 400)\n          : new AppError('INTERNAL_ERROR', 'An internal error occurred', 500);\n    return c.json({ error: failure.toJSON(c.get('operationId')) }, failure.status as 400);\n  });\n  app.get('/api/health', (c) => c.json({ ok: true }));\n  app.use('*', async (c, next) => {\n    c.set('identity', await authenticate(c.req.raw, c.req.path === '/ws'));\n    await next();\n  });\n  app.use('/api/*', (c, next) =>\n    bodyLimit({\n      maxSize: /^\\/api\\/threads\\/[^/]+\\/(turns|steer)$/.test(c.req.path)\n        ? IMAGE_REQUEST_BYTES\n        : 512 * 1024,\n      onError: () => {\n        throw new AppError('BODY_TOO_LARGE', 'Request body exceeds limit', 413);\n      },\n    })(c, next),\n  );\n  app.use('/api/*', async (c, next) => {\n    c.header('Cache-Control', 'no-store');\n    if (\n      service.isInMaintenance() &&\n      !['GET', 'HEAD', 'OPTIONS'].includes(c.req.method) &&\n      !c.req.path.startsWith('/api/updates') &&\n      !c.req.path.startsWith('/api/backups')\n    )\n      throw service.maintenanceError();\n    await next();\n  });\n  if (backups) {\n    app.get('/api/backups', async (c) => c.json(await backups.status()));\n    app.post('/api/backups', async (c) =>\n      c.json(await backups.start(backupRequestSchema.parse(await c.req.json())), 202),\n    );\n    app.post('/api/backups/:id/cancel', async (c) =>\n      c.json(await backups.cancel(backupIdSchema.parse(c.req.param('id')))),\n    );\n    app.post('/api/backups/:id/verify', async (c) =>\n      c.json(await backups.verify(backupIdSchema.parse(c.req.param('id')))),\n    );\n  }\n  if (updates) {\n    const releaseNotes = createReleaseNotesLookup();\n    app.get('/api/updates/release-notes', async (c) => {\n      const { version, refresh } = releaseNotesQuery.parse(c.req.query());\n      return c.json(await releaseNotes(version, refresh === '1'));\n    });\n    app.get('/api/updates', async (c) => c.json(await updates.status()));\n    app.post('/api/updates/check', async (c) => {\n      const input = z\n        .object({ channel: z.enum(releaseChannels).optional() })\n        .strict()\n        .parse(await c.req.json());\n      return c.json(await updates.check(input.channel));\n    });\n    app.post('/api/updates/settings', async (c) =>\n      c.json(await updates.configure(settingsSchema.parse(await c.req.json()))),\n    );\n    app.post('/api/updates/run', async (c) =>\n      c.json(await updates.start(updateRequestSchema.parse(await c.req.json())), 202),\n    );\n  }\n  const id = (value: string) => schemas.idSchema.parse(value);\n  const parse = async <T>(\n    c: { req: { json: () => Promise<unknown> }; set: (key: 'operationId', value: string) => void },\n    schema: ZodType<T>,\n  ): Promise<T> => {\n    const value: unknown = await c.req.json();\n    if (\n      value &&\n      typeof value === 'object' &&\n      'clientOperationId' in value &&\n      typeof value.clientOperationId === 'string'\n    )\n      c.set('operationId', value.clientOperationId);\n    return schema.parse(value);\n  };\n  const status = (op: Operation) =>\n    op.status === 'dispatching' || op.status === 'accepted' ? (202 as const) : (200 as const);\n  const configuration = new ConfigStore(config);\n  app.get('/api/project-path', (c) => {\n    const input = z\n      .object({\n        path: z.string().max(4096).default(''),\n        directory: z\n          .string()\n          .max(255)\n          .refine((value) => !/[\\\\/\\0]/.test(value) && value !== '.' && value !== '..')\n          .optional(),\n      })\n      .parse({ path: c.req.query('path'), directory: c.req.query('directory') });\n    return c.json(projectPathPreview(input.path.trim(), configuration.workDir, input.directory));\n  });\n  app.use('/api/config*', async (c, next) => {\n    c.header('Cache-Control', 'no-store');\n    await next();\n  });\n  app.get('/api/config', async (c) => c.json(await configuration.snapshot()));\n  app.post('/api/config', async (c) => c.json(await configuration.save(await c.req.json())));\n  app.post('/api/config/import', async (c) =>\n    c.json(await configuration.previewImport(await c.req.json())),\n  );\n  app.get('/api/config/export', async (c) => {\n    c.header('Content-Disposition', 'attachment; filename=\"codex-web-config.json\"');\n    return c.json(await configuration.export());\n  });\n  app.get('/api/history-cache-context', async (c) => {\n    const identity = c.get('identity');\n    if (config.auth.mode !== 'local' && !identity.subject)\n      throw new AppError('UNAUTHENTICATED', '\u65E0\u6CD5\u786E\u8BA4\u7F13\u5B58\u6240\u5C5E\u7528\u6237', 401);\n    const projects = await service.listProjects();\n    // A restart, user change or project/permission change creates a new namespace.\n    // The subject is hashed on the server and is never exposed to browser storage.\n    const scope = createHash('sha256')\n      .update(\n        JSON.stringify([\n          service.events.serverEpoch,\n          service.getSystem().codexEpoch,\n          config.auth.mode,\n          identity.subject ?? 'local',\n          projects.map((project) => [project.id, project.rootPath, project.available]),\n        ]),\n      )\n      .digest('hex');\n    return c.json({ scope });\n  });\n  app.get('/api/system', (c) => c.json(service.getSystem()));\n  app.get('/api/shell', (c) =>\n    c.json(\n      service.shell.snapshot(\n        c.req.query('epoch'),\n        z.coerce\n          .number()\n          .int()\n          .min(0)\n          .max(Number.MAX_SAFE_INTEGER)\n          .default(0)\n          .parse(c.req.query('after')),\n      ),\n    ),\n  );\n  app.post('/api/projects/:projectId/shell', async (c) => {\n    const op = await service.startShell(\n      id(c.req.param('projectId')),\n      await parse(c, startShellSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/shell/:commandId/interrupt', async (c) => {\n    const op = await service.interruptShell(\n      id(c.req.param('commandId')),\n      await parse(c, schemas.operationSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/system/compatibility/confirm', async (c) => {\n    const op = await service.confirmCompatibility(\n      await parse(c, schemas.confirmCompatibilitySchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.get('/api/projects', async (c) => c.json({ data: await service.listProjects() }));\n  app.get('/api/unassigned/runtime-settings', async (c) =>\n    c.json(await service.readRuntimeSettings(null)),\n  );\n  app.post('/api/unassigned/model-defaults', async (c) => {\n    const op = await service.saveModelDefaults(\n      null,\n      await parse(c, schemas.saveModelDefaultsSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.get('/api/unassigned/threads', async (c) =>\n    c.json(\n      await service.listThreadSummaries(\n        null,\n        c.req.query('cursor') === undefined\n          ? undefined\n          : schemas.cursorSchema.parse(c.req.query('cursor')),\n        schemas.archivedQuerySchema.parse(c.req.query('archived')),\n      ),\n    ),\n  );\n  app.post('/api/unassigned/threads', async (c) => {\n    const op = await service.createThread(null, await parse(c, schemas.createThreadSchema));\n    return c.json(op, status(op));\n  });\n  app.post('/api/project-clones', async (c) =>\n    c.json(\n      service.cloneProject(await parse(c, schemas.cloneProjectSchema), (path) =>\n        resolveProjectPath(path, configuration.workDir),\n      ),\n      202,\n    ),\n  );\n  app.get('/api/project-clones/:cloneId', (c) =>\n    c.json(service.projectClones.get(id(c.req.param('cloneId')))),\n  );\n  app.post('/api/project-clones/:cloneId/cancel', async (c) => {\n    await parse(c, schemas.removeProjectSchema);\n    return c.json(service.projectClones.cancel(id(c.req.param('cloneId'))));\n  });\n  app.post('/api/project-clones/:cloneId/register', async (c) => {\n    await parse(c, schemas.removeProjectSchema);\n    return c.json(service.projectClones.retryRegistration(id(c.req.param('cloneId'))));\n  });\n  app.post('/api/projects/reorder', async (c) =>\n    c.json(service.reorderProjects(await parse(c, schemas.reorderProjectsSchema))),\n  );\n  app.get('/api/projects/:projectId/runtime-settings', async (c) =>\n    c.json(await service.readRuntimeSettings(id(c.req.param('projectId')))),\n  );\n  app.post('/api/projects/:projectId/model-defaults', async (c) => {\n    const op = await service.saveModelDefaults(\n      id(c.req.param('projectId')),\n      await parse(c, schemas.saveModelDefaultsSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/projects', async (c) => {\n    const input = await parse(c, schemas.createProjectSchema);\n    return c.json(\n      service.addProject({ ...input, path: resolveProjectPath(input.path, configuration.workDir) }),\n    );\n  });\n  app.post('/api/projects/:projectId/rename', async (c) =>\n    c.json(\n      service.renameProject(\n        id(c.req.param('projectId')),\n        await parse(c, schemas.renameProjectSchema),\n      ),\n    ),\n  );\n  app.post('/api/projects/:projectId/remove', async (c) => {\n    await parse(c, schemas.removeProjectSchema);\n    return c.json(service.removeProject(id(c.req.param('projectId'))));\n  });\n  app.get('/api/projects/:projectId/threads', async (c) =>\n    c.json(\n      await service.listThreadSummaries(\n        id(c.req.param('projectId')),\n        c.req.query('cursor') === undefined\n          ? undefined\n          : schemas.cursorSchema.parse(c.req.query('cursor')),\n        schemas.archivedQuerySchema.parse(c.req.query('archived')),\n      ),\n    ),\n  );\n  app.get('/api/threads', async (c) =>\n    c.json(\n      await service.listThreads(\n        id(c.req.query('projectId') ?? ''),\n        c.req.query('cursor') === undefined\n          ? undefined\n          : schemas.cursorSchema.parse(c.req.query('cursor')),\n        schemas.archivedQuerySchema.parse(c.req.query('archived')),\n      ),\n    ),\n  );\n  app.post('/api/threads/:threadId/archive', async (c) => {\n    return c.json(\n      await service.setThreadArchived(\n        id(c.req.param('threadId')),\n        await parse(c, schemas.archiveThreadSchema),\n      ),\n    );\n  });\n  app.get('/api/threads/:threadId', async (c) =>\n    c.json(await service.getThread(id(c.req.param('threadId')))),\n  );\n  app.get('/api/threads/:threadId/history', async (c) =>\n    c.json(await service.getThreadHistory(id(c.req.param('threadId')), c.req.query('cursor'))),\n  );\n  app.get('/api/threads/:threadId/metadata', async (c) =>\n    c.json(await service.getThreadMetadata(id(c.req.param('threadId')))),\n  );\n  app.get('/api/threads/:threadId/export', async (c) => {\n    const exported = await service.exportThread(id(c.req.param('threadId')));\n    c.header('Content-Type', 'text/markdown; charset=utf-8');\n    c.header('Content-Disposition', `attachment; filename=\"${exported.filename}\"`);\n    c.header('Cache-Control', 'no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('X-Export-Completeness', exported.partial ? 'partial' : 'saved-history');\n    return c.body(exported.markdown);\n  });\n  app.get('/api/threads/:threadId/images', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    c.header('Content-Security-Policy', \"default-src 'none'; sandbox\");\n    const image = await service.getThreadImage(id(c.req.param('threadId')), c.req.query('path'));\n    // Hash the validated bytes so same-size overwrites with preserved mtimes also invalidate.\n    const etag = `\"${createHash('sha256').update(image.bytes).digest('hex')}\"`;\n    c.header('Cache-Control', 'private, no-cache');\n    c.header('ETag', etag);\n    const ifNoneMatch = c.req.header('If-None-Match');\n    if (\n      ifNoneMatch === '*' ||\n      ifNoneMatch?.split(',').some((tag) => tag.trim().replace(/^W\\//, '') === etag)\n    )\n      return c.body(null, 304);\n    return c.body(image.bytes, 200, {\n      'Content-Type': image.contentType,\n      'Content-Length': String(image.bytes.length),\n    });\n  });\n  app.get('/api/threads/:threadId/markdown', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    return c.json(\n      await service.getThreadMarkdown(id(c.req.param('threadId')), c.req.query('path')),\n    );\n  });\n  app.get('/api/threads/:threadId/text', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    return c.json(await service.getThreadText(id(c.req.param('threadId')), c.req.query('path')));\n  });\n  app.get('/api/threads/:threadId/json', async (c) => {\n    c.header('Cache-Control', 'private, no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Cross-Origin-Resource-Policy', 'same-origin');\n    return c.json(await service.getThreadJson(id(c.req.param('threadId')), c.req.query('path')));\n  });\n  app.get('/api/operations/:operationId', (c) =>\n    c.json(service.getOperation(id(c.req.param('operationId')))),\n  );\n  app.post('/api/projects/:projectId/threads', async (c) => {\n    const op = await service.createThread(\n      id(c.req.param('projectId')),\n      await parse(c, schemas.createThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/resume', async (c) => {\n    const op = await service.resumeThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.resumeThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/fork', async (c) => {\n    const op = await service.forkThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.forkThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/rename', async (c) => {\n    const op = await service.renameThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.renameThreadSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/turns', async (c) => {\n    const op = await service.startTurn(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.startTurnSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/review', async (c) => {\n    const op = await service.startReview(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.startReviewSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/steer', async (c) => {\n    const op = await service.steer(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.steerSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/compact', async (c) => {\n    const op = await service.compactThread(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.operationSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/threads/:threadId/interrupt', async (c) => {\n    const op = await service.interrupt(\n      id(c.req.param('threadId')),\n      await parse(c, schemas.interruptSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/actions/:actionId/resolve', async (c) => {\n    const op = await service.resolveAction(\n      id(c.req.param('actionId')),\n      await parse(c, schemas.resolveActionSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.post('/api/operations/:operationId/reconcile', async (c) => {\n    const op = await service.reconcileOperation(\n      id(c.req.param('operationId')),\n      await parse(c, schemas.reconcileSchema),\n    );\n    return c.json(op, status(op));\n  });\n  app.get(\n    '/ws',\n    upgradeWebSocket((c) =>\n      socketHandlers(service, config, c.get('identity'), c.req.query('overview') === '1'),\n    ),\n  );\n  app.all('/api/*', () => {\n    throw new AppError('NOT_FOUND', 'API route not found', 404);\n  });\n  app.all('/api', () => {\n    throw new AppError('NOT_FOUND', 'API route not found', 404);\n  });\n  app.all('/ws/*', () => {\n    throw new AppError('NOT_FOUND', 'WebSocket route not found', 404);\n  });\n  app.use('*', async (c, next) => {\n    if (!c.req.path.startsWith('/assets/')) c.header('Cache-Control', 'no-store');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Referrer-Policy', 'same-origin');\n    c.header(\n      'Content-Security-Policy',\n      // Remote Markdown images load directly in the browser, including HTTPS redirects.\n      // Keep scripts, connections and all other resource policies restricted as before.\n      \"default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'\",\n    );\n    await next();\n  });\n  app.get('*', serveStatic({ root: staticDir }));\n  app.get('*', async (c, next) => {\n    if (!c.req.header('accept')?.includes('text/html') || /\\.[^/]+$/.test(c.req.path))\n      return c.json({ error: { code: 'NOT_FOUND', message: 'Resource not found' } }, 404);\n    return serveStatic({ path: `${staticDir}/index.html` })(c, next);\n  });\n  app.notFound((c) => c.json({ error: { code: 'NOT_FOUND', message: 'Resource not found' } }, 404));\n  return app;\n}\n"],
+  "mappings": "AACA,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,mBAAmB;AAC5B,SAAS,wBAA2C;AAEpD,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AACzB,SAAS,2BAA2B;AACpC,YAAY,aAAa;AAGzB,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB,0BAA0B;AACvD,SAAS,2BAA8D;AAEvE,SAAS,sBAAsB;AAC/B,SAAS,SAAS;AAClB,SAAS,uBAA8C;AACvD,SAAS,gBAAgB,2BAA2B;AACpD,SAAS,0BAA0B,yBAAyB;AAC5D,SAAS,wBAAwB;AAS1B,SAAS,UAAU;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe,oBAAoB,MAAM;AAAA,EACzC;AAAA,EACA;AACF,GAAqB;AACnB,QAAM,MAAM,IAAI,KAGb;AACH,MAAI,QAAQ,CAAC,OAAO,MAAM;AACxB,UAAM,UACJ,iBAAiB,WACb,QACA,iBAAiB,YAAY,iBAAiB,cAC5C,IAAI,SAAS,qBAAqB,wBAAwB,GAAG,IAC7D,IAAI,SAAS,kBAAkB,8BAA8B,GAAG;AACxE,WAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,OAAO,EAAE,IAAI,aAAa,CAAC,EAAE,GAAG,QAAQ,MAAa;AAAA,EACtF,CAAC;AACD,MAAI,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC;AAClD,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,MAAE,IAAI,YAAY,MAAM,aAAa,EAAE,IAAI,KAAK,EAAE,IAAI,SAAS,KAAK,CAAC;AACrE,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAAU,CAAC,GAAG,SACpB,UAAU;AAAA,MACR,SAAS,yCAAyC,KAAK,EAAE,IAAI,IAAI,IAC7D,sBACA,MAAM;AAAA,MACV,SAAS,MAAM;AACb,cAAM,IAAI,SAAS,kBAAkB,8BAA8B,GAAG;AAAA,MACxE;AAAA,IACF,CAAC,EAAE,GAAG,IAAI;AAAA,EACZ;AACA,MAAI,IAAI,UAAU,OAAO,GAAG,SAAS;AACnC,MAAE,OAAO,iBAAiB,UAAU;AACpC,QACE,QAAQ,gBAAgB,KACxB,CAAC,CAAC,OAAO,QAAQ,SAAS,EAAE,SAAS,EAAE,IAAI,MAAM,KACjD,CAAC,EAAE,IAAI,KAAK,WAAW,cAAc,KACrC,CAAC,EAAE,IAAI,KAAK,WAAW,cAAc;AAErC,YAAM,QAAQ,iBAAiB;AACjC,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI,SAAS;AACX,QAAI,IAAI,gBAAgB,OAAO,MAAM,EAAE,KAAK,MAAM,QAAQ,OAAO,CAAC,CAAC;AACnE,QAAI;AAAA,MAAK;AAAA,MAAgB,OAAO,MAC9B,EAAE,KAAK,MAAM,QAAQ,MAAM,oBAAoB,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,GAAG,GAAG;AAAA,IAChF;AACA,QAAI;AAAA,MAAK;AAAA,MAA2B,OAAO,MACzC,EAAE,KAAK,MAAM,QAAQ,OAAO,eAAe,MAAM,EAAE,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC;AAAA,IACtE;AACA,QAAI;AAAA,MAAK;AAAA,MAA2B,OAAO,MACzC,EAAE,KAAK,MAAM,QAAQ,OAAO,eAAe,MAAM,EAAE,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC;AAAA,IACtE;AAAA,EACF;AACA,MAAI,SAAS;AACX,UAAM,eAAe,yBAAyB;AAC9C,QAAI,IAAI,8BAA8B,OAAO,MAAM;AACjD,YAAM,EAAE,SAAS,QAAQ,IAAI,kBAAkB,MAAM,EAAE,IAAI,MAAM,CAAC;AAClE,aAAO,EAAE,KAAK,MAAM,aAAa,SAAS,YAAY,GAAG,CAAC;AAAA,IAC5D,CAAC;AACD,QAAI,IAAI,gBAAgB,OAAO,MAAM,EAAE,KAAK,MAAM,QAAQ,OAAO,CAAC,CAAC;AACnE,QAAI,KAAK,sBAAsB,OAAO,MAAM;AAC1C,YAAM,QAAQ,EACX,OAAO,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,CAAC,EACtD,OAAO,EACP,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC;AAC3B,aAAO,EAAE,KAAK,MAAM,QAAQ,MAAM,MAAM,OAAO,CAAC;AAAA,IAClD,CAAC;AACD,QAAI;AAAA,MAAK;AAAA,MAAyB,OAAO,MACvC,EAAE,KAAK,MAAM,QAAQ,UAAU,eAAe,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;AAAA,IAC1E;AACA,QAAI;AAAA,MAAK;AAAA,MAAoB,OAAO,MAClC,EAAE,KAAK,MAAM,QAAQ,MAAM,oBAAoB,MAAM,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,GAAG,GAAG;AAAA,IAChF;AAAA,EACF;AACA,QAAM,KAAK,CAAC,UAAkB,QAAQ,SAAS,MAAM,KAAK;AAC1D,QAAM,QAAQ,OACZ,GACA,WACe;AACf,UAAM,QAAiB,MAAM,EAAE,IAAI,KAAK;AACxC,QACE,SACA,OAAO,UAAU,YACjB,uBAAuB,SACvB,OAAO,MAAM,sBAAsB;AAEnC,QAAE,IAAI,eAAe,MAAM,iBAAiB;AAC9C,WAAO,OAAO,MAAM,KAAK;AAAA,EAC3B;AACA,QAAM,SAAS,CAAC,OACd,GAAG,WAAW,iBAAiB,GAAG,WAAW,aAAc,MAAiB;AAC9E,QAAM,gBAAgB,IAAI,YAAY,MAAM;AAC5C,MAAI,IAAI,qBAAqB,CAAC,MAAM;AAClC,UAAM,QAAQ,EACX,OAAO;AAAA,MACN,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE;AAAA,MACrC,WAAW,EACR,OAAO,EACP,IAAI,GAAG,EACP,OAAO,CAAC,UAAU,CAAC,UAAU,KAAK,KAAK,KAAK,UAAU,OAAO,UAAU,IAAI,EAC3E,SAAS;AAAA,IACd,CAAC,EACA,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,MAAM,GAAG,WAAW,EAAE,IAAI,MAAM,WAAW,EAAE,CAAC;AAC3E,WAAO,EAAE,KAAK,mBAAmB,MAAM,KAAK,KAAK,GAAG,cAAc,SAAS,MAAM,SAAS,CAAC;AAAA,EAC7F,CAAC;AACD,MAAI,IAAI,gBAAgB,OAAO,GAAG,SAAS;AACzC,MAAE,OAAO,iBAAiB,UAAU;AACpC,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI,IAAI,eAAe,OAAO,MAAM,EAAE,KAAK,MAAM,cAAc,SAAS,CAAC,CAAC;AAC1E,MAAI,KAAK,eAAe,OAAO,MAAM,EAAE,KAAK,MAAM,cAAc,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;AACzF,MAAI;AAAA,IAAK;AAAA,IAAsB,OAAO,MACpC,EAAE,KAAK,MAAM,cAAc,cAAc,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,EAC9D;AACA,MAAI,IAAI,sBAAsB,OAAO,MAAM;AACzC,MAAE,OAAO,uBAAuB,8CAA8C;AAC9E,WAAO,EAAE,KAAK,MAAM,cAAc,OAAO,CAAC;AAAA,EAC5C,CAAC;AACD,MAAI,IAAI,8BAA8B,OAAO,MAAM;AACjD,UAAM,WAAW,EAAE,IAAI,UAAU;AACjC,QAAI,OAAO,KAAK,SAAS,WAAW,CAAC,SAAS;AAC5C,YAAM,IAAI,SAAS,mBAAmB,gEAAc,GAAG;AACzD,UAAM,WAAW,MAAM,QAAQ,aAAa;AAG5C,UAAM,QAAQ,WAAW,QAAQ,EAC9B;AAAA,MACC,KAAK,UAAU;AAAA,QACb,QAAQ,OAAO;AAAA,QACf,QAAQ,UAAU,EAAE;AAAA,QACpB,OAAO,KAAK;AAAA,QACZ,SAAS,WAAW;AAAA,QACpB,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,QAAQ,UAAU,QAAQ,SAAS,CAAC;AAAA,MAC7E,CAAC;AAAA,IACH,EACC,OAAO,KAAK;AACf,WAAO,EAAE,KAAK,EAAE,MAAM,CAAC;AAAA,EACzB,CAAC;AACD,MAAI,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,QAAQ,UAAU,CAAC,CAAC;AACzD,MAAI;AAAA,IAAI;AAAA,IAAc,CAAC,MACrB,EAAE;AAAA,MACA,QAAQ,MAAM;AAAA,QACZ,EAAE,IAAI,MAAM,OAAO;AAAA,QACnB,EAAE,OACC,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,OAAO,gBAAgB,EAC3B,QAAQ,CAAC,EACT,MAAM,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,gBAAgB;AAAA,IACjC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,mCAAmC,OAAO,MAAM;AACvD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,qCAAqC,OAAO,MAAM;AACzD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,MAAM,MAAM,GAAG,QAAQ,0BAA0B;AAAA,IACnD;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,EAAE,MAAM,MAAM,QAAQ,aAAa,EAAE,CAAC,CAAC;AACpF,MAAI;AAAA,IAAI;AAAA,IAAoC,OAAO,MACjD,EAAE,KAAK,MAAM,QAAQ,oBAAoB,IAAI,CAAC;AAAA,EAChD;AACA,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB;AAAA,MACA,MAAM,MAAM,GAAG,QAAQ,uBAAuB;AAAA,IAChD;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAA2B,OAAO,MACxC,EAAE;AAAA,MACA,MAAM,QAAQ;AAAA,QACZ;AAAA,QACA,EAAE,IAAI,MAAM,QAAQ,MAAM,SACtB,SACA,QAAQ,aAAa,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC;AAAA,QACpD,QAAQ,oBAAoB,MAAM,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,2BAA2B,OAAO,MAAM;AAC/C,UAAM,KAAK,MAAM,QAAQ,aAAa,MAAM,MAAM,MAAM,GAAG,QAAQ,kBAAkB,CAAC;AACtF,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IAAK;AAAA,IAAuB,OAAO,MACrC,EAAE;AAAA,MACA,QAAQ;AAAA,QAAa,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,QAAG,CAAC,SAChE,mBAAmB,MAAM,cAAc,OAAO;AAAA,MAChD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI;AAAA,IAAI;AAAA,IAAgC,CAAC,MACvC,EAAE,KAAK,QAAQ,cAAc,IAAI,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,EAC9D;AACA,MAAI,KAAK,uCAAuC,OAAO,MAAM;AAC3D,UAAM,MAAM,GAAG,QAAQ,mBAAmB;AAC1C,WAAO,EAAE,KAAK,QAAQ,cAAc,OAAO,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,EACxE,CAAC;AACD,MAAI,KAAK,yCAAyC,OAAO,MAAM;AAC7D,UAAM,MAAM,GAAG,QAAQ,mBAAmB;AAC1C,WAAO,EAAE,KAAK,QAAQ,cAAc,kBAAkB,GAAG,EAAE,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,EACnF,CAAC;AACD,MAAI;AAAA,IAAK;AAAA,IAAyB,OAAO,MACvC,EAAE,KAAK,QAAQ,gBAAgB,MAAM,MAAM,GAAG,QAAQ,qBAAqB,CAAC,CAAC;AAAA,EAC/E;AACA,MAAI;AAAA,IAAI;AAAA,IAA6C,OAAO,MAC1D,EAAE,KAAK,MAAM,QAAQ,oBAAoB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC,CAAC,CAAC;AAAA,EACxE;AACA,MAAI,KAAK,2CAA2C,OAAO,MAAM;AAC/D,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,QAAQ,uBAAuB;AAAA,IAChD;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iBAAiB,OAAO,MAAM;AACrC,UAAM,QAAQ,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AACxD,WAAO,EAAE;AAAA,MACP,QAAQ,WAAW,EAAE,GAAG,OAAO,MAAM,mBAAmB,MAAM,MAAM,cAAc,OAAO,EAAE,CAAC;AAAA,IAC9F;AAAA,EACF,CAAC;AACD,MAAI;AAAA,IAAK;AAAA,IAAmC,OAAO,MACjD,EAAE;AAAA,MACA,QAAQ;AAAA,QACN,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,QAC3B,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,mCAAmC,OAAO,MAAM;AACvD,UAAM,MAAM,GAAG,QAAQ,mBAAmB;AAC1C,WAAO,EAAE,KAAK,QAAQ,cAAc,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC,CAAC,CAAC;AAAA,EACnE,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAAoC,OAAO,MACjD,EAAE;AAAA,MACA,MAAM,QAAQ;AAAA,QACZ,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,QAC3B,EAAE,IAAI,MAAM,QAAQ,MAAM,SACtB,SACA,QAAQ,aAAa,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC;AAAA,QACpD,QAAQ,oBAAoB,MAAM,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACA,MAAI;AAAA,IAAI;AAAA,IAAgB,OAAO,MAC7B,EAAE;AAAA,MACA,MAAM,QAAQ;AAAA,QACZ,GAAG,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE;AAAA,QACjC,EAAE,IAAI,MAAM,QAAQ,MAAM,SACtB,SACA,QAAQ,aAAa,MAAM,EAAE,IAAI,MAAM,QAAQ,CAAC;AAAA,QACpD,QAAQ,oBAAoB,MAAM,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,WAAO,EAAE;AAAA,MACP,MAAM,QAAQ;AAAA,QACZ,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,QAC1B,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAA0B,OAAO,MACvC,EAAE,KAAK,MAAM,QAAQ,UAAU,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC;AAAA,EAC7D;AACA,MAAI;AAAA,IAAI;AAAA,IAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,QAAQ,iBAAiB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC,CAAC;AAAA,EAC3F;AACA,MAAI;AAAA,IAAI;AAAA,IAAmC,OAAO,MAChD,EAAE,KAAK,MAAM,QAAQ,kBAAkB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC;AAAA,EACrE;AACA,MAAI,IAAI,iCAAiC,OAAO,MAAM;AACpD,UAAM,WAAW,MAAM,QAAQ,aAAa,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC;AACvE,MAAE,OAAO,gBAAgB,8BAA8B;AACvD,MAAE,OAAO,uBAAuB,yBAAyB,SAAS,QAAQ,GAAG;AAC7E,MAAE,OAAO,iBAAiB,UAAU;AACpC,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,yBAAyB,SAAS,UAAU,YAAY,eAAe;AAChF,WAAO,EAAE,KAAK,SAAS,QAAQ;AAAA,EACjC,CAAC;AACD,MAAI,IAAI,iCAAiC,OAAO,MAAM;AACpD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,MAAE,OAAO,2BAA2B,6BAA6B;AACjE,UAAM,QAAQ,MAAM,QAAQ,eAAe,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;AAE3F,UAAM,OAAO,IAAI,WAAW,QAAQ,EAAE,OAAO,MAAM,KAAK,EAAE,OAAO,KAAK,CAAC;AACvE,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,QAAQ,IAAI;AACrB,UAAM,cAAc,EAAE,IAAI,OAAO,eAAe;AAChD,QACE,gBAAgB,OAChB,aAAa,MAAM,GAAG,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,QAAQ,QAAQ,EAAE,MAAM,IAAI;AAE7E,aAAO,EAAE,KAAK,MAAM,GAAG;AACzB,WAAO,EAAE,KAAK,MAAM,OAAO,KAAK;AAAA,MAC9B,gBAAgB,MAAM;AAAA,MACtB,kBAAkB,OAAO,MAAM,MAAM,MAAM;AAAA,IAC7C,CAAC;AAAA,EACH,CAAC;AACD,MAAI,IAAI,mCAAmC,OAAO,MAAM;AACtD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,WAAO,EAAE;AAAA,MACP,MAAM,QAAQ,kBAAkB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC;AAAA,IAClF;AAAA,EACF,CAAC;AACD,MAAI,IAAI,+BAA+B,OAAO,MAAM;AAClD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,WAAO,EAAE,KAAK,MAAM,QAAQ,cAAc,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC;AAAA,EAC7F,CAAC;AACD,MAAI,IAAI,+BAA+B,OAAO,MAAM;AAClD,MAAE,OAAO,iBAAiB,mBAAmB;AAC7C,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,gCAAgC,aAAa;AACtD,WAAO,EAAE,KAAK,MAAM,QAAQ,cAAc,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,MAAM,MAAM,CAAC,CAAC;AAAA,EAC7F,CAAC;AACD,MAAI;AAAA,IAAI;AAAA,IAAgC,CAAC,MACvC,EAAE,KAAK,QAAQ,aAAa,GAAG,EAAE,IAAI,MAAM,aAAa,CAAC,CAAC,CAAC;AAAA,EAC7D;AACA,MAAI,KAAK,oCAAoC,OAAO,MAAM;AACxD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,WAAW,CAAC;AAAA,MAC3B,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAC3C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iCAAiC,OAAO,MAAM;AACrD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAC3C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,+BAA+B,OAAO,MAAM;AACnD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,gBAAgB;AAAA,IACzC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iCAAiC,OAAO,MAAM;AACrD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IAC3C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,gCAAgC,OAAO,MAAM;AACpD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,iCAAiC,OAAO,MAAM;AACrD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,iBAAiB;AAAA,IAC1C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,gCAAgC,OAAO,MAAM;AACpD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,WAAW;AAAA,IACpC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,oCAAoC,OAAO,MAAM;AACxD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,kCAAkC,OAAO,MAAM;AACtD,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,UAAU,CAAC;AAAA,MAC1B,MAAM,MAAM,GAAG,QAAQ,mBAAmB;AAAA,IAC5C;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI,KAAK,0CAA0C,OAAO,MAAM;AAC9D,UAAM,KAAK,MAAM,QAAQ;AAAA,MACvB,GAAG,EAAE,IAAI,MAAM,aAAa,CAAC;AAAA,MAC7B,MAAM,MAAM,GAAG,QAAQ,eAAe;AAAA,IACxC;AACA,WAAO,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC;AAAA,EAC9B,CAAC;AACD,MAAI;AAAA,IACF;AAAA,IACA;AAAA,MAAiB,CAAC,MAChB,eAAe,SAAS,QAAQ,EAAE,IAAI,UAAU,GAAG,EAAE,IAAI,MAAM,UAAU,MAAM,GAAG;AAAA,IACpF;AAAA,EACF;AACA,MAAI,IAAI,UAAU,MAAM;AACtB,UAAM,IAAI,SAAS,aAAa,uBAAuB,GAAG;AAAA,EAC5D,CAAC;AACD,MAAI,IAAI,QAAQ,MAAM;AACpB,UAAM,IAAI,SAAS,aAAa,uBAAuB,GAAG;AAAA,EAC5D,CAAC;AACD,MAAI,IAAI,SAAS,MAAM;AACrB,UAAM,IAAI,SAAS,aAAa,6BAA6B,GAAG;AAAA,EAClE,CAAC;AACD,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,QAAI,CAAC,EAAE,IAAI,KAAK,WAAW,UAAU,EAAG,GAAE,OAAO,iBAAiB,UAAU;AAC5E,MAAE,OAAO,0BAA0B,SAAS;AAC5C,MAAE,OAAO,mBAAmB,aAAa;AACzC,MAAE;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA,IACF;AACA,UAAM,KAAK;AAAA,EACb,CAAC;AACD,MAAI,IAAI,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC,CAAC;AAC7C,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,QAAI,CAAC,EAAE,IAAI,OAAO,QAAQ,GAAG,SAAS,WAAW,KAAK,WAAW,KAAK,EAAE,IAAI,IAAI;AAC9E,aAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,SAAS,qBAAqB,EAAE,GAAG,GAAG;AACpF,WAAO,YAAY,EAAE,MAAM,GAAG,SAAS,cAAc,CAAC,EAAE,GAAG,IAAI;AAAA,EACjE,CAAC;AACD,MAAI,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,SAAS,qBAAqB,EAAE,GAAG,GAAG,CAAC;AAChG,SAAO;AACT;",
   "names": []
 }

package/dist/server/local-files.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/server/local-files.ts"],
-  "sourcesContent": ["import { constants, realpathSync, statSync } from 'node:fs';\nimport { open, realpath, stat } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { isAbsolute, parse, resolve } from 'node:path';\nimport { AppError } from '../shared/errors.js';\nimport { containsPath } from './projects.js';\n\nexport interface FileRoot {\n  canonicalRoot: string;\n  aliases: string[];\n}\n\nexport interface FileScope {\n  cwd: string;\n  roots: readonly FileRoot[];\n  excludedRoots?: readonly string[];\n}\n\n/** Capture server-owned roots once; clients cannot nominate a temporary directory. */\nexport function temporaryFileRoots(): FileRoot[] {\n  const roots = new Map<string, FileRoot>();\n  for (const directory of [tmpdir(), ...(process.platform === 'win32' ? [] : ['/tmp'])]) {\n    if (!isAbsolute(directory)) continue;\n    const alias = resolve(directory);\n    if (alias === parse(alias).root) continue;\n    try {\n      const canonicalRoot = realpathSync(alias);\n      if (canonicalRoot === parse(canonicalRoot).root || !statSync(canonicalRoot).isDirectory())\n        continue;\n      const root = roots.get(canonicalRoot) ?? { canonicalRoot, aliases: [] };\n      if (!root.aliases.includes(alias)) root.aliases.push(alias);\n      roots.set(canonicalRoot, root);\n    } catch {\n      // Unavailable temp locations do not prevent previews in the remaining roots.\n    }\n  }\n  return [...roots.values()];\n}\n\ninterface FilePolicy {\n  code: 'IMAGE' | 'MARKDOWN' | 'JSON';\n  label: string;\n  maxBytes: number;\n  sizeError: string;\n  validatePath: (path: string) => void;\n}\n\nfunction outsideProject(policy: FilePolicy): AppError {\n  return new AppError(\n    `${policy.code}_OUTSIDE_PROJECT`,\n    `\u53EA\u80FD\u9884\u89C8\u5F53\u524D\u4F1A\u8BDD\u5DE5\u4F5C\u533A\u6216\u5141\u8BB8\u7684\u670D\u52A1\u5668\u4E34\u65F6\u76EE\u5F55\u5185\u7684${policy.label}`,\n    403,\n  );\n}\n\nfunction changedFile(policy: FilePolicy): AppError {\n  return new AppError(`${policy.code}_CHANGED`, `${policy.label}\u6587\u4EF6\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u6253\u5F00\u9884\u89C8`, 409);\n}\n\n/** Shared project/temp authorization and bounded, verified file reads for previews. */\nexport async function readLocalFile(\n  path: string | undefined,\n  scope: FileScope,\n  policy: FilePolicy,\n) {\n  if (\n    !path ||\n    path.length > 4096 ||\n    [...path].some(\n      (character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127,\n    ) ||\n    /^[a-z][a-z\\d+.-]*:/i.test(path) ||\n    path.startsWith('//') ||\n    path.startsWith('\\\\\\\\')\n  )\n    throw new AppError(`INVALID_${policy.code}_PATH`, `${policy.label}\u8DEF\u5F84\u65E0\u6548`, 400);\n\n  const candidate = resolve(scope.cwd, path);\n  // Both spellings matter on systems where /tmp or the registered directory is an alias.\n  if (\n    !scope.roots.some(\n      (root) =>\n        containsPath(root.canonicalRoot, candidate) ||\n        root.aliases.some((alias) => containsPath(alias, candidate)),\n    )\n  )\n    throw outsideProject(policy);\n  const isAllowed = (path: string) =>\n    !scope.excludedRoots?.some((root) => containsPath(root, path)) &&\n    scope.roots.some((root) => containsPath(root.canonicalRoot, path));\n  policy.validatePath(candidate);\n\n  try {\n    const canonical = await realpath(candidate);\n    if (!isAllowed(canonical)) throw outsideProject(policy);\n    // NOFOLLOW rejects a last-component symlink swapped in after realpath. NONBLOCK\n    // ensures opening a substituted FIFO cannot leave the request waiting forever.\n    const file = await open(\n      canonical,\n      constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK,\n    );\n    try {\n      const before = await file.stat();\n      if (!before.isFile())\n        throw new AppError(`${policy.code}_NOT_FILE`, `${policy.label}\u8DEF\u5F84\u4E0D\u662F\u666E\u901A\u6587\u4EF6`, 415);\n      if (before.size > policy.maxBytes)\n        throw new AppError(`${policy.code}_TOO_LARGE`, policy.sizeError, 413);\n\n      // Recheck the path and opened inode to detect ordinary concurrent replacements.\n      // Node's portable file API cannot make parent-directory traversal race-free.\n      const verifyPath = async () => {\n        const current = await realpath(candidate);\n        if (!isAllowed(current)) throw outsideProject(policy);\n        if (current !== canonical) throw changedFile(policy);\n        const currentStat = await stat(current);\n        if (currentStat.dev !== before.dev || currentStat.ino !== before.ino)\n          throw changedFile(policy);\n      };\n      await verifyPath();\n      // One extra byte detects growth without letting readFile allocate unbounded data.\n      const data = Buffer.alloc(before.size + 1);\n      let length = 0;\n      while (length < data.length) {\n        const { bytesRead } = await file.read(data, length, data.length - length, length);\n        if (!bytesRead) break;\n        length += bytesRead;\n      }\n      if (length > policy.maxBytes)\n        throw new AppError(`${policy.code}_TOO_LARGE`, policy.sizeError, 413);\n      const after = await file.stat();\n      if (length !== before.size || after.size !== before.size || after.mtimeMs !== before.mtimeMs)\n        throw changedFile(policy);\n      await verifyPath();\n      const bytes = data.subarray(0, length);\n      return { bytes, path: canonical };\n    } finally {\n      await file.close();\n    }\n  } catch (error) {\n    if (error instanceof AppError) throw error;\n    const code = (error as NodeJS.ErrnoException).code;\n    if (code === 'ENOENT' || code === 'ENOTDIR')\n      throw new AppError(`${policy.code}_NOT_FOUND`, `${policy.label}\u6587\u4EF6\u4E0D\u5B58\u5728\u6216\u5DF2\u88AB\u5220\u9664`, 404);\n    if (code === 'ELOOP') throw outsideProject(policy);\n    throw new AppError(`${policy.code}_UNREADABLE`, `${policy.label}\u6587\u4EF6\u4E0D\u53EF\u8BFB\u53D6`, 403);\n  }\n}\n"],
+  "sourcesContent": ["import { constants, realpathSync, statSync } from 'node:fs';\nimport { open, realpath, stat } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { isAbsolute, parse, resolve } from 'node:path';\nimport { AppError } from '../shared/errors.js';\nimport { containsPath } from './projects.js';\n\nexport interface FileRoot {\n  canonicalRoot: string;\n  aliases: string[];\n}\n\nexport interface FileScope {\n  cwd: string;\n  roots: readonly FileRoot[];\n  excludedRoots?: readonly string[];\n}\n\n/** Capture server-owned roots once; clients cannot nominate a temporary directory. */\nexport function temporaryFileRoots(): FileRoot[] {\n  const roots = new Map<string, FileRoot>();\n  for (const directory of [tmpdir(), ...(process.platform === 'win32' ? [] : ['/tmp'])]) {\n    if (!isAbsolute(directory)) continue;\n    const alias = resolve(directory);\n    if (alias === parse(alias).root) continue;\n    try {\n      const canonicalRoot = realpathSync(alias);\n      if (canonicalRoot === parse(canonicalRoot).root || !statSync(canonicalRoot).isDirectory())\n        continue;\n      const root = roots.get(canonicalRoot) ?? { canonicalRoot, aliases: [] };\n      if (!root.aliases.includes(alias)) root.aliases.push(alias);\n      roots.set(canonicalRoot, root);\n    } catch {\n      // Unavailable temp locations do not prevent previews in the remaining roots.\n    }\n  }\n  return [...roots.values()];\n}\n\ninterface FilePolicy {\n  code: 'IMAGE' | 'MARKDOWN' | 'JSON' | 'TEXT';\n  label: string;\n  maxBytes: number;\n  sizeError: string;\n  validatePath: (path: string) => void;\n}\n\nfunction outsideProject(policy: FilePolicy): AppError {\n  return new AppError(\n    `${policy.code}_OUTSIDE_PROJECT`,\n    `\u53EA\u80FD\u9884\u89C8\u5F53\u524D\u4F1A\u8BDD\u5DE5\u4F5C\u533A\u6216\u5141\u8BB8\u7684\u670D\u52A1\u5668\u4E34\u65F6\u76EE\u5F55\u5185\u7684${policy.label}`,\n    403,\n  );\n}\n\nfunction changedFile(policy: FilePolicy): AppError {\n  return new AppError(`${policy.code}_CHANGED`, `${policy.label}\u6587\u4EF6\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u6253\u5F00\u9884\u89C8`, 409);\n}\n\n/** Shared project/temp authorization and bounded, verified file reads for previews. */\nexport async function readLocalFile(\n  path: string | undefined,\n  scope: FileScope,\n  policy: FilePolicy,\n) {\n  if (\n    !path ||\n    path.length > 4096 ||\n    [...path].some(\n      (character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127,\n    ) ||\n    /^[a-z][a-z\\d+.-]*:/i.test(path) ||\n    path.startsWith('//') ||\n    path.startsWith('\\\\\\\\')\n  )\n    throw new AppError(`INVALID_${policy.code}_PATH`, `${policy.label}\u8DEF\u5F84\u65E0\u6548`, 400);\n\n  const candidate = resolve(scope.cwd, path);\n  // Both spellings matter on systems where /tmp or the registered directory is an alias.\n  if (\n    !scope.roots.some(\n      (root) =>\n        containsPath(root.canonicalRoot, candidate) ||\n        root.aliases.some((alias) => containsPath(alias, candidate)),\n    )\n  )\n    throw outsideProject(policy);\n  const isAllowed = (path: string) =>\n    !scope.excludedRoots?.some((root) => containsPath(root, path)) &&\n    scope.roots.some((root) => containsPath(root.canonicalRoot, path));\n  policy.validatePath(candidate);\n\n  try {\n    const canonical = await realpath(candidate);\n    if (!isAllowed(canonical)) throw outsideProject(policy);\n    // NOFOLLOW rejects a last-component symlink swapped in after realpath. NONBLOCK\n    // ensures opening a substituted FIFO cannot leave the request waiting forever.\n    const file = await open(\n      canonical,\n      constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK,\n    );\n    try {\n      const before = await file.stat();\n      if (!before.isFile())\n        throw new AppError(`${policy.code}_NOT_FILE`, `${policy.label}\u8DEF\u5F84\u4E0D\u662F\u666E\u901A\u6587\u4EF6`, 415);\n      if (before.size > policy.maxBytes)\n        throw new AppError(`${policy.code}_TOO_LARGE`, policy.sizeError, 413);\n\n      // Recheck the path and opened inode to detect ordinary concurrent replacements.\n      // Node's portable file API cannot make parent-directory traversal race-free.\n      const verifyPath = async () => {\n        const current = await realpath(candidate);\n        if (!isAllowed(current)) throw outsideProject(policy);\n        if (current !== canonical) throw changedFile(policy);\n        const currentStat = await stat(current);\n        if (currentStat.dev !== before.dev || currentStat.ino !== before.ino)\n          throw changedFile(policy);\n      };\n      await verifyPath();\n      // One extra byte detects growth without letting readFile allocate unbounded data.\n      const data = Buffer.alloc(before.size + 1);\n      let length = 0;\n      while (length < data.length) {\n        const { bytesRead } = await file.read(data, length, data.length - length, length);\n        if (!bytesRead) break;\n        length += bytesRead;\n      }\n      if (length > policy.maxBytes)\n        throw new AppError(`${policy.code}_TOO_LARGE`, policy.sizeError, 413);\n      const after = await file.stat();\n      if (length !== before.size || after.size !== before.size || after.mtimeMs !== before.mtimeMs)\n        throw changedFile(policy);\n      await verifyPath();\n      const bytes = data.subarray(0, length);\n      return { bytes, path: canonical };\n    } finally {\n      await file.close();\n    }\n  } catch (error) {\n    if (error instanceof AppError) throw error;\n    const code = (error as NodeJS.ErrnoException).code;\n    if (code === 'ENOENT' || code === 'ENOTDIR')\n      throw new AppError(`${policy.code}_NOT_FOUND`, `${policy.label}\u6587\u4EF6\u4E0D\u5B58\u5728\u6216\u5DF2\u88AB\u5220\u9664`, 404);\n    if (code === 'ELOOP') throw outsideProject(policy);\n    throw new AppError(`${policy.code}_UNREADABLE`, `${policy.label}\u6587\u4EF6\u4E0D\u53EF\u8BFB\u53D6`, 403);\n  }\n}\n"],
   "mappings": "AAAA,SAAS,WAAW,cAAc,gBAAgB;AAClD,SAAS,MAAM,UAAU,YAAY;AACrC,SAAS,cAAc;AACvB,SAAS,YAAY,OAAO,eAAe;AAC3C,SAAS,gBAAgB;AACzB,SAAS,oBAAoB;AActB,SAAS,qBAAiC;AAC/C,QAAM,QAAQ,oBAAI,IAAsB;AACxC,aAAW,aAAa,CAAC,OAAO,GAAG,GAAI,QAAQ,aAAa,UAAU,CAAC,IAAI,CAAC,MAAM,CAAE,GAAG;AACrF,QAAI,CAAC,WAAW,SAAS,EAAG;AAC5B,UAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAI,UAAU,MAAM,KAAK,EAAE,KAAM;AACjC,QAAI;AACF,YAAM,gBAAgB,aAAa,KAAK;AACxC,UAAI,kBAAkB,MAAM,aAAa,EAAE,QAAQ,CAAC,SAAS,aAAa,EAAE,YAAY;AACtF;AACF,YAAM,OAAO,MAAM,IAAI,aAAa,KAAK,EAAE,eAAe,SAAS,CAAC,EAAE;AACtE,UAAI,CAAC,KAAK,QAAQ,SAAS,KAAK,EAAG,MAAK,QAAQ,KAAK,KAAK;AAC1D,YAAM,IAAI,eAAe,IAAI;AAAA,IAC/B,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,CAAC,GAAG,MAAM,OAAO,CAAC;AAC3B;AAUA,SAAS,eAAe,QAA8B;AACpD,SAAO,IAAI;AAAA,IACT,GAAG,OAAO,IAAI;AAAA,IACd,mJAA2B,OAAO,KAAK;AAAA,IACvC;AAAA,EACF;AACF;AAEA,SAAS,YAAY,QAA8B;AACjD,SAAO,IAAI,SAAS,GAAG,OAAO,IAAI,YAAY,GAAG,OAAO,KAAK,kFAAiB,GAAG;AACnF;AAGA,eAAsB,cACpB,MACA,OACA,QACA;AACA,MACE,CAAC,QACD,KAAK,SAAS,QACd,CAAC,GAAG,IAAI,EAAE;AAAA,IACR,CAAC,cAAc,UAAU,WAAW,CAAC,IAAI,MAAM,UAAU,WAAW,CAAC,MAAM;AAAA,EAC7E,KACA,sBAAsB,KAAK,IAAI,KAC/B,KAAK,WAAW,IAAI,KACpB,KAAK,WAAW,MAAM;AAEtB,UAAM,IAAI,SAAS,WAAW,OAAO,IAAI,SAAS,GAAG,OAAO,KAAK,4BAAQ,GAAG;AAE9E,QAAM,YAAY,QAAQ,MAAM,KAAK,IAAI;AAEzC,MACE,CAAC,MAAM,MAAM;AAAA,IACX,CAAC,SACC,aAAa,KAAK,eAAe,SAAS,KAC1C,KAAK,QAAQ,KAAK,CAAC,UAAU,aAAa,OAAO,SAAS,CAAC;AAAA,EAC/D;AAEA,UAAM,eAAe,MAAM;AAC7B,QAAM,YAAY,CAACA,UACjB,CAAC,MAAM,eAAe,KAAK,CAAC,SAAS,aAAa,MAAMA,KAAI,CAAC,KAC7D,MAAM,MAAM,KAAK,CAAC,SAAS,aAAa,KAAK,eAAeA,KAAI,CAAC;AACnE,SAAO,aAAa,SAAS;AAE7B,MAAI;AACF,UAAM,YAAY,MAAM,SAAS,SAAS;AAC1C,QAAI,CAAC,UAAU,SAAS,EAAG,OAAM,eAAe,MAAM;AAGtD,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA,UAAU,WAAW,UAAU,aAAa,UAAU;AAAA,IACxD;AACA,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,KAAK;AAC/B,UAAI,CAAC,OAAO,OAAO;AACjB,cAAM,IAAI,SAAS,GAAG,OAAO,IAAI,aAAa,GAAG,OAAO,KAAK,oDAAY,GAAG;AAC9E,UAAI,OAAO,OAAO,OAAO;AACvB,cAAM,IAAI,SAAS,GAAG,OAAO,IAAI,cAAc,OAAO,WAAW,GAAG;AAItE,YAAM,aAAa,YAAY;AAC7B,cAAM,UAAU,MAAM,SAAS,SAAS;AACxC,YAAI,CAAC,UAAU,OAAO,EAAG,OAAM,eAAe,MAAM;AACpD,YAAI,YAAY,UAAW,OAAM,YAAY,MAAM;AACnD,cAAM,cAAc,MAAM,KAAK,OAAO;AACtC,YAAI,YAAY,QAAQ,OAAO,OAAO,YAAY,QAAQ,OAAO;AAC/D,gBAAM,YAAY,MAAM;AAAA,MAC5B;AACA,YAAM,WAAW;AAEjB,YAAM,OAAO,OAAO,MAAM,OAAO,OAAO,CAAC;AACzC,UAAI,SAAS;AACb,aAAO,SAAS,KAAK,QAAQ;AAC3B,cAAM,EAAE,UAAU,IAAI,MAAM,KAAK,KAAK,MAAM,QAAQ,KAAK,SAAS,QAAQ,MAAM;AAChF,YAAI,CAAC,UAAW;AAChB,kBAAU;AAAA,MACZ;AACA,UAAI,SAAS,OAAO;AAClB,cAAM,IAAI,SAAS,GAAG,OAAO,IAAI,cAAc,OAAO,WAAW,GAAG;AACtE,YAAM,QAAQ,MAAM,KAAK,KAAK;AAC9B,UAAI,WAAW,OAAO,QAAQ,MAAM,SAAS,OAAO,QAAQ,MAAM,YAAY,OAAO;AACnF,cAAM,YAAY,MAAM;AAC1B,YAAM,WAAW;AACjB,YAAM,QAAQ,KAAK,SAAS,GAAG,MAAM;AACrC,aAAO,EAAE,OAAO,MAAM,UAAU;AAAA,IAClC,UAAE;AACA,YAAM,KAAK,MAAM;AAAA,IACnB;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAU,OAAM;AACrC,UAAM,OAAQ,MAAgC;AAC9C,QAAI,SAAS,YAAY,SAAS;AAChC,YAAM,IAAI,SAAS,GAAG,OAAO,IAAI,cAAc,GAAG,OAAO,KAAK,gEAAc,GAAG;AACjF,QAAI,SAAS,QAAS,OAAM,eAAe,MAAM;AACjD,UAAM,IAAI,SAAS,GAAG,OAAO,IAAI,eAAe,GAAG,OAAO,KAAK,wCAAU,GAAG;AAAA,EAC9E;AACF;",
   "names": ["path"]
 }

package/dist/server/project-clones.js CHANGED Viewed

@@ -138,7 +138,7 @@ class ProjectClones {
     ))
       throw new AppError("CLONE_IN_PROGRESS", "\u8BE5\u76EE\u5F55\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u6216\u53D6\u6D88\u540E\u518D\u64CD\u4F5C", 409);
   }
-  start(input) {
+  start(input, resolvePath = (path) => path) {
     const parsed = cloneProjectSchema.parse(input);
     validateRepository(parsed.repository);
     const fingerprint = createHash("sha256").update(JSON.stringify(parsed)).digest("hex");
@@ -149,7 +149,7 @@ class ProjectClones {
       return this.get(previous.view.id);
     }
     if (this.closing) throw new AppError("GATEWAY_STOPPING", "\u670D\u52A1\u6B63\u5728\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", 503);
-    const path = targetPath(parsed.path);
+    const path = targetPath(resolvePath(parsed.path));
     this.assertIdlePath(path);
     if (this.registered(path))
       throw new AppError("PROJECT_EXISTS", "\u8BE5\u76EE\u5F55\u5DF2\u6DFB\u52A0\u4E3A\u9879\u76EE\uFF0C\u8BF7\u4F7F\u7528\u5DF2\u6709\u9879\u76EE\u6216\u9009\u62E9\u5176\u4ED6\u76EE\u5F55", 409);

package/dist/server/project-clones.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/server/project-clones.ts"],
-  "sourcesContent": ["import { spawn, type ChildProcess } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { accessSync, constants, lstatSync, readdirSync, realpathSync } from 'node:fs';\nimport { basename, dirname, isAbsolute, join, resolve } from 'node:path';\nimport { AppError } from '../shared/errors.js';\nimport type {\n  CloneProjectInput,\n  CreateProjectInput,\n  Project,\n  ProjectClone,\n} from '../shared/types.js';\nimport { cloneProjectSchema } from '../shared/validation.js';\nimport { containsPath } from './projects.js';\n\ninterface Job {\n  view: ProjectClone;\n  fingerprint: string;\n  child?: ChildProcess;\n  done: Promise<void>;\n}\nconst active = (job: Job) => ['cloning', 'cancelling'].includes(job.view.status);\nconst hasControl = (value: string) =>\n  [...value].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);\n\n/** Only remote Git transports; never pass a local path, option, or remote helper to Git. */\nexport function validateRepository(repository: string): void {\n  let valid = false;\n  if (!hasControl(repository) && !/[\\s\\\\]/.test(repository)) {\n    if (/^(https|ssh):\\/\\//.test(repository)) {\n      try {\n        const url = new URL(repository);\n        valid = Boolean(\n          url.hostname &&\n          !url.hostname.startsWith('-') &&\n          url.pathname.length > 1 &&\n          !url.password &&\n          !url.search &&\n          !url.hash &&\n          (url.protocol === 'ssh:'\n            ? /^(?:[a-zA-Z0-9_][\\w.-]*)?$/.test(url.username)\n            : !url.username),\n        );\n      } catch {\n        /* Report a fixed message, never the supplied URL. */\n      }\n    } else {\n      valid = /^(?:[a-zA-Z0-9_][\\w.-]*@)?[a-zA-Z0-9][\\w.-]*:[^/:\\s][^\\s]*$/.test(repository);\n    }\n  }\n  if (!valid)\n    throw new AppError(\n      'INVALID_REPOSITORY',\n      '\u8BF7\u8F93\u5165 HTTPS \u6216 SSH Git \u4ED3\u5E93\u5730\u5740\uFF1B\u8BF7\u4F7F\u7528\u4E3B\u673A\u5DF2\u6709\u7684\u8BA4\u8BC1\uFF0C\u4E0D\u8981\u5728\u5730\u5740\u4E2D\u586B\u5199\u5BC6\u7801\u3001\u4EE4\u724C\u6216\u67E5\u8BE2\u53C2\u6570',\n      400,\n    );\n}\n\nfunction targetPath(path: string): string {\n  if (!isAbsolute(path) || hasControl(path) || resolve(path) === dirname(resolve(path)))\n    throw new AppError('INVALID_PROJECT_PATH', '\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u7EDD\u5BF9\u76EE\u6807\u76EE\u5F55', 400);\n  try {\n    const target = join(realpathSync(dirname(resolve(path))), basename(resolve(path)));\n    accessSync(dirname(target), constants.W_OK | constants.X_OK);\n    return target;\n  } catch {\n    throw new AppError(\n      'CLONE_PARENT_UNAVAILABLE',\n      '\u76EE\u6807\u76EE\u5F55\u7684\u7236\u76EE\u5F55\u5FC5\u987B\u5DF2\u5B58\u5728\uFF0C\u4E14\u670D\u52A1\u9700\u8981\u5199\u5165\u548C\u8FDB\u5165\u6743\u9650',\n      409,\n    );\n  }\n}\n\nfunction checkEmpty(path: string): void {\n  try {\n    const stat = lstatSync(path);\n    if (!stat.isDirectory() || stat.isSymbolicLink() || readdirSync(path).length)\n      throw new AppError(\n        'CLONE_TARGET_EXISTS',\n        '\u76EE\u6807\u76EE\u5F55\u5DF2\u5B58\u5728\u4E14\u975E\u7A7A\uFF0C\u6216\u4E0D\u662F\u666E\u901A\u76EE\u5F55\uFF1B\u8BF7\u9009\u62E9\u65B0\u7684\u7A7A\u76EE\u5F55\uFF0C\u4E0D\u4F1A\u8986\u76D6\u5DF2\u6709\u6587\u4EF6',\n        409,\n      );\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return;\n    if (error instanceof AppError) throw error;\n    throw new AppError(\n      'CLONE_TARGET_UNAVAILABLE',\n      '\u65E0\u6CD5\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u8DEF\u5F84\u548C\u8BBF\u95EE\u6743\u9650',\n      409,\n    );\n  }\n}\n\nfunction failure(\n  output: string,\n  missingGit: boolean,\n): { code: NonNullable<ProjectClone['errorCode']>; message: string } {\n  if (missingGit)\n    return {\n      code: 'CLONE_GIT_MISSING',\n      message: '\u670D\u52A1\u5668\u672A\u5B89\u88C5 Git\uFF0C\u6216\u670D\u52A1\u7684 PATH \u4E2D\u627E\u4E0D\u5230 Git\u3002\u5B89\u88C5\u5E76\u914D\u7F6E\u540E\u91CD\u8BD5\u3002',\n    };\n  if (\n    /authentication failed|could not read username|permission denied|publickey|terminal prompts disabled|credential|access denied|401|403/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_AUTH_FAILED',\n      message:\n        'Git \u8BA4\u8BC1\u5931\u8D25\u6216\u6CA1\u6709\u4ED3\u5E93\u8BBF\u95EE\u6743\u9650\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u914D\u7F6E Git \u51ED\u636E\u6216 SSH \u5BC6\u94A5\u540E\u91CD\u8BD5\u3002',\n    };\n  if (/host key verification failed/i.test(output))\n    return {\n      code: 'CLONE_HOST_KEY_FAILED',\n      message: 'SSH \u4E3B\u673A\u9A8C\u8BC1\u5931\u8D25\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u786E\u8BA4\u5E76\u914D\u7F6E\u4ED3\u5E93\u4E3B\u673A\u7684 SSH \u4FE1\u4EFB\u540E\u91CD\u8BD5\u3002',\n    };\n  if (\n    /repository .*not found|does not appear to be a git repository|not a repository|404/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_REPOSITORY_UNAVAILABLE',\n      message: '\u4ED3\u5E93\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u8BBF\u95EE\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u548C\u4E3B\u673A\u4E0A\u7684 Git \u8BBF\u95EE\u6743\u9650\u3002',\n    };\n  if (\n    /could not resolve|failed to connect|unable to access|connection|timed out|certificate/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_NETWORK_FAILED',\n      message: '\u65E0\u6CD5\u8FDE\u63A5 Git \u4ED3\u5E93\u3002\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u7F51\u7EDC\u3001\u4EE3\u7406\u548C\u8BC1\u4E66\u914D\u7F6E\u540E\u91CD\u8BD5\u3002',\n    };\n  if (/already exists and is not an empty directory/i.test(output))\n    return {\n      code: 'CLONE_TARGET_NOT_EMPTY',\n      message: '\u76EE\u6807\u76EE\u5F55\u5DF2\u5305\u542B\u6587\u4EF6\uFF0CGit \u5DF2\u505C\u6B62\u514B\u9686\uFF1B\u4E0D\u4F1A\u8986\u76D6\u6216\u5220\u9664\u5DF2\u6709\u6587\u4EF6\u3002',\n    };\n  if (/no space left|disk quota/i.test(output))\n    return {\n      code: 'CLONE_DISK_FULL',\n      message: '\u670D\u52A1\u5668\u78C1\u76D8\u7A7A\u95F4\u4E0D\u8DB3\uFF0C\u8BF7\u91CA\u653E\u7A7A\u95F4\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002',\n    };\n  return {\n    code: 'CLONE_FAILED',\n    message: 'Git \u514B\u9686\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u3001\u4E3B\u673A\u4E0A\u7684 Git \u8BA4\u8BC1\u3001\u76EE\u5F55\u6743\u9650\u548C\u78C1\u76D8\u7A7A\u95F4\u540E\u91CD\u8BD5\u3002',\n  };\n}\n\n/** Transient jobs never persist repository URLs, credentials, or raw Git output. */\nexport class ProjectClones {\n  private readonly jobs = new Map<string, Job>();\n  private closing = false;\n  constructor(\n    private readonly register: (input: CreateProjectInput) => Project,\n    private readonly registered: (path: string) => boolean,\n  ) {}\n\n  get hasActive(): boolean {\n    return [...this.jobs.values()].some(active);\n  }\n\n  assertIdlePath(path: string): void {\n    if (!this.hasActive) return;\n    let canonical = resolve(path);\n    try {\n      canonical = realpathSync(path);\n    } catch {\n      try {\n        canonical = join(realpathSync(dirname(canonical)), basename(canonical));\n      } catch {\n        /* Normal registration validation reports unavailable paths. */\n      }\n    }\n    if (\n      [...this.jobs.values()].some(\n        (job) =>\n          active(job) &&\n          (containsPath(job.view.path, canonical) || containsPath(canonical, job.view.path)),\n      )\n    )\n      throw new AppError('CLONE_IN_PROGRESS', '\u8BE5\u76EE\u5F55\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u6216\u53D6\u6D88\u540E\u518D\u64CD\u4F5C', 409);\n  }\n\n  start(input: CloneProjectInput): ProjectClone {\n    const parsed = cloneProjectSchema.parse(input);\n    validateRepository(parsed.repository);\n    const fingerprint = createHash('sha256').update(JSON.stringify(parsed)).digest('hex');\n    const previous = this.jobs.get(parsed.clientOperationId);\n    if (previous) {\n      if (previous.fingerprint !== fingerprint)\n        throw new AppError('CLONE_ID_CONFLICT', '\u8BE5\u64CD\u4F5C ID \u5DF2\u7528\u4E8E\u5176\u4ED6\u514B\u9686\u8BF7\u6C42', 409);\n      return this.get(previous.view.id);\n    }\n    if (this.closing) throw new AppError('GATEWAY_STOPPING', '\u670D\u52A1\u6B63\u5728\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5', 503);\n    const path = targetPath(parsed.path);\n    this.assertIdlePath(path);\n    if (this.registered(path))\n      throw new AppError('PROJECT_EXISTS', '\u8BE5\u76EE\u5F55\u5DF2\u6DFB\u52A0\u4E3A\u9879\u76EE\uFF0C\u8BF7\u4F7F\u7528\u5DF2\u6709\u9879\u76EE\u6216\u9009\u62E9\u5176\u4ED6\u76EE\u5F55', 409);\n    checkEmpty(path);\n    if ([...this.jobs.values()].filter(active).length >= 4)\n      throw new AppError('CLONE_LIMIT', '\u5DF2\u6709\u591A\u4E2A\u4ED3\u5E93\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u540E\u91CD\u8BD5', 409);\n    // Bound transient history without evicting a running process.\n    if (this.jobs.size >= 100) {\n      const oldest = [...this.jobs].find(([, job]) => !active(job));\n      if (oldest) this.jobs.delete(oldest[0]);\n    }\n    const job: Job = {\n      view: {\n        id: parsed.clientOperationId,\n        path,\n        name: parsed.name,\n        status: 'cloning',\n        progress: '\u6B63\u5728\u8FDE\u63A5\u4ED3\u5E93\u2026',\n        progressStage: 'connecting',\n      },\n      fingerprint,\n      done: Promise.resolve(),\n    };\n    this.jobs.set(job.view.id, job);\n    job.done = this.run(job, parsed.repository);\n    return this.get(job.view.id);\n  }\n\n  get(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    if (!job)\n      throw new AppError(\n        'CLONE_NOT_FOUND',\n        '\u672A\u627E\u5230\u514B\u9686\u8BB0\u5F55\uFF1B\u670D\u52A1\u91CD\u542F\u540E\u8BF7\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u518D\u6DFB\u52A0\u5DF2\u6709\u76EE\u5F55\u6216\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5',\n        404,\n      );\n    return structuredClone(job.view);\n  }\n\n  cancel(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    this.get(id);\n    if (job && active(job) && job.view.status !== 'cancelling') {\n      job.view.status = 'cancelling';\n      job.view.progress = '\u6B63\u5728\u53D6\u6D88\uFF0C\u7B49\u5F85 Git \u9000\u51FA\u2026';\n      job.view.progressStage = 'cancelling';\n      this.signal(job, 'SIGTERM');\n    }\n    return this.get(id);\n  }\n\n  retryRegistration(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    this.get(id);\n    if (job?.view.status === 'registration-failed') this.finishRegistration(job);\n    return this.get(id);\n  }\n\n  private finishRegistration(job: Job): void {\n    try {\n      job.view.project = this.register({ path: job.view.path, name: job.view.name });\n      job.view.status = 'completed';\n      job.view.progress = '\u514B\u9686\u5B8C\u6210\uFF0C\u9879\u76EE\u5DF2\u6DFB\u52A0';\n      job.view.progressStage = 'completed';\n      delete job.view.errorCode;\n      delete job.view.error;\n    } catch {\n      job.view.status = 'registration-failed';\n      job.view.progress = '\u514B\u9686\u5DF2\u5B8C\u6210\uFF0C\u9879\u76EE\u5C1A\u672A\u6DFB\u52A0';\n      job.view.progressStage = 'registration_failed';\n      job.view.errorCode = 'CLONE_REGISTRATION_FAILED';\n      job.view.error =\n        '\u9879\u76EE\u6CE8\u518C\u5931\u8D25\u3002\u5DF2\u514B\u9686\u7684\u6587\u4EF6\u4FDD\u7559\u5728\u76EE\u6807\u76EE\u5F55\uFF1B\u53EF\u91CD\u8BD5\u6DFB\u52A0\u9879\u76EE\uFF0C\u65E0\u9700\u518D\u6B21\u514B\u9686\uFF0C\u4E5F\u53EF\u901A\u8FC7\u201C\u5DF2\u6709\u76EE\u5F55\u201D\u6DFB\u52A0\u3002';\n    }\n  }\n\n  private signal(job: Job, signal: NodeJS.Signals): void {\n    if (!job.child?.pid) return;\n    try {\n      if (process.platform === 'win32') job.child.kill(signal);\n      else process.kill(-job.child.pid, signal);\n    } catch {\n      /* Process may have already exited. */\n    }\n  }\n\n  private async run(job: Job, repository: string): Promise<void> {\n    let output = '';\n    let pending = '';\n    let missingGit = false;\n    let timedOut = false;\n    const sshCommand =\n      process.env.GIT_SSH_COMMAND ??\n      (process.env.GIT_SSH ? `'${process.env.GIT_SSH.replaceAll(\"'\", \"'\\\\''\")}'` : 'ssh');\n    const child = spawn(\n      'git',\n      [\n        '-c',\n        'protocol.allow=never',\n        '-c',\n        'protocol.https.allow=always',\n        '-c',\n        'protocol.ssh.allow=always',\n        'clone',\n        '--progress',\n        '--',\n        repository,\n        job.view.path,\n      ],\n      {\n        detached: process.platform !== 'win32',\n        stdio: ['ignore', 'pipe', 'pipe'],\n        env: {\n          ...process.env,\n          GIT_TERMINAL_PROMPT: '0',\n          GCM_INTERACTIVE: 'never',\n          GIT_SSH_COMMAND: `${sshCommand} -oBatchMode=yes -oStrictHostKeyChecking=yes`,\n          LC_ALL: 'C',\n        },\n      },\n    );\n    job.child = child;\n    const read = (chunk: Buffer) => {\n      output = (output + chunk.toString()).slice(-16_384);\n      pending = (pending + chunk.toString()).slice(-4096);\n      const lines = pending.split(/[\\r\\n]/);\n      pending = lines.pop() ?? '';\n      for (const line of lines) {\n        const match =\n          /^(?:remote: )?(Receiving objects|Resolving deltas|Updating files|Checking out files|Counting objects|Compressing objects):\\s+(\\d{1,3})%/.exec(\n            line,\n          );\n        if (!match || job.view.status !== 'cloning') continue;\n        const labels: Record<string, [NonNullable<ProjectClone['progressStage']>, string]> = {\n          'Receiving objects': ['receiving', '\u6B63\u5728\u63A5\u6536\u5BF9\u8C61'],\n          'Resolving deltas': ['resolving', '\u6B63\u5728\u89E3\u6790\u5DEE\u5F02'],\n          'Updating files': ['checking_out', '\u6B63\u5728\u68C0\u51FA\u6587\u4EF6'],\n          'Checking out files': ['checking_out', '\u6B63\u5728\u68C0\u51FA\u6587\u4EF6'],\n          'Counting objects': ['counting', '\u6B63\u5728\u7EDF\u8BA1\u5BF9\u8C61'],\n          'Compressing objects': ['compressing', '\u6B63\u5728\u538B\u7F29\u5BF9\u8C61'],\n        };\n        [job.view.progressStage, job.view.progress] = labels[match[1]!]!;\n        job.view.percent = Math.min(100, Number(match[2]));\n      }\n    };\n    child.stdout?.on('data', read);\n    child.stderr?.on('data', read);\n    const timeout = setTimeout(() => {\n      timedOut = true;\n      this.cancel(job.view.id);\n    }, 30 * 60_000);\n    timeout.unref();\n    const escalation = setInterval(() => {\n      if (job.view.status === 'cancelling') this.signal(job, 'SIGKILL');\n    }, 3000);\n    escalation.unref();\n    const code = await new Promise<number | null>((done) => {\n      child.once('error', (error: NodeJS.ErrnoException) => {\n        missingGit = error.code === 'ENOENT';\n      });\n      child.once('close', done);\n    });\n    clearTimeout(timeout);\n    clearInterval(escalation);\n    job.child = undefined;\n    delete job.view.percent;\n    if (job.view.status === 'cancelling') {\n      job.view.status = timedOut ? 'failed' : 'cancelled';\n      job.view.progress = timedOut ? '\u514B\u9686\u8D85\u65F6\uFF0C\u5DF2\u505C\u6B62' : '\u5DF2\u53D6\u6D88\u514B\u9686';\n      job.view.progressStage = timedOut ? 'timed_out' : 'cancelled';\n      job.view.errorCode = timedOut ? 'CLONE_TIMED_OUT' : 'CLONE_CANCELLED';\n      job.view.error = `${timedOut ? '\u514B\u9686\u8D85\u8FC7 30 \u5206\u949F\uFF0C\u5DF2\u505C\u6B62\u3002' : ''}\u672A\u6DFB\u52A0\u9879\u76EE\uFF0C\u4E5F\u672A\u5220\u9664\u4EFB\u4F55\u6587\u4EF6\u3002\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;\n    } else if (code !== 0) {\n      job.view.status = 'failed';\n      job.view.progress = '\u514B\u9686\u5931\u8D25';\n      job.view.progressStage = 'failed';\n      const problem = failure(output, missingGit);\n      job.view.errorCode = problem.code;\n      job.view.error = `${problem.message} \u672A\u6DFB\u52A0\u9879\u76EE\uFF1B\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;\n    } else this.finishRegistration(job);\n  }\n\n  async close(): Promise<void> {\n    this.closing = true;\n    for (const job of this.jobs.values()) if (active(job)) this.cancel(job.view.id);\n    await Promise.all([...this.jobs.values()].map((job) => job.done));\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,aAAgC;AACzC,SAAS,kBAAkB;AAC3B,SAAS,YAAY,WAAW,WAAW,aAAa,oBAAoB;AAC5E,SAAS,UAAU,SAAS,YAAY,MAAM,eAAe;AAC7D,SAAS,gBAAgB;AAOzB,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAQ7B,MAAM,SAAS,CAAC,QAAa,CAAC,WAAW,YAAY,EAAE,SAAS,IAAI,KAAK,MAAM;AAC/E,MAAM,aAAa,CAAC,UAClB,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,cAAc,UAAU,WAAW,CAAC,IAAI,MAAM,UAAU,WAAW,CAAC,MAAM,GAAG;AAGzF,SAAS,mBAAmB,YAA0B;AAC3D,MAAI,QAAQ;AACZ,MAAI,CAAC,WAAW,UAAU,KAAK,CAAC,SAAS,KAAK,UAAU,GAAG;AACzD,QAAI,oBAAoB,KAAK,UAAU,GAAG;AACxC,UAAI;AACF,cAAM,MAAM,IAAI,IAAI,UAAU;AAC9B,gBAAQ;AAAA,UACN,IAAI,YACJ,CAAC,IAAI,SAAS,WAAW,GAAG,KAC5B,IAAI,SAAS,SAAS,KACtB,CAAC,IAAI,YACL,CAAC,IAAI,UACL,CAAC,IAAI,SACJ,IAAI,aAAa,SACd,6BAA6B,KAAK,IAAI,QAAQ,IAC9C,CAAC,IAAI;AAAA,QACX;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,OAAO;AACL,cAAQ,8DAA8D,KAAK,UAAU;AAAA,IACvF;AAAA,EACF;AACA,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACJ;AAEA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,WAAW,IAAI,KAAK,WAAW,IAAI,KAAK,QAAQ,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC;AAClF,UAAM,IAAI,SAAS,wBAAwB,wFAAkB,GAAG;AAClE,MAAI;AACF,UAAM,SAAS,KAAK,aAAa,QAAQ,QAAQ,IAAI,CAAC,CAAC,GAAG,SAAS,QAAQ,IAAI,CAAC,CAAC;AACjF,eAAW,QAAQ,MAAM,GAAG,UAAU,OAAO,UAAU,IAAI;AAC3D,WAAO;AAAA,EACT,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,MAAoB;AACtC,MAAI;AACF,UAAM,OAAO,UAAU,IAAI;AAC3B,QAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,KAAK,YAAY,IAAI,EAAE;AACpE,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,EACJ,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU;AACxD,QAAI,iBAAiB,SAAU,OAAM;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,QACP,QACA,YACmE;AACnE,MAAI;AACF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,wIAAwI;AAAA,IACtI;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AACF,MAAI,gCAAgC,KAAK,MAAM;AAC7C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,sFAAsF;AAAA,IACpF;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,yFAAyF;AAAA,IACvF;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MAAI,gDAAgD,KAAK,MAAM;AAC7D,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MAAI,4BAA4B,KAAK,MAAM;AACzC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AACF;AAGO,MAAM,cAAc;AAAA,EAGzB,YACmB,UACA,YACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAJF,OAAO,oBAAI,IAAiB;AAAA,EACrC,UAAU;AAAA,EAMlB,IAAI,YAAqB;AACvB,WAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,eAAe,MAAoB;AACjC,QAAI,CAAC,KAAK,UAAW;AACrB,QAAI,YAAY,QAAQ,IAAI;AAC5B,QAAI;AACF,kBAAY,aAAa,IAAI;AAAA,IAC/B,QAAQ;AACN,UAAI;AACF,oBAAY,KAAK,aAAa,QAAQ,SAAS,CAAC,GAAG,SAAS,SAAS,CAAC;AAAA,MACxE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QACE,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE;AAAA,MACtB,CAAC,QACC,OAAO,GAAG,MACT,aAAa,IAAI,KAAK,MAAM,SAAS,KAAK,aAAa,WAAW,IAAI,KAAK,IAAI;AAAA,IACpF;AAEA,YAAM,IAAI,SAAS,qBAAqB,4HAAwB,GAAG;AAAA,EACvE;AAAA,EAEA,MAAM,OAAwC;AAC5C,UAAM,SAAS,mBAAmB,MAAM,KAAK;AAC7C,uBAAmB,OAAO,UAAU;AACpC,UAAM,cAAc,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,MAAM,CAAC,EAAE,OAAO,KAAK;AACpF,UAAM,WAAW,KAAK,KAAK,IAAI,OAAO,iBAAiB;AACvD,QAAI,UAAU;AACZ,UAAI,SAAS,gBAAgB;AAC3B,cAAM,IAAI,SAAS,qBAAqB,gFAAoB,GAAG;AACjE,aAAO,KAAK,IAAI,SAAS,KAAK,EAAE;AAAA,IAClC;AACA,QAAI,KAAK,QAAS,OAAM,IAAI,SAAS,oBAAoB,4EAAgB,GAAG;AAC5E,UAAM,OAAO,WAAW,OAAO,IAAI;AACnC,SAAK,eAAe,IAAI;AACxB,QAAI,KAAK,WAAW,IAAI;AACtB,YAAM,IAAI,SAAS,kBAAkB,oJAA4B,GAAG;AACtE,eAAW,IAAI;AACf,QAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,MAAM,EAAE,UAAU;AACnD,YAAM,IAAI,SAAS,eAAe,sHAAuB,GAAG;AAE9D,QAAI,KAAK,KAAK,QAAQ,KAAK;AACzB,YAAM,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC,EAAEA,IAAG,MAAM,CAAC,OAAOA,IAAG,CAAC;AAC5D,UAAI,OAAQ,MAAK,KAAK,OAAO,OAAO,CAAC,CAAC;AAAA,IACxC;AACA,UAAM,MAAW;AAAA,MACf,MAAM;AAAA,QACJ,IAAI,OAAO;AAAA,QACX;AAAA,QACA,MAAM,OAAO;AAAA,QACb,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,eAAe;AAAA,MACjB;AAAA,MACA;AAAA,MACA,MAAM,QAAQ,QAAQ;AAAA,IACxB;AACA,SAAK,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG;AAC9B,QAAI,OAAO,KAAK,IAAI,KAAK,OAAO,UAAU;AAC1C,WAAO,KAAK,IAAI,IAAI,KAAK,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAA0B;AAC5B,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,QAAI,CAAC;AACH,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,WAAO,gBAAgB,IAAI,IAAI;AAAA,EACjC;AAAA,EAEA,OAAO,IAA0B;AAC/B,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,SAAK,IAAI,EAAE;AACX,QAAI,OAAO,OAAO,GAAG,KAAK,IAAI,KAAK,WAAW,cAAc;AAC1D,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,WAAK,OAAO,KAAK,SAAS;AAAA,IAC5B;AACA,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEA,kBAAkB,IAA0B;AAC1C,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,SAAK,IAAI,EAAE;AACX,QAAI,KAAK,KAAK,WAAW,sBAAuB,MAAK,mBAAmB,GAAG;AAC3E,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEQ,mBAAmB,KAAgB;AACzC,QAAI;AACF,UAAI,KAAK,UAAU,KAAK,SAAS,EAAE,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI,KAAK,KAAK,CAAC;AAC7E,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,aAAO,IAAI,KAAK;AAChB,aAAO,IAAI,KAAK;AAAA,IAClB,QAAQ;AACN,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,UAAI,KAAK,YAAY;AACrB,UAAI,KAAK,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,OAAO,KAAU,QAA8B;AACrD,QAAI,CAAC,IAAI,OAAO,IAAK;AACrB,QAAI;AACF,UAAI,QAAQ,aAAa,QAAS,KAAI,MAAM,KAAK,MAAM;AAAA,UAClD,SAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,IAAI,KAAU,YAAmC;AAC7D,QAAI,SAAS;AACb,QAAI,UAAU;AACd,QAAI,aAAa;AACjB,QAAI,WAAW;AACf,UAAM,aACJ,QAAQ,IAAI,oBACX,QAAQ,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,WAAW,KAAK,OAAO,CAAC,MAAM;AAC/E,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,IAAI,KAAK;AAAA,MACX;AAAA,MACA;AAAA,QACE,UAAU,QAAQ,aAAa;AAAA,QAC/B,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,QAChC,KAAK;AAAA,UACH,GAAG,QAAQ;AAAA,UACX,qBAAqB;AAAA,UACrB,iBAAiB;AAAA,UACjB,iBAAiB,GAAG,UAAU;AAAA,UAC9B,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAQ;AACZ,UAAM,OAAO,CAAC,UAAkB;AAC9B,gBAAU,SAAS,MAAM,SAAS,GAAG,MAAM,MAAO;AAClD,iBAAW,UAAU,MAAM,SAAS,GAAG,MAAM,KAAK;AAClD,YAAM,QAAQ,QAAQ,MAAM,QAAQ;AACpC,gBAAU,MAAM,IAAI,KAAK;AACzB,iBAAW,QAAQ,OAAO;AACxB,cAAM,QACJ,0IAA0I;AAAA,UACxI;AAAA,QACF;AACF,YAAI,CAAC,SAAS,IAAI,KAAK,WAAW,UAAW;AAC7C,cAAM,SAA+E;AAAA,UACnF,qBAAqB,CAAC,aAAa,sCAAQ;AAAA,UAC3C,oBAAoB,CAAC,aAAa,sCAAQ;AAAA,UAC1C,kBAAkB,CAAC,gBAAgB,sCAAQ;AAAA,UAC3C,sBAAsB,CAAC,gBAAgB,sCAAQ;AAAA,UAC/C,oBAAoB,CAAC,YAAY,sCAAQ;AAAA,UACzC,uBAAuB,CAAC,eAAe,sCAAQ;AAAA,QACjD;AACA,SAAC,IAAI,KAAK,eAAe,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAE;AAC9D,YAAI,KAAK,UAAU,KAAK,IAAI,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC;AAAA,MACnD;AAAA,IACF;AACA,UAAM,QAAQ,GAAG,QAAQ,IAAI;AAC7B,UAAM,QAAQ,GAAG,QAAQ,IAAI;AAC7B,UAAM,UAAU,WAAW,MAAM;AAC/B,iBAAW;AACX,WAAK,OAAO,IAAI,KAAK,EAAE;AAAA,IACzB,GAAG,KAAK,GAAM;AACd,YAAQ,MAAM;AACd,UAAM,aAAa,YAAY,MAAM;AACnC,UAAI,IAAI,KAAK,WAAW,aAAc,MAAK,OAAO,KAAK,SAAS;AAAA,IAClE,GAAG,GAAI;AACP,eAAW,MAAM;AACjB,UAAM,OAAO,MAAM,IAAI,QAAuB,CAAC,SAAS;AACtD,YAAM,KAAK,SAAS,CAAC,UAAiC;AACpD,qBAAa,MAAM,SAAS;AAAA,MAC9B,CAAC;AACD,YAAM,KAAK,SAAS,IAAI;AAAA,IAC1B,CAAC;AACD,iBAAa,OAAO;AACpB,kBAAc,UAAU;AACxB,QAAI,QAAQ;AACZ,WAAO,IAAI,KAAK;AAChB,QAAI,IAAI,KAAK,WAAW,cAAc;AACpC,UAAI,KAAK,SAAS,WAAW,WAAW;AACxC,UAAI,KAAK,WAAW,WAAW,qDAAa;AAC5C,UAAI,KAAK,gBAAgB,WAAW,cAAc;AAClD,UAAI,KAAK,YAAY,WAAW,oBAAoB;AACpD,UAAI,KAAK,QAAQ,GAAG,WAAW,2EAAoB,EAAE;AAAA,IACvD,WAAW,SAAS,GAAG;AACrB,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,YAAM,UAAU,QAAQ,QAAQ,UAAU;AAC1C,UAAI,KAAK,YAAY,QAAQ;AAC7B,UAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AAAA,IACrC,MAAO,MAAK,mBAAmB,GAAG;AAAA,EACpC;AAAA,EAEA,MAAM,QAAuB;AAC3B,SAAK,UAAU;AACf,eAAW,OAAO,KAAK,KAAK,OAAO,EAAG,KAAI,OAAO,GAAG,EAAG,MAAK,OAAO,IAAI,KAAK,EAAE;AAC9E,UAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;AAAA,EAClE;AACF;",
+  "sourcesContent": ["import { spawn, type ChildProcess } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { accessSync, constants, lstatSync, readdirSync, realpathSync } from 'node:fs';\nimport { basename, dirname, isAbsolute, join, resolve } from 'node:path';\nimport { AppError } from '../shared/errors.js';\nimport type {\n  CloneProjectInput,\n  CreateProjectInput,\n  Project,\n  ProjectClone,\n} from '../shared/types.js';\nimport { cloneProjectSchema } from '../shared/validation.js';\nimport { containsPath } from './projects.js';\n\ninterface Job {\n  view: ProjectClone;\n  fingerprint: string;\n  child?: ChildProcess;\n  done: Promise<void>;\n}\nconst active = (job: Job) => ['cloning', 'cancelling'].includes(job.view.status);\nconst hasControl = (value: string) =>\n  [...value].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);\n\n/** Only remote Git transports; never pass a local path, option, or remote helper to Git. */\nexport function validateRepository(repository: string): void {\n  let valid = false;\n  if (!hasControl(repository) && !/[\\s\\\\]/.test(repository)) {\n    if (/^(https|ssh):\\/\\//.test(repository)) {\n      try {\n        const url = new URL(repository);\n        valid = Boolean(\n          url.hostname &&\n          !url.hostname.startsWith('-') &&\n          url.pathname.length > 1 &&\n          !url.password &&\n          !url.search &&\n          !url.hash &&\n          (url.protocol === 'ssh:'\n            ? /^(?:[a-zA-Z0-9_][\\w.-]*)?$/.test(url.username)\n            : !url.username),\n        );\n      } catch {\n        /* Report a fixed message, never the supplied URL. */\n      }\n    } else {\n      valid = /^(?:[a-zA-Z0-9_][\\w.-]*@)?[a-zA-Z0-9][\\w.-]*:[^/:\\s][^\\s]*$/.test(repository);\n    }\n  }\n  if (!valid)\n    throw new AppError(\n      'INVALID_REPOSITORY',\n      '\u8BF7\u8F93\u5165 HTTPS \u6216 SSH Git \u4ED3\u5E93\u5730\u5740\uFF1B\u8BF7\u4F7F\u7528\u4E3B\u673A\u5DF2\u6709\u7684\u8BA4\u8BC1\uFF0C\u4E0D\u8981\u5728\u5730\u5740\u4E2D\u586B\u5199\u5BC6\u7801\u3001\u4EE4\u724C\u6216\u67E5\u8BE2\u53C2\u6570',\n      400,\n    );\n}\n\nfunction targetPath(path: string): string {\n  if (!isAbsolute(path) || hasControl(path) || resolve(path) === dirname(resolve(path)))\n    throw new AppError('INVALID_PROJECT_PATH', '\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u7EDD\u5BF9\u76EE\u6807\u76EE\u5F55', 400);\n  try {\n    const target = join(realpathSync(dirname(resolve(path))), basename(resolve(path)));\n    accessSync(dirname(target), constants.W_OK | constants.X_OK);\n    return target;\n  } catch {\n    throw new AppError(\n      'CLONE_PARENT_UNAVAILABLE',\n      '\u76EE\u6807\u76EE\u5F55\u7684\u7236\u76EE\u5F55\u5FC5\u987B\u5DF2\u5B58\u5728\uFF0C\u4E14\u670D\u52A1\u9700\u8981\u5199\u5165\u548C\u8FDB\u5165\u6743\u9650',\n      409,\n    );\n  }\n}\n\nfunction checkEmpty(path: string): void {\n  try {\n    const stat = lstatSync(path);\n    if (!stat.isDirectory() || stat.isSymbolicLink() || readdirSync(path).length)\n      throw new AppError(\n        'CLONE_TARGET_EXISTS',\n        '\u76EE\u6807\u76EE\u5F55\u5DF2\u5B58\u5728\u4E14\u975E\u7A7A\uFF0C\u6216\u4E0D\u662F\u666E\u901A\u76EE\u5F55\uFF1B\u8BF7\u9009\u62E9\u65B0\u7684\u7A7A\u76EE\u5F55\uFF0C\u4E0D\u4F1A\u8986\u76D6\u5DF2\u6709\u6587\u4EF6',\n        409,\n      );\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') return;\n    if (error instanceof AppError) throw error;\n    throw new AppError(\n      'CLONE_TARGET_UNAVAILABLE',\n      '\u65E0\u6CD5\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u8DEF\u5F84\u548C\u8BBF\u95EE\u6743\u9650',\n      409,\n    );\n  }\n}\n\nfunction failure(\n  output: string,\n  missingGit: boolean,\n): { code: NonNullable<ProjectClone['errorCode']>; message: string } {\n  if (missingGit)\n    return {\n      code: 'CLONE_GIT_MISSING',\n      message: '\u670D\u52A1\u5668\u672A\u5B89\u88C5 Git\uFF0C\u6216\u670D\u52A1\u7684 PATH \u4E2D\u627E\u4E0D\u5230 Git\u3002\u5B89\u88C5\u5E76\u914D\u7F6E\u540E\u91CD\u8BD5\u3002',\n    };\n  if (\n    /authentication failed|could not read username|permission denied|publickey|terminal prompts disabled|credential|access denied|401|403/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_AUTH_FAILED',\n      message:\n        'Git \u8BA4\u8BC1\u5931\u8D25\u6216\u6CA1\u6709\u4ED3\u5E93\u8BBF\u95EE\u6743\u9650\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u914D\u7F6E Git \u51ED\u636E\u6216 SSH \u5BC6\u94A5\u540E\u91CD\u8BD5\u3002',\n    };\n  if (/host key verification failed/i.test(output))\n    return {\n      code: 'CLONE_HOST_KEY_FAILED',\n      message: 'SSH \u4E3B\u673A\u9A8C\u8BC1\u5931\u8D25\u3002\u8BF7\u5728\u8FD0\u884C\u670D\u52A1\u7684\u4E3B\u673A\u4E0A\u786E\u8BA4\u5E76\u914D\u7F6E\u4ED3\u5E93\u4E3B\u673A\u7684 SSH \u4FE1\u4EFB\u540E\u91CD\u8BD5\u3002',\n    };\n  if (\n    /repository .*not found|does not appear to be a git repository|not a repository|404/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_REPOSITORY_UNAVAILABLE',\n      message: '\u4ED3\u5E93\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u8BBF\u95EE\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u548C\u4E3B\u673A\u4E0A\u7684 Git \u8BBF\u95EE\u6743\u9650\u3002',\n    };\n  if (\n    /could not resolve|failed to connect|unable to access|connection|timed out|certificate/i.test(\n      output,\n    )\n  )\n    return {\n      code: 'CLONE_NETWORK_FAILED',\n      message: '\u65E0\u6CD5\u8FDE\u63A5 Git \u4ED3\u5E93\u3002\u8BF7\u68C0\u67E5\u670D\u52A1\u5668\u7F51\u7EDC\u3001\u4EE3\u7406\u548C\u8BC1\u4E66\u914D\u7F6E\u540E\u91CD\u8BD5\u3002',\n    };\n  if (/already exists and is not an empty directory/i.test(output))\n    return {\n      code: 'CLONE_TARGET_NOT_EMPTY',\n      message: '\u76EE\u6807\u76EE\u5F55\u5DF2\u5305\u542B\u6587\u4EF6\uFF0CGit \u5DF2\u505C\u6B62\u514B\u9686\uFF1B\u4E0D\u4F1A\u8986\u76D6\u6216\u5220\u9664\u5DF2\u6709\u6587\u4EF6\u3002',\n    };\n  if (/no space left|disk quota/i.test(output))\n    return {\n      code: 'CLONE_DISK_FULL',\n      message: '\u670D\u52A1\u5668\u78C1\u76D8\u7A7A\u95F4\u4E0D\u8DB3\uFF0C\u8BF7\u91CA\u653E\u7A7A\u95F4\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002',\n    };\n  return {\n    code: 'CLONE_FAILED',\n    message: 'Git \u514B\u9686\u5931\u8D25\u3002\u8BF7\u68C0\u67E5\u4ED3\u5E93\u5730\u5740\u3001\u4E3B\u673A\u4E0A\u7684 Git \u8BA4\u8BC1\u3001\u76EE\u5F55\u6743\u9650\u548C\u78C1\u76D8\u7A7A\u95F4\u540E\u91CD\u8BD5\u3002',\n  };\n}\n\n/** Transient jobs never persist repository URLs, credentials, or raw Git output. */\nexport class ProjectClones {\n  private readonly jobs = new Map<string, Job>();\n  private closing = false;\n  constructor(\n    private readonly register: (input: CreateProjectInput) => Project,\n    private readonly registered: (path: string) => boolean,\n  ) {}\n\n  get hasActive(): boolean {\n    return [...this.jobs.values()].some(active);\n  }\n\n  assertIdlePath(path: string): void {\n    if (!this.hasActive) return;\n    let canonical = resolve(path);\n    try {\n      canonical = realpathSync(path);\n    } catch {\n      try {\n        canonical = join(realpathSync(dirname(canonical)), basename(canonical));\n      } catch {\n        /* Normal registration validation reports unavailable paths. */\n      }\n    }\n    if (\n      [...this.jobs.values()].some(\n        (job) =>\n          active(job) &&\n          (containsPath(job.view.path, canonical) || containsPath(canonical, job.view.path)),\n      )\n    )\n      throw new AppError('CLONE_IN_PROGRESS', '\u8BE5\u76EE\u5F55\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u6216\u53D6\u6D88\u540E\u518D\u64CD\u4F5C', 409);\n  }\n\n  start(input: CloneProjectInput, resolvePath = (path: string) => path): ProjectClone {\n    const parsed = cloneProjectSchema.parse(input);\n    validateRepository(parsed.repository);\n    const fingerprint = createHash('sha256').update(JSON.stringify(parsed)).digest('hex');\n    const previous = this.jobs.get(parsed.clientOperationId);\n    if (previous) {\n      if (previous.fingerprint !== fingerprint)\n        throw new AppError('CLONE_ID_CONFLICT', '\u8BE5\u64CD\u4F5C ID \u5DF2\u7528\u4E8E\u5176\u4ED6\u514B\u9686\u8BF7\u6C42', 409);\n      return this.get(previous.view.id);\n    }\n    if (this.closing) throw new AppError('GATEWAY_STOPPING', '\u670D\u52A1\u6B63\u5728\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5', 503);\n    const path = targetPath(resolvePath(parsed.path));\n    this.assertIdlePath(path);\n    if (this.registered(path))\n      throw new AppError('PROJECT_EXISTS', '\u8BE5\u76EE\u5F55\u5DF2\u6DFB\u52A0\u4E3A\u9879\u76EE\uFF0C\u8BF7\u4F7F\u7528\u5DF2\u6709\u9879\u76EE\u6216\u9009\u62E9\u5176\u4ED6\u76EE\u5F55', 409);\n    checkEmpty(path);\n    if ([...this.jobs.values()].filter(active).length >= 4)\n      throw new AppError('CLONE_LIMIT', '\u5DF2\u6709\u591A\u4E2A\u4ED3\u5E93\u6B63\u5728\u514B\u9686\uFF0C\u8BF7\u7B49\u5F85\u5B8C\u6210\u540E\u91CD\u8BD5', 409);\n    // Bound transient history without evicting a running process.\n    if (this.jobs.size >= 100) {\n      const oldest = [...this.jobs].find(([, job]) => !active(job));\n      if (oldest) this.jobs.delete(oldest[0]);\n    }\n    const job: Job = {\n      view: {\n        id: parsed.clientOperationId,\n        path,\n        name: parsed.name,\n        status: 'cloning',\n        progress: '\u6B63\u5728\u8FDE\u63A5\u4ED3\u5E93\u2026',\n        progressStage: 'connecting',\n      },\n      fingerprint,\n      done: Promise.resolve(),\n    };\n    this.jobs.set(job.view.id, job);\n    job.done = this.run(job, parsed.repository);\n    return this.get(job.view.id);\n  }\n\n  get(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    if (!job)\n      throw new AppError(\n        'CLONE_NOT_FOUND',\n        '\u672A\u627E\u5230\u514B\u9686\u8BB0\u5F55\uFF1B\u670D\u52A1\u91CD\u542F\u540E\u8BF7\u68C0\u67E5\u76EE\u6807\u76EE\u5F55\uFF0C\u518D\u6DFB\u52A0\u5DF2\u6709\u76EE\u5F55\u6216\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5',\n        404,\n      );\n    return structuredClone(job.view);\n  }\n\n  cancel(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    this.get(id);\n    if (job && active(job) && job.view.status !== 'cancelling') {\n      job.view.status = 'cancelling';\n      job.view.progress = '\u6B63\u5728\u53D6\u6D88\uFF0C\u7B49\u5F85 Git \u9000\u51FA\u2026';\n      job.view.progressStage = 'cancelling';\n      this.signal(job, 'SIGTERM');\n    }\n    return this.get(id);\n  }\n\n  retryRegistration(id: string): ProjectClone {\n    const job = this.jobs.get(id);\n    this.get(id);\n    if (job?.view.status === 'registration-failed') this.finishRegistration(job);\n    return this.get(id);\n  }\n\n  private finishRegistration(job: Job): void {\n    try {\n      job.view.project = this.register({ path: job.view.path, name: job.view.name });\n      job.view.status = 'completed';\n      job.view.progress = '\u514B\u9686\u5B8C\u6210\uFF0C\u9879\u76EE\u5DF2\u6DFB\u52A0';\n      job.view.progressStage = 'completed';\n      delete job.view.errorCode;\n      delete job.view.error;\n    } catch {\n      job.view.status = 'registration-failed';\n      job.view.progress = '\u514B\u9686\u5DF2\u5B8C\u6210\uFF0C\u9879\u76EE\u5C1A\u672A\u6DFB\u52A0';\n      job.view.progressStage = 'registration_failed';\n      job.view.errorCode = 'CLONE_REGISTRATION_FAILED';\n      job.view.error =\n        '\u9879\u76EE\u6CE8\u518C\u5931\u8D25\u3002\u5DF2\u514B\u9686\u7684\u6587\u4EF6\u4FDD\u7559\u5728\u76EE\u6807\u76EE\u5F55\uFF1B\u53EF\u91CD\u8BD5\u6DFB\u52A0\u9879\u76EE\uFF0C\u65E0\u9700\u518D\u6B21\u514B\u9686\uFF0C\u4E5F\u53EF\u901A\u8FC7\u201C\u5DF2\u6709\u76EE\u5F55\u201D\u6DFB\u52A0\u3002';\n    }\n  }\n\n  private signal(job: Job, signal: NodeJS.Signals): void {\n    if (!job.child?.pid) return;\n    try {\n      if (process.platform === 'win32') job.child.kill(signal);\n      else process.kill(-job.child.pid, signal);\n    } catch {\n      /* Process may have already exited. */\n    }\n  }\n\n  private async run(job: Job, repository: string): Promise<void> {\n    let output = '';\n    let pending = '';\n    let missingGit = false;\n    let timedOut = false;\n    const sshCommand =\n      process.env.GIT_SSH_COMMAND ??\n      (process.env.GIT_SSH ? `'${process.env.GIT_SSH.replaceAll(\"'\", \"'\\\\''\")}'` : 'ssh');\n    const child = spawn(\n      'git',\n      [\n        '-c',\n        'protocol.allow=never',\n        '-c',\n        'protocol.https.allow=always',\n        '-c',\n        'protocol.ssh.allow=always',\n        'clone',\n        '--progress',\n        '--',\n        repository,\n        job.view.path,\n      ],\n      {\n        detached: process.platform !== 'win32',\n        stdio: ['ignore', 'pipe', 'pipe'],\n        env: {\n          ...process.env,\n          GIT_TERMINAL_PROMPT: '0',\n          GCM_INTERACTIVE: 'never',\n          GIT_SSH_COMMAND: `${sshCommand} -oBatchMode=yes -oStrictHostKeyChecking=yes`,\n          LC_ALL: 'C',\n        },\n      },\n    );\n    job.child = child;\n    const read = (chunk: Buffer) => {\n      output = (output + chunk.toString()).slice(-16_384);\n      pending = (pending + chunk.toString()).slice(-4096);\n      const lines = pending.split(/[\\r\\n]/);\n      pending = lines.pop() ?? '';\n      for (const line of lines) {\n        const match =\n          /^(?:remote: )?(Receiving objects|Resolving deltas|Updating files|Checking out files|Counting objects|Compressing objects):\\s+(\\d{1,3})%/.exec(\n            line,\n          );\n        if (!match || job.view.status !== 'cloning') continue;\n        const labels: Record<string, [NonNullable<ProjectClone['progressStage']>, string]> = {\n          'Receiving objects': ['receiving', '\u6B63\u5728\u63A5\u6536\u5BF9\u8C61'],\n          'Resolving deltas': ['resolving', '\u6B63\u5728\u89E3\u6790\u5DEE\u5F02'],\n          'Updating files': ['checking_out', '\u6B63\u5728\u68C0\u51FA\u6587\u4EF6'],\n          'Checking out files': ['checking_out', '\u6B63\u5728\u68C0\u51FA\u6587\u4EF6'],\n          'Counting objects': ['counting', '\u6B63\u5728\u7EDF\u8BA1\u5BF9\u8C61'],\n          'Compressing objects': ['compressing', '\u6B63\u5728\u538B\u7F29\u5BF9\u8C61'],\n        };\n        [job.view.progressStage, job.view.progress] = labels[match[1]!]!;\n        job.view.percent = Math.min(100, Number(match[2]));\n      }\n    };\n    child.stdout?.on('data', read);\n    child.stderr?.on('data', read);\n    const timeout = setTimeout(() => {\n      timedOut = true;\n      this.cancel(job.view.id);\n    }, 30 * 60_000);\n    timeout.unref();\n    const escalation = setInterval(() => {\n      if (job.view.status === 'cancelling') this.signal(job, 'SIGKILL');\n    }, 3000);\n    escalation.unref();\n    const code = await new Promise<number | null>((done) => {\n      child.once('error', (error: NodeJS.ErrnoException) => {\n        missingGit = error.code === 'ENOENT';\n      });\n      child.once('close', done);\n    });\n    clearTimeout(timeout);\n    clearInterval(escalation);\n    job.child = undefined;\n    delete job.view.percent;\n    if (job.view.status === 'cancelling') {\n      job.view.status = timedOut ? 'failed' : 'cancelled';\n      job.view.progress = timedOut ? '\u514B\u9686\u8D85\u65F6\uFF0C\u5DF2\u505C\u6B62' : '\u5DF2\u53D6\u6D88\u514B\u9686';\n      job.view.progressStage = timedOut ? 'timed_out' : 'cancelled';\n      job.view.errorCode = timedOut ? 'CLONE_TIMED_OUT' : 'CLONE_CANCELLED';\n      job.view.error = `${timedOut ? '\u514B\u9686\u8D85\u8FC7 30 \u5206\u949F\uFF0C\u5DF2\u505C\u6B62\u3002' : ''}\u672A\u6DFB\u52A0\u9879\u76EE\uFF0C\u4E5F\u672A\u5220\u9664\u4EFB\u4F55\u6587\u4EF6\u3002\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;\n    } else if (code !== 0) {\n      job.view.status = 'failed';\n      job.view.progress = '\u514B\u9686\u5931\u8D25';\n      job.view.progressStage = 'failed';\n      const problem = failure(output, missingGit);\n      job.view.errorCode = problem.code;\n      job.view.error = `${problem.message} \u672A\u6DFB\u52A0\u9879\u76EE\uFF1B\u76EE\u6807\u76EE\u5F55\u53EF\u80FD\u6B8B\u7559\u6587\u4EF6\uFF0C\u8BF7\u68C0\u67E5\u540E\u4F7F\u7528\u65B0\u7684\u7A7A\u76EE\u5F55\u91CD\u8BD5\u3002`;\n    } else this.finishRegistration(job);\n  }\n\n  async close(): Promise<void> {\n    this.closing = true;\n    for (const job of this.jobs.values()) if (active(job)) this.cancel(job.view.id);\n    await Promise.all([...this.jobs.values()].map((job) => job.done));\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,aAAgC;AACzC,SAAS,kBAAkB;AAC3B,SAAS,YAAY,WAAW,WAAW,aAAa,oBAAoB;AAC5E,SAAS,UAAU,SAAS,YAAY,MAAM,eAAe;AAC7D,SAAS,gBAAgB;AAOzB,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAQ7B,MAAM,SAAS,CAAC,QAAa,CAAC,WAAW,YAAY,EAAE,SAAS,IAAI,KAAK,MAAM;AAC/E,MAAM,aAAa,CAAC,UAClB,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,cAAc,UAAU,WAAW,CAAC,IAAI,MAAM,UAAU,WAAW,CAAC,MAAM,GAAG;AAGzF,SAAS,mBAAmB,YAA0B;AAC3D,MAAI,QAAQ;AACZ,MAAI,CAAC,WAAW,UAAU,KAAK,CAAC,SAAS,KAAK,UAAU,GAAG;AACzD,QAAI,oBAAoB,KAAK,UAAU,GAAG;AACxC,UAAI;AACF,cAAM,MAAM,IAAI,IAAI,UAAU;AAC9B,gBAAQ;AAAA,UACN,IAAI,YACJ,CAAC,IAAI,SAAS,WAAW,GAAG,KAC5B,IAAI,SAAS,SAAS,KACtB,CAAC,IAAI,YACL,CAAC,IAAI,UACL,CAAC,IAAI,SACJ,IAAI,aAAa,SACd,6BAA6B,KAAK,IAAI,QAAQ,IAC9C,CAAC,IAAI;AAAA,QACX;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,OAAO;AACL,cAAQ,8DAA8D,KAAK,UAAU;AAAA,IACvF;AAAA,EACF;AACA,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACJ;AAEA,SAAS,WAAW,MAAsB;AACxC,MAAI,CAAC,WAAW,IAAI,KAAK,WAAW,IAAI,KAAK,QAAQ,IAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC;AAClF,UAAM,IAAI,SAAS,wBAAwB,wFAAkB,GAAG;AAClE,MAAI;AACF,UAAM,SAAS,KAAK,aAAa,QAAQ,QAAQ,IAAI,CAAC,CAAC,GAAG,SAAS,QAAQ,IAAI,CAAC,CAAC;AACjF,eAAW,QAAQ,MAAM,GAAG,UAAU,OAAO,UAAU,IAAI;AAC3D,WAAO;AAAA,EACT,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,MAAoB;AACtC,MAAI;AACF,UAAM,OAAO,UAAU,IAAI;AAC3B,QAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,KAAK,YAAY,IAAI,EAAE;AACpE,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,EACJ,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU;AACxD,QAAI,iBAAiB,SAAU,OAAM;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,QACP,QACA,YACmE;AACnE,MAAI;AACF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,wIAAwI;AAAA,IACtI;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SACE;AAAA,IACJ;AACF,MAAI,gCAAgC,KAAK,MAAM;AAC7C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,sFAAsF;AAAA,IACpF;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MACE,yFAAyF;AAAA,IACvF;AAAA,EACF;AAEA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MAAI,gDAAgD,KAAK,MAAM;AAC7D,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,MAAI,4BAA4B,KAAK,MAAM;AACzC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AACF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AACF;AAGO,MAAM,cAAc;AAAA,EAGzB,YACmB,UACA,YACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EAJF,OAAO,oBAAI,IAAiB;AAAA,EACrC,UAAU;AAAA,EAMlB,IAAI,YAAqB;AACvB,WAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,KAAK,MAAM;AAAA,EAC5C;AAAA,EAEA,eAAe,MAAoB;AACjC,QAAI,CAAC,KAAK,UAAW;AACrB,QAAI,YAAY,QAAQ,IAAI;AAC5B,QAAI;AACF,kBAAY,aAAa,IAAI;AAAA,IAC/B,QAAQ;AACN,UAAI;AACF,oBAAY,KAAK,aAAa,QAAQ,SAAS,CAAC,GAAG,SAAS,SAAS,CAAC;AAAA,MACxE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,QACE,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE;AAAA,MACtB,CAAC,QACC,OAAO,GAAG,MACT,aAAa,IAAI,KAAK,MAAM,SAAS,KAAK,aAAa,WAAW,IAAI,KAAK,IAAI;AAAA,IACpF;AAEA,YAAM,IAAI,SAAS,qBAAqB,4HAAwB,GAAG;AAAA,EACvE;AAAA,EAEA,MAAM,OAA0B,cAAc,CAAC,SAAiB,MAAoB;AAClF,UAAM,SAAS,mBAAmB,MAAM,KAAK;AAC7C,uBAAmB,OAAO,UAAU;AACpC,UAAM,cAAc,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,MAAM,CAAC,EAAE,OAAO,KAAK;AACpF,UAAM,WAAW,KAAK,KAAK,IAAI,OAAO,iBAAiB;AACvD,QAAI,UAAU;AACZ,UAAI,SAAS,gBAAgB;AAC3B,cAAM,IAAI,SAAS,qBAAqB,gFAAoB,GAAG;AACjE,aAAO,KAAK,IAAI,SAAS,KAAK,EAAE;AAAA,IAClC;AACA,QAAI,KAAK,QAAS,OAAM,IAAI,SAAS,oBAAoB,4EAAgB,GAAG;AAC5E,UAAM,OAAO,WAAW,YAAY,OAAO,IAAI,CAAC;AAChD,SAAK,eAAe,IAAI;AACxB,QAAI,KAAK,WAAW,IAAI;AACtB,YAAM,IAAI,SAAS,kBAAkB,oJAA4B,GAAG;AACtE,eAAW,IAAI;AACf,QAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,MAAM,EAAE,UAAU;AACnD,YAAM,IAAI,SAAS,eAAe,sHAAuB,GAAG;AAE9D,QAAI,KAAK,KAAK,QAAQ,KAAK;AACzB,YAAM,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC,EAAEA,IAAG,MAAM,CAAC,OAAOA,IAAG,CAAC;AAC5D,UAAI,OAAQ,MAAK,KAAK,OAAO,OAAO,CAAC,CAAC;AAAA,IACxC;AACA,UAAM,MAAW;AAAA,MACf,MAAM;AAAA,QACJ,IAAI,OAAO;AAAA,QACX;AAAA,QACA,MAAM,OAAO;AAAA,QACb,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,eAAe;AAAA,MACjB;AAAA,MACA;AAAA,MACA,MAAM,QAAQ,QAAQ;AAAA,IACxB;AACA,SAAK,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG;AAC9B,QAAI,OAAO,KAAK,IAAI,KAAK,OAAO,UAAU;AAC1C,WAAO,KAAK,IAAI,IAAI,KAAK,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAA0B;AAC5B,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,QAAI,CAAC;AACH,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,WAAO,gBAAgB,IAAI,IAAI;AAAA,EACjC;AAAA,EAEA,OAAO,IAA0B;AAC/B,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,SAAK,IAAI,EAAE;AACX,QAAI,OAAO,OAAO,GAAG,KAAK,IAAI,KAAK,WAAW,cAAc;AAC1D,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,WAAK,OAAO,KAAK,SAAS;AAAA,IAC5B;AACA,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEA,kBAAkB,IAA0B;AAC1C,UAAM,MAAM,KAAK,KAAK,IAAI,EAAE;AAC5B,SAAK,IAAI,EAAE;AACX,QAAI,KAAK,KAAK,WAAW,sBAAuB,MAAK,mBAAmB,GAAG;AAC3E,WAAO,KAAK,IAAI,EAAE;AAAA,EACpB;AAAA,EAEQ,mBAAmB,KAAgB;AACzC,QAAI;AACF,UAAI,KAAK,UAAU,KAAK,SAAS,EAAE,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI,KAAK,KAAK,CAAC;AAC7E,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,aAAO,IAAI,KAAK;AAChB,aAAO,IAAI,KAAK;AAAA,IAClB,QAAQ;AACN,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,UAAI,KAAK,YAAY;AACrB,UAAI,KAAK,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,OAAO,KAAU,QAA8B;AACrD,QAAI,CAAC,IAAI,OAAO,IAAK;AACrB,QAAI;AACF,UAAI,QAAQ,aAAa,QAAS,KAAI,MAAM,KAAK,MAAM;AAAA,UAClD,SAAQ,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,IAAI,KAAU,YAAmC;AAC7D,QAAI,SAAS;AACb,QAAI,UAAU;AACd,QAAI,aAAa;AACjB,QAAI,WAAW;AACf,UAAM,aACJ,QAAQ,IAAI,oBACX,QAAQ,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,WAAW,KAAK,OAAO,CAAC,MAAM;AAC/E,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,IAAI,KAAK;AAAA,MACX;AAAA,MACA;AAAA,QACE,UAAU,QAAQ,aAAa;AAAA,QAC/B,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,QAChC,KAAK;AAAA,UACH,GAAG,QAAQ;AAAA,UACX,qBAAqB;AAAA,UACrB,iBAAiB;AAAA,UACjB,iBAAiB,GAAG,UAAU;AAAA,UAC9B,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAQ;AACZ,UAAM,OAAO,CAAC,UAAkB;AAC9B,gBAAU,SAAS,MAAM,SAAS,GAAG,MAAM,MAAO;AAClD,iBAAW,UAAU,MAAM,SAAS,GAAG,MAAM,KAAK;AAClD,YAAM,QAAQ,QAAQ,MAAM,QAAQ;AACpC,gBAAU,MAAM,IAAI,KAAK;AACzB,iBAAW,QAAQ,OAAO;AACxB,cAAM,QACJ,0IAA0I;AAAA,UACxI;AAAA,QACF;AACF,YAAI,CAAC,SAAS,IAAI,KAAK,WAAW,UAAW;AAC7C,cAAM,SAA+E;AAAA,UACnF,qBAAqB,CAAC,aAAa,sCAAQ;AAAA,UAC3C,oBAAoB,CAAC,aAAa,sCAAQ;AAAA,UAC1C,kBAAkB,CAAC,gBAAgB,sCAAQ;AAAA,UAC3C,sBAAsB,CAAC,gBAAgB,sCAAQ;AAAA,UAC/C,oBAAoB,CAAC,YAAY,sCAAQ;AAAA,UACzC,uBAAuB,CAAC,eAAe,sCAAQ;AAAA,QACjD;AACA,SAAC,IAAI,KAAK,eAAe,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAE;AAC9D,YAAI,KAAK,UAAU,KAAK,IAAI,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC;AAAA,MACnD;AAAA,IACF;AACA,UAAM,QAAQ,GAAG,QAAQ,IAAI;AAC7B,UAAM,QAAQ,GAAG,QAAQ,IAAI;AAC7B,UAAM,UAAU,WAAW,MAAM;AAC/B,iBAAW;AACX,WAAK,OAAO,IAAI,KAAK,EAAE;AAAA,IACzB,GAAG,KAAK,GAAM;AACd,YAAQ,MAAM;AACd,UAAM,aAAa,YAAY,MAAM;AACnC,UAAI,IAAI,KAAK,WAAW,aAAc,MAAK,OAAO,KAAK,SAAS;AAAA,IAClE,GAAG,GAAI;AACP,eAAW,MAAM;AACjB,UAAM,OAAO,MAAM,IAAI,QAAuB,CAAC,SAAS;AACtD,YAAM,KAAK,SAAS,CAAC,UAAiC;AACpD,qBAAa,MAAM,SAAS;AAAA,MAC9B,CAAC;AACD,YAAM,KAAK,SAAS,IAAI;AAAA,IAC1B,CAAC;AACD,iBAAa,OAAO;AACpB,kBAAc,UAAU;AACxB,QAAI,QAAQ;AACZ,WAAO,IAAI,KAAK;AAChB,QAAI,IAAI,KAAK,WAAW,cAAc;AACpC,UAAI,KAAK,SAAS,WAAW,WAAW;AACxC,UAAI,KAAK,WAAW,WAAW,qDAAa;AAC5C,UAAI,KAAK,gBAAgB,WAAW,cAAc;AAClD,UAAI,KAAK,YAAY,WAAW,oBAAoB;AACpD,UAAI,KAAK,QAAQ,GAAG,WAAW,2EAAoB,EAAE;AAAA,IACvD,WAAW,SAAS,GAAG;AACrB,UAAI,KAAK,SAAS;AAClB,UAAI,KAAK,WAAW;AACpB,UAAI,KAAK,gBAAgB;AACzB,YAAM,UAAU,QAAQ,QAAQ,UAAU;AAC1C,UAAI,KAAK,YAAY,QAAQ;AAC7B,UAAI,KAAK,QAAQ,GAAG,QAAQ,OAAO;AAAA,IACrC,MAAO,MAAK,mBAAmB,GAAG;AAAA,EACpC;AAAA,EAEA,MAAM,QAAuB;AAC3B,SAAK,UAAU;AACf,eAAW,OAAO,KAAK,KAAK,OAAO,EAAG,KAAI,OAAO,GAAG,EAAG,MAAK,OAAO,IAAI,KAAK,EAAE;AAC9E,UAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;AAAA,EAClE;AACF;",
   "names": ["job"]
 }

package/dist/server/project-paths.js ADDED Viewed

@@ -0,0 +1,39 @@
+import { accessSync, constants, statSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+import { AppError } from "../shared/errors.js";
+function assertWorkDir(path) {
+  try {
+    if (!statSync(path).isDirectory()) throw new Error("not a directory");
+    accessSync(path, constants.R_OK | constants.X_OK);
+  } catch {
+    throw new AppError(
+      "WORK_DIR_UNAVAILABLE",
+      "workDir \u76EE\u5F55\u4E0D\u5B58\u5728\u3001\u4E0D\u662F\u76EE\u5F55\u6216\u4E0D\u53EF\u8BBF\u95EE\uFF1B\u8BF7\u68C0\u67E5\u670D\u52A1\u4E3B\u673A\u4E0A\u7684\u76EE\u5F55\u548C\u6743\u9650\uFF0C\u6216\u586B\u5199\u5176\u4ED6\u7EDD\u5BF9\u8DEF\u5F84\u3002",
+      409
+    );
+  }
+}
+function resolveProjectPath(path, workDir) {
+  if (!path || path.includes("\0"))
+    throw new AppError("INVALID_PROJECT_PATH", "\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u9879\u76EE\u76EE\u5F55", 400);
+  if (isAbsolute(path)) return resolve(path);
+  if (!workDir)
+    throw new AppError("INVALID_PROJECT_PATH", "\u672A\u914D\u7F6E workDir\uFF0C\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u7EDD\u5BF9\u76EE\u5F55\u8DEF\u5F84", 400);
+  assertWorkDir(workDir);
+  return resolve(workDir, path);
+}
+function projectPathPreview(path, workDir, directory) {
+  const input = path || (directory === void 0 ? workDir : workDir && directory);
+  if (!input) {
+    if (workDir) assertWorkDir(workDir);
+    return { workDir, path: "" };
+  }
+  if (!path && workDir) assertWorkDir(workDir);
+  return { workDir, path: resolveProjectPath(input, workDir) };
+}
+export {
+  assertWorkDir,
+  projectPathPreview,
+  resolveProjectPath
+};
+//# sourceMappingURL=project-paths.js.map

package/dist/server/project-paths.js.map ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/server/project-paths.ts"],
+  "sourcesContent": ["import { accessSync, constants, statSync } from 'node:fs';\nimport { isAbsolute, resolve } from 'node:path';\nimport { AppError } from '../shared/errors.js';\n\nexport function assertWorkDir(path: string): void {\n  try {\n    if (!statSync(path).isDirectory()) throw new Error('not a directory');\n    accessSync(path, constants.R_OK | constants.X_OK);\n  } catch {\n    throw new AppError(\n      'WORK_DIR_UNAVAILABLE',\n      'workDir \u76EE\u5F55\u4E0D\u5B58\u5728\u3001\u4E0D\u662F\u76EE\u5F55\u6216\u4E0D\u53EF\u8BBF\u95EE\uFF1B\u8BF7\u68C0\u67E5\u670D\u52A1\u4E3B\u673A\u4E0A\u7684\u76EE\u5F55\u548C\u6743\u9650\uFF0C\u6216\u586B\u5199\u5176\u4ED6\u7EDD\u5BF9\u8DEF\u5F84\u3002',\n      409,\n    );\n  }\n}\n\n/** Resolve on the host so browser previews use the same path rules as registration. */\nexport function resolveProjectPath(path: string, workDir?: string): string {\n  if (!path || path.includes('\\0'))\n    throw new AppError('INVALID_PROJECT_PATH', '\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u9879\u76EE\u76EE\u5F55', 400);\n  if (isAbsolute(path)) return resolve(path);\n  if (!workDir)\n    throw new AppError('INVALID_PROJECT_PATH', '\u672A\u914D\u7F6E workDir\uFF0C\u8BF7\u586B\u5199\u670D\u52A1\u5668\u4E0A\u7684\u7EDD\u5BF9\u76EE\u5F55\u8DEF\u5F84', 400);\n  assertWorkDir(workDir);\n  return resolve(workDir, path);\n}\n\nexport function projectPathPreview(path: string, workDir?: string, directory?: string) {\n  const input = path || (directory === undefined ? workDir : workDir && directory);\n  if (!input) {\n    if (workDir) assertWorkDir(workDir);\n    return { workDir, path: '' };\n  }\n  if (!path && workDir) assertWorkDir(workDir);\n  return { workDir, path: resolveProjectPath(input, workDir) };\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,WAAW,gBAAgB;AAChD,SAAS,YAAY,eAAe;AACpC,SAAS,gBAAgB;AAElB,SAAS,cAAc,MAAoB;AAChD,MAAI;AACF,QAAI,CAAC,SAAS,IAAI,EAAE,YAAY,EAAG,OAAM,IAAI,MAAM,iBAAiB;AACpE,eAAW,MAAM,UAAU,OAAO,UAAU,IAAI;AAAA,EAClD,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,mBAAmB,MAAc,SAA0B;AACzE,MAAI,CAAC,QAAQ,KAAK,SAAS,IAAI;AAC7B,UAAM,IAAI,SAAS,wBAAwB,4EAAgB,GAAG;AAChE,MAAI,WAAW,IAAI,EAAG,QAAO,QAAQ,IAAI;AACzC,MAAI,CAAC;AACH,UAAM,IAAI,SAAS,wBAAwB,wHAA8B,GAAG;AAC9E,gBAAc,OAAO;AACrB,SAAO,QAAQ,SAAS,IAAI;AAC9B;AAEO,SAAS,mBAAmB,MAAc,SAAkB,WAAoB;AACrF,QAAM,QAAQ,SAAS,cAAc,SAAY,UAAU,WAAW;AACtE,MAAI,CAAC,OAAO;AACV,QAAI,QAAS,eAAc,OAAO;AAClC,WAAO,EAAE,SAAS,MAAM,GAAG;AAAA,EAC7B;AACA,MAAI,CAAC,QAAQ,QAAS,eAAc,OAAO;AAC3C,SAAO,EAAE,SAAS,MAAM,mBAAmB,OAAO,OAAO,EAAE;AAC7D;",
+  "names": []
+}

package/dist/server/service.js CHANGED Viewed

@@ -21,6 +21,7 @@ import { renderThreadExport } from "./thread-export.js";
 import { readLocalImage } from "./images.js";
 import { temporaryFileRoots } from "./local-files.js";
 import { readLocalMarkdown } from "./markdown.js";
+import { readLocalText } from "./text-files.js";
 import { readLocalJson } from "./json-files.js";
 class GatewayService {
   constructor(options) {
@@ -132,11 +133,14 @@ class GatewayService {
     this.events.publishProjects(this.projects.list());
     return project;
   }
-  cloneProject(input) {
+  cloneProject(input, resolvePath = (path) => path) {
     if (this.maintenance || !this.accepting)
       throw new AppError("GATEWAY_STOPPING", "\u670D\u52A1\u6B63\u5728\u5347\u7EA7\u6216\u505C\u6B62\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5", 503);
-    this.workspaces.assertProjectDirectory(input.path);
-    return this.projectClones.start(input);
+    return this.projectClones.start(input, (path) => {
+      const resolved = resolvePath(path);
+      this.workspaces.assertProjectDirectory(resolved);
+      return resolved;
+    });
   }
   renameProject(projectId, input) {
     const project = this.projects.rename(projectId, input);
@@ -496,6 +500,9 @@ class GatewayService {
   getThreadMarkdown(threadId, path) {
     return this.readThreadFile(threadId, path, readLocalMarkdown);
   }
+  getThreadText(threadId, path) {
+    return this.readThreadFile(threadId, path, readLocalText);
+  }
   getThreadJson(threadId, path) {
     return this.readThreadFile(threadId, path, readLocalJson);
   }