@plusplusoneplusplus/coc 1.0.0

package/dist/server/api-handler.d.ts

@@ -0,0 +1,77 @@
+/**
+ * API Route Aggregator
+ *
+ * Thin router that delegates to focused route modules under routes/.
+ * Each module owns one HTTP concern (workspaces, git, processes, filesystem).
+ *
+ * Mirrors the `queue-handler.ts` pattern: shared state is created here
+ * and passed to each `registerXxxRoutes(routes, ctx)` call.
+ *
+ * Exports shared utilities (`sendJSON`, `sendError`, `parseBody`, etc.)
+ * consumed by other handler modules throughout the server layer.
+ */
+import * as http from 'http';
+import type { ProcessStore, ProcessFilter } from '@plusplusoneplusplus/forge';
+import type { Attachment, CreateTaskInput } from '@plusplusoneplusplus/forge';
+import type { Route } from './types';
+import type { ProcessWebSocketServer } from './websocket';
+/**
+ * Bridge interface for executing follow-up messages on existing AI sessions.
+ * The full implementation lives in `packages/coc` (queue-executor-bridge.ts)
+ * and will be moved in a later commit.
+ */
+export interface QueueExecutorBridge {
+    executeFollowUp(processId: string, message: string, attachments?: Attachment[], mode?: string, deliveryMode?: string): Promise<void>;
+    isSessionAlive(processId: string): Promise<boolean>;
+    /** Enqueue a task through the scheduler. When present, follow-ups are routed through the queue. */
+    enqueue?(input: CreateTaskInput): Promise<string>;
+    /** Find a task by its processId. Used to locate the parent chat task for follow-up re-activation. */
+    findTaskByProcessId?(processId: string): {
+        id: string;
+        type: string;
+        status: string;
+    } | undefined;
+    /** Requeue an existing task for a follow-up message (reuses the parent task instead of creating a ghost child). */
+    requeueForFollowUp?(taskId: string, prompt: string, attachments?: Attachment[], imageTempDir?: string, mode?: string, deliveryMode?: string): Promise<void>;
+    /** Cancel a running process by aborting its live AI session. */
+    cancelProcess?(processId: string): Promise<void>;
+}
+import { sendError } from './shared/router';
+/**
+ * Write a JSON response with the correct Content-Type header.
+ * @deprecated Use `sendJson(res, data, statusCode)` from `./shared/router` instead.
+ */
+export declare function sendJSON(res: http.ServerResponse, statusCode: number, data: unknown): void;
+export { sendError };
+/** Read and JSON-parse the request body. Rejects on invalid JSON with 400. */
+export declare function parseBody(req: http.IncomingMessage): Promise<any>;
+/**
+ * Extract filter parameters from URL query string into a typed ProcessFilter.
+ */
+export declare function parseQueryParams(reqUrl: string): ProcessFilter;
+/**
+ * Strip heavy fields from a process for lightweight list responses.
+ */
+export declare function stripExcludedFields(process: any, exclude?: string[]): any;
+/**
+ * Register all API routes on the given route table.
+ * Mutates the `routes` array in-place.
+ */
+export declare function registerApiRoutes(routes: Route[], store: ProcessStore, bridge?: QueueExecutorBridge, dataDir?: string, getWsServer?: () => ProcessWebSocketServer | undefined): void;
+/** Run a git command synchronously in the given directory. */
+export declare function execGitSync(args: string, cwd: string): string;
+/** Read a file's content from a specific commit, falling back to the first parent for deleted files. */
+export declare function readGitFileAtCommit(hash: string, filePath: string, cwd: string): {
+    content: string;
+    resolvedRef: string;
+};
+/**
+ * @deprecated Use `detectRemoteUrl` imported from `@plusplusoneplusplus/forge`.
+ */
+export { detectRemoteUrl, normalizeRemoteUrl } from '@plusplusoneplusplus/forge';
+/** Discover pipeline packages in a directory. Each subdirectory with a pipeline.yaml is a package. */
+export declare function discoverPipelines(pipelinesDir: string): Array<{
+    name: string;
+    path: string;
+}>;
+//# sourceMappingURL=api-handler.d.ts.map

package/dist/server/api-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-handler.d.ts","sourceRoot":"","sources":["../../src/server/api-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAK7B,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAkC,MAAM,4BAA4B,CAAC;AAE9G,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAQ1D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrI,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,mGAAmG;IACnG,OAAO,CAAC,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,qGAAqG;IACrG,mBAAmB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAClG,mHAAmH;IACnH,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5J,gEAAgE;IAChE,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAMD,OAAO,EAAY,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAE1F;AAED,OAAO,EAAE,SAAS,EAAE,CAAC;AAMrB,8EAA8E;AAC9E,wBAAsB,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,CAevE;AAQD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CA2D9D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAmBzE;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,CAkDpL;AAMD,8DAA8D;AAC9D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAkBzH;AAED;;GAEG;AACH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEjF,sGAAsG;AACtG,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAmB7F"}

package/dist/server/api-handler.js

@@ -0,0 +1,291 @@
+"use strict";
+/**
+ * API Route Aggregator
+ *
+ * Thin router that delegates to focused route modules under routes/.
+ * Each module owns one HTTP concern (workspaces, git, processes, filesystem).
+ *
+ * Mirrors the `queue-handler.ts` pattern: shared state is created here
+ * and passed to each `registerXxxRoutes(routes, ctx)` call.
+ *
+ * Exports shared utilities (`sendJSON`, `sendError`, `parseBody`, etc.)
+ * consumed by other handler modules throughout the server layer.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeRemoteUrl = exports.detectRemoteUrl = exports.sendError = void 0;
+exports.sendJSON = sendJSON;
+exports.parseBody = parseBody;
+exports.parseQueryParams = parseQueryParams;
+exports.stripExcludedFields = stripExcludedFields;
+exports.registerApiRoutes = registerApiRoutes;
+exports.execGitSync = execGitSync;
+exports.readGitFileAtCommit = readGitFileAtCommit;
+exports.discoverPipelines = discoverPipelines;
+const url = __importStar(require("url"));
+const path = __importStar(require("path"));
+const childProcess = __importStar(require("child_process"));
+const fs = __importStar(require("fs"));
+const forge_1 = require("@plusplusoneplusplus/forge");
+const skill_handler_1 = require("./skill-handler");
+const global_skill_handler_1 = require("./global-skill-handler");
+const server_logger_1 = require("./server-logger");
+const api_workspace_routes_1 = require("./routes/api-workspace-routes");
+const api_git_routes_1 = require("./routes/api-git-routes");
+const api_process_routes_1 = require("./routes/api-process-routes");
+const api_fs_routes_1 = require("./routes/api-fs-routes");
+// ============================================================================
+// Response Helpers
+// ============================================================================
+const router_1 = require("./shared/router");
+Object.defineProperty(exports, "sendError", { enumerable: true, get: function () { return router_1.sendError; } });
+/**
+ * Write a JSON response with the correct Content-Type header.
+ * @deprecated Use `sendJson(res, data, statusCode)` from `./shared/router` instead.
+ */
+function sendJSON(res, statusCode, data) {
+    (0, router_1.sendJson)(res, data, statusCode);
+}
+// ============================================================================
+// Request Helpers
+// ============================================================================
+/** Read and JSON-parse the request body. Rejects on invalid JSON with 400. */
+async function parseBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (chunk) => chunks.push(chunk));
+        req.on('end', () => {
+            try {
+                const raw = Buffer.concat(chunks).toString('utf-8').trim();
+                if (!raw) {
+                    resolve({});
+                    return;
+                }
+                resolve(JSON.parse(raw));
+            }
+            catch {
+                reject(new Error('Invalid JSON'));
+            }
+        });
+        req.on('error', reject);
+    });
+}
+/** Valid exclude field values for the `exclude` query parameter. */
+const VALID_EXCLUDE_FIELDS = new Set(['conversation', 'toolCalls']);
+/** Valid AIProcessStatus values for validation. */
+const VALID_STATUSES = new Set(['queued', 'running', 'completed', 'failed', 'cancelled']);
+/**
+ * Extract filter parameters from URL query string into a typed ProcessFilter.
+ */
+function parseQueryParams(reqUrl) {
+    const parsed = url.parse(reqUrl, true);
+    const query = parsed.query;
+    const filter = {};
+    if (typeof query.workspace === 'string' && query.workspace) {
+        filter.workspaceId = query.workspace;
+    }
+    if (typeof query.status === 'string' && query.status) {
+        const statuses = query.status
+            .split(',')
+            .map(s => s.trim())
+            .filter(s => VALID_STATUSES.has(s));
+        if (statuses.length > 0) {
+            filter.status = statuses;
+        }
+    }
+    if (typeof query.type === 'string' && query.type) {
+        filter.type = query.type;
+    }
+    if (typeof query.parentProcessId === 'string' && query.parentProcessId) {
+        filter.parentProcessId = query.parentProcessId;
+    }
+    if (typeof query.since === 'string' && query.since) {
+        const date = new Date(query.since);
+        if (!isNaN(date.getTime())) {
+            filter.since = date;
+        }
+    }
+    if (typeof query.limit === 'string' && query.limit) {
+        const limit = parseInt(query.limit, 10);
+        if (!isNaN(limit) && limit > 0) {
+            filter.limit = limit;
+        }
+    }
+    if (typeof query.offset === 'string' && query.offset) {
+        const offset = parseInt(query.offset, 10);
+        if (!isNaN(offset) && offset >= 0) {
+            filter.offset = offset;
+        }
+    }
+    if (typeof query.exclude === 'string' && query.exclude) {
+        const excludeFields = query.exclude
+            .split(',')
+            .map(s => s.trim())
+            .filter(s => VALID_EXCLUDE_FIELDS.has(s));
+        if (excludeFields.length > 0) {
+            filter.exclude = excludeFields;
+        }
+    }
+    return filter;
+}
+/**
+ * Strip heavy fields from a process for lightweight list responses.
+ */
+function stripExcludedFields(process, exclude) {
+    if (!exclude || exclude.length === 0)
+        return process;
+    if (exclude.includes('conversation')) {
+        const { conversationTurns, fullPrompt, result, structuredResult, ...lightweight } = process;
+        return lightweight;
+    }
+    if (exclude.includes('toolCalls')) {
+        if (process.conversationTurns) {
+            const turnsWithoutTools = process.conversationTurns.map((turn) => {
+                const { toolCalls, ...turnWithoutTools } = turn;
+                return turnWithoutTools;
+            });
+            return { ...process, conversationTurns: turnsWithoutTools };
+        }
+    }
+    return process;
+}
+// ============================================================================
+// Route Registration (thin aggregator)
+// ============================================================================
+/**
+ * Register all API routes on the given route table.
+ * Mutates the `routes` array in-place.
+ */
+function registerApiRoutes(routes, store, bridge, dataDir, getWsServer) {
+    // Wrap routes.push to automatically log API mutations (POST/PATCH/DELETE).
+    const MUTATION_METHODS = new Set(['POST', 'PATCH', 'DELETE']);
+    const _origPush = routes.push.bind(routes);
+    routes.push = (...items) => {
+        for (const route of items) {
+            const method = (route.method || 'GET').toUpperCase();
+            if (MUTATION_METHODS.has(method)) {
+                const orig = route.handler;
+                _origPush({
+                    ...route,
+                    handler: async (req, res, match) => {
+                        const pathname = url.parse(req.url || '/').pathname || '/';
+                        const parts = pathname.split('/').filter(Boolean);
+                        const resource = parts[1] || 'unknown';
+                        const id = parts[2] ? decodeURIComponent(parts[2]) : undefined;
+                        (0, server_logger_1.getServerLogger)().info({ method, resource, ...(id !== undefined ? { id } : {}) }, 'API mutation');
+                        return orig(req, res, match);
+                    },
+                });
+            }
+            else {
+                _origPush(route);
+            }
+        }
+        return routes.length;
+    };
+    try {
+        const gitOpsStore = new forge_1.GitOpsStore({ dataDir: dataDir ?? undefined });
+        gitOpsStore.markStaleRunningJobs().catch(() => { });
+        const ctx = { routes, store, bridge, dataDir, getWsServer, gitOpsStore };
+        (0, api_workspace_routes_1.registerApiWorkspaceRoutes)(ctx);
+        (0, api_git_routes_1.registerApiGitRoutes)(ctx);
+        (0, api_fs_routes_1.registerApiFsRoutes)(routes);
+        (0, api_process_routes_1.registerApiProcessRoutes)(ctx);
+        // Register global skill routes first so /skills/all is matched
+        // before the catch-all /skills/:name pattern in repo skill routes
+        if (dataDir) {
+            (0, global_skill_handler_1.registerGlobalSkillRoutes)(routes, store, dataDir);
+        }
+        (0, skill_handler_1.registerSkillRoutes)(routes, store, dataDir);
+    }
+    finally {
+        routes.push = _origPush;
+    }
+}
+// ============================================================================
+// Utility helpers (exported for use by other modules)
+// ============================================================================
+/** Run a git command synchronously in the given directory. */
+function execGitSync(args, cwd) {
+    return childProcess.execSync(`git ${args}`, { cwd, encoding: 'utf-8', timeout: 5000 }).trim();
+}
+/** Read a file's content from a specific commit, falling back to the first parent for deleted files. */
+function readGitFileAtCommit(hash, filePath, cwd) {
+    const refsToTry = [`${hash}:${filePath}`, `${hash}^:${filePath}`];
+    let lastError;
+    for (const resolvedRef of refsToTry) {
+        try {
+            const content = childProcess.execFileSync('git', ['show', resolvedRef], {
+                cwd,
+                encoding: 'utf-8',
+                timeout: 5000,
+            });
+            return { content, resolvedRef };
+        }
+        catch (error) {
+            lastError = error;
+        }
+    }
+    throw lastError instanceof Error ? lastError : new Error('Failed to read git file content');
+}
+/**
+ * @deprecated Use `detectRemoteUrl` imported from `@plusplusoneplusplus/forge`.
+ */
+var forge_2 = require("@plusplusoneplusplus/forge");
+Object.defineProperty(exports, "detectRemoteUrl", { enumerable: true, get: function () { return forge_2.detectRemoteUrl; } });
+Object.defineProperty(exports, "normalizeRemoteUrl", { enumerable: true, get: function () { return forge_2.normalizeRemoteUrl; } });
+/** Discover pipeline packages in a directory. Each subdirectory with a pipeline.yaml is a package. */
+function discoverPipelines(pipelinesDir) {
+    try {
+        if (!fs.existsSync(pipelinesDir) || !fs.statSync(pipelinesDir).isDirectory()) {
+            return [];
+        }
+        const entries = fs.readdirSync(pipelinesDir, { withFileTypes: true });
+        const pipelines = [];
+        for (const entry of entries) {
+            if (entry.isDirectory()) {
+                const yamlPath = path.join(pipelinesDir, entry.name, 'pipeline.yaml');
+                if (fs.existsSync(yamlPath)) {
+                    pipelines.push({ name: entry.name, path: path.join(pipelinesDir, entry.name) });
+                }
+            }
+        }
+        return pipelines;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=api-handler.js.map

package/dist/server/api-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-handler.js","sourceRoot":"","sources":["../../src/server/api-handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDH,4BAEC;AASD,8BAeC;AAWD,4CA2DC;AAKD,kDAmBC;AAUD,8CAkDC;AAOD,kCAEC;AAGD,kDAkBC;AAQD,8CAmBC;AA3RD,yCAA2B;AAC3B,2CAA6B;AAC7B,4DAA8C;AAC9C,uCAAyB;AAEzB,sDAAyD;AAGzD,mDAAsD;AACtD,iEAAmE;AAEnE,mDAAkD;AAClD,wEAA2E;AAC3E,4DAA+D;AAC/D,oEAAuE;AACvE,0DAA6D;AAqB7D,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,4CAAsD;AAU7C,0FAVU,kBAAS,OAUV;AARlB;;;GAGG;AACH,SAAgB,QAAQ,CAAC,GAAwB,EAAE,UAAkB,EAAE,IAAa;IAChF,IAAA,iBAAQ,EAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACpC,CAAC;AAID,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,8EAA8E;AACvE,KAAK,UAAU,SAAS,CAAC,GAAyB;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACf,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACtC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,oEAAoE;AACpE,MAAM,oBAAoB,GAAgB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;AAEjF,mDAAmD;AACnD,MAAM,cAAc,GAAgB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvG;;GAEG;AACH,SAAgB,gBAAgB,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACzD,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;aACxB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAsB,CAAC;QAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC7B,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAqB,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACxB,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QACzB,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO;aAC9B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC;QACnC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAY,EAAE,OAAkB;IAChE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAErD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;QAC5F,OAAO,WAAW,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE;gBAClE,MAAM,EAAE,SAAS,EAAE,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC;gBAChD,OAAO,gBAAgB,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;QAChE,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,MAAe,EAAE,KAAmB,EAAE,MAA4B,EAAE,OAAgB,EAAE,WAAsD;IAC1K,2EAA2E;IAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAc,CAAC,IAAI,GAAG,CAAC,GAAG,KAAc,EAAE,EAAE;QACzC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC3B,SAAS,CAAC;oBACN,GAAG,KAAK;oBACR,OAAO,EAAE,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAE,KAAwB,EAAE,EAAE;wBAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;wBAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;wBAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;wBACvC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC/D,IAAA,+BAAe,GAAE,CAAC,IAAI,CAClB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACzD,cAAc,CACjB,CAAC;wBACF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBACjC,CAAC;iBACJ,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,SAAS,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC,CAAC;IAEF,IAAI,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,mBAAW,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QACvE,WAAW,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAE1F,IAAA,iDAA0B,EAAC,GAAG,CAAC,CAAC;QAChC,IAAA,qCAAoB,EAAC,GAAG,CAAC,CAAC;QAC1B,IAAA,mCAAmB,EAAC,MAAM,CAAC,CAAC;QAC5B,IAAA,6CAAwB,EAAC,GAAG,CAAC,CAAC;QAE9B,+DAA+D;QAC/D,kEAAkE;QAClE,IAAI,OAAO,EAAE,CAAC;YACV,IAAA,gDAAyB,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IAAA,mCAAmB,EAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACN,MAAc,CAAC,IAAI,GAAG,SAAS,CAAC;IACrC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,sDAAsD;AACtD,+EAA+E;AAE/E,8DAA8D;AAC9D,SAAgB,WAAW,CAAC,IAAY,EAAE,GAAW;IACjD,OAAO,YAAY,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAClG,CAAC;AAED,wGAAwG;AACxG,SAAgB,mBAAmB,CAAC,IAAY,EAAE,QAAgB,EAAE,GAAW;IAC3E,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,GAAG,IAAI,KAAK,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,SAAkB,CAAC;IAEvB,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;gBACpE,GAAG;gBACH,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,SAAS,GAAG,KAAK,CAAC;QACtB,CAAC;IACL,CAAC;IAED,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAChG,CAAC;AAED;;GAEG;AACH,oDAAiF;AAAxE,wGAAA,eAAe,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAE5C,sGAAsG;AACtG,SAAgB,iBAAiB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3E,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,SAAS,GAA0C,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACtE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC"}

package/dist/server/base-comments-manager.d.ts

@@ -0,0 +1,96 @@
+/**
+ * BaseCommentsManager — shared CRUD layer for comment managers.
+ *
+ * Eliminates the ~70% duplication between TaskCommentsManager and
+ * DiffCommentsManager by providing generic, storage-key-agnostic
+ * implementations of getComments, writeComments, updateComment,
+ * deleteComment, getComment, addReply, and a protected addCommentCore
+ * helper.
+ *
+ * Sub-classes must implement:
+ *   - getWorkspaceDir(wsId)  — workspace-specific storage directory
+ *   - buildStorage(comments) — wraps comments in the concrete storage envelope
+ *
+ * No VS Code dependencies — uses only Node.js built-in modules.
+ * Cross-platform compatible (Linux/Mac/Windows).
+ */
+/** Minimal fields every comment must expose for base-class CRUD operations. */
+export interface BaseComment {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    replies?: BaseReply[];
+}
+/** Minimal fields every reply must expose. */
+export interface BaseReply {
+    id: string;
+    author: string;
+    text: string;
+    createdAt: string;
+    isAI?: boolean;
+}
+/**
+ * Validate a workspace ID to prevent path-traversal attacks.
+ * Permits only alphanumerics, hyphens, and underscores.
+ *
+ * Single source of truth — both TaskCommentsManager and
+ * DiffCommentsManager import this instead of defining their own copy.
+ */
+export declare function isValidWorkspaceId(wsId: string): boolean;
+/**
+ * Abstract base class that provides storage-key-agnostic CRUD operations
+ * for comment managers.
+ *
+ * @typeParam TComment - Concrete comment type (must extend BaseComment).
+ * @typeParam TReply   - Concrete reply type (must extend BaseReply).
+ */
+export declare abstract class BaseCommentsManager<TComment extends BaseComment, TReply extends BaseReply = BaseReply> {
+    /**
+     * Return the directory that holds comment JSON files for `wsId`.
+     * Called by getStorageFile, ensureWorkspaceDir, and getCommentCounts.
+     */
+    protected abstract getWorkspaceDir(wsId: string): string;
+    /**
+     * Wrap the comments array in the concrete storage envelope
+     * (e.g. `{ comments, settings: DEFAULT_SETTINGS }`).
+     * The result is serialised to JSON by writeComments.
+     */
+    protected abstract buildStorage(comments: TComment[]): unknown;
+    /** Get the storage file path for an opaque `key`. */
+    protected getStorageFile(wsId: string, key: string): string;
+    /** Ensure the workspace directory exists (synchronous). */
+    protected ensureWorkspaceDir(wsId: string): void;
+    /**
+     * Read all comments for a given `key`.
+     * Sub-classes may override (e.g. to add a legacy-path fallback).
+     */
+    getComments(wsId: string, key: string): Promise<TComment[]>;
+    /** Get a single comment by ID. Returns null if not found. */
+    getComment(wsId: string, key: string, id: string): Promise<TComment | null>;
+    /**
+     * Atomically write comments to the storage file for `key`.
+     * Uses the shared atomicWriteJSON helper (tmp → rename).
+     * atomicWriteJSON creates the parent directory automatically.
+     */
+    writeComments(wsId: string, key: string, comments: TComment[]): Promise<void>;
+    /**
+     * Shared core logic for adding a new comment.
+     * Generates a UUID and ISO timestamps, then writes atomically.
+     *
+     * Sub-classes call this from their own `addComment` method, which
+     * may compute the storage key from a type-specific argument (e.g.
+     * DiffCommentContext) and/or inject extra fields (e.g. `ephemeral`).
+     */
+    protected addCommentCore(wsId: string, key: string, commentData: Omit<TComment, 'id' | 'createdAt' | 'updatedAt'>): Promise<TComment>;
+    /** Update an existing comment. Returns null if not found. */
+    updateComment(wsId: string, key: string, id: string, updates: Partial<Omit<TComment, 'id' | 'createdAt'>>): Promise<TComment | null>;
+    /** Delete a comment. Returns false if not found. */
+    deleteComment(wsId: string, key: string, id: string): Promise<boolean>;
+    /** Add a reply to a comment. Returns null if the comment is not found. */
+    addReply(wsId: string, key: string, id: string, replyData: {
+        author: string;
+        text: string;
+        isAI?: boolean;
+    }): Promise<TReply | null>;
+}
+//# sourceMappingURL=base-comments-manager.d.ts.map

package/dist/server/base-comments-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-comments-manager.d.ts","sourceRoot":"","sources":["../../src/server/base-comments-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,8CAA8C;AAC9C,MAAM,WAAW,SAAS;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAClB;AAMD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAMD;;;;;;GAMG;AACH,8BAAsB,mBAAmB,CACrC,QAAQ,SAAS,WAAW,EAC5B,MAAM,SAAS,SAAS,GAAG,SAAS;IAEpC;;;OAGG;IACH,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAExD;;;;OAIG;IACH,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO;IAM9D,qDAAqD;IACrD,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;IAI3D,2DAA2D;IAC3D,SAAS,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAWhD;;;OAGG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAYjE,6DAA6D;IACvD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IASjF;;;;OAIG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnF;;;;;;;OAOG;cACa,cAAc,CAC1B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,GAC9D,OAAO,CAAC,QAAQ,CAAC;IAcpB,6DAA6D;IACvD,aAAa,CACf,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GACrD,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAe3B,oDAAoD;IAC9C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ5E,0EAA0E;IACpE,QAAQ,CACV,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAqB5B"}