@pocketcoder/host 0.0.2

package/dist/utils/filename-validation.js

@@ -0,0 +1,55 @@
+/**
+ * Filename validation utilities.
+ * Rejects invalid characters and reserved names (Windows compatibility).
+ */
+import { ErrorCode } from "@pocketcoder/shared/constants";
+import { AppError } from "../errors/index.js";
+/** Characters forbidden in filenames across platforms. */
+// eslint-disable-next-line no-control-regex
+const INVALID_CHARS = /[<>:"|?*\x00-\x1f]/;
+/** Windows reserved device names (case-insensitive). */
+const RESERVED_NAMES = new Set([
+    "con",
+    "prn",
+    "aux",
+    "nul",
+    "com1",
+    "com2",
+    "com3",
+    "com4",
+    "com5",
+    "com6",
+    "com7",
+    "com8",
+    "com9",
+    "lpt1",
+    "lpt2",
+    "lpt3",
+    "lpt4",
+    "lpt5",
+    "lpt6",
+    "lpt7",
+    "lpt8",
+    "lpt9",
+]);
+/**
+ * Validates a filename (not a path — just the final component).
+ * Throws AppError with INVALID_FILENAME on failure.
+ */
+export function validateFilename(filename) {
+    if (!filename || filename.trim() === "") {
+        throw new AppError(ErrorCode.INVALID_FILENAME, "Filename cannot be empty");
+    }
+    if (filename === "." || filename === "..") {
+        throw new AppError(ErrorCode.INVALID_FILENAME, `"${filename}" is not a valid filename`);
+    }
+    if (INVALID_CHARS.test(filename)) {
+        throw new AppError(ErrorCode.INVALID_FILENAME, "Filename contains invalid characters");
+    }
+    // Check reserved names (with or without extension, e.g. "con" and "con.txt")
+    const nameWithoutExt = filename.split(".")[0].toLowerCase();
+    if (RESERVED_NAMES.has(nameWithoutExt)) {
+        throw new AppError(ErrorCode.INVALID_FILENAME, `"${filename}" is a reserved name`);
+    }
+}
+//# sourceMappingURL=filename-validation.js.map

package/dist/utils/filename-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filename-validation.js","sourceRoot":"","sources":["../../src/utils/filename-validation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,0DAA0D;AAC1D,4CAA4C;AAC5C,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,wDAAwD;AACxD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,QAAQ,2BAA2B,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;IACzF,CAAC;IAED,6EAA6E;IAC7E,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,QAAQ,sBAAsB,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,18 @@
+import pino from "pino";
+export type LogLevel = "debug" | "info" | "warn" | "error";
+/**
+ * Create a child logger with request context.
+ * Use this in request handlers to include requestId for tracing.
+ */
+export declare function createRequestLogger(requestId: string): typeof logger;
+export declare const logger: {
+    debug(message: string): void;
+    info(message: string): void;
+    warn(message: string): void;
+    error(message: string): void;
+    /**
+     * Create a child logger with additional bound context.
+     */
+    child(bindings: Record<string, unknown>): pino.Logger;
+};
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAGA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAwE3D;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,MAAM,CASpE;AAED,eAAO,MAAM,MAAM;mBACF,MAAM,GAAG,IAAI;kBAId,MAAM,GAAG,IAAI;kBAIb,MAAM,GAAG,IAAI;mBAIZ,MAAM,GAAG,IAAI;IAI5B;;OAEG;oBACa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM;CAGtD,CAAC"}

package/dist/utils/logger.js

@@ -0,0 +1,104 @@
+import { mkdirSync } from "node:fs";
+import { join } from "node:path";
+import pino from "pino";
+import { getLogDir } from "./paths.js";
+const VALID_LEVELS = new Set(["debug", "info", "warn", "error", "fatal", "trace"]);
+function resolveLevel() {
+    const env = process.env.LOG_LEVEL?.toLowerCase();
+    if (env && VALID_LEVELS.has(env)) {
+        // Map trace/fatal to closest supported level
+        if (env === "trace")
+            return "debug";
+        if (env === "fatal")
+            return "error";
+        return env;
+    }
+    return "info";
+}
+function buildTransports() {
+    const targets = [];
+    // File transport with daily rotation
+    const logDir = getLogDir();
+    try {
+        mkdirSync(logDir, { recursive: true });
+    }
+    catch {
+        // Best effort - directory may already exist
+    }
+    targets.push({
+        target: "pino-roll",
+        options: {
+            file: join(logDir, "daemon.log"),
+            frequency: "daily",
+            limit: { count: 7 },
+            mkdir: true,
+        },
+        level: "debug",
+    });
+    // Console transport: pretty in dev, JSON otherwise
+    const isDev = process.env.NODE_ENV !== "production";
+    if (isDev) {
+        targets.push({
+            target: "pino-pretty",
+            options: {
+                colorize: true,
+                translateTime: "SYS:yyyy-mm-dd HH:MM:ss.l",
+                ignore: "pid,hostname",
+            },
+            level: "debug",
+        });
+    }
+    else {
+        targets.push({
+            target: "pino/file",
+            options: { destination: 1 }, // stdout
+            level: "debug",
+        });
+    }
+    return { targets };
+}
+let pinoInstance;
+function getInstance() {
+    if (!pinoInstance) {
+        pinoInstance = pino({
+            level: resolveLevel(),
+            transport: buildTransports(),
+        });
+    }
+    return pinoInstance;
+}
+/**
+ * Create a child logger with request context.
+ * Use this in request handlers to include requestId for tracing.
+ */
+export function createRequestLogger(requestId) {
+    const child = getInstance().child({ requestId });
+    return {
+        debug: (message) => child.debug(message),
+        info: (message) => child.info(message),
+        warn: (message) => child.warn(message),
+        error: (message) => child.error(message),
+        child: (bindings) => child.child(bindings),
+    };
+}
+export const logger = {
+    debug(message) {
+        getInstance().debug(message);
+    },
+    info(message) {
+        getInstance().info(message);
+    },
+    warn(message) {
+        getInstance().warn(message);
+    },
+    error(message) {
+        getInstance().error(message);
+    },
+    /**
+     * Create a child logger with additional bound context.
+     */
+    child(bindings) {
+        return getInstance().child(bindings);
+    },
+};
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3F,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;IACjD,IAAI,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,6CAA6C;QAC7C,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QACpC,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QACpC,OAAO,GAAe,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,OAAO,GAAkC,EAAE,CAAC;IAElD,qCAAqC;IACrC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,OAAO,CAAC,IAAI,CAAC;QACX,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE;YACP,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;YAChC,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YACnB,KAAK,EAAE,IAAI;SACZ;QACD,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IACpD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,2BAA2B;gBAC1C,MAAM,EAAE,cAAc;aACvB;YACD,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,SAAS;YACtC,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,IAAI,YAAyB,CAAC;AAE9B,SAAS,WAAW;IAClB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,IAAI,CAAC;YAClB,KAAK,EAAE,YAAY,EAAE;YACrB,SAAS,EAAE,eAAe,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO;QACL,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,KAAK,EAAE,CAAC,QAAiC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,CAAC,OAAe;QACnB,WAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,WAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,WAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,WAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAiC;QACrC,OAAO,WAAW,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;CACF,CAAC"}

package/dist/utils/machine-info.d.ts

@@ -0,0 +1,6 @@
+import type { MachineMetadata } from "@pocketcoder/shared";
+/**
+ * Collect machine metadata for daemon registration.
+ */
+export declare function getMachineMetadata(label?: string | null): MachineMetadata;
+//# sourceMappingURL=machine-info.d.ts.map

package/dist/utils/machine-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-info.d.ts","sourceRoot":"","sources":["../../src/utils/machine-info.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA2B3D;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,GAAE,MAAM,GAAG,IAAW,GAAG,eAAe,CAQ/E"}

package/dist/utils/machine-info.js

@@ -0,0 +1,38 @@
+import { hostname, platform, release, userInfo } from "node:os";
+/**
+ * Get a human-readable OS version string.
+ */
+function getOsVersion() {
+    const p = platform();
+    const r = release();
+    switch (p) {
+        case "darwin": {
+            // Darwin kernel versions map to macOS versions (e.g., 23.x → macOS 14)
+            const major = parseInt(r.split(".")[0], 10);
+            if (!isNaN(major) && major >= 20) {
+                const macMajor = major - 9; // Darwin 20 = macOS 11
+                return `macOS ${macMajor}`;
+            }
+            return `macOS (${r})`;
+        }
+        case "linux":
+            return `Linux ${r}`;
+        case "win32":
+            return `Windows ${r}`;
+        default:
+            return `${p} ${r}`;
+    }
+}
+/**
+ * Collect machine metadata for daemon registration.
+ */
+export function getMachineMetadata(label = null) {
+    return {
+        os: platform(),
+        osVersion: getOsVersion(),
+        hostname: hostname(),
+        username: userInfo().username,
+        label,
+    };
+}
+//# sourceMappingURL=machine-info.js.map

package/dist/utils/machine-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-info.js","sourceRoot":"","sources":["../../src/utils/machine-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAIhE;;GAEG;AACH,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,uEAAuE;YACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB;gBACnD,OAAO,SAAS,QAAQ,EAAE,CAAC;YAC7B,CAAC;YACD,OAAO,UAAU,CAAC,GAAG,CAAC;QACxB,CAAC;QACD,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,EAAE,CAAC;QACxB;YACE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB,IAAI;IAC5D,OAAO;QACL,EAAE,EAAE,QAAQ,EAAkC;QAC9C,SAAS,EAAE,YAAY,EAAE;QACzB,QAAQ,EAAE,QAAQ,EAAE;QACpB,QAAQ,EAAE,QAAQ,EAAE,CAAC,QAAQ;QAC7B,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/utils/machine-key.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Get or create a stable machine key for this host.
+ *
+ * On first run, generates a random 64-character hex string and stores it
+ * in the config directory. On subsequent runs, returns the stored key.
+ *
+ * The key is stored separately from auth.json so it persists even when
+ * tokens are cleared (logout/re-login).
+ */
+export declare function getMachineKey(): Promise<string>;
+/**
+ * Delete the stored machine key file.
+ * Used during logout to force key regeneration on next login.
+ */
+export declare function deleteMachineKey(): Promise<void>;
+/**
+ * Validate that a string is a valid machine key (32+ byte hex string = 64+ chars).
+ */
+export declare function isValidMachineKey(key: string): boolean;
+//# sourceMappingURL=machine-key.d.ts.map

package/dist/utils/machine-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-key.d.ts","sourceRoot":"","sources":["../../src/utils/machine-key.ts"],"names":[],"mappings":"AAsBA;;;;;;;;GAQG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAsBrD;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMtD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD"}

package/dist/utils/machine-key.js

@@ -0,0 +1,66 @@
+import { randomBytes } from "node:crypto";
+import { readFile, writeFile, mkdir, unlink } from "node:fs/promises";
+import { dirname } from "node:path";
+import { getConfigDir } from "./paths.js";
+const KEY_FILENAME = "machine-key";
+/**
+ * Get the path to the machine key file.
+ */
+function getMachineKeyPath() {
+    return `${getConfigDir()}/${KEY_FILENAME}`;
+}
+/**
+ * Generate a new 32-byte hex machine key.
+ */
+function generateKey() {
+    return randomBytes(32).toString("hex");
+}
+/**
+ * Get or create a stable machine key for this host.
+ *
+ * On first run, generates a random 64-character hex string and stores it
+ * in the config directory. On subsequent runs, returns the stored key.
+ *
+ * The key is stored separately from auth.json so it persists even when
+ * tokens are cleared (logout/re-login).
+ */
+export async function getMachineKey() {
+    const keyPath = getMachineKeyPath();
+    // Try to read existing key
+    try {
+        const content = await readFile(keyPath, "utf-8");
+        const key = content.trim();
+        if (isValidMachineKey(key)) {
+            return key;
+        }
+        // Invalid key file — regenerate
+    }
+    catch {
+        // File doesn't exist — generate new key
+    }
+    // Generate and persist new key
+    const key = generateKey();
+    await mkdir(dirname(keyPath), { recursive: true });
+    const mode = process.platform === "win32" ? undefined : 0o600;
+    await writeFile(keyPath, key + "\n", { mode });
+    return key;
+}
+/**
+ * Delete the stored machine key file.
+ * Used during logout to force key regeneration on next login.
+ */
+export async function deleteMachineKey() {
+    try {
+        await unlink(getMachineKeyPath());
+    }
+    catch {
+        // Ignore if file doesn't exist
+    }
+}
+/**
+ * Validate that a string is a valid machine key (32+ byte hex string = 64+ chars).
+ */
+export function isValidMachineKey(key) {
+    return /^[0-9a-f]{64,}$/.test(key);
+}
+//# sourceMappingURL=machine-key.js.map

package/dist/utils/machine-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-key.js","sourceRoot":"","sources":["../../src/utils/machine-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC;;GAEG;AACH,SAAS,iBAAiB;IACxB,OAAO,GAAG,YAAY,EAAE,IAAI,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,WAAW;IAClB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAEpC,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC;QACb,CAAC;QACD,gCAAgC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,+BAA+B;IAC/B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC"}

package/dist/utils/path-sandbox.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Path sandboxing utilities for preventing directory traversal attacks.
+ * All filesystem operations must validate paths through these functions.
+ */
+/**
+ * Validates that a resolved path stays within the project root.
+ * Resolves symlinks to prevent symlink-based escapes.
+ * Throws AppError with OUTSIDE_PROJECT_ROOT if path escapes.
+ *
+ * @param projectRoot - Absolute path to the project root directory
+ * @param relativePath - Relative path within the project
+ * @returns The resolved absolute path
+ */
+export declare function validateProjectPath(projectRoot: string, relativePath: string): Promise<string>;
+/**
+ * Validates a path for writing (target may not exist yet).
+ * Checks the normalized path stays within the project root.
+ *
+ * @param projectRoot - Absolute path to the project root directory
+ * @param relativePath - Relative path within the project
+ * @returns The normalized absolute path
+ */
+export declare function validateParentPath(projectRoot: string, relativePath: string): Promise<string>;
+//# sourceMappingURL=path-sandbox.d.ts.map

package/dist/utils/path-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-sandbox.d.ts","sourceRoot":"","sources":["../../src/utils/path-sandbox.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAoCjB;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAejB"}

package/dist/utils/path-sandbox.js

@@ -0,0 +1,69 @@
+/**
+ * Path sandboxing utilities for preventing directory traversal attacks.
+ * All filesystem operations must validate paths through these functions.
+ */
+import { realpath } from "node:fs/promises";
+import { resolve } from "node:path";
+import { ErrorCode } from "@pocketcoder/shared/constants";
+import { AppError } from "../errors/index.js";
+/**
+ * Validates that a resolved path stays within the project root.
+ * Resolves symlinks to prevent symlink-based escapes.
+ * Throws AppError with OUTSIDE_PROJECT_ROOT if path escapes.
+ *
+ * @param projectRoot - Absolute path to the project root directory
+ * @param relativePath - Relative path within the project
+ * @returns The resolved absolute path
+ */
+export async function validateProjectPath(projectRoot, relativePath) {
+    const resolvedRoot = await realpath(projectRoot);
+    // Reject absolute paths that don't start with the project root
+    if (relativePath.startsWith("/") || relativePath.startsWith("\\")) {
+        throw new AppError(ErrorCode.OUTSIDE_PROJECT_ROOT, "Absolute paths are not allowed");
+    }
+    const targetPath = resolve(resolvedRoot, relativePath);
+    let resolvedTarget;
+    try {
+        resolvedTarget = await realpath(targetPath);
+    }
+    catch (err) {
+        // If file doesn't exist, we can still check the normalized path
+        if (err &&
+            typeof err === "object" &&
+            "code" in err &&
+            err.code === "ENOENT") {
+            // Normalize to remove .. segments and check
+            const normalized = resolve(targetPath);
+            if (!normalized.startsWith(resolvedRoot + "/") && normalized !== resolvedRoot) {
+                throw new AppError(ErrorCode.OUTSIDE_PROJECT_ROOT, "Path escapes project directory");
+            }
+            return normalized;
+        }
+        throw err;
+    }
+    if (!resolvedTarget.startsWith(resolvedRoot + "/") && resolvedTarget !== resolvedRoot) {
+        throw new AppError(ErrorCode.OUTSIDE_PROJECT_ROOT, "Path escapes project directory");
+    }
+    return resolvedTarget;
+}
+/**
+ * Validates a path for writing (target may not exist yet).
+ * Checks the normalized path stays within the project root.
+ *
+ * @param projectRoot - Absolute path to the project root directory
+ * @param relativePath - Relative path within the project
+ * @returns The normalized absolute path
+ */
+export async function validateParentPath(projectRoot, relativePath) {
+    const resolvedRoot = await realpath(projectRoot);
+    if (relativePath.startsWith("/") || relativePath.startsWith("\\")) {
+        throw new AppError(ErrorCode.OUTSIDE_PROJECT_ROOT, "Absolute paths are not allowed");
+    }
+    const targetPath = resolve(resolvedRoot, relativePath);
+    const normalized = resolve(targetPath);
+    if (!normalized.startsWith(resolvedRoot + "/") && normalized !== resolvedRoot) {
+        throw new AppError(ErrorCode.OUTSIDE_PROJECT_ROOT, "Path escapes project directory");
+    }
+    return normalized;
+}
+//# sourceMappingURL=path-sandbox.js.map

package/dist/utils/path-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-sandbox.js","sourceRoot":"","sources":["../../src/utils/path-sandbox.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB,EACnB,YAAoB;IAEpB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEjD,+DAA+D;IAC/D,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,cAAsB,CAAC;IAE3B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,gEAAgE;QAChE,IACE,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,MAAM,IAAI,GAAG;YACZ,GAAwB,CAAC,IAAI,KAAK,QAAQ,EAC3C,CAAC;YACD,4CAA4C;YAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAC9E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,IAAI,cAAc,KAAK,YAAY,EAAE,CAAC;QACtF,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,YAAoB;IAEpB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEjD,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAC9E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/utils/paths.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Returns the OS-specific config directory for PocketCoder.
+ *
+ * Can be overridden with POCKETCODER_CONFIG_DIR environment variable (for testing).
+ *
+ * macOS:   ~/Library/Application Support/pocketcoder
+ * Linux:   ~/.config/pocketcoder
+ * Windows: %APPDATA%/pocketcoder
+ */
+export declare function getConfigDir(): string;
+/** Returns path to auth.json within the config directory. */
+export declare function getAuthPath(): string;
+/** Returns path to daemon.db within the config directory. */
+export declare function getDbPath(): string;
+/** Returns path to logs directory. */
+export declare function getLogDir(): string;
+/** Returns path to daemon.pid file. */
+export declare function getPidPath(): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/utils/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAgBrC;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,sCAAsC;AACtC,wBAAgB,SAAS,IAAI,MAAM,CAMlC;AAED,uCAAuC;AACvC,wBAAgB,UAAU,IAAI,MAAM,CAMnC"}

package/dist/utils/paths.js

@@ -0,0 +1,52 @@
+import { homedir, platform } from "node:os";
+import { join } from "node:path";
+/**
+ * Returns the OS-specific config directory for PocketCoder.
+ *
+ * Can be overridden with POCKETCODER_CONFIG_DIR environment variable (for testing).
+ *
+ * macOS:   ~/Library/Application Support/pocketcoder
+ * Linux:   ~/.config/pocketcoder
+ * Windows: %APPDATA%/pocketcoder
+ */
+export function getConfigDir() {
+    // Allow override for testing
+    if (process.env.POCKETCODER_CONFIG_DIR) {
+        return process.env.POCKETCODER_CONFIG_DIR;
+    }
+    const os = platform();
+    switch (os) {
+        case "darwin":
+            return join(homedir(), "Library", "Application Support", "pocketcoder");
+        case "win32":
+            return join(process.env.APPDATA ?? join(homedir(), "AppData", "Roaming"), "pocketcoder");
+        default:
+            // Linux and other Unix-like systems
+            return join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"), "pocketcoder");
+    }
+}
+/** Returns path to auth.json within the config directory. */
+export function getAuthPath() {
+    return join(getConfigDir(), "auth.json");
+}
+/** Returns path to daemon.db within the config directory. */
+export function getDbPath() {
+    return join(getConfigDir(), "daemon.db");
+}
+/** Returns path to logs directory. */
+export function getLogDir() {
+    // Use config dir if overridden (for testing), otherwise use ~/.pocketcoder/logs
+    if (process.env.POCKETCODER_CONFIG_DIR) {
+        return join(process.env.POCKETCODER_CONFIG_DIR, "logs");
+    }
+    return join(homedir(), ".pocketcoder", "logs");
+}
+/** Returns path to daemon.pid file. */
+export function getPidPath() {
+    // Use config dir if overridden (for testing), otherwise use ~/.pocketcoder/
+    if (process.env.POCKETCODER_CONFIG_DIR) {
+        return join(process.env.POCKETCODER_CONFIG_DIR, "daemon.pid");
+    }
+    return join(homedir(), ".pocketcoder", "daemon.pid");
+}
+//# sourceMappingURL=paths.js.map

package/dist/utils/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY;IAC1B,6BAA6B;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC5C,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC;QAC1E,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;QAC3F;YACE,oCAAoC;YACpC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,SAAS;IACvB,gFAAgF;IAChF,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU;IACxB,4EAA4E;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC"}

package/dist/utils/pid.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Write the current process PID to the PID file.
+ */
+export declare function writePidFile(): Promise<void>;
+/**
+ * Read the PID from the PID file.
+ * Returns null if the file does not exist or cannot be read.
+ */
+export declare function readPidFile(): Promise<number | null>;
+/**
+ * Remove the PID file.
+ */
+export declare function removePidFile(): Promise<void>;
+/**
+ * Check if a process with the given PID is currently running.
+ */
+export declare function isProcessRunning(pid: number): boolean;
+/**
+ * Check if an existing daemon is already running.
+ * Reads the PID file and checks if that process is alive.
+ */
+export declare function checkExistingDaemon(): Promise<boolean>;
+//# sourceMappingURL=pid.d.ts.map

package/dist/utils/pid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.d.ts","sourceRoot":"","sources":["../../src/utils/pid.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAElD;AAED;;;GAGG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ1D;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAMnD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAI5D"}

package/dist/utils/pid.js

@@ -0,0 +1,57 @@
+import { readFile, writeFile, unlink } from "node:fs/promises";
+import { getPidPath } from "./paths.js";
+/**
+ * Write the current process PID to the PID file.
+ */
+export async function writePidFile() {
+    await writeFile(getPidPath(), String(process.pid), { mode: 0o644 });
+}
+/**
+ * Read the PID from the PID file.
+ * Returns null if the file does not exist or cannot be read.
+ */
+export async function readPidFile() {
+    try {
+        const content = await readFile(getPidPath(), "utf-8");
+        const pid = parseInt(content.trim(), 10);
+        return Number.isNaN(pid) ? null : pid;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Remove the PID file.
+ */
+export async function removePidFile() {
+    try {
+        await unlink(getPidPath());
+    }
+    catch {
+        // Ignore if file doesn't exist
+    }
+}
+/**
+ * Check if a process with the given PID is currently running.
+ */
+export function isProcessRunning(pid) {
+    try {
+        // Sending signal 0 checks for existence without killing
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check if an existing daemon is already running.
+ * Reads the PID file and checks if that process is alive.
+ */
+export async function checkExistingDaemon() {
+    const pid = await readPidFile();
+    if (pid === null)
+        return false;
+    return isProcessRunning(pid);
+}
+//# sourceMappingURL=pid.js.map

package/dist/utils/pid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.js","sourceRoot":"","sources":["../../src/utils/pid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,wDAAwD;QACxD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/utils/validate-project-path.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Project path validation for registration.
+ * Ensures paths are valid, accessible directories outside system locations.
+ */
+/**
+ * Validates a project path before registration.
+ * Normalizes, resolves symlinks, checks existence, verifies it's a directory,
+ * checks read permissions, and rejects system paths.
+ *
+ * @param pathArg - The path to validate (may be relative)
+ * @returns The resolved, normalized absolute path
+ * @throws AppError with PATH_NOT_FOUND if path doesn't exist
+ * @throws AppError with INVALID_REQUEST if path is not a directory or is a system path
+ * @throws AppError with PERMISSION_DENIED if path is not readable
+ */
+export declare function validateProjectPath(pathArg: string): Promise<string>;
+//# sourceMappingURL=validate-project-path.d.ts.map

package/dist/utils/validate-project-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-project-path.d.ts","sourceRoot":"","sources":["../../src/utils/validate-project-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgEH;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsD1E"}