@neuralnomads/codenomad-dev 0.10.3-dev-20260213-ba418a85

package/dist/ui/remote-ui.js

@@ -0,0 +1,462 @@
+import { createHash } from "crypto";
+import fs from "fs";
+import { promises as fsp } from "fs";
+import os from "os";
+import path from "path";
+import { Readable } from "stream";
+import { fetch } from "undici";
+import yauzl from "yauzl";
+const DEFAULT_MANIFEST_URL = "https://ui.codenomad.neuralnomads.ai/version.json";
+const MANIFEST_TIMEOUT_MS = 5000;
+const ZIP_TIMEOUT_MS = 30000;
+export async function resolveUi(options) {
+    const manifestUrl = options.manifestUrl ?? DEFAULT_MANIFEST_URL;
+    if (options.uiDevServerUrl) {
+        return {
+            uiDevServerUrl: options.uiDevServerUrl,
+            source: "dev-proxy",
+            supported: true,
+        };
+    }
+    if (options.overrideUiDir) {
+        const resolved = await resolveStaticUiDir(options.overrideUiDir);
+        return {
+            uiStaticDir: resolved ?? options.overrideUiDir,
+            source: "override",
+            uiVersion: await readUiVersion(resolved ?? options.overrideUiDir),
+            supported: true,
+        };
+    }
+    const uiRoot = resolveUiCacheRoot(options.configDir);
+    const currentDir = path.join(uiRoot, "current");
+    const previousDir = path.join(uiRoot, "previous");
+    if (!options.autoUpdate) {
+        return await resolveFromCacheOrBundled({
+            logger: options.logger,
+            bundledUiDir: options.bundledUiDir,
+            currentDir,
+            previousDir,
+            supported: true,
+        });
+    }
+    let manifest = null;
+    try {
+        manifest = await fetchManifest(manifestUrl, options.logger);
+    }
+    catch (error) {
+        options.logger.debug({ err: error }, "Remote UI manifest unavailable; using cached/bundled UI");
+    }
+    if (!manifest) {
+        return await resolveFromCacheOrBundled({
+            logger: options.logger,
+            bundledUiDir: options.bundledUiDir,
+            currentDir,
+            previousDir,
+            supported: true,
+        });
+    }
+    const supported = compareSemverCore(options.serverVersion, manifest.minServerVersion) >= 0;
+    if (!supported) {
+        const message = "Upgrade App to use latest features";
+        return await resolveFromCacheOrBundled({
+            logger: options.logger,
+            bundledUiDir: options.bundledUiDir,
+            currentDir,
+            previousDir,
+            supported: false,
+            message,
+            latestServerVersion: manifest.latestServerVersion,
+            latestServerUrl: manifest.latestServerUrl,
+            minServerVersion: manifest.minServerVersion,
+        });
+    }
+    const bestLocal = await pickBestLocalUi({
+        logger: options.logger,
+        bundledUiDir: options.bundledUiDir,
+        currentDir,
+        previousDir,
+    });
+    const remoteIsNewer = !bestLocal ||
+        compareSemverMaybe(manifest.latestUIVersion, bestLocal.uiVersion) > 0;
+    if (!remoteIsNewer) {
+        return await resolveFromCacheOrBundled({
+            logger: options.logger,
+            bundledUiDir: options.bundledUiDir,
+            currentDir,
+            previousDir,
+            supported: true,
+            latestServerVersion: manifest.latestServerVersion,
+            latestServerUrl: manifest.latestServerUrl,
+            minServerVersion: manifest.minServerVersion,
+        });
+    }
+    try {
+        await installRemoteUi({
+            manifest,
+            uiRoot,
+            currentDir,
+            previousDir,
+            logger: options.logger,
+        });
+    }
+    catch (error) {
+        options.logger.warn({ err: error }, "Failed to install remote UI; falling back");
+        return await resolveFromCacheOrBundled({
+            logger: options.logger,
+            bundledUiDir: options.bundledUiDir,
+            currentDir,
+            previousDir,
+            supported: true,
+            latestServerVersion: manifest.latestServerVersion,
+            latestServerUrl: manifest.latestServerUrl,
+            minServerVersion: manifest.minServerVersion,
+        });
+    }
+    const installed = await resolveStaticUiDir(currentDir);
+    if (installed) {
+        return {
+            uiStaticDir: installed,
+            source: "downloaded",
+            uiVersion: await readUiVersion(installed),
+            supported: true,
+            latestServerVersion: manifest.latestServerVersion,
+            latestServerUrl: manifest.latestServerUrl,
+            minServerVersion: manifest.minServerVersion,
+        };
+    }
+    return await resolveFromCacheOrBundled({
+        logger: options.logger,
+        bundledUiDir: options.bundledUiDir,
+        currentDir,
+        previousDir,
+        supported: true,
+        latestServerVersion: manifest.latestServerVersion,
+        latestServerUrl: manifest.latestServerUrl,
+        minServerVersion: manifest.minServerVersion,
+    });
+}
+function resolveUiCacheRoot(configDir) {
+    if (configDir) {
+        return path.join(configDir, "ui");
+    }
+    return path.join(os.homedir(), ".config", "codenomad", "ui");
+}
+async function resolveFromCacheOrBundled(args) {
+    const bestLocal = await pickBestLocalUi({
+        logger: args.logger,
+        bundledUiDir: args.bundledUiDir,
+        currentDir: args.currentDir,
+        previousDir: args.previousDir,
+    });
+    if (bestLocal) {
+        return {
+            uiStaticDir: bestLocal.uiStaticDir,
+            source: bestLocal.source,
+            uiVersion: bestLocal.uiVersion,
+            supported: args.supported,
+            message: args.message,
+            latestServerVersion: args.latestServerVersion,
+            latestServerUrl: args.latestServerUrl,
+            minServerVersion: args.minServerVersion,
+        };
+    }
+    args.logger.warn({ bundledUiDir: args.bundledUiDir }, "No UI assets found");
+    return {
+        uiStaticDir: args.bundledUiDir,
+        source: "missing",
+        supported: args.supported,
+        message: args.message,
+        latestServerVersion: args.latestServerVersion,
+        latestServerUrl: args.latestServerUrl,
+        minServerVersion: args.minServerVersion,
+    };
+}
+async function pickBestLocalUi(args) {
+    const candidates = [];
+    const currentResolved = await resolveStaticUiDir(args.currentDir);
+    if (currentResolved) {
+        candidates.push({
+            uiStaticDir: currentResolved,
+            source: "downloaded",
+            uiVersion: await readUiVersion(currentResolved),
+            priority: 2,
+        });
+    }
+    const bundledResolved = await resolveStaticUiDir(args.bundledUiDir);
+    if (bundledResolved) {
+        candidates.push({
+            uiStaticDir: bundledResolved,
+            source: "bundled",
+            uiVersion: await readUiVersion(bundledResolved),
+            priority: 1,
+        });
+    }
+    const previousResolved = await resolveStaticUiDir(args.previousDir);
+    if (previousResolved) {
+        candidates.push({
+            uiStaticDir: previousResolved,
+            source: "previous",
+            uiVersion: await readUiVersion(previousResolved),
+            priority: 0,
+        });
+    }
+    if (candidates.length === 0) {
+        return null;
+    }
+    candidates.sort((a, b) => {
+        const versionCmp = compareSemverMaybe(a.uiVersion, b.uiVersion);
+        if (versionCmp !== 0)
+            return -versionCmp;
+        return b.priority - a.priority;
+    });
+    const best = candidates[0];
+    if (!best)
+        return null;
+    return { uiStaticDir: best.uiStaticDir, source: best.source, uiVersion: best.uiVersion };
+}
+function compareSemverMaybe(a, b) {
+    if (!a && !b)
+        return 0;
+    if (!a)
+        return -1;
+    if (!b)
+        return 1;
+    return compareSemverCore(a, b);
+}
+async function resolveStaticUiDir(uiDir) {
+    try {
+        const indexPath = path.join(uiDir, "index.html");
+        await fsp.access(indexPath, fs.constants.R_OK);
+        return uiDir;
+    }
+    catch {
+        return null;
+    }
+}
+async function readUiVersion(uiDir) {
+    try {
+        const content = await fsp.readFile(path.join(uiDir, "ui-version.json"), "utf-8");
+        const parsed = JSON.parse(content);
+        return parsed.uiVersion ?? parsed.version;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function fetchManifest(url, logger) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), MANIFEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers: {
+                Accept: "application/json",
+                "User-Agent": "CodeNomad-CLI",
+            },
+        });
+        if (!response.ok) {
+            throw new Error(`Manifest responded with ${response.status}`);
+        }
+        const json = (await response.json());
+        validateManifest(json);
+        return json;
+    }
+    catch (error) {
+        logger.debug({ err: error, url }, "Failed to fetch remote UI manifest");
+        throw error;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+function validateManifest(manifest) {
+    const required = ["minServerVersion", "latestUIVersion", "uiPackageURL", "sha256"];
+    for (const key of required) {
+        const value = manifest[key];
+        if (typeof value !== "string" || value.trim().length === 0) {
+            throw new Error(`Manifest missing ${key}`);
+        }
+    }
+    if (!/^https:\/\//i.test(manifest.uiPackageURL)) {
+        throw new Error("uiPackageURL must be https");
+    }
+    if (!/^[a-f0-9]{64}$/i.test(manifest.sha256.trim())) {
+        throw new Error("sha256 must be 64 hex chars");
+    }
+}
+async function installRemoteUi(args) {
+    await fsp.mkdir(args.uiRoot, { recursive: true });
+    const tmpDir = path.join(args.uiRoot, `tmp-${Date.now()}`);
+    const zipPath = path.join(args.uiRoot, `ui-${args.manifest.latestUIVersion}.zip`);
+    try {
+        await downloadFile(args.manifest.uiPackageURL, zipPath, args.logger);
+        const digest = await sha256File(zipPath);
+        if (digest.toLowerCase() !== args.manifest.sha256.toLowerCase()) {
+            throw new Error(`sha256 mismatch for UI zip (expected ${args.manifest.sha256}, got ${digest})`);
+        }
+        await extractZip(zipPath, tmpDir);
+        const indexPath = path.join(tmpDir, "index.html");
+        if (!fs.existsSync(indexPath)) {
+            throw new Error("Extracted UI missing index.html");
+        }
+        await rotateDirs({ currentDir: args.currentDir, previousDir: args.previousDir, logger: args.logger });
+        fs.rmSync(args.currentDir, { recursive: true, force: true });
+        fs.renameSync(tmpDir, args.currentDir);
+    }
+    finally {
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+        fs.rmSync(zipPath, { force: true });
+    }
+}
+async function rotateDirs(args) {
+    try {
+        if (fs.existsSync(args.previousDir)) {
+            fs.rmSync(args.previousDir, { recursive: true, force: true });
+        }
+        if (fs.existsSync(args.currentDir)) {
+            fs.renameSync(args.currentDir, args.previousDir);
+        }
+    }
+    catch (error) {
+        args.logger.warn({ err: error }, "Failed to rotate UI cache directories");
+    }
+}
+async function downloadFile(url, targetPath, logger) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), ZIP_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers: {
+                Accept: "application/octet-stream",
+                "User-Agent": "CodeNomad-CLI",
+            },
+        });
+        if (!response.ok || !response.body) {
+            throw new Error(`UI zip download failed with ${response.status}`);
+        }
+        await fsp.mkdir(path.dirname(targetPath), { recursive: true });
+        const fileStream = fs.createWriteStream(targetPath);
+        const body = response.body;
+        if (!body) {
+            throw new Error("UI zip response missing body");
+        }
+        const nodeStream = Readable.fromWeb(body);
+        await new Promise((resolve, reject) => {
+            nodeStream.pipe(fileStream);
+            nodeStream.on("error", reject);
+            fileStream.on("error", reject);
+            fileStream.on("finish", () => resolve());
+        });
+        logger.debug({ url, targetPath }, "Downloaded remote UI bundle");
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+async function sha256File(filePath) {
+    const hash = createHash("sha256");
+    const stream = fs.createReadStream(filePath);
+    await new Promise((resolve, reject) => {
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.on("error", reject);
+        stream.on("end", () => resolve());
+    });
+    return hash.digest("hex");
+}
+async function extractZip(zipPath, targetDir) {
+    await fsp.mkdir(targetDir, { recursive: true });
+    await new Promise((resolve, reject) => {
+        yauzl.open(zipPath, { lazyEntries: true }, (openErr, zipfile) => {
+            if (openErr || !zipfile) {
+                reject(openErr ?? new Error("Unable to open zip"));
+                return;
+            }
+            const root = path.resolve(targetDir);
+            const closeWithError = (error) => {
+                try {
+                    zipfile.close();
+                }
+                catch {
+                    // ignore
+                }
+                reject(error);
+            };
+            zipfile.readEntry();
+            zipfile.on("entry", (entry) => {
+                // Normalize and guard against zip-slip.
+                const entryPath = entry.fileName.replace(/\\/g, "/");
+                const segments = entryPath.split("/").filter(Boolean);
+                if (segments.some((segment) => segment === "..") || path.isAbsolute(entryPath)) {
+                    closeWithError(new Error(`Invalid zip entry path: ${entry.fileName}`));
+                    return;
+                }
+                const destination = path.resolve(targetDir, entryPath);
+                if (!destination.startsWith(root + path.sep) && destination !== root) {
+                    closeWithError(new Error(`Zip entry escapes target dir: ${entry.fileName}`));
+                    return;
+                }
+                const isDirectory = entry.fileName.endsWith("/");
+                if (isDirectory) {
+                    fsp
+                        .mkdir(destination, { recursive: true })
+                        .then(() => zipfile.readEntry())
+                        .catch((error) => closeWithError(error));
+                    return;
+                }
+                fsp
+                    .mkdir(path.dirname(destination), { recursive: true })
+                    .then(() => {
+                    zipfile.openReadStream(entry, (streamErr, readStream) => {
+                        if (streamErr || !readStream) {
+                            closeWithError(streamErr ?? new Error("Unable to read zip entry"));
+                            return;
+                        }
+                        const writeStream = fs.createWriteStream(destination);
+                        const cleanup = (error) => {
+                            readStream.destroy();
+                            writeStream.destroy();
+                            if (error) {
+                                closeWithError(error);
+                            }
+                        };
+                        readStream.on("error", cleanup);
+                        writeStream.on("error", cleanup);
+                        writeStream.on("finish", () => zipfile.readEntry());
+                        readStream.pipe(writeStream);
+                    });
+                })
+                    .catch((error) => closeWithError(error));
+            });
+            zipfile.on("end", () => {
+                zipfile.close();
+                resolve();
+            });
+            zipfile.on("error", (error) => closeWithError(error));
+        });
+    });
+}
+function compareSemverCore(a, b) {
+    const pa = parseSemverCore(a);
+    const pb = parseSemverCore(b);
+    if (pa.major !== pb.major)
+        return pa.major > pb.major ? 1 : -1;
+    if (pa.minor !== pb.minor)
+        return pa.minor > pb.minor ? 1 : -1;
+    if (pa.patch !== pb.patch)
+        return pa.patch > pb.patch ? 1 : -1;
+    return 0;
+}
+function parseSemverCore(value) {
+    const core = value.trim().replace(/^v/i, "").split("-", 1)[0] ?? "0.0.0";
+    const parts = core.split(".");
+    const parsePart = (input) => {
+        const n = Number.parseInt((input ?? "0").replace(/[^0-9]/g, ""), 10);
+        return Number.isFinite(n) ? n : 0;
+    };
+    return {
+        major: parsePart(parts[0]),
+        minor: parsePart(parts[1]),
+        patch: parsePart(parts[2]),
+    };
+}

package/dist/workspaces/git-worktrees.js

@@ -0,0 +1,199 @@
+import path from "path";
+import { spawn } from "child_process";
+import { promises as fsp } from "fs";
+function runGit(args, cwd) {
+    return new Promise((resolve) => {
+        const child = spawn("git", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (chunk) => {
+            stdout += chunk.toString();
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderr += chunk.toString();
+        });
+        child.once("error", (error) => {
+            resolve({ ok: false, error, stdout, stderr });
+        });
+        child.once("close", (code) => {
+            if (code === 0) {
+                resolve({ ok: true, stdout });
+            }
+            else {
+                const error = new Error(stderr.trim() || `git ${args.join(" ")} failed with code ${code}`);
+                resolve({ ok: false, error, stdout, stderr });
+            }
+        });
+    });
+}
+export async function resolveRepoRoot(folder, logger) {
+    const result = await runGit(["rev-parse", "--show-toplevel"], folder);
+    if (!result.ok) {
+        logger?.debug?.({ folder, err: result.error }, "Folder is not a Git repository; using workspace folder as root");
+        return { repoRoot: folder, isGitRepo: false };
+    }
+    const repoRoot = result.stdout.trim();
+    if (!repoRoot) {
+        return { repoRoot: folder, isGitRepo: false };
+    }
+    return { repoRoot, isGitRepo: true };
+}
+function parseWorktreePorcelain(output) {
+    const records = [];
+    const lines = output.split(/\r?\n/);
+    let current = {};
+    const flush = () => {
+        if (current.worktree) {
+            records.push({ worktree: current.worktree, branch: current.branch });
+        }
+        current = {};
+    };
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed) {
+            flush();
+            continue;
+        }
+        const [key, ...rest] = trimmed.split(" ");
+        const value = rest.join(" ").trim();
+        if (key === "worktree") {
+            current.worktree = value;
+        }
+        else if (key === "branch") {
+            // branch is like refs/heads/foo
+            current.branch = value.replace(/^refs\/heads\//, "");
+        }
+        else if (key === "HEAD") {
+            current.head = value;
+        }
+        else if (key === "detached") {
+            current.detached = true;
+        }
+    }
+    flush();
+    return records;
+}
+export async function listWorktrees(params) {
+    const { repoRoot, workspaceFolder, logger } = params;
+    const rootDescriptor = { slug: "root", directory: repoRoot, kind: "root" };
+    const result = await runGit(["worktree", "list", "--porcelain"], workspaceFolder);
+    if (!result.ok) {
+        logger?.debug?.({ repoRoot, err: result.error }, "Failed to list git worktrees; returning root only");
+        return [rootDescriptor];
+    }
+    const records = parseWorktreePorcelain(result.stdout);
+    const worktrees = [rootDescriptor];
+    const seen = new Set(["root"]);
+    const normalizeSlug = (record) => {
+        const branch = (record.branch ?? "").trim();
+        if (branch) {
+            return branch;
+        }
+        const head = (record.head ?? "").trim();
+        if (head && /^[0-9a-f]{7,40}$/i.test(head)) {
+            return `detached-${head.slice(0, 7)}`;
+        }
+        // Fallback: stable-ish identifier derived from directory basename.
+        const base = path.basename(record.worktree || "");
+        return base ? `worktree-${base}` : "worktree";
+    };
+    for (const record of records) {
+        const abs = record.worktree;
+        if (!abs || typeof abs !== "string")
+            continue;
+        // Skip the root record (we always expose it as slug="root").
+        if (path.resolve(abs) === path.resolve(repoRoot)) {
+            continue;
+        }
+        const slug = normalizeSlug(record);
+        if (!slug || slug === "root") {
+            continue;
+        }
+        if (seen.has(slug)) {
+            continue;
+        }
+        seen.add(slug);
+        worktrees.push({ slug, directory: abs, kind: "worktree", branch: record.branch });
+    }
+    return worktrees;
+}
+export function isValidWorktreeSlug(slug) {
+    if (!slug)
+        return false;
+    const trimmed = slug.trim();
+    if (!trimmed)
+        return false;
+    if (trimmed.length > 200)
+        return false;
+    // Disallow control characters; allow branch-like slugs including '/'.
+    if (/[\x00-\x1F\x7F]/.test(trimmed))
+        return false;
+    return true;
+}
+export async function createManagedWorktree(params) {
+    const { repoRoot, workspaceFolder, logger } = params;
+    const branch = params.slug.trim();
+    if (!branch || branch === "root" || !isValidWorktreeSlug(branch)) {
+        throw new Error("Invalid worktree slug");
+    }
+    const sanitizeDirName = (input) => {
+        const normalized = input
+            .trim()
+            .replace(/[\\/]+/g, "-")
+            .replace(/\s+/g, "-")
+            .replace(/[^a-zA-Z0-9_.-]+/g, "-")
+            .replace(/-{2,}/g, "-")
+            .replace(/^-+|-+$/g, "");
+        return normalized || "worktree";
+    };
+    const worktreesDir = path.join(repoRoot, ".codenomad", "worktrees");
+    const targetDir = path.join(worktreesDir, sanitizeDirName(branch));
+    await fsp.mkdir(worktreesDir, { recursive: true });
+    try {
+        const stat = await fsp.stat(targetDir);
+        if (stat.isDirectory()) {
+            throw new Error("Worktree directory already exists");
+        }
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "ENOENT") {
+            throw error;
+        }
+    }
+    logger?.debug?.({ slug: branch, branch, targetDir }, "Creating managed git worktree");
+    // Prefer creating a new branch from HEAD.
+    const first = await runGit(["worktree", "add", "-b", branch, targetDir, "HEAD"], workspaceFolder);
+    if (first.ok) {
+        return { slug: branch, directory: targetDir, branch };
+    }
+    const message = first.stderr?.toLowerCase() ?? first.error.message.toLowerCase();
+    if (message.includes("already exists")) {
+        // If the branch already exists, add worktree for that branch.
+        const second = await runGit(["worktree", "add", targetDir, branch], workspaceFolder);
+        if (second.ok) {
+            return { slug: branch, directory: targetDir, branch };
+        }
+        throw second.error;
+    }
+    throw first.error;
+}
+export async function removeWorktree(params) {
+    const { workspaceFolder, logger } = params;
+    const directory = (params.directory ?? "").trim();
+    if (!directory) {
+        throw new Error("Invalid worktree directory");
+    }
+    logger?.debug?.({ directory, force: Boolean(params.force) }, "Removing git worktree");
+    const args = ["worktree", "remove"];
+    if (params.force) {
+        args.push("--force");
+    }
+    args.push(directory);
+    const result = await runGit(args, workspaceFolder);
+    if (!result.ok) {
+        throw result.error;
+    }
+    // Best-effort cleanup of stale metadata.
+    await runGit(["worktree", "prune"], workspaceFolder).catch(() => undefined);
+}