@plusplusoneplusplus/coc 1.0.0

package/dist/server/pipelines-handler.js

@@ -0,0 +1,792 @@
+"use strict";
+/**
+ * Pipelines REST API Handler
+ *
+ * HTTP API routes for pipeline CRUD operations: list (enriched),
+ * read/write YAML content, create from template, and delete.
+ *
+ * Mirrors tasks-handler.ts pattern (separate read + write registration).
+ * No VS Code dependencies - uses only Node.js built-in modules.
+ * Cross-platform compatible (Linux/Mac/Windows).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractYamlFromResponse = extractYamlFromResponse;
+exports.registerPipelineRoutes = registerPipelineRoutes;
+exports.registerPipelineWriteRoutes = registerPipelineWriteRoutes;
+const url = __importStar(require("url"));
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const yaml = __importStar(require("js-yaml"));
+const pipeline_core_1 = require("@plusplusoneplusplus/pipeline-core");
+const coc_server_1 = require("@plusplusoneplusplus/coc-server");
+const coc_server_2 = require("@plusplusoneplusplus/coc-server");
+const validate_1 = require("../commands/validate");
+// ============================================================================
+// Constants
+// ============================================================================
+const DEFAULT_PIPELINES_FOLDER = '.vscode/pipelines';
+// ============================================================================
+// Pipeline Templates
+// ============================================================================
+const TEMPLATES = {
+    custom: `name: "My Pipeline"
+description: "A custom pipeline"
+
+input:
+  type: csv
+  path: "input.csv"
+
+map:
+  prompt: |
+    Analyze: {{title}}
+    Return JSON with your analysis.
+  output:
+    - result
+  parallel: 5
+
+reduce:
+  type: json
+`,
+    'data-fanout': `name: "Data Fanout Pipeline"
+description: "Process data items in parallel"
+
+input:
+  type: csv
+  path: "input.csv"
+
+map:
+  prompt: |
+    Process this item:
+    Title: {{title}}
+    Description: {{description}}
+
+    Return JSON with category and summary.
+  output:
+    - category
+    - summary
+  parallel: 10
+
+reduce:
+  type: table
+`,
+    'model-fanout': `name: "Model Fanout Pipeline"
+description: "Run the same prompt across multiple models"
+
+input:
+  type: csv
+  path: "input.csv"
+
+map:
+  prompt: |
+    Analyze: {{title}}
+    Provide a detailed assessment.
+  output:
+    - assessment
+    - confidence
+  parallel: 3
+
+reduce:
+  type: json
+`,
+    'ai-generated': `name: "AI Generated Pipeline"
+description: "Template for AI-generated pipelines"
+
+input:
+  type: csv
+  path: "input.csv"
+
+map:
+  prompt: |
+    {{title}}
+    {{description}}
+
+    Analyze and return structured JSON.
+  output:
+    - analysis
+  parallel: 5
+
+reduce:
+  type: json
+`,
+};
+// ============================================================================
+// Pipeline Schema Reference (embedded for AI prompt construction)
+// ============================================================================
+const PIPELINE_SCHEMA_REFERENCE = `# Pipeline YAML Schema Reference
+
+## Two Pipeline Modes (mutually exclusive)
+
+### Map-Reduce Mode (batch processing)
+\`\`\`yaml
+name: string                    # Required: Pipeline identifier
+input: InputConfig              # Required: Data source
+map: MapConfig                  # Required: Processing phase
+reduce: ReduceConfig            # Required: Aggregation phase
+parameters?: PipelineParameter[] # Optional: Top-level parameters
+\`\`\`
+
+### Single-Job Mode (one-shot AI call)
+\`\`\`yaml
+name: string                    # Required: Pipeline identifier
+job: JobConfig                  # Required: Single AI job definition
+parameters?: PipelineParameter[] # Optional: Template variable values
+\`\`\`
+
+Constraint: job and map are mutually exclusive.
+
+## Input Configuration (exactly ONE of)
+- items: inline array of objects
+- from: { type: csv, path: "file.csv" } OR array of { model: "model-name" }
+- generate: { prompt: string, schema: string[] }
+
+Common options: parameters (shared values), limit (max items)
+
+## Map Configuration
+- prompt: string (or promptFile: string) — exactly one required
+- output?: string[] — field names for JSON parsing (omit for text mode)
+- model?: string — AI model override
+- parallel?: number — concurrency (default: 5)
+- timeoutMs?: number — timeout per item (default: 600000ms)
+- batchSize?: number — items per AI call (default: 1; requires {{ITEMS}} if > 1)
+
+Template variables: {{fieldName}} from input items, {{ITEMS}} for batch, {{paramName}} from parameters
+
+## Reduce Configuration
+- type: 'list' | 'table' | 'json' | 'csv' | 'text' | 'ai'
+- For type='ai': prompt or promptFile required, optional output, model
+- Template variables: {{RESULTS}}, {{COUNT}}, {{SUCCESS_COUNT}}, {{FAILURE_COUNT}}
+
+## Job Configuration
+- prompt: string (or promptFile: string) — exactly one required
+- output?: string[] — field names for JSON parsing (omit for text mode)
+- model?: string — AI model override
+- Template variables: {{paramName}} from top-level parameters
+
+## Filter Configuration (optional, pre-processing)
+- type: 'rule' — rule-based with mode ('all'|'any') and rules array
+- type: 'ai' — AI-based with prompt, output must include 'include' field
+- type: 'hybrid' — combines rule + ai with combineMode ('and'|'or')
+
+## Parameters
+\`\`\`yaml
+parameters:
+  - name: string
+    value: string
+\`\`\`
+Available as {{name}} in prompts. CLI override: --param name=value
+
+## Key Rules
+- name is always required
+- job and map cannot coexist
+- input must have exactly ONE source type
+- map/job must have exactly ONE of prompt or promptFile
+- AI reduce requires a prompt
+- batchSize > 1 requires {{ITEMS}} in prompt
+- Use parallel: 3-5 for most tasks
+- Use reasonable timeouts (300s-900s depending on complexity)
+`;
+// ============================================================================
+// AI Response Helpers
+// ============================================================================
+/**
+ * Extract YAML content from an AI response that may contain markdown fences.
+ */
+function extractYamlFromResponse(response) {
+    // 1. Try to extract from ```yaml ... ``` code blocks
+    const yamlBlockMatch = response.match(/```(?:yaml|yml)\s*\n([\s\S]*?)```/);
+    if (yamlBlockMatch) {
+        return yamlBlockMatch[1].trim();
+    }
+    // 2. Try to extract from generic ``` ... ``` code blocks
+    const genericBlockMatch = response.match(/```\s*\n([\s\S]*?)```/);
+    if (genericBlockMatch) {
+        return genericBlockMatch[1].trim();
+    }
+    // 3. Assume the entire response is YAML (strip leading/trailing whitespace)
+    return response.trim();
+}
+const GENERATION_TIMEOUT_MS = 120000; // 2 min — pure text generation, no tool use
+// ============================================================================
+// Helpers
+// ============================================================================
+async function resolveWorkspace(store, id) {
+    const workspaces = await store.getWorkspaces();
+    return workspaces.find(w => w.id === id);
+}
+/**
+ * Resolve a user-supplied path against a base directory and validate
+ * that the result is inside (or equal to) the base directory.
+ * Returns the resolved absolute path, or null if the check fails.
+ */
+function resolveAndValidatePath(base, name) {
+    const resolved = path.resolve(base, name);
+    if ((0, pipeline_core_1.isWithinDirectory)(resolved, base)) {
+        return resolved;
+    }
+    return null;
+}
+/**
+ * Discover pipelines and enrich each with description and validation info.
+ */
+function discoverAndEnrichPipelines(pipelinesDir) {
+    const basic = (0, coc_server_2.discoverPipelines)(pipelinesDir);
+    return basic.map(p => {
+        const yamlPath = path.join(p.path, 'pipeline.yaml');
+        let description;
+        let isValid = false;
+        let validationErrors = [];
+        // Read description from raw YAML
+        try {
+            const content = fs.readFileSync(yamlPath, 'utf-8');
+            const parsed = yaml.load(content);
+            if (parsed && typeof parsed === 'object' && typeof parsed.description === 'string') {
+                description = parsed.description;
+            }
+        }
+        catch {
+            // Ignore read errors — validation will catch them
+        }
+        // Validate pipeline
+        try {
+            const result = (0, validate_1.validatePipeline)(yamlPath);
+            isValid = result.valid;
+            validationErrors = result.checks
+                .filter(c => c.status === 'fail')
+                .map(c => c.detail ?? c.label);
+        }
+        catch {
+            isValid = false;
+            validationErrors = ['Failed to validate pipeline'];
+        }
+        return { name: p.name, path: p.path, description, isValid, validationErrors };
+    });
+}
+// ============================================================================
+// Read Route Registration
+// ============================================================================
+/**
+ * Register pipeline read-only API routes on the given route table.
+ */
+function registerPipelineRoutes(routes, store) {
+    // ------------------------------------------------------------------
+    // GET /api/workspaces/:id/pipelines/:pipelineName/content
+    // Returns YAML content of a pipeline.
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'GET',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines\/([^/]+)\/content$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const pipelineName = decodeURIComponent(match[2]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            const parsed = url.parse(req.url || '/', true);
+            const folder = (typeof parsed.query.folder === 'string' && parsed.query.folder)
+                ? parsed.query.folder
+                : DEFAULT_PIPELINES_FOLDER;
+            const pipelinesDir = path.resolve(ws.rootPath, folder);
+            const resolvedDir = resolveAndValidatePath(pipelinesDir, pipelineName);
+            if (!resolvedDir) {
+                return (0, coc_server_1.sendError)(res, 403, 'Access denied: invalid pipeline name');
+            }
+            const yamlPath = path.join(resolvedDir, 'pipeline.yaml');
+            try {
+                const content = await fs.promises.readFile(yamlPath, 'utf-8');
+                (0, coc_server_1.sendJSON)(res, 200, { content, path: yamlPath });
+            }
+            catch (err) {
+                if (err.code === 'ENOENT') {
+                    return (0, coc_server_1.sendError)(res, 404, 'Pipeline not found');
+                }
+                return (0, coc_server_1.sendError)(res, 500, 'Failed to read pipeline: ' + (err.message || 'Unknown error'));
+            }
+        },
+    });
+    // ------------------------------------------------------------------
+    // GET /api/workspaces/:id/pipelines — List all pipelines (enriched)
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'GET',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            const parsed = url.parse(req.url || '/', true);
+            const folder = (typeof parsed.query.folder === 'string' && parsed.query.folder)
+                ? parsed.query.folder
+                : DEFAULT_PIPELINES_FOLDER;
+            const pipelinesDir = path.resolve(ws.rootPath, folder);
+            const pipelines = discoverAndEnrichPipelines(pipelinesDir);
+            (0, coc_server_1.sendJSON)(res, 200, { pipelines });
+        },
+    });
+}
+// ============================================================================
+// Write Route Registration
+// ============================================================================
+/**
+ * Register pipeline mutation API routes on the given route table.
+ */
+function registerPipelineWriteRoutes(routes, store, onPipelinesChanged, bridge, aiService) {
+    // ------------------------------------------------------------------
+    // POST /api/workspaces/:id/pipelines/generate — AI pipeline generation
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'POST',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines\/generate$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            let body;
+            try {
+                body = await (0, coc_server_1.parseBody)(req);
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 400, 'Invalid JSON body');
+            }
+            const { description, model } = body || {};
+            if (!description || typeof description !== 'string' || !description.trim()) {
+                return (0, coc_server_1.sendError)(res, 400, 'Missing required field: description');
+            }
+            const systemPrompt = `You are a pipeline YAML generator. You produce valid pipeline YAML configurations and nothing else.
+Output ONLY the raw YAML content. Do NOT wrap it in markdown code fences. Do NOT include any explanation before or after the YAML.
+The YAML must include a top-level "name" field. Choose a short, descriptive kebab-case name based on the user's requirement.
+
+${PIPELINE_SCHEMA_REFERENCE}`;
+            const userPrompt = `Generate a pipeline YAML configuration for the following requirement:\n\n${description.trim()}`;
+            try {
+                if (!aiService) {
+                    return (0, coc_server_1.sendError)(res, 503, 'AI service not configured');
+                }
+                const service = aiService;
+                const available = await service.isAvailable();
+                if (!available.available) {
+                    return (0, coc_server_1.sendError)(res, 503, 'AI service unavailable');
+                }
+                const result = await service.sendMessage({
+                    prompt: systemPrompt + '\n\n' + userPrompt,
+                    model: model || undefined,
+                    workingDirectory: ws.rootPath,
+                    timeoutMs: GENERATION_TIMEOUT_MS,
+                    onPermissionRequest: pipeline_core_1.denyAllPermissions,
+                });
+                if (!result.success) {
+                    return (0, coc_server_1.sendError)(res, 500, 'Pipeline generation failed: ' + (result.error || 'Unknown error'));
+                }
+                const raw = result.response || '';
+                const extractedYaml = extractYamlFromResponse(raw);
+                let valid = true;
+                let validationError;
+                try {
+                    yaml.load(extractedYaml);
+                }
+                catch (err) {
+                    valid = false;
+                    validationError = err.message || 'YAML parse error';
+                }
+                // Extract suggested name from the generated YAML
+                let suggestedName;
+                try {
+                    const parsed = yaml.load(extractedYaml);
+                    if (parsed && typeof parsed === 'object' && typeof parsed.name === 'string' && parsed.name.trim()) {
+                        suggestedName = parsed.name.trim()
+                            .toLowerCase()
+                            .replace(/[^a-z0-9]+/g, '-')
+                            .replace(/^-|-$/g, '');
+                    }
+                }
+                catch {
+                    // YAML parse already handled above — suggestedName stays undefined
+                }
+                (0, coc_server_1.sendJSON)(res, 200, { yaml: extractedYaml, raw, valid, validationError, suggestedName });
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                if (message.toLowerCase().includes('timeout')) {
+                    return (0, coc_server_1.sendError)(res, 504, 'Pipeline generation timed out');
+                }
+                return (0, coc_server_1.sendError)(res, 500, 'Pipeline generation failed: ' + message);
+            }
+        },
+    });
+    // ------------------------------------------------------------------
+    // POST /api/workspaces/:id/pipelines/refine — AI pipeline refinement
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'POST',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines\/refine$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            let body;
+            try {
+                body = await (0, coc_server_1.parseBody)(req);
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 400, 'Invalid JSON body');
+            }
+            const { currentYaml, instruction, model } = body || {};
+            if (!currentYaml || typeof currentYaml !== 'string' || !currentYaml.trim()) {
+                return (0, coc_server_1.sendError)(res, 400, 'Missing required field: currentYaml');
+            }
+            if (!instruction || typeof instruction !== 'string' || !instruction.trim()) {
+                return (0, coc_server_1.sendError)(res, 400, 'Missing required field: instruction');
+            }
+            // Validate that currentYaml is parseable YAML
+            try {
+                yaml.load(currentYaml);
+            }
+            catch (err) {
+                return (0, coc_server_1.sendError)(res, 400, 'Invalid YAML: ' + (err.message || 'Parse error'));
+            }
+            const systemPrompt = `You are a pipeline YAML editor. You modify existing pipeline YAML configurations based on user instructions.
+Output ONLY the complete modified YAML. Do NOT wrap in markdown code fences. Do NOT include any explanation before or after the YAML.
+
+${PIPELINE_SCHEMA_REFERENCE}`;
+            const userPrompt = `Here is the current pipeline YAML:
+
+${currentYaml.trim()}
+
+Apply the following change:
+
+${instruction.trim()}
+
+Return the complete modified pipeline YAML.`;
+            try {
+                if (!aiService) {
+                    return (0, coc_server_1.sendError)(res, 503, 'AI service not configured');
+                }
+                const service = aiService;
+                const available = await service.isAvailable();
+                if (!available.available) {
+                    return (0, coc_server_1.sendError)(res, 503, 'AI service unavailable');
+                }
+                const result = await service.sendMessage({
+                    prompt: systemPrompt + '\n\n' + userPrompt,
+                    model: model || undefined,
+                    workingDirectory: ws.rootPath,
+                    timeoutMs: GENERATION_TIMEOUT_MS,
+                    onPermissionRequest: pipeline_core_1.denyAllPermissions,
+                });
+                if (!result.success) {
+                    return (0, coc_server_1.sendError)(res, 500, 'Pipeline refinement failed: ' + (result.error || 'Unknown error'));
+                }
+                const raw = result.response || '';
+                const extractedYaml = extractYamlFromResponse(raw);
+                let valid = true;
+                let validationError;
+                try {
+                    yaml.load(extractedYaml);
+                }
+                catch (err) {
+                    valid = false;
+                    validationError = err.message || 'YAML parse error';
+                }
+                (0, coc_server_1.sendJSON)(res, 200, { yaml: extractedYaml, raw, valid, validationError });
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                if (message.toLowerCase().includes('timeout')) {
+                    return (0, coc_server_1.sendError)(res, 504, 'Pipeline refinement timed out');
+                }
+                return (0, coc_server_1.sendError)(res, 500, 'Pipeline refinement failed: ' + message);
+            }
+        },
+    });
+    // ------------------------------------------------------------------
+    // PATCH /api/workspaces/:id/pipelines/:pipelineName/content
+    // Update YAML content of a pipeline.
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'PATCH',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines\/([^/]+)\/content$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const pipelineName = decodeURIComponent(match[2]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            let body;
+            try {
+                body = await (0, coc_server_1.parseBody)(req);
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 400, 'Invalid JSON body');
+            }
+            const { content } = body || {};
+            if (content === undefined || content === null || typeof content !== 'string') {
+                return (0, coc_server_1.sendError)(res, 400, 'Missing required field: content');
+            }
+            // Validate YAML syntax
+            try {
+                yaml.load(content);
+            }
+            catch (err) {
+                return (0, coc_server_1.sendError)(res, 400, 'Invalid YAML: ' + (err.message || 'Parse error'));
+            }
+            const parsed = url.parse(req.url || '/', true);
+            const folder = (typeof parsed.query.folder === 'string' && parsed.query.folder)
+                ? parsed.query.folder
+                : DEFAULT_PIPELINES_FOLDER;
+            const pipelinesDir = path.resolve(ws.rootPath, folder);
+            const resolvedDir = resolveAndValidatePath(pipelinesDir, pipelineName);
+            if (!resolvedDir) {
+                return (0, coc_server_1.sendError)(res, 403, 'Access denied: invalid pipeline name');
+            }
+            const yamlPath = path.join(resolvedDir, 'pipeline.yaml');
+            // Ensure the pipeline directory exists
+            try {
+                await fs.promises.stat(yamlPath);
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 404, 'Pipeline not found');
+            }
+            try {
+                await fs.promises.writeFile(yamlPath, content, 'utf-8');
+                onPipelinesChanged?.(id);
+                (0, coc_server_1.sendJSON)(res, 200, { path: yamlPath });
+            }
+            catch (err) {
+                return (0, coc_server_1.sendError)(res, 500, 'Failed to write pipeline: ' + (err.message || 'Unknown error'));
+            }
+        },
+    });
+    // ------------------------------------------------------------------
+    // DELETE /api/workspaces/:id/pipelines/:pipelineName
+    // Delete a pipeline package directory recursively.
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'DELETE',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines\/([^/]+)$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const pipelineName = decodeURIComponent(match[2]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            const parsed = url.parse(req.url || '/', true);
+            const folder = (typeof parsed.query.folder === 'string' && parsed.query.folder)
+                ? parsed.query.folder
+                : DEFAULT_PIPELINES_FOLDER;
+            const pipelinesDir = path.resolve(ws.rootPath, folder);
+            const resolvedDir = resolveAndValidatePath(pipelinesDir, pipelineName);
+            if (!resolvedDir) {
+                return (0, coc_server_1.sendError)(res, 403, 'Access denied: invalid pipeline name');
+            }
+            // Check existence
+            try {
+                const stat = await fs.promises.stat(resolvedDir);
+                if (!stat.isDirectory()) {
+                    return (0, coc_server_1.sendError)(res, 404, 'Pipeline not found');
+                }
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 404, 'Pipeline not found');
+            }
+            try {
+                fs.rmSync(resolvedDir, { recursive: true, force: true });
+                onPipelinesChanged?.(id);
+                (0, coc_server_1.sendJSON)(res, 200, { deleted: pipelineName });
+            }
+            catch (err) {
+                return (0, coc_server_1.sendError)(res, 500, 'Failed to delete pipeline: ' + (err.message || 'Unknown error'));
+            }
+        },
+    });
+    // ------------------------------------------------------------------
+    // POST /api/workspaces/:id/pipelines — Create pipeline from template
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'POST',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines$/,
+        handler: async (req, res, match) => {
+            const id = decodeURIComponent(match[1]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            let body;
+            try {
+                body = await (0, coc_server_1.parseBody)(req);
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 400, 'Invalid JSON body');
+            }
+            const { name, template, content: bodyContent } = body || {};
+            if (!name || typeof name !== 'string' || !name.trim()) {
+                return (0, coc_server_1.sendError)(res, 400, 'Missing required field: name');
+            }
+            const trimmedName = name.trim();
+            // Block path separators and traversal
+            if (trimmedName.includes('/') || trimmedName.includes('\\') || trimmedName.includes('..')) {
+                return (0, coc_server_1.sendError)(res, 403, 'Access denied: invalid pipeline name');
+            }
+            const parsed = url.parse(req.url || '/', true);
+            const folder = (typeof parsed.query.folder === 'string' && parsed.query.folder)
+                ? parsed.query.folder
+                : DEFAULT_PIPELINES_FOLDER;
+            const pipelinesDir = path.resolve(ws.rootPath, folder);
+            const resolvedDir = resolveAndValidatePath(pipelinesDir, trimmedName);
+            if (!resolvedDir) {
+                return (0, coc_server_1.sendError)(res, 403, 'Access denied: invalid pipeline name');
+            }
+            // Check if directory already exists
+            try {
+                await fs.promises.stat(resolvedDir);
+                return (0, coc_server_1.sendError)(res, 409, 'Pipeline already exists');
+            }
+            catch {
+                // Expected — directory does not exist
+            }
+            let yamlContent;
+            let usedTemplate;
+            if (bodyContent && typeof bodyContent === 'string' && bodyContent.trim()) {
+                // Validate YAML syntax
+                try {
+                    yaml.load(bodyContent);
+                }
+                catch (err) {
+                    return (0, coc_server_1.sendError)(res, 400, 'Invalid YAML: ' + (err.message || 'Parse error'));
+                }
+                yamlContent = bodyContent;
+                usedTemplate = 'custom';
+            }
+            else {
+                const templateKey = (typeof template === 'string' && template) ? template : 'custom';
+                const templateContent = TEMPLATES[templateKey];
+                if (!templateContent) {
+                    return (0, coc_server_1.sendError)(res, 400, `Unknown template: ${templateKey}. Valid templates: ${Object.keys(TEMPLATES).join(', ')}`);
+                }
+                yamlContent = templateContent;
+                usedTemplate = templateKey;
+            }
+            try {
+                fs.mkdirSync(resolvedDir, { recursive: true });
+                fs.writeFileSync(path.join(resolvedDir, 'pipeline.yaml'), yamlContent, 'utf-8');
+                onPipelinesChanged?.(id);
+                (0, coc_server_1.sendJSON)(res, 201, { name: trimmedName, path: resolvedDir, template: usedTemplate });
+            }
+            catch (err) {
+                return (0, coc_server_1.sendError)(res, 500, 'Failed to create pipeline: ' + (err.message || 'Unknown error'));
+            }
+        },
+    });
+    // ------------------------------------------------------------------
+    // POST /api/workspaces/:id/pipelines/:name/run — Run a pipeline
+    // ------------------------------------------------------------------
+    routes.push({
+        method: 'POST',
+        pattern: /^\/api\/workspaces\/([^/]+)\/pipelines\/([^/]+)\/run$/,
+        handler: async (req, res, match) => {
+            if (!bridge) {
+                return (0, coc_server_1.sendError)(res, 503, 'Queue system not available');
+            }
+            const id = decodeURIComponent(match[1]);
+            const pipelineName = decodeURIComponent(match[2]);
+            const ws = await resolveWorkspace(store, id);
+            if (!ws) {
+                return (0, coc_server_1.sendError)(res, 404, 'Workspace not found');
+            }
+            const parsed = url.parse(req.url || '/', true);
+            const folder = (typeof parsed.query.folder === 'string' && parsed.query.folder)
+                ? parsed.query.folder
+                : DEFAULT_PIPELINES_FOLDER;
+            const pipelinesDir = path.resolve(ws.rootPath, folder);
+            const resolvedDir = resolveAndValidatePath(pipelinesDir, pipelineName);
+            if (!resolvedDir) {
+                return (0, coc_server_1.sendError)(res, 403, 'Access denied: invalid pipeline name');
+            }
+            const yamlPath = path.join(resolvedDir, 'pipeline.yaml');
+            try {
+                await fs.promises.stat(yamlPath);
+            }
+            catch {
+                return (0, coc_server_1.sendError)(res, 404, 'Pipeline not found');
+            }
+            // Parse optional body for overrides
+            let body = {};
+            try {
+                body = await (0, coc_server_1.parseBody)(req);
+            }
+            catch {
+                // Empty body is fine — all fields are optional
+            }
+            // Resolve MCP filter
+            let resolvedMcpServers;
+            if (Array.isArray(ws.enabledMcpServers)) {
+                const defaultMcp = (0, pipeline_core_1.loadDefaultMcpConfig)();
+                const allServers = defaultMcp.mcpServers;
+                resolvedMcpServers = Object.fromEntries(ws.enabledMcpServers
+                    .filter(key => key in allServers)
+                    .map(key => [key, allServers[key]]));
+            }
+            const payload = {
+                kind: 'run-pipeline',
+                pipelinePath: resolvedDir,
+                workingDirectory: ws.rootPath,
+                model: body?.model,
+                params: body?.params,
+                workspaceId: id,
+                mcpServers: resolvedMcpServers, // undefined when null (global config)
+            };
+            const taskInput = {
+                type: 'run-pipeline',
+                priority: body?.priority || 'normal',
+                payload: payload,
+                config: { model: body?.model },
+                displayName: `Run Pipeline: ${pipelineName}`,
+            };
+            bridge.getOrCreateBridge(ws.rootPath);
+            const queueManager = bridge.registry.getQueueForRepo(ws.rootPath);
+            const taskId = queueManager.enqueue(taskInput);
+            (0, coc_server_1.sendJSON)(res, 201, { taskId, pipelineName, queuedAt: Date.now() });
+        },
+    });
+}
+//# sourceMappingURL=pipelines-handler.js.map