@mandujs/core 0.13.0 → 0.13.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (157) hide show
  1. package/README.ko.md +4 -4
  2. package/README.md +653 -653
  3. package/package.json +1 -1
  4. package/src/bundler/build.ts +91 -91
  5. package/src/bundler/css.ts +302 -302
  6. package/src/client/Link.tsx +227 -227
  7. package/src/client/globals.ts +44 -44
  8. package/src/client/hooks.ts +267 -267
  9. package/src/client/index.ts +5 -5
  10. package/src/client/island.ts +8 -8
  11. package/src/client/router.ts +435 -435
  12. package/src/client/runtime.ts +23 -23
  13. package/src/client/serialize.ts +404 -404
  14. package/src/client/window-state.ts +101 -101
  15. package/src/config/mandu.ts +9 -0
  16. package/src/config/validate.ts +12 -0
  17. package/src/config/watcher.ts +311 -311
  18. package/src/constants.ts +40 -40
  19. package/src/content/content-layer.ts +314 -314
  20. package/src/content/content.test.ts +433 -433
  21. package/src/content/data-store.ts +245 -245
  22. package/src/content/digest.ts +133 -133
  23. package/src/content/index.ts +164 -164
  24. package/src/content/loader-context.ts +172 -172
  25. package/src/content/loaders/api.ts +216 -216
  26. package/src/content/loaders/file.ts +169 -169
  27. package/src/content/loaders/glob.ts +252 -252
  28. package/src/content/loaders/index.ts +34 -34
  29. package/src/content/loaders/types.ts +137 -137
  30. package/src/content/meta-store.ts +209 -209
  31. package/src/content/types.ts +282 -282
  32. package/src/content/watcher.ts +135 -135
  33. package/src/contract/client-safe.test.ts +42 -42
  34. package/src/contract/client-safe.ts +114 -114
  35. package/src/contract/client.ts +16 -16
  36. package/src/contract/define.ts +459 -459
  37. package/src/contract/handler.ts +10 -10
  38. package/src/contract/normalize.test.ts +276 -276
  39. package/src/contract/normalize.ts +404 -404
  40. package/src/contract/registry.test.ts +206 -206
  41. package/src/contract/registry.ts +568 -568
  42. package/src/contract/schema.ts +48 -48
  43. package/src/contract/types.ts +58 -58
  44. package/src/contract/validator.ts +32 -32
  45. package/src/devtools/ai/context-builder.ts +375 -375
  46. package/src/devtools/ai/index.ts +25 -25
  47. package/src/devtools/ai/mcp-connector.ts +465 -465
  48. package/src/devtools/client/catchers/error-catcher.ts +327 -327
  49. package/src/devtools/client/catchers/index.ts +18 -18
  50. package/src/devtools/client/catchers/network-proxy.ts +363 -363
  51. package/src/devtools/client/components/index.ts +39 -39
  52. package/src/devtools/client/components/kitchen-root.tsx +362 -362
  53. package/src/devtools/client/components/mandu-character.tsx +241 -241
  54. package/src/devtools/client/components/overlay.tsx +368 -368
  55. package/src/devtools/client/components/panel/errors-panel.tsx +259 -259
  56. package/src/devtools/client/components/panel/guard-panel.tsx +244 -244
  57. package/src/devtools/client/components/panel/index.ts +32 -32
  58. package/src/devtools/client/components/panel/islands-panel.tsx +304 -304
  59. package/src/devtools/client/components/panel/network-panel.tsx +292 -292
  60. package/src/devtools/client/components/panel/panel-container.tsx +259 -259
  61. package/src/devtools/client/filters/context-filters.ts +282 -282
  62. package/src/devtools/client/filters/index.ts +16 -16
  63. package/src/devtools/client/index.ts +63 -63
  64. package/src/devtools/client/persistence.ts +335 -335
  65. package/src/devtools/client/state-manager.ts +478 -478
  66. package/src/devtools/design-tokens.ts +263 -263
  67. package/src/devtools/hook/create-hook.ts +207 -207
  68. package/src/devtools/hook/index.ts +13 -13
  69. package/src/devtools/index.ts +439 -439
  70. package/src/devtools/init.ts +266 -266
  71. package/src/devtools/protocol.ts +237 -237
  72. package/src/devtools/server/index.ts +17 -17
  73. package/src/devtools/server/source-context.ts +444 -444
  74. package/src/devtools/types.ts +319 -319
  75. package/src/devtools/worker/index.ts +25 -25
  76. package/src/devtools/worker/redaction-worker.ts +222 -222
  77. package/src/devtools/worker/worker-manager.ts +409 -409
  78. package/src/error/domains.ts +265 -265
  79. package/src/error/result.ts +46 -46
  80. package/src/error/types.ts +6 -6
  81. package/src/errors/extractor.ts +409 -409
  82. package/src/errors/index.ts +19 -19
  83. package/src/filling/auth.ts +308 -308
  84. package/src/filling/context.ts +24 -1
  85. package/src/filling/deps.ts +238 -238
  86. package/src/filling/index.ts +4 -0
  87. package/src/filling/sse-catchup.test.ts +56 -0
  88. package/src/filling/sse-catchup.ts +67 -0
  89. package/src/filling/sse.test.ts +168 -0
  90. package/src/filling/sse.ts +162 -0
  91. package/src/generator/index.ts +3 -3
  92. package/src/guard/analyzer.ts +360 -360
  93. package/src/guard/ast-analyzer.ts +806 -806
  94. package/src/guard/contract-guard.ts +9 -9
  95. package/src/guard/file-type.test.ts +24 -24
  96. package/src/guard/presets/atomic.ts +70 -70
  97. package/src/guard/presets/clean.ts +77 -77
  98. package/src/guard/presets/fsd.ts +79 -79
  99. package/src/guard/presets/hexagonal.ts +68 -68
  100. package/src/guard/presets/index.ts +291 -291
  101. package/src/guard/reporter.ts +445 -445
  102. package/src/guard/rules.ts +12 -12
  103. package/src/guard/statistics.ts +578 -578
  104. package/src/guard/suggestions.ts +358 -358
  105. package/src/guard/types.ts +348 -348
  106. package/src/guard/validator.ts +834 -834
  107. package/src/guard/watcher.ts +404 -404
  108. package/src/index.ts +6 -1
  109. package/src/intent/index.ts +310 -310
  110. package/src/island/index.ts +304 -304
  111. package/src/logging/index.ts +22 -22
  112. package/src/logging/transports.ts +365 -365
  113. package/src/plugins/index.ts +38 -38
  114. package/src/plugins/registry.ts +377 -377
  115. package/src/plugins/types.ts +363 -363
  116. package/src/report/index.ts +1 -1
  117. package/src/router/fs-patterns.ts +387 -387
  118. package/src/router/fs-scanner.ts +497 -497
  119. package/src/runtime/boundary.tsx +232 -232
  120. package/src/runtime/compose.ts +222 -222
  121. package/src/runtime/escape.ts +44 -0
  122. package/src/runtime/lifecycle.ts +381 -381
  123. package/src/runtime/logger.test.ts +345 -345
  124. package/src/runtime/logger.ts +677 -677
  125. package/src/runtime/router.test.ts +476 -476
  126. package/src/runtime/router.ts +105 -105
  127. package/src/runtime/security.ts +155 -155
  128. package/src/runtime/server.ts +257 -0
  129. package/src/runtime/session-key.ts +328 -328
  130. package/src/runtime/ssr.ts +16 -21
  131. package/src/runtime/streaming-ssr.ts +24 -33
  132. package/src/runtime/trace.ts +144 -144
  133. package/src/seo/index.ts +214 -214
  134. package/src/seo/integration/ssr.ts +307 -307
  135. package/src/seo/render/basic.ts +427 -427
  136. package/src/seo/render/index.ts +143 -143
  137. package/src/seo/render/jsonld.ts +539 -539
  138. package/src/seo/render/opengraph.ts +191 -191
  139. package/src/seo/render/robots.ts +116 -116
  140. package/src/seo/render/sitemap.ts +137 -137
  141. package/src/seo/render/twitter.ts +126 -126
  142. package/src/seo/resolve/index.ts +353 -353
  143. package/src/seo/resolve/opengraph.ts +143 -143
  144. package/src/seo/resolve/robots.ts +73 -73
  145. package/src/seo/resolve/title.ts +94 -94
  146. package/src/seo/resolve/twitter.ts +73 -73
  147. package/src/seo/resolve/url.ts +97 -97
  148. package/src/seo/routes/index.ts +290 -290
  149. package/src/seo/types.ts +575 -575
  150. package/src/slot/validator.ts +39 -39
  151. package/src/spec/index.ts +3 -3
  152. package/src/spec/load.ts +76 -76
  153. package/src/spec/lock.ts +56 -56
  154. package/src/utils/bun.ts +8 -8
  155. package/src/utils/lru-cache.ts +75 -75
  156. package/src/utils/safe-io.ts +188 -188
  157. package/src/utils/string-safe.ts +298 -298
@@ -1,444 +1,444 @@
1
- /**
2
- * Mandu Kitchen DevTools - Source Context Provider
3
- * @version 1.1.0
4
- *
5
- * Dev Server 엔드포인트: 소스 코드 snippet 제공
6
- * GET /api/__mandu_source__?file=src/components/User.tsx&line=42&context=5
7
- */
8
-
9
- import * as fs from 'fs';
10
- import * as path from 'path';
11
-
12
- // ============================================================================
13
- // Types
14
- // ============================================================================
15
-
16
- export interface SourceContextRequest {
17
- /** 파일 경로 (프로젝트 루트 기준 상대 경로) */
18
- file: string;
19
- /** 하이라이트할 라인 번호 (1-based) */
20
- line: number;
21
- /** 전후 컨텍스트 라인 수 (default: 5) */
22
- context?: number;
23
- }
24
-
25
- export interface SourceContextResponse {
26
- success: boolean;
27
- data?: {
28
- filePath: string;
29
- content: string;
30
- lineRange: [number, number];
31
- highlightLine: number;
32
- };
33
- error?: string;
34
- }
35
-
36
- export interface SourceContextProviderOptions {
37
- /** 프로젝트 루트 디렉토리 */
38
- projectRoot: string;
39
- /** 허용되는 파일 확장자 */
40
- allowedExtensions?: string[];
41
- /** 최대 컨텍스트 라인 수 */
42
- maxContextLines?: number;
43
- /** 최대 파일 크기 (bytes) */
44
- maxFileSize?: number;
45
- }
46
-
47
- // ============================================================================
48
- // Constants
49
- // ============================================================================
50
-
51
- const DEFAULT_OPTIONS: Required<Omit<SourceContextProviderOptions, 'projectRoot'>> = {
52
- allowedExtensions: [
53
- '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
54
- '.vue', '.svelte', '.astro',
55
- '.css', '.scss', '.less',
56
- '.json', '.yaml', '.yml',
57
- '.md', '.mdx',
58
- ],
59
- maxContextLines: 20,
60
- maxFileSize: 1024 * 1024, // 1MB
61
- };
62
-
63
- // ============================================================================
64
- // Source Context Provider
65
- // ============================================================================
66
-
67
- export class SourceContextProvider {
68
- private options: Required<SourceContextProviderOptions>;
69
-
70
- constructor(options: SourceContextProviderOptions) {
71
- this.options = {
72
- ...DEFAULT_OPTIONS,
73
- ...options,
74
- };
75
- }
76
-
77
- /**
78
- * 소스 코드 컨텍스트 가져오기
79
- */
80
- async getSourceContext(request: SourceContextRequest): Promise<SourceContextResponse> {
81
- const { file, line, context = 5 } = request;
82
-
83
- // 1. 입력 검증
84
- const validationError = this.validateRequest(file, line, context);
85
- if (validationError) {
86
- return { success: false, error: validationError };
87
- }
88
-
89
- // 2. 파일 경로 확인 (Path Traversal 방지)
90
- const absolutePath = this.resolveSafePath(file);
91
- if (!absolutePath) {
92
- return { success: false, error: 'Invalid file path: path traversal detected' };
93
- }
94
-
95
- // 3. 파일 존재 확인
96
- if (!fs.existsSync(absolutePath)) {
97
- return { success: false, error: `File not found: ${file}` };
98
- }
99
-
100
- // 4. 파일 크기 확인
101
- const stats = fs.statSync(absolutePath);
102
- if (stats.size > this.options.maxFileSize) {
103
- return { success: false, error: `File too large: ${file} (${stats.size} bytes)` };
104
- }
105
-
106
- // 5. 확장자 확인
107
- const ext = path.extname(file).toLowerCase();
108
- if (!this.options.allowedExtensions.includes(ext)) {
109
- return { success: false, error: `Extension not allowed: ${ext}` };
110
- }
111
-
112
- try {
113
- // 6. 파일 읽기
114
- const fileContent = fs.readFileSync(absolutePath, 'utf-8');
115
- const lines = fileContent.split('\n');
116
-
117
- // 7. 라인 범위 계산
118
- const effectiveContext = Math.min(context, this.options.maxContextLines);
119
- const startLine = Math.max(1, line - effectiveContext);
120
- const endLine = Math.min(lines.length, line + effectiveContext);
121
-
122
- // 8. 컨텍스트 추출
123
- const contextLines = lines.slice(startLine - 1, endLine);
124
- const content = contextLines
125
- .map((l, i) => {
126
- const lineNum = startLine + i;
127
- const marker = lineNum === line ? '>' : ' ';
128
- return `${marker} ${String(lineNum).padStart(4)} | ${l}`;
129
- })
130
- .join('\n');
131
-
132
- return {
133
- success: true,
134
- data: {
135
- filePath: file,
136
- content,
137
- lineRange: [startLine, endLine],
138
- highlightLine: line,
139
- },
140
- };
141
- } catch (error) {
142
- return {
143
- success: false,
144
- error: `Failed to read file: ${error instanceof Error ? error.message : String(error)}`,
145
- };
146
- }
147
- }
148
-
149
- /**
150
- * 입력 검증
151
- */
152
- private validateRequest(file: string, line: number, context: number): string | null {
153
- if (!file || typeof file !== 'string') {
154
- return 'Missing or invalid file parameter';
155
- }
156
-
157
- if (!Number.isInteger(line) || line < 1) {
158
- return 'Invalid line parameter: must be a positive integer';
159
- }
160
-
161
- if (!Number.isInteger(context) || context < 0) {
162
- return 'Invalid context parameter: must be a non-negative integer';
163
- }
164
-
165
- // 의심스러운 패턴 체크
166
- if (file.includes('\0') || file.includes('..')) {
167
- return 'Invalid file path: suspicious pattern detected';
168
- }
169
-
170
- return null;
171
- }
172
-
173
- /**
174
- * 안전한 경로 확인 (Path Traversal 방지)
175
- */
176
- private resolveSafePath(file: string): string | null {
177
- const absolutePath = path.resolve(this.options.projectRoot, file);
178
- const normalizedRoot = path.normalize(this.options.projectRoot);
179
-
180
- // 확인된 경로가 프로젝트 루트 내에 있는지 확인
181
- if (!absolutePath.startsWith(normalizedRoot)) {
182
- return null;
183
- }
184
-
185
- return absolutePath;
186
- }
187
-
188
- /**
189
- * HTTP 요청 핸들러 생성
190
- */
191
- createHandler() {
192
- return async (req: { url?: string }): Promise<SourceContextResponse> => {
193
- try {
194
- const url = new URL(req.url ?? '', 'http://localhost');
195
- const file = url.searchParams.get('file');
196
- const line = parseInt(url.searchParams.get('line') ?? '', 10);
197
- const context = parseInt(url.searchParams.get('context') ?? '5', 10);
198
-
199
- if (!file) {
200
- return { success: false, error: 'Missing file parameter' };
201
- }
202
-
203
- if (isNaN(line)) {
204
- return { success: false, error: 'Missing or invalid line parameter' };
205
- }
206
-
207
- return this.getSourceContext({ file, line, context: isNaN(context) ? 5 : context });
208
- } catch (error) {
209
- return {
210
- success: false,
211
- error: `Handler error: ${error instanceof Error ? error.message : String(error)}`,
212
- };
213
- }
214
- };
215
- }
216
- }
217
-
218
- // ============================================================================
219
- // Sourcemap Support
220
- // ============================================================================
221
-
222
- export interface SourcemapPosition {
223
- source: string;
224
- line: number;
225
- column: number;
226
- name?: string;
227
- }
228
-
229
- export interface SourcemapParseResult {
230
- success: boolean;
231
- position?: SourcemapPosition;
232
- error?: string;
233
- }
234
-
235
- /**
236
- * 간단한 Sourcemap 파서 (Base64 VLQ 디코딩)
237
- */
238
- export class SourcemapParser {
239
- private sourcemap: any;
240
-
241
- constructor(sourcemapContent: string) {
242
- try {
243
- this.sourcemap = JSON.parse(sourcemapContent);
244
- } catch {
245
- throw new Error('Invalid sourcemap JSON');
246
- }
247
- }
248
-
249
- /**
250
- * 생성된 코드의 위치에서 원본 위치 찾기
251
- */
252
- getOriginalPosition(line: number, column: number): SourcemapParseResult {
253
- // 기본 sourcemap 구조 확인
254
- if (!this.sourcemap.mappings || !this.sourcemap.sources) {
255
- return { success: false, error: 'Invalid sourcemap structure' };
256
- }
257
-
258
- try {
259
- // VLQ 매핑 디코딩
260
- const mappings = this.decodeMappings(this.sourcemap.mappings);
261
-
262
- // 해당 라인의 매핑 찾기
263
- if (line < 1 || line > mappings.length) {
264
- return { success: false, error: 'Line out of range' };
265
- }
266
-
267
- const lineSegments = mappings[line - 1];
268
- if (!lineSegments || lineSegments.length === 0) {
269
- return { success: false, error: 'No mapping for this line' };
270
- }
271
-
272
- // 가장 가까운 컬럼 매핑 찾기
273
- let closestSegment = lineSegments[0];
274
- for (const segment of lineSegments) {
275
- if (segment.generatedColumn <= column) {
276
- closestSegment = segment;
277
- } else {
278
- break;
279
- }
280
- }
281
-
282
- const sourceIndex = closestSegment.sourceIndex ?? 0;
283
- const source = this.sourcemap.sources[sourceIndex];
284
-
285
- return {
286
- success: true,
287
- position: {
288
- source: source ?? 'unknown',
289
- line: (closestSegment.originalLine ?? 0) + 1,
290
- column: closestSegment.originalColumn ?? 0,
291
- name: closestSegment.nameIndex !== undefined
292
- ? this.sourcemap.names?.[closestSegment.nameIndex]
293
- : undefined,
294
- },
295
- };
296
- } catch (error) {
297
- return {
298
- success: false,
299
- error: `Sourcemap parse error: ${error instanceof Error ? error.message : String(error)}`,
300
- };
301
- }
302
- }
303
-
304
- /**
305
- * VLQ 매핑 디코딩
306
- */
307
- private decodeMappings(mappings: string): SourcemapSegment[][] {
308
- const lines = mappings.split(';');
309
- const result: SourcemapSegment[][] = [];
310
-
311
- let sourceIndex = 0;
312
- let originalLine = 0;
313
- let originalColumn = 0;
314
- let nameIndex = 0;
315
-
316
- for (const line of lines) {
317
- const segments: SourcemapSegment[] = [];
318
- let generatedColumn = 0;
319
-
320
- if (line) {
321
- const segmentStrs = line.split(',');
322
-
323
- for (const segmentStr of segmentStrs) {
324
- const values = this.decodeVLQ(segmentStr);
325
-
326
- if (values.length >= 1) {
327
- generatedColumn += values[0];
328
- }
329
-
330
- const segment: SourcemapSegment = { generatedColumn };
331
-
332
- if (values.length >= 4) {
333
- sourceIndex += values[1];
334
- originalLine += values[2];
335
- originalColumn += values[3];
336
-
337
- segment.sourceIndex = sourceIndex;
338
- segment.originalLine = originalLine;
339
- segment.originalColumn = originalColumn;
340
- }
341
-
342
- if (values.length >= 5) {
343
- nameIndex += values[4];
344
- segment.nameIndex = nameIndex;
345
- }
346
-
347
- segments.push(segment);
348
- }
349
- }
350
-
351
- result.push(segments);
352
- }
353
-
354
- return result;
355
- }
356
-
357
- /**
358
- * Base64 VLQ 디코딩
359
- */
360
- private decodeVLQ(str: string): number[] {
361
- const BASE64_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
362
- const values: number[] = [];
363
- let shift = 0;
364
- let value = 0;
365
-
366
- for (const char of str) {
367
- const digit = BASE64_CHARS.indexOf(char);
368
- if (digit === -1) continue;
369
-
370
- const continuation = digit & 32;
371
- value += (digit & 31) << shift;
372
-
373
- if (continuation) {
374
- shift += 5;
375
- } else {
376
- // 부호 비트 처리
377
- const isNegative = value & 1;
378
- value = value >> 1;
379
- values.push(isNegative ? -value : value);
380
- value = 0;
381
- shift = 0;
382
- }
383
- }
384
-
385
- return values;
386
- }
387
- }
388
-
389
- interface SourcemapSegment {
390
- generatedColumn: number;
391
- sourceIndex?: number;
392
- originalLine?: number;
393
- originalColumn?: number;
394
- nameIndex?: number;
395
- }
396
-
397
- // ============================================================================
398
- // Vite Plugin Integration
399
- // ============================================================================
400
-
401
- /**
402
- * Vite 플러그인용 미들웨어 생성
403
- */
404
- export function createViteMiddleware(projectRoot: string) {
405
- const provider = new SourceContextProvider({ projectRoot });
406
- const handler = provider.createHandler();
407
-
408
- return async (req: any, res: any, next: () => void) => {
409
- // __mandu_source__ 엔드포인트만 처리
410
- if (!req.url?.startsWith('/api/__mandu_source__')) {
411
- return next();
412
- }
413
-
414
- try {
415
- const result = await handler(req);
416
-
417
- res.setHeader('Content-Type', 'application/json');
418
- res.setHeader('Cache-Control', 'no-store');
419
- res.statusCode = result.success ? 200 : 400;
420
- res.end(JSON.stringify(result));
421
- } catch (error) {
422
- res.statusCode = 500;
423
- res.end(JSON.stringify({
424
- success: false,
425
- error: 'Internal server error',
426
- }));
427
- }
428
- };
429
- }
430
-
431
- /**
432
- * Vite 플러그인 정의
433
- */
434
- export function manduSourceContextPlugin(options?: Partial<SourceContextProviderOptions>) {
435
- return {
436
- name: 'mandu-source-context',
437
-
438
- configureServer(server: any) {
439
- const projectRoot = options?.projectRoot ?? server.config.root ?? process.cwd();
440
-
441
- server.middlewares.use(createViteMiddleware(projectRoot));
442
- },
443
- };
444
- }
1
+ /**
2
+ * Mandu Kitchen DevTools - Source Context Provider
3
+ * @version 1.1.0
4
+ *
5
+ * Dev Server 엔드포인트: 소스 코드 snippet 제공
6
+ * GET /api/__mandu_source__?file=src/components/User.tsx&line=42&context=5
7
+ */
8
+
9
+ import * as fs from 'fs';
10
+ import * as path from 'path';
11
+
12
+ // ============================================================================
13
+ // Types
14
+ // ============================================================================
15
+
16
+ export interface SourceContextRequest {
17
+ /** 파일 경로 (프로젝트 루트 기준 상대 경로) */
18
+ file: string;
19
+ /** 하이라이트할 라인 번호 (1-based) */
20
+ line: number;
21
+ /** 전후 컨텍스트 라인 수 (default: 5) */
22
+ context?: number;
23
+ }
24
+
25
+ export interface SourceContextResponse {
26
+ success: boolean;
27
+ data?: {
28
+ filePath: string;
29
+ content: string;
30
+ lineRange: [number, number];
31
+ highlightLine: number;
32
+ };
33
+ error?: string;
34
+ }
35
+
36
+ export interface SourceContextProviderOptions {
37
+ /** 프로젝트 루트 디렉토리 */
38
+ projectRoot: string;
39
+ /** 허용되는 파일 확장자 */
40
+ allowedExtensions?: string[];
41
+ /** 최대 컨텍스트 라인 수 */
42
+ maxContextLines?: number;
43
+ /** 최대 파일 크기 (bytes) */
44
+ maxFileSize?: number;
45
+ }
46
+
47
+ // ============================================================================
48
+ // Constants
49
+ // ============================================================================
50
+
51
+ const DEFAULT_OPTIONS: Required<Omit<SourceContextProviderOptions, 'projectRoot'>> = {
52
+ allowedExtensions: [
53
+ '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
54
+ '.vue', '.svelte', '.astro',
55
+ '.css', '.scss', '.less',
56
+ '.json', '.yaml', '.yml',
57
+ '.md', '.mdx',
58
+ ],
59
+ maxContextLines: 20,
60
+ maxFileSize: 1024 * 1024, // 1MB
61
+ };
62
+
63
+ // ============================================================================
64
+ // Source Context Provider
65
+ // ============================================================================
66
+
67
+ export class SourceContextProvider {
68
+ private options: Required<SourceContextProviderOptions>;
69
+
70
+ constructor(options: SourceContextProviderOptions) {
71
+ this.options = {
72
+ ...DEFAULT_OPTIONS,
73
+ ...options,
74
+ };
75
+ }
76
+
77
+ /**
78
+ * 소스 코드 컨텍스트 가져오기
79
+ */
80
+ async getSourceContext(request: SourceContextRequest): Promise<SourceContextResponse> {
81
+ const { file, line, context = 5 } = request;
82
+
83
+ // 1. 입력 검증
84
+ const validationError = this.validateRequest(file, line, context);
85
+ if (validationError) {
86
+ return { success: false, error: validationError };
87
+ }
88
+
89
+ // 2. 파일 경로 확인 (Path Traversal 방지)
90
+ const absolutePath = this.resolveSafePath(file);
91
+ if (!absolutePath) {
92
+ return { success: false, error: 'Invalid file path: path traversal detected' };
93
+ }
94
+
95
+ // 3. 파일 존재 확인
96
+ if (!fs.existsSync(absolutePath)) {
97
+ return { success: false, error: `File not found: ${file}` };
98
+ }
99
+
100
+ // 4. 파일 크기 확인
101
+ const stats = fs.statSync(absolutePath);
102
+ if (stats.size > this.options.maxFileSize) {
103
+ return { success: false, error: `File too large: ${file} (${stats.size} bytes)` };
104
+ }
105
+
106
+ // 5. 확장자 확인
107
+ const ext = path.extname(file).toLowerCase();
108
+ if (!this.options.allowedExtensions.includes(ext)) {
109
+ return { success: false, error: `Extension not allowed: ${ext}` };
110
+ }
111
+
112
+ try {
113
+ // 6. 파일 읽기
114
+ const fileContent = fs.readFileSync(absolutePath, 'utf-8');
115
+ const lines = fileContent.split('\n');
116
+
117
+ // 7. 라인 범위 계산
118
+ const effectiveContext = Math.min(context, this.options.maxContextLines);
119
+ const startLine = Math.max(1, line - effectiveContext);
120
+ const endLine = Math.min(lines.length, line + effectiveContext);
121
+
122
+ // 8. 컨텍스트 추출
123
+ const contextLines = lines.slice(startLine - 1, endLine);
124
+ const content = contextLines
125
+ .map((l, i) => {
126
+ const lineNum = startLine + i;
127
+ const marker = lineNum === line ? '>' : ' ';
128
+ return `${marker} ${String(lineNum).padStart(4)} | ${l}`;
129
+ })
130
+ .join('\n');
131
+
132
+ return {
133
+ success: true,
134
+ data: {
135
+ filePath: file,
136
+ content,
137
+ lineRange: [startLine, endLine],
138
+ highlightLine: line,
139
+ },
140
+ };
141
+ } catch (error) {
142
+ return {
143
+ success: false,
144
+ error: `Failed to read file: ${error instanceof Error ? error.message : String(error)}`,
145
+ };
146
+ }
147
+ }
148
+
149
+ /**
150
+ * 입력 검증
151
+ */
152
+ private validateRequest(file: string, line: number, context: number): string | null {
153
+ if (!file || typeof file !== 'string') {
154
+ return 'Missing or invalid file parameter';
155
+ }
156
+
157
+ if (!Number.isInteger(line) || line < 1) {
158
+ return 'Invalid line parameter: must be a positive integer';
159
+ }
160
+
161
+ if (!Number.isInteger(context) || context < 0) {
162
+ return 'Invalid context parameter: must be a non-negative integer';
163
+ }
164
+
165
+ // 의심스러운 패턴 체크
166
+ if (file.includes('\0') || file.includes('..')) {
167
+ return 'Invalid file path: suspicious pattern detected';
168
+ }
169
+
170
+ return null;
171
+ }
172
+
173
+ /**
174
+ * 안전한 경로 확인 (Path Traversal 방지)
175
+ */
176
+ private resolveSafePath(file: string): string | null {
177
+ const absolutePath = path.resolve(this.options.projectRoot, file);
178
+ const normalizedRoot = path.normalize(this.options.projectRoot);
179
+
180
+ // 확인된 경로가 프로젝트 루트 내에 있는지 확인
181
+ if (!absolutePath.startsWith(normalizedRoot)) {
182
+ return null;
183
+ }
184
+
185
+ return absolutePath;
186
+ }
187
+
188
+ /**
189
+ * HTTP 요청 핸들러 생성
190
+ */
191
+ createHandler() {
192
+ return async (req: { url?: string }): Promise<SourceContextResponse> => {
193
+ try {
194
+ const url = new URL(req.url ?? '', 'http://localhost');
195
+ const file = url.searchParams.get('file');
196
+ const line = parseInt(url.searchParams.get('line') ?? '', 10);
197
+ const context = parseInt(url.searchParams.get('context') ?? '5', 10);
198
+
199
+ if (!file) {
200
+ return { success: false, error: 'Missing file parameter' };
201
+ }
202
+
203
+ if (isNaN(line)) {
204
+ return { success: false, error: 'Missing or invalid line parameter' };
205
+ }
206
+
207
+ return this.getSourceContext({ file, line, context: isNaN(context) ? 5 : context });
208
+ } catch (error) {
209
+ return {
210
+ success: false,
211
+ error: `Handler error: ${error instanceof Error ? error.message : String(error)}`,
212
+ };
213
+ }
214
+ };
215
+ }
216
+ }
217
+
218
+ // ============================================================================
219
+ // Sourcemap Support
220
+ // ============================================================================
221
+
222
+ export interface SourcemapPosition {
223
+ source: string;
224
+ line: number;
225
+ column: number;
226
+ name?: string;
227
+ }
228
+
229
+ export interface SourcemapParseResult {
230
+ success: boolean;
231
+ position?: SourcemapPosition;
232
+ error?: string;
233
+ }
234
+
235
+ /**
236
+ * 간단한 Sourcemap 파서 (Base64 VLQ 디코딩)
237
+ */
238
+ export class SourcemapParser {
239
+ private sourcemap: any;
240
+
241
+ constructor(sourcemapContent: string) {
242
+ try {
243
+ this.sourcemap = JSON.parse(sourcemapContent);
244
+ } catch {
245
+ throw new Error('Invalid sourcemap JSON');
246
+ }
247
+ }
248
+
249
+ /**
250
+ * 생성된 코드의 위치에서 원본 위치 찾기
251
+ */
252
+ getOriginalPosition(line: number, column: number): SourcemapParseResult {
253
+ // 기본 sourcemap 구조 확인
254
+ if (!this.sourcemap.mappings || !this.sourcemap.sources) {
255
+ return { success: false, error: 'Invalid sourcemap structure' };
256
+ }
257
+
258
+ try {
259
+ // VLQ 매핑 디코딩
260
+ const mappings = this.decodeMappings(this.sourcemap.mappings);
261
+
262
+ // 해당 라인의 매핑 찾기
263
+ if (line < 1 || line > mappings.length) {
264
+ return { success: false, error: 'Line out of range' };
265
+ }
266
+
267
+ const lineSegments = mappings[line - 1];
268
+ if (!lineSegments || lineSegments.length === 0) {
269
+ return { success: false, error: 'No mapping for this line' };
270
+ }
271
+
272
+ // 가장 가까운 컬럼 매핑 찾기
273
+ let closestSegment = lineSegments[0];
274
+ for (const segment of lineSegments) {
275
+ if (segment.generatedColumn <= column) {
276
+ closestSegment = segment;
277
+ } else {
278
+ break;
279
+ }
280
+ }
281
+
282
+ const sourceIndex = closestSegment.sourceIndex ?? 0;
283
+ const source = this.sourcemap.sources[sourceIndex];
284
+
285
+ return {
286
+ success: true,
287
+ position: {
288
+ source: source ?? 'unknown',
289
+ line: (closestSegment.originalLine ?? 0) + 1,
290
+ column: closestSegment.originalColumn ?? 0,
291
+ name: closestSegment.nameIndex !== undefined
292
+ ? this.sourcemap.names?.[closestSegment.nameIndex]
293
+ : undefined,
294
+ },
295
+ };
296
+ } catch (error) {
297
+ return {
298
+ success: false,
299
+ error: `Sourcemap parse error: ${error instanceof Error ? error.message : String(error)}`,
300
+ };
301
+ }
302
+ }
303
+
304
+ /**
305
+ * VLQ 매핑 디코딩
306
+ */
307
+ private decodeMappings(mappings: string): SourcemapSegment[][] {
308
+ const lines = mappings.split(';');
309
+ const result: SourcemapSegment[][] = [];
310
+
311
+ let sourceIndex = 0;
312
+ let originalLine = 0;
313
+ let originalColumn = 0;
314
+ let nameIndex = 0;
315
+
316
+ for (const line of lines) {
317
+ const segments: SourcemapSegment[] = [];
318
+ let generatedColumn = 0;
319
+
320
+ if (line) {
321
+ const segmentStrs = line.split(',');
322
+
323
+ for (const segmentStr of segmentStrs) {
324
+ const values = this.decodeVLQ(segmentStr);
325
+
326
+ if (values.length >= 1) {
327
+ generatedColumn += values[0];
328
+ }
329
+
330
+ const segment: SourcemapSegment = { generatedColumn };
331
+
332
+ if (values.length >= 4) {
333
+ sourceIndex += values[1];
334
+ originalLine += values[2];
335
+ originalColumn += values[3];
336
+
337
+ segment.sourceIndex = sourceIndex;
338
+ segment.originalLine = originalLine;
339
+ segment.originalColumn = originalColumn;
340
+ }
341
+
342
+ if (values.length >= 5) {
343
+ nameIndex += values[4];
344
+ segment.nameIndex = nameIndex;
345
+ }
346
+
347
+ segments.push(segment);
348
+ }
349
+ }
350
+
351
+ result.push(segments);
352
+ }
353
+
354
+ return result;
355
+ }
356
+
357
+ /**
358
+ * Base64 VLQ 디코딩
359
+ */
360
+ private decodeVLQ(str: string): number[] {
361
+ const BASE64_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
362
+ const values: number[] = [];
363
+ let shift = 0;
364
+ let value = 0;
365
+
366
+ for (const char of str) {
367
+ const digit = BASE64_CHARS.indexOf(char);
368
+ if (digit === -1) continue;
369
+
370
+ const continuation = digit & 32;
371
+ value += (digit & 31) << shift;
372
+
373
+ if (continuation) {
374
+ shift += 5;
375
+ } else {
376
+ // 부호 비트 처리
377
+ const isNegative = value & 1;
378
+ value = value >> 1;
379
+ values.push(isNegative ? -value : value);
380
+ value = 0;
381
+ shift = 0;
382
+ }
383
+ }
384
+
385
+ return values;
386
+ }
387
+ }
388
+
389
+ interface SourcemapSegment {
390
+ generatedColumn: number;
391
+ sourceIndex?: number;
392
+ originalLine?: number;
393
+ originalColumn?: number;
394
+ nameIndex?: number;
395
+ }
396
+
397
+ // ============================================================================
398
+ // Vite Plugin Integration
399
+ // ============================================================================
400
+
401
+ /**
402
+ * Vite 플러그인용 미들웨어 생성
403
+ */
404
+ export function createViteMiddleware(projectRoot: string) {
405
+ const provider = new SourceContextProvider({ projectRoot });
406
+ const handler = provider.createHandler();
407
+
408
+ return async (req: any, res: any, next: () => void) => {
409
+ // __mandu_source__ 엔드포인트만 처리
410
+ if (!req.url?.startsWith('/api/__mandu_source__')) {
411
+ return next();
412
+ }
413
+
414
+ try {
415
+ const result = await handler(req);
416
+
417
+ res.setHeader('Content-Type', 'application/json');
418
+ res.setHeader('Cache-Control', 'no-store');
419
+ res.statusCode = result.success ? 200 : 400;
420
+ res.end(JSON.stringify(result));
421
+ } catch (error) {
422
+ res.statusCode = 500;
423
+ res.end(JSON.stringify({
424
+ success: false,
425
+ error: 'Internal server error',
426
+ }));
427
+ }
428
+ };
429
+ }
430
+
431
+ /**
432
+ * Vite 플러그인 정의
433
+ */
434
+ export function manduSourceContextPlugin(options?: Partial<SourceContextProviderOptions>) {
435
+ return {
436
+ name: 'mandu-source-context',
437
+
438
+ configureServer(server: any) {
439
+ const projectRoot = options?.projectRoot ?? server.config.root ?? process.cwd();
440
+
441
+ server.middlewares.use(createViteMiddleware(projectRoot));
442
+ },
443
+ };
444
+ }