@jpkme/diff-review 0.1.10 → 0.1.13

package/web/build/server/chunks/hooks.server-D7yPODoc.js

@@ -0,0 +1,42 @@
+import { j as startPendingAgentRun } from './agent-sessions-kcUaLhK5.js';
+import './validate-BsTKyhsq.js';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'node:os';
+import 'node:stream';
+import '@agentclientprotocol/sdk';
+
+//#region src/hooks.server.ts
+/**
+* Hosts aceptados. La UI escucha en 127.0.0.1 y puede lanzar agentes: un Host ajeno (DNS rebinding: un dominio
+* que resuelve a 127.0.0.1) no debe llegar a la app. Los POST de otro origen ya los frena SvelteKit (CSRF).
+*/
+function allowedHost(host) {
+	if (!host) return false;
+	const name = host.replace(/:\d+$/, "").replace(/^\[|\]$/g, "").toLowerCase();
+	if (name === "127.0.0.1" || name === "localhost" || name === "::1") return true;
+	const configured = String(process.env.HOST || "").trim().toLowerCase();
+	return Boolean(configured) && configured !== "0.0.0.0" && configured !== "::" && name === configured;
+}
+/** Si la CLI eligió un agente, la review arranca con el server (el navegador la sigue por `?agent=<id>`). */
+var init = () => {
+	startPendingAgentRun();
+};
+var handle = ({ event, resolve }) => {
+	if (!allowedHost(event.request.headers.get("host"))) return new Response("Host no permitido", { status: 403 });
+	return resolve(event);
+};
+/** Herramienta local: conviene ver el error real (git, devalue, etc.) y no el 500 genérico. */
+var handleError = ({ error, message }) => {
+	console.error("[diff-review]", error);
+	if (error instanceof Error && error.message.trim()) return { message: error.message };
+	if (error && typeof error === "object" && "message" in error) {
+		const detail = String(error.message || "").trim();
+		if (detail) return { message: detail };
+	}
+	return { message: message || "Error interno" };
+};
+
+export { handle, handleError, init };
+//# sourceMappingURL=hooks.server-D7yPODoc.js.map

package/web/build/server/chunks/hooks.server-D7yPODoc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.server-D7yPODoc.js","sources":["../../../.svelte-kit/output/server/entries/hooks.server.js"],"sourcesContent":["import { d as startPendingAgentRun } from \"../chunks/agent-sessions.js\";\n//#region src/hooks.server.ts\n/**\n* Hosts aceptados. La UI escucha en 127.0.0.1 y puede lanzar agentes: un Host ajeno (DNS rebinding: un dominio\n* que resuelve a 127.0.0.1) no debe llegar a la app. Los POST de otro origen ya los frena SvelteKit (CSRF).\n*/\nfunction allowedHost(host) {\n\tif (!host) return false;\n\tconst name = host.replace(/:\\d+$/, \"\").replace(/^\\[|\\]$/g, \"\").toLowerCase();\n\tif (name === \"127.0.0.1\" || name === \"localhost\" || name === \"::1\") return true;\n\tconst configured = String(process.env.HOST || \"\").trim().toLowerCase();\n\treturn Boolean(configured) && configured !== \"0.0.0.0\" && configured !== \"::\" && name === configured;\n}\n/** Si la CLI eligió un agente, la review arranca con el server (el navegador la sigue por `?agent=<id>`). */\nvar init = () => {\n\tstartPendingAgentRun();\n};\nvar handle = ({ event, resolve }) => {\n\tif (!allowedHost(event.request.headers.get(\"host\"))) return new Response(\"Host no permitido\", { status: 403 });\n\treturn resolve(event);\n};\n/** Herramienta local: conviene ver el error real (git, devalue, etc.) y no el 500 genérico. */\nvar handleError = ({ error, message }) => {\n\tconsole.error(\"[diff-review]\", error);\n\tif (error instanceof Error && error.message.trim()) return { message: error.message };\n\tif (error && typeof error === \"object\" && \"message\" in error) {\n\t\tconst detail = String(error.message || \"\").trim();\n\t\tif (detail) return { message: detail };\n\t}\n\treturn { message: message || \"Error interno\" };\n};\n//#endregion\nexport { handle, handleError, init };\n"],"names":[],"mappings":";;;;;;;;;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,IAAI,EAAE;AAC3B,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK;AACxB,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;AAC7E,CAAC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,EAAE,OAAO,IAAI;AAChF,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;AACvE,CAAC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,IAAI,IAAI,KAAK,UAAU;AACrG;AACA;AACG,IAAC,IAAI,GAAG,MAAM;AACjB,CAAC,oBAAoB,EAAE;AACvB;AACG,IAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;AACrC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/G,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC;AACtB;AACA;AACG,IAAC,WAAW,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;AAC1C,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC;AACtC,CAAC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;AACtF,CAAC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,EAAE;AAC/D,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;AACnD,EAAE,IAAI,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE;AACxC,CAAC;AACD,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE;AAC/C;;"}

package/web/build/server/chunks/{index.js-CL95e0Gl.js → index.js-lMtDM8ZQ.js}

@@ -4732,8 +4732,6 @@ function writable(value, start = noop$1) {
 		subscribe
 	};
 }
-//#endregion
-//#region node_modules/svelte/src/utils.js
 /**
 * Attributes that are boolean, i.e. they are present or not present.
 */
@@ -7619,7 +7617,7 @@ var options = {
 		app: ({ head, body, assets, nonce, env }) => "<!doctype html>\n<html lang=\"es\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <link rel=\"icon\" href=\"data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 16 16'><circle cx='8' cy='8' r='7' fill='%236ea8fe'/></svg>\" />\n    " + head + "\n  </head>\n  <body data-sveltekit-preload-data=\"hover\">\n    <div style=\"display: contents\">" + body + "</div>\n  </body>\n</html>\n",
 		error: error_template_default
 	},
-	version_hash: "x1s1ti"
+	version_hash: "nots6r"
 };
 async function get_hooks() {
 	let handle;
@@ -7627,7 +7625,7 @@ async function get_hooks() {
 	let handleError;
 	let handleValidationError;
 	let init;
-	({handle, handleFetch, handleError, handleValidationError, init} = await import('./hooks.server-DERFlOe1.js'));
+	({handle, handleFetch, handleError, handleValidationError, init} = await import('./hooks.server-D7yPODoc.js'));
 	let reroute;
 	let transport;
 	return {
@@ -11781,4 +11779,4 @@ var Server = class {
 };
 
 export { HttpError as H, MUTATIVE_METHODS as M, SvelteKitError as S, __exportAll as _, Server as a, stringify_remote_arg as b, create_remote_key as c, error as e, get_request_store as g, handle_error_and_jsonify as h, init_remote_functions as i, noop as n, splitCookiesString as s, with_request_store as w };
-//# sourceMappingURL=index.js-CL95e0Gl.js.map
+//# sourceMappingURL=index.js-lMtDM8ZQ.js.map