@dotobokuri/fleet-console 1.28.0 → 1.30.0

package/dist/fleet-plugins/repository/routes.mjs

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { spawn } from 'child_process';
 import 'fs';
-import path2 from 'path';
-import fs from 'fs/promises';
+import path4 from 'path';
+import fs2 from 'fs/promises';
 
 // sdk/plugin/node.ts
 function definePlugin(definition) {
   return definition;
 }
-function registerRouter(ctx, path5, handler) {
-  ctx.registerRouter(normalizePath(path5), handler);
+function registerRouter(ctx, path8, handler) {
+  ctx.registerRouter(normalizePath(path8), handler);
 }
-function normalizePath(path5) {
-  if (path5.length === 0 || path5 === "/") return "/";
-  return path5;
+function normalizePath(path8) {
+  if (path8.length === 0 || path8 === "/") return "/";
+  return path8;
 }
 
 // ../../packages/core-process/src/hidden.ts
@@ -97,6 +97,72 @@ function runGit(args, opts) {
     });
   });
 }
+function isPathContained(root, candidate) {
+  const relative = path4.relative(root, candidate);
+  return relative === "" || !path4.isAbsolute(relative) && relative !== ".." && !relative.startsWith(`..${path4.sep}`);
+}
+function isSelectableRepoRel(repoRel) {
+  if (repoRel === "") return true;
+  if (path4.isAbsolute(repoRel)) return false;
+  const normalized = path4.normalize(repoRel);
+  return !normalized.startsWith("-") && normalized !== ".." && !normalized.startsWith(`..${path4.sep}`);
+}
+
+// ../fleet-plugins/repository/server/git-marker.ts
+var GITDIR_PREFIX = "gitdir:";
+async function resolveContainedGitDir(repoDir, realTheaterPath) {
+  const markerPath = path4.join(repoDir, ".git");
+  let marker;
+  try {
+    marker = await fs2.stat(markerPath);
+  } catch {
+    return null;
+  }
+  let gitDir;
+  if (marker.isFile()) {
+    let content;
+    try {
+      content = await fs2.readFile(markerPath, "utf8");
+    } catch {
+      return null;
+    }
+    const line = content.split("\n").find((entry) => entry.trim().startsWith(GITDIR_PREFIX));
+    if (!line) return null;
+    const target = line.trim().slice(GITDIR_PREFIX.length).trim();
+    if (!target) return null;
+    gitDir = path4.resolve(repoDir, target);
+  } else if (marker.isDirectory()) {
+    gitDir = markerPath;
+  } else {
+    return null;
+  }
+  let realGitDir;
+  try {
+    realGitDir = await fs2.realpath(gitDir);
+  } catch {
+    return null;
+  }
+  if (!isPathContained(realTheaterPath, realGitDir)) return null;
+  let commonRaw = null;
+  try {
+    commonRaw = await fs2.readFile(path4.join(realGitDir, "commondir"), "utf8");
+  } catch {
+  }
+  if (commonRaw !== null) {
+    const commonTarget = commonRaw.trim();
+    if (!commonTarget) return null;
+    let realCommonDir;
+    try {
+      realCommonDir = await fs2.realpath(path4.resolve(realGitDir, commonTarget));
+    } catch {
+      return null;
+    }
+    if (!isPathContained(realTheaterPath, realCommonDir)) return null;
+  }
+  return realGitDir;
+}
+
+// ../fleet-plugins/repository/server/diff.ts
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -154,24 +220,29 @@ function isNoHeadError(error) {
   if (error.code !== "non_zero_exit") return false;
   return error.stderr.includes("unknown revision") || error.stderr.includes("bad revision");
 }
-async function resolveGitCwd(theaterPath, rawSubPath) {
-  if (rawSubPath === "") return { gitCwd: theaterPath };
-  const resolvedSub = path2.resolve(theaterPath, rawSubPath);
-  if (!resolvedSub.startsWith(theaterPath + path2.sep) && resolvedSub !== theaterPath) return null;
-  if (path2.normalize(rawSubPath).startsWith("..")) return null;
+var InvalidRepoError = class extends Error {
+  code = "invalid_repo";
+};
+async function resolveGitCwd(theaterPath, repoRel = "") {
+  if (repoRel === void 0 || repoRel === "") return { gitCwd: theaterPath };
+  if (typeof repoRel !== "string" || path4.isAbsolute(repoRel)) throw new InvalidRepoError("Repository path must be relative");
+  if (!isSelectableRepoRel(repoRel)) throw new InvalidRepoError("Repository path is invalid");
+  const resolved = path4.resolve(theaterPath, path4.normalize(repoRel));
+  if (!isPathContained(theaterPath, resolved)) throw new InvalidRepoError("Repository path escapes Theater");
   let realTheater;
-  let realSub;
+  let realRepo;
   try {
-    [realTheater, realSub] = await Promise.all([
-      fs.realpath(theaterPath),
-      fs.realpath(resolvedSub)
-    ]);
+    [realTheater, realRepo] = await Promise.all([fs2.realpath(theaterPath), fs2.realpath(resolved)]);
   } catch {
-    return null;
+    throw new InvalidRepoError("Repository path does not exist");
+  }
+  if (!isPathContained(realTheater, realRepo)) {
+    throw new InvalidRepoError("Repository path escapes Theater");
+  }
+  if (await resolveContainedGitDir(realRepo, realTheater) === null) {
+    throw new InvalidRepoError("Repository marker does not exist");
   }
-  const norm = realTheater.endsWith(path2.sep) ? realTheater : realTheater + path2.sep;
-  if (realSub !== realTheater && !realSub.startsWith(norm)) return null;
-  return { gitCwd: resolvedSub };
+  return { gitCwd: realRepo };
 }
 async function handleRepositoryChanged(req, res, ctx) {
   if (req.method !== "POST") {
@@ -183,7 +254,7 @@ async function handleRepositoryChanged(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isPlainObject(body)) {
+  if (!isPlainObject(body) || "subPath" in body) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -197,11 +268,15 @@ async function handleRepositoryChanged(req, res, ctx) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
   }
-  const rawSubPath = typeof body.subPath === "string" ? body.subPath : "";
-  const cwdResult = await resolveGitCwd(theaterPath, rawSubPath);
-  if (!cwdResult) {
-    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
-    return;
+  let cwdResult;
+  try {
+    cwdResult = await resolveGitCwd(theaterPath, body.repoRel);
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
   }
   const { gitCwd } = cwdResult;
   try {
@@ -252,7 +327,7 @@ async function handleRepositoryFile(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isPlainObject(body) || typeof body.filePath !== "string") {
+  if (!isPlainObject(body) || "subPath" in body || typeof body.filePath !== "string") {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -271,20 +346,24 @@ async function handleRepositoryFile(req, res, ctx) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
   }
-  const rawSubPath = typeof body.subPath === "string" ? body.subPath : "";
-  const cwdResult = await resolveGitCwd(theaterPath, rawSubPath);
-  if (!cwdResult) {
-    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
-    return;
+  let cwdResult;
+  try {
+    cwdResult = await resolveGitCwd(theaterPath, body.repoRel);
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
   }
   const { gitCwd } = cwdResult;
   const rawFilePath = body.filePath;
-  const resolvedFilePath = path2.resolve(gitCwd, rawFilePath);
-  if (!resolvedFilePath.startsWith(gitCwd + path2.sep) && resolvedFilePath !== gitCwd) {
+  const resolvedFilePath = path4.resolve(gitCwd, rawFilePath);
+  if (!resolvedFilePath.startsWith(gitCwd + path4.sep) && resolvedFilePath !== gitCwd) {
     ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
     return;
   }
-  const relativePath = path2.normalize(rawFilePath);
+  const relativePath = path4.normalize(rawFilePath);
   if (relativePath.startsWith("..")) {
     ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
     return;
@@ -295,14 +374,14 @@ async function handleRepositoryFile(req, res, ctx) {
       let realFile;
       try {
         [realGitCwd, realFile] = await Promise.all([
-          fs.realpath(gitCwd),
-          fs.realpath(resolvedFilePath)
+          fs2.realpath(gitCwd),
+          fs2.realpath(resolvedFilePath)
         ]);
       } catch {
         ctx.host.http.writeJson(res, 404, { error: "file_not_found" });
         return;
       }
-      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path2.sep)) {
+      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path4.sep)) {
         ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
         return;
       }
@@ -315,10 +394,10 @@ async function handleRepositoryFile(req, res, ctx) {
     }
     try {
       const [realGitCwd, realFile] = await Promise.all([
-        fs.realpath(gitCwd),
-        fs.realpath(resolvedFilePath)
+        fs2.realpath(gitCwd),
+        fs2.realpath(resolvedFilePath)
       ]);
-      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path2.sep)) {
+      if (realFile !== realGitCwd && !realFile.startsWith(realGitCwd + path4.sep)) {
         ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
         return;
       }
@@ -376,7 +455,7 @@ async function handleRepositoryCommit(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isPlainObject2(body)) {
+  if (!isPlainObject2(body) || "subPath" in body) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -395,11 +474,15 @@ async function handleRepositoryCommit(req, res, ctx) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
   }
-  const rawSubPath = typeof body.subPath === "string" ? body.subPath : "";
-  const cwdResult = await resolveGitCwd(theaterPath, rawSubPath);
-  if (!cwdResult) {
-    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
-    return;
+  let cwdResult;
+  try {
+    cwdResult = await resolveGitCwd(theaterPath, body.repoRel);
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
   }
   const { gitCwd } = cwdResult;
   try {
@@ -434,9 +517,9 @@ function isPlainObject3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolveLiteralFilePath(gitCwd, rawPath) {
-  const relativePath = path2.normalize(rawPath);
-  const resolved = path2.resolve(gitCwd, relativePath);
-  if (relativePath === ".." || relativePath.startsWith(".." + path2.sep) || !resolved.startsWith(gitCwd + path2.sep)) return null;
+  const relativePath = path4.normalize(rawPath);
+  const resolved = path4.resolve(gitCwd, relativePath);
+  if (relativePath === ".." || relativePath.startsWith(".." + path4.sep) || !resolved.startsWith(gitCwd + path4.sep)) return null;
   return relativePath;
 }
 function literalPathspec2(relativePath) {
@@ -452,7 +535,7 @@ async function handleRepositoryCommitFile(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isPlainObject3(body) || typeof body.theaterId !== "string" || typeof body.ref !== "string" || typeof body.filePath !== "string") {
+  if (!isPlainObject3(body) || "subPath" in body || typeof body.theaterId !== "string" || typeof body.ref !== "string" || typeof body.filePath !== "string") {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -473,10 +556,15 @@ async function handleRepositoryCommitFile(req, res, ctx) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
   }
-  const cwdResult = await resolveGitCwd(theaterPath, typeof body.subPath === "string" ? body.subPath : "");
-  if (!cwdResult) {
-    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
-    return;
+  let cwdResult;
+  try {
+    cwdResult = await resolveGitCwd(theaterPath, body.repoRel);
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
   }
   const relativePath = resolveLiteralFilePath(cwdResult.gitCwd, body.filePath);
   const oldPath = typeof body.oldPath === "string" ? resolveLiteralFilePath(cwdResult.gitCwd, body.oldPath) : void 0;
@@ -542,7 +630,7 @@ function parseLogOutput(stdout) {
   }
   return commits;
 }
-async function parseWorktreePorcelain(stdout, currentWorktreePath) {
+function parseWorktreePorcelainEntries(stdout) {
   const worktrees = [];
   let worktreePath = null;
   let sha = "";
@@ -573,10 +661,14 @@ async function parseWorktreePorcelain(stdout, currentWorktreePath) {
     }
   }
   pushCurrent();
+  return worktrees;
+}
+async function parseWorktreePorcelain(stdout, currentWorktreePath) {
+  const worktrees = parseWorktreePorcelainEntries(stdout);
   const normalizedCurrentWorktreePath = await normalizeWorktreePath(currentWorktreePath);
-  return Promise.all(worktrees.map(async ({ worktreePath: worktreePath2, ...checkout }) => ({
+  return Promise.all(worktrees.map(async ({ worktreePath, ...checkout }) => ({
     ...checkout,
-    isCurrent: normalizedCurrentWorktreePath !== "" && await normalizeWorktreePath(worktreePath2) === normalizedCurrentWorktreePath
+    isCurrent: normalizedCurrentWorktreePath !== "" && await normalizeWorktreePath(worktreePath) === normalizedCurrentWorktreePath
   })));
 }
 function annotateHeadReachability(commits, revListStdout) {
@@ -592,7 +684,7 @@ function isNoHeadError2(error) {
 async function normalizeWorktreePath(worktreePath) {
   if (!worktreePath) return "";
   try {
-    return await fs.realpath(worktreePath);
+    return await fs2.realpath(worktreePath);
   } catch {
     return worktreePath;
   }
@@ -623,7 +715,7 @@ async function handleRepositoryLog(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isPlainObject4(body)) {
+  if (!isPlainObject4(body) || "subPath" in body) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -637,11 +729,15 @@ async function handleRepositoryLog(req, res, ctx) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
   }
-  const rawSubPath = typeof body.subPath === "string" ? body.subPath : "";
-  const cwdResult = await resolveGitCwd(theaterPath, rawSubPath);
-  if (!cwdResult) {
-    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
-    return;
+  let cwdResult;
+  try {
+    cwdResult = await resolveGitCwd(theaterPath, body.repoRel);
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
   }
   const { gitCwd } = cwdResult;
   const requestedRef = body.ref;
@@ -690,6 +786,8 @@ async function handleRepositoryLog(req, res, ctx) {
     throw error;
   }
 }
+
+// ../fleet-plugins/repository/server/refs.ts
 function isObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -702,14 +800,6 @@ function parseRefItems(stdout, current) {
     return ref && label ? [{ ref, label, current: ref === current }] : [];
   });
 }
-async function readCurrentWorktreePath2(gitCwd) {
-  try {
-    return (await runGit(["rev-parse", "--show-toplevel"], { cwd: gitCwd })).stdout.trim();
-  } catch (error) {
-    if (error instanceof GitExecutorError) return "";
-    throw error;
-  }
-}
 async function readStashes(gitCwd) {
   try {
     return (await runGit(["stash", "list", "--format=%gd%x00%s"], { cwd: gitCwd })).stdout;
@@ -718,28 +808,6 @@ async function readStashes(gitCwd) {
     throw error;
   }
 }
-async function parseWorktrees(stdout, currentWorktreePath, theaterPath, deps = {}) {
-  const records = stdout.split("\n\n").map((record) => record.split("\n"));
-  const realpath = deps.realpath ?? fs.realpath;
-  const normalizedCurrent = currentWorktreePath ? await realpath(currentWorktreePath).catch(() => currentWorktreePath) : "";
-  const realTheaterPath = await realpath(theaterPath).catch(() => null);
-  return Promise.all(records.flatMap((record) => {
-    const rawPath = record.find((line) => line.startsWith("worktree "))?.slice(9);
-    if (!rawPath) return [];
-    const branchRef = record.find((line) => line.startsWith("branch "))?.slice(7) ?? null;
-    const branch = branchRef?.startsWith("refs/heads/") ? branchRef.slice(11) : null;
-    return [{ rawPath, name: path2.basename(rawPath) || "worktree", branch }];
-  }).map(async ({ rawPath, ...item }) => {
-    const realWorktreePath = await realpath(rawPath).catch(() => null);
-    const currentPath = realWorktreePath ?? rawPath;
-    const contextRelPath = realTheaterPath !== null && realWorktreePath !== null && isWithinTheater(realWorktreePath, realTheaterPath) ? path2.relative(realTheaterPath, realWorktreePath).split(path2.sep).join("/") : null;
-    return { ...item, current: normalizedCurrent !== "" && currentPath === normalizedCurrent, contextRelPath };
-  }));
-}
-function isWithinTheater(candidate, theaterPath) {
-  const normalizedTheaterPath = theaterPath.endsWith(path2.sep) ? theaterPath : `${theaterPath}${path2.sep}`;
-  return candidate === theaterPath || candidate.startsWith(normalizedTheaterPath);
-}
 async function handleRepositoryRefs(req, res, ctx) {
   if (req.method !== "POST") {
     ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
@@ -750,7 +818,7 @@ async function handleRepositoryRefs(req, res, ctx) {
     return;
   }
   const body = await ctx.host.http.readJsonBody(req);
-  if (!isObject(body) || typeof body.theaterId !== "string") {
+  if (!isObject(body) || "subPath" in body || typeof body.theaterId !== "string") {
     ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
     return;
   }
@@ -759,22 +827,25 @@ async function handleRepositoryRefs(req, res, ctx) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
   }
-  const resolved = await resolveGitCwd(theaterPath, typeof body.subPath === "string" ? body.subPath : "");
-  if (!resolved) {
-    ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
-    return;
+  let resolved;
+  try {
+    resolved = await resolveGitCwd(theaterPath, body.repoRel);
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
   }
   try {
-    const [head, local, remote, tags, stashes, worktrees] = await Promise.all([
+    const [head, local, remote, tags, stashes] = await Promise.all([
       runGit(["symbolic-ref", "--quiet", "HEAD"], { cwd: resolved.gitCwd, allowExitCodes: [1] }),
       runGit(["for-each-ref", "--format=%(refname)%00%(refname:short)", "refs/heads"], { cwd: resolved.gitCwd }),
       runGit(["for-each-ref", "--format=%(refname)%00%(refname:short)", "refs/remotes"], { cwd: resolved.gitCwd }),
       runGit(["for-each-ref", "--format=%(refname)%00%(refname:short)", "refs/tags"], { cwd: resolved.gitCwd }),
-      readStashes(resolved.gitCwd),
-      runGit(["worktree", "list", "--porcelain"], { cwd: resolved.gitCwd })
+      readStashes(resolved.gitCwd)
     ]);
     const current = head.stdout.trim();
-    const currentWorktreePath = await readCurrentWorktreePath2(resolved.gitCwd);
     ctx.host.http.writeJson(res, 200, {
       branches: parseRefItems(local.stdout, current),
       remotes: parseRefItems(remote.stdout, current),
@@ -782,12 +853,11 @@ async function handleRepositoryRefs(req, res, ctx) {
       stashes: lines(stashes).map((line) => {
         const [name, subject = ""] = line.split("\0");
         return { name, subject };
-      }),
-      worktrees: await parseWorktrees(worktrees.stdout, currentWorktreePath, theaterPath)
+      })
     });
   } catch (error) {
     if (error instanceof GitExecutorError && error.code === "no_git_repo") {
-      ctx.host.http.writeJson(res, 200, { branches: [], remotes: [], tags: [], stashes: [], worktrees: [] });
+      ctx.host.http.writeJson(res, 200, { branches: [], remotes: [], tags: [], stashes: [] });
       return;
     }
     if (error instanceof GitExecutorError && error.code === "git_unavailable") {
@@ -797,11 +867,240 @@ async function handleRepositoryRefs(req, res, ctx) {
     ctx.host.http.writeJson(res, 500, { error: "git_failed" });
   }
 }
+var REPOS_CAP = 200;
+var HARD_CAP_DEPTH = 8;
+var NESTED_BRANCH_CAP = 64;
+var SCAN_VISIT_BUDGET = 1e4;
+var DEFAULT_DEPTH = 3;
+function isPlainObject5(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function resolveRepoBranch(repoDir) {
+  try {
+    const result = await runGit(["status", "--porcelain=v2", "--branch", "--untracked-files=no"], { cwd: repoDir });
+    const branch = result.stdout.split("\n").find((line) => line.startsWith("# branch.head "))?.slice(14).trim() ?? "";
+    const oid = result.stdout.split("\n").find((line) => line.startsWith("# branch.oid "))?.slice(13).trim() ?? "";
+    return branch === "(detached)" ? oid.slice(0, 7) : branch;
+  } catch {
+    return "";
+  }
+}
+async function scanRepos(theaterPath, realTheaterPath, dir, currentDepth, maxDepth, repos, cap = REPOS_CAP, visits = { remaining: SCAN_VISIT_BUDGET }) {
+  if (repos.length >= cap) return true;
+  if (visits.remaining <= 0) return true;
+  visits.remaining -= 1;
+  const relPath = path4.relative(realTheaterPath, dir);
+  const gitDir = isSelectableRepoRel(relPath) ? await resolveContainedGitDir(dir, realTheaterPath) : null;
+  let linkedWorktree = false;
+  if (gitDir !== null) {
+    try {
+      await fs2.access(path4.join(gitDir, "commondir"));
+      linkedWorktree = true;
+    } catch {
+    }
+  }
+  if (gitDir !== null && !linkedWorktree) {
+    repos.push({ relPath, name: relPath === "" ? path4.basename(realTheaterPath) : path4.basename(dir), repoDir: dir });
+    if (repos.length >= cap) return true;
+  }
+  if (currentDepth >= maxDepth) return false;
+  let dirHandle = null;
+  try {
+    dirHandle = await fs2.opendir(dir);
+    let dirent = await dirHandle.read();
+    while (dirent !== null) {
+      if (repos.length >= cap || visits.remaining <= 0) return true;
+      if (dirent.isDirectory() && dirent.name !== "node_modules" && dirent.name !== ".git") {
+        const childPath = path4.join(dir, dirent.name);
+        let realChildPath;
+        try {
+          realChildPath = await fs2.realpath(childPath);
+        } catch {
+          dirent = await dirHandle.read();
+          continue;
+        }
+        if (isPathContained(realTheaterPath, realChildPath)) {
+          const truncated = await scanRepos(realTheaterPath, realTheaterPath, realChildPath, currentDepth + 1, maxDepth, repos, cap, visits);
+          if (truncated) return true;
+        }
+      }
+      dirent = await dirHandle.read();
+    }
+    return false;
+  } catch {
+    return false;
+  } finally {
+    if (dirHandle) {
+      try {
+        await dirHandle.close();
+      } catch {
+      }
+    }
+  }
+}
+async function resolveNestedRepoCandidates(candidates, availableSlots, resolver = resolveRepoBranch) {
+  const resolved = [];
+  const selected = candidates.slice(0, Math.max(0, availableSlots));
+  for (const [index, candidate] of selected.entries()) {
+    resolved.push({
+      relPath: candidate.relPath,
+      name: candidate.name,
+      branch: index < NESTED_BRANCH_CAP ? await resolver(candidate.repoDir) : "",
+      kind: "nested"
+    });
+  }
+  return resolved;
+}
+async function handleRepositoryRepos(req, res, ctx) {
+  if (req.method !== "POST") {
+    ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!ctx.host.security.isTerminalAuthorized(req)) {
+    ctx.host.http.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await ctx.host.http.readJsonBody(req);
+  if (!isPlainObject5(body) || typeof body.theaterId !== "string") {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const theaterPath = ctx.host.paths.resolveTheaterPath(body.theaterId);
+  if (!theaterPath) {
+    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  let realTheaterPath;
+  try {
+    realTheaterPath = await fs2.realpath(theaterPath);
+  } catch {
+    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  const maxDepth = typeof body.maxDepth === "number" && Number.isFinite(body.maxDepth) ? Math.max(1, Math.min(HARD_CAP_DEPTH, Math.floor(body.maxDepth))) : DEFAULT_DEPTH;
+  const repos = [];
+  const seen = /* @__PURE__ */ new Set();
+  let truncated = false;
+  let rootIsRepo = await resolveContainedGitDir(realTheaterPath, realTheaterPath) !== null;
+  if (!rootIsRepo) {
+    try {
+      const inside = await runGit(["rev-parse", "--is-inside-work-tree"], { cwd: theaterPath });
+      rootIsRepo = inside.stdout.trim() === "true";
+    } catch {
+    }
+  }
+  if (rootIsRepo) {
+    repos.push({ relPath: "", name: path4.basename(theaterPath), branch: await resolveRepoBranch(theaterPath), kind: "root" });
+    seen.add("");
+  }
+  const scanned = [];
+  const scanCap = Math.max(0, REPOS_CAP - repos.length);
+  truncated = await scanRepos(realTheaterPath, realTheaterPath, realTheaterPath, 0, maxDepth, scanned, scanCap) || truncated;
+  const unseenNested = scanned.filter((candidate) => !seen.has(candidate.relPath));
+  const remainingSlots = Math.max(0, REPOS_CAP - repos.length);
+  if (unseenNested.length > remainingSlots) truncated = true;
+  const nestedCandidates = await resolveNestedRepoCandidates(unseenNested, remainingSlots);
+  for (const candidate of nestedCandidates) {
+    if (repos.length >= REPOS_CAP) {
+      truncated = true;
+      break;
+    }
+    repos.push(candidate);
+    seen.add(candidate.relPath);
+  }
+  const result = { repos, ...truncated ? { truncated: true } : {} };
+  ctx.host.http.writeJson(res, 200, result);
+}
+function isPlainObject6(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function handleRepositoryWorktrees(req, res, ctx) {
+  if (req.method !== "POST") {
+    ctx.host.http.writeJson(res, 405, { error: "Method not allowed" });
+    return;
+  }
+  if (!ctx.host.security.isTerminalAuthorized(req)) {
+    ctx.host.http.writeJson(res, 401, { error: "unauthorized" });
+    return;
+  }
+  const body = await ctx.host.http.readJsonBody(req);
+  if (!isPlainObject6(body) || "subPath" in body || typeof body.theaterId !== "string") {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_request" });
+    return;
+  }
+  const theaterPath = ctx.host.paths.resolveTheaterPath(body.theaterId);
+  if (!theaterPath) {
+    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+    return;
+  }
+  let gitCwd;
+  try {
+    ({ gitCwd } = await resolveGitCwd(theaterPath, body.repoRel));
+  } catch (error) {
+    if (error instanceof InvalidRepoError) {
+      ctx.host.http.writeJson(res, 400, { error: error.code });
+      return;
+    }
+    throw error;
+  }
+  let realTheaterPath;
+  let realGitCwd;
+  try {
+    [realTheaterPath, realGitCwd] = await Promise.all([fs2.realpath(theaterPath), fs2.realpath(gitCwd)]);
+  } catch {
+    ctx.host.http.writeJson(res, 400, { error: "invalid_repo" });
+    return;
+  }
+  try {
+    const result = await runGit(["worktree", "list", "--porcelain"], { cwd: gitCwd });
+    const worktrees = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const worktree of parseWorktreePorcelainEntries(result.stdout)) {
+      let realWorktree;
+      try {
+        realWorktree = await fs2.realpath(worktree.worktreePath);
+      } catch {
+        continue;
+      }
+      if (!isPathContained(realTheaterPath, realWorktree)) continue;
+      const relPath = path4.relative(realTheaterPath, realWorktree);
+      if (!isSelectableRepoRel(relPath) || seen.has(relPath)) continue;
+      if (await resolveContainedGitDir(realWorktree, realTheaterPath) === null) continue;
+      worktrees.push({
+        relPath,
+        name: path4.basename(realWorktree),
+        branch: worktree.branch ?? worktree.sha.slice(0, 7),
+        current: realWorktree === realGitCwd
+      });
+      seen.add(relPath);
+    }
+    const payload = { worktrees };
+    ctx.host.http.writeJson(res, 200, payload);
+  } catch (error) {
+    if (error instanceof GitExecutorError) {
+      if (error.code === "no_git_repo" || error.code === "git_unavailable") {
+        ctx.host.http.writeJson(res, 422, { error: error.code });
+        return;
+      }
+      ctx.host.http.writeJson(res, 500, { error: "git_failed" });
+      return;
+    }
+    throw error;
+  }
+}
 
 // ../fleet-plugins/repository/routes.ts
 var routes_default = definePlugin({
   id: "repository",
   register(ctx) {
+    registerRouter(ctx, "repos", async ({ req, res }) => {
+      await handleRepositoryRepos(req, res, ctx);
+      return true;
+    });
+    registerRouter(ctx, "worktrees", async ({ req, res }) => {
+      await handleRepositoryWorktrees(req, res, ctx);
+      return true;
+    });
     registerRouter(ctx, "changed", async ({ req, res }) => {
       await handleRepositoryChanged(req, res, ctx);
       return true;