@playcraft/cli 0.0.15 → 0.0.17

package/dist/agent/local-backend.js

@@ -20,6 +20,34 @@ function parseJson(s, fallback) {
         return fallback;
     }
 }
+/** 根据文件扩展名获取 Content-Type */
+const FILE_CONTENT_TYPES = {
+    '.js': 'application/javascript',
+    '.mjs': 'application/javascript',
+    '.json': 'application/json',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.webp': 'image/webp',
+    '.gif': 'image/gif',
+    '.glb': 'model/gltf-binary',
+    '.gltf': 'model/gltf+json',
+    '.mp3': 'audio/mpeg',
+    '.wav': 'audio/wav',
+    '.ogg': 'audio/ogg',
+    '.css': 'text/css',
+    '.html': 'text/html',
+    '.txt': 'text/plain',
+    '.wasm': 'application/wasm',
+    '.ttf': 'font/ttf',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.hdr': 'application/octet-stream',
+};
+function getContentType(filename) {
+    const ext = path.extname(filename).toLowerCase();
+    return FILE_CONTENT_TYPES[ext] || 'application/octet-stream';
+}
 export function createLocalBackendRouter(options) {
     const router = express.Router();
     router.use(express.json({ limit: '50mb' }));
@@ -53,14 +81,19 @@ export function createLocalBackendRouter(options) {
     });
     // Health
     router.get('/health', (_req, res) => res.json({ ok: true, service: 'agent-backend' }));
-    // Projects
+    // Projects — local mode only has one project; always return it regardless of requested ID
     router.get('/projects/:id', async (req, res) => {
-        const id = req.params.id;
-        const [row] = await db.select().from(schema.projectsSqlite).where(eq(schema.projectsSqlite.id, id));
+        const requestedId = req.params.id;
+        // Always query the single local project (options.projectId), not the URL id
+        const [row] = await db.select().from(schema.projectsSqlite).where(eq(schema.projectsSqlite.id, options.projectId));
         if (!row)
             return res.status(404).json({ error: 'Project not found' });
+        // 使用数据库记录的 id，如果请求 ID 是数字则作为 numericId
+        // SQLite schema 中 projects 表没有 numericId 字段，只能从 requestedId 解析
+        const numericId = parseInt(requestedId, 10) || 0;
         const project = {
             id: row.id,
+            numericId, // toRecord uses numericId for the numeric business ID
             externalId: row.externalId,
             name: row.name,
             description: row.description,
@@ -90,18 +123,60 @@ export function createLocalBackendRouter(options) {
         const sceneMeta = await fsBackend.getScene(id);
         if (!sceneMeta)
             return res.status(404).json({ error: 'Scene not found' });
+        // Launch mode: fakeConnection.subscribe() fetches this endpoint and uses
+        // the response directly as scene.data (ShareDB snapshot format).
+        // The snapshot must contain { entities, settings, name } — the full scene file.
+        const sceneData = await fsBackend.getSceneData(id);
+        if (sceneData) {
+            // Return full scene data (entities + settings) — same as ShareDB snapshot
+            return res.json(sceneData);
+        }
+        // Fallback: return metadata only (for non-Launch API consumers)
+        const rawId = sceneMeta.id ?? id;
+        const numericId = typeof rawId === 'number' ? rawId : (parseInt(String(rawId), 10) || 0);
         const sceneRecord = {
-            id: sceneMeta.id ?? id,
-            numericId: typeof sceneMeta.id === 'number' ? sceneMeta.id : (sceneMeta.numericId ?? 0),
+            id: rawId,
+            numericId,
             externalId: sceneMeta.externalId ?? null,
             projectId: sceneMeta.projectId ?? options.projectId,
             name: sceneMeta.name ?? 'Untitled',
             data: sceneMeta.data,
-            createdAt: sceneMeta.createdAt,
-            updatedAt: sceneMeta.updatedAt,
+            createdAt: sceneMeta.createdAt ? new Date(sceneMeta.createdAt) : new Date(),
+            updatedAt: sceneMeta.updatedAt ? new Date(sceneMeta.updatedAt) : new Date(),
         };
         return res.json({ result: SceneModel.toRecord(sceneRecord) });
     });
+    // Project scenes list (needed by Launch route.ts SSR)
+    router.get('/projects/:projectId/scenes', async (req, res) => {
+        const scenes = await fsBackend.getScenes();
+        const defaultDate = new Date();
+        const out = scenes.map((s) => {
+            const rawId = s.id;
+            const numericId = typeof rawId === 'number' ? rawId : (parseInt(String(rawId), 10) || 0);
+            const sceneRecord = {
+                id: rawId,
+                numericId,
+                externalId: s.externalId ?? null,
+                projectId: s.projectId ?? options.projectId,
+                name: s.name ?? 'Untitled',
+                data: undefined,
+                createdAt: s.createdAt ? new Date(s.createdAt) : defaultDate,
+                updatedAt: s.updatedAt ? new Date(s.updatedAt) : defaultDate,
+            };
+            return SceneModel.toRecord(sceneRecord);
+        });
+        return res.json(out);
+    });
+    // Auth session stub (needed by Launch route.ts SSR)
+    router.get('/auth-session', (_req, res) => {
+        return res.json({
+            user: {
+                id: 'local-user',
+                name: 'Local Developer',
+                email: 'local@dev',
+            }
+        });
+    });
     router.post('/scenes', async (req, res) => {
         const { projectId, name } = req.body || {};
         if (!projectId || !name)
@@ -115,7 +190,7 @@ export function createLocalBackendRouter(options) {
             externalId: null,
             projectId,
             name,
-            dataJson: JSON.stringify(SceneModel.getDefaultData(numericId)),
+            dataJson: JSON.stringify(SceneModel.getDefaultData(numericId, name)),
             createdAt: now,
             updatedAt: now,
         });
@@ -133,6 +208,73 @@ export function createLocalBackendRouter(options) {
         options.onEmit?.('scene.create', { scene: SceneModel.toRecord(scene) }, projectId);
         return res.json({ result: SceneModel.toRecord(scene) });
     });
+    // Project-level assets (used by code editor: GET /projects/:id/assets?view=codeeditor)
+    router.get('/projects/:projectId/assets', async (req, res) => {
+        const projectId = String(req.params.projectId || options.projectId);
+        const view = String(req.query.view || 'designer');
+        const assets = await fsBackend.getAssets();
+        const out = assets.map((a, index) => {
+            const file = a.file ?? {};
+            let numericId;
+            if (typeof a.numericId === 'number' && a.numericId > 0) {
+                numericId = a.numericId;
+            }
+            else if (typeof a.id === 'number' && a.id > 0) {
+                numericId = a.id;
+            }
+            else {
+                numericId = 30000000 + index;
+            }
+            let assetPath = [];
+            if (view === 'codeeditor') {
+                // Code editor needs path as array of folder IDs
+                if (Array.isArray(a.path)) {
+                    assetPath = a.path.filter((p) => typeof p === 'number' || (typeof p === 'string' && /^\d+$/.test(p)));
+                }
+            }
+            else {
+                // Designer mode: path stays as-is
+                if (Array.isArray(a.path)) {
+                    assetPath = a.path.filter((p) => typeof p === 'number' || (typeof p === 'string' && /^\d+$/.test(p)));
+                }
+            }
+            const row = {
+                id: a.id ?? a.uniqueId ?? String(numericId),
+                numericId,
+                externalId: a.externalId ?? null,
+                projectId: a.projectId ?? projectId,
+                name: a.name ?? 'asset',
+                type: a.type ?? 'unknown',
+                tags: a.tags ?? [],
+                path: assetPath,
+                data: a.data ?? {},
+                preload: a.preload !== false,
+                exclude: a.exclude ?? false,
+                source: a.source,
+                sourceId: a.sourceId,
+                i18n: a.i18n ?? {},
+                task: a.task ?? null,
+                meta: a.meta ?? null,
+                revision: a.revision ?? 1,
+                fileFilename: file.filename ?? file.fileFilename ?? null,
+                fileSize: file.size ?? file.fileSize ?? null,
+                fileHash: file.hash ?? file.fileHash ?? null,
+                fileUrl: file.url ?? file.fileUrl ?? null,
+                createdAt: a.createdAt ? new Date(a.createdAt) : new Date(),
+                modifiedAt: a.modifiedAt ? new Date(a.modifiedAt) : new Date(),
+            };
+            return AssetModel.toRecord(row);
+        });
+        // Editor expects a plain array when branchId or view is specified
+        if (req.query.branchId || req.query.view) {
+            return res.json(out);
+        }
+        return res.json({ result: out });
+    });
+    // Sync-to-git (no-op in local mode — files are already on disk)
+    router.post('/projects/:projectId/sync-to-git', async (_req, res) => {
+        return res.json({ success: true, message: 'Local mode: files are already on disk' });
+    });
     // Assets (file-system first for local dev)
     router.get('/assets/internal/:id/file', async (req, res) => {
         const secret = req.headers['x-internal-secret'];
@@ -159,17 +301,37 @@ export function createLocalBackendRouter(options) {
     router.get('/assets', async (req, res) => {
         const projectId = String(req.query.projectId || options.projectId);
         const assets = await fsBackend.getAssets();
-        const out = assets.map((a) => {
+        const out = assets.map((a, index) => {
             const file = a.file ?? {};
+            // 处理 id：优先使用 numericId，其次 id（如果是数字），最后生成一个
+            let numericId;
+            if (typeof a.numericId === 'number' && a.numericId > 0) {
+                numericId = a.numericId;
+            }
+            else if (typeof a.id === 'number' && a.id > 0) {
+                numericId = a.id;
+            }
+            else {
+                // 基于索引生成稳定的 numericId
+                numericId = 30000000 + index;
+            }
+            // 处理 path：PlayCraft manifest.json 中 path 可能是文件路径字符串，需要转换为数组
+            // 根目录资产的 path 应该是空数组 []
+            let assetPath = [];
+            if (Array.isArray(a.path)) {
+                // 如果是数组，检查是否是数字数组（文件夹 ID 列表）
+                assetPath = a.path.filter((p) => typeof p === 'number' || (typeof p === 'string' && /^\d+$/.test(p)));
+            }
+            // 如果 path 是字符串（文件路径如 "assets/xxx/file.png"），则视为根目录资产，path 为 []
             const row = {
-                id: a.id ?? a.uniqueId ?? '',
-                numericId: typeof a.id === 'number' ? a.id : (a.numericId ?? 0),
+                id: a.id ?? a.uniqueId ?? String(numericId),
+                numericId,
                 externalId: a.externalId ?? null,
                 projectId: a.projectId ?? projectId,
                 name: a.name ?? 'asset',
                 type: a.type ?? 'unknown',
                 tags: a.tags ?? [],
-                path: a.path ?? [],
+                path: assetPath,
                 data: a.data ?? {},
                 preload: a.preload !== false,
                 exclude: a.exclude ?? false,
@@ -294,23 +456,90 @@ export function createLocalBackendRouter(options) {
         return res.json({ ok: true });
     });
     router.get('/assets/:id/file/:filename', async (req, res) => {
-        // Minimal local file serving for editor compatibility.
+        const assetId = req.params.id;
         const filename = req.params.filename;
-        const full = path.join(options.projectDir, 'assets', filename);
+        // 安全检查：防止路径遍历攻击
+        // 禁止 filename 中包含 ".." 或绝对路径
+        if (filename.includes('..') || path.isAbsolute(filename)) {
+            return res.status(400).send('Invalid filename');
+        }
+        // Look up asset to find its treePath for correct file location
+        const asset = await fsBackend.getAsset(assetId);
+        let fullPath = null;
+        if (asset) {
+            // Build path using treePath (e.g. "scripts" -> "assets/scripts/follow-camera.js")
+            let treePath = asset.treePath;
+            if (treePath) {
+                // 安全检查：treePath 也不能包含 ".."
+                if (typeof treePath === 'string' && treePath.includes('..')) {
+                    return res.status(400).send('Invalid asset path');
+                }
+                // Resolve folder IDs in treePath to actual folder names
+                treePath = await fsBackend.resolveTreePathIds(treePath);
+                // treePath may or may not start with "assets/"
+                const base = treePath.startsWith('assets/') || treePath === 'assets' ? treePath : `assets/${treePath}`;
+                fullPath = path.join(options.projectDir, base, filename);
+            }
+        }
+        // Fallback: try flat assets/ directory
+        if (!fullPath) {
+            fullPath = path.join(options.projectDir, 'assets', filename);
+        }
+        // 安全检查：确保最终路径在项目目录内
+        const resolvedPath = path.resolve(fullPath);
+        const projectDirResolved = path.resolve(options.projectDir);
+        if (!resolvedPath.startsWith(projectDirResolved + path.sep)) {
+            return res.status(403).send('Access denied: path outside project directory');
+        }
         try {
-            const buf = await fs.readFile(full);
-            res.setHeader('Content-Type', 'application/octet-stream');
+            const buf = await fs.readFile(resolvedPath);
+            res.setHeader('Content-Type', getContentType(filename));
             res.send(buf);
         }
         catch (e) {
+            // If treePath-based lookup failed, try flat assets/ as final fallback
+            if (e?.code === 'ENOENT' && asset?.treePath) {
+                const flatPath = path.join(options.projectDir, 'assets', filename);
+                // 安全检查：回退路径也必须在项目目录内
+                const flatResolved = path.resolve(flatPath);
+                if (!flatResolved.startsWith(projectDirResolved + path.sep)) {
+                    return res.status(403).send('Access denied: path outside project directory');
+                }
+                try {
+                    const buf = await fs.readFile(flatResolved);
+                    res.setHeader('Content-Type', getContentType(filename));
+                    return res.send(buf);
+                }
+                catch {
+                    // fall through to 404
+                }
+            }
             if (e?.code === 'ENOENT')
                 return res.status(404).send('not found');
             return res.status(500).send('error');
         }
     });
     router.get('/assets/:id/file', async (req, res) => {
-        // Fallback when editor requests /assets/:id/file/:filename via other paths
-        return res.status(400).json({ error: 'filename required' });
+        // Fallback when no filename is provided in URL
+        // Look up asset to determine filename, then delegate to normal file serving
+        const assetId = req.params.id;
+        const asset = await fsBackend.getAsset(assetId);
+        if (!asset)
+            return res.status(404).json({ error: 'Asset not found' });
+        const filename = asset.file?.filename || asset.name;
+        if (!filename)
+            return res.status(400).json({ error: 'Cannot determine filename' });
+        // Redirect to the canonical URL with filename
+        const qs = req.url.includes('?') ? req.url.substring(req.url.indexOf('?')) : '';
+        return res.redirect(`/api/assets/${assetId}/file/${encodeURIComponent(filename)}${qs}`);
+    });
+    // Single asset metadata (used by fakeConnection subscribe for assets collection)
+    router.get('/assets/:id', async (req, res) => {
+        const assetId = req.params.id;
+        const asset = await fsBackend.getAsset(assetId);
+        if (!asset)
+            return res.status(404).json({ error: 'Asset not found' });
+        return res.json({ result: asset });
     });
     // Documents (code editor)
     router.post('/documents/:id/save', async (req, res) => {
@@ -347,6 +576,8 @@ export function createLocalBackendRouter(options) {
             const dir = path.dirname(fullPath);
             await fs.mkdir(dir, { recursive: true });
             await fs.writeFile(fullPath, content, 'utf-8');
+            // 通知 watcher 抑制此文件的变更通知（防止 save→watcher→reload 循环）
+            options.onFileWritten?.(filePath.replace(/\\/g, '/'));
             console.log(`[local-backend] ✅ Saved document: ${filePath}`);
             return res.json({ success: true, path: filePath });
         }