@pocketcoder/host 0.0.2

package/dist/utils/validate-project-path.js

@@ -0,0 +1,109 @@
+/**
+ * Project path validation for registration.
+ * Ensures paths are valid, accessible directories outside system locations.
+ */
+import { access, realpath, stat } from "node:fs/promises";
+import { constants as fsConstants } from "node:fs";
+import { homedir } from "node:os";
+import { resolve } from "node:path";
+import { ErrorCode } from "@pocketcoder/shared/constants";
+import { AppError } from "../errors/index.js";
+/** System paths that should never be registered as projects. */
+const SYSTEM_PATHS_UNIX = [
+    "/bin",
+    "/boot",
+    "/dev",
+    "/etc",
+    "/lib",
+    "/lib64",
+    "/proc",
+    "/root",
+    "/sbin",
+    "/sys",
+    "/usr",
+];
+/** macOS-specific system paths (symlinks resolve to /private/...) */
+const SYSTEM_PATHS_MACOS = ["/private/etc"];
+const SYSTEM_PATHS_WINDOWS = ["C:\\Windows", "C:\\Program Files", "C:\\Program Files (x86)"];
+/**
+ * Checks whether a resolved path is within a system directory.
+ * Note: /var is NOT blocked because macOS uses /var/folders/ for user temp directories.
+ */
+function isSystemPath(resolvedPath) {
+    const isWin = process.platform === "win32";
+    const isMac = process.platform === "darwin";
+    let systemPaths;
+    if (isWin) {
+        systemPaths = SYSTEM_PATHS_WINDOWS;
+    }
+    else if (isMac) {
+        // On macOS, also check /private/etc (symlink resolution)
+        systemPaths = [...SYSTEM_PATHS_UNIX, ...SYSTEM_PATHS_MACOS];
+    }
+    else {
+        systemPaths = SYSTEM_PATHS_UNIX;
+    }
+    const normalizedTarget = isWin ? resolvedPath.toLowerCase() : resolvedPath;
+    for (const sysPath of systemPaths) {
+        const normalizedSys = isWin ? sysPath.toLowerCase() : sysPath;
+        if (normalizedTarget === normalizedSys || normalizedTarget.startsWith(normalizedSys + "/")) {
+            return true;
+        }
+        if (isWin && normalizedTarget.startsWith(normalizedSys + "\\")) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Validates a project path before registration.
+ * Normalizes, resolves symlinks, checks existence, verifies it's a directory,
+ * checks read permissions, and rejects system paths.
+ *
+ * @param pathArg - The path to validate (may be relative)
+ * @returns The resolved, normalized absolute path
+ * @throws AppError with PATH_NOT_FOUND if path doesn't exist
+ * @throws AppError with INVALID_REQUEST if path is not a directory or is a system path
+ * @throws AppError with PERMISSION_DENIED if path is not readable
+ */
+export async function validateProjectPath(pathArg) {
+    if (!pathArg || pathArg.trim() === "") {
+        throw new AppError(ErrorCode.INVALID_REQUEST, "Project path cannot be empty");
+    }
+    // Normalize and resolve to absolute path
+    const normalized = resolve(pathArg);
+    // Resolve symlinks to get the real path
+    let resolvedPath;
+    try {
+        resolvedPath = await realpath(normalized);
+    }
+    catch {
+        throw new AppError(ErrorCode.PATH_NOT_FOUND, `Path does not exist: ${normalized}`);
+    }
+    // Verify it's a directory
+    const stats = await stat(resolvedPath);
+    if (!stats.isDirectory()) {
+        throw new AppError(ErrorCode.INVALID_REQUEST, `Path is not a directory: ${resolvedPath}`);
+    }
+    // Check read permissions
+    try {
+        await access(resolvedPath, fsConstants.R_OK);
+    }
+    catch {
+        throw new AppError(ErrorCode.PERMISSION_DENIED, `No read permission for: ${resolvedPath}`);
+    }
+    // Reject system paths
+    if (isSystemPath(resolvedPath)) {
+        throw new AppError(ErrorCode.INVALID_REQUEST, `System paths cannot be registered as projects: ${resolvedPath}`);
+    }
+    // Reject the filesystem root
+    if (resolvedPath === "/" || /^[A-Z]:\\$/i.test(resolvedPath)) {
+        throw new AppError(ErrorCode.INVALID_REQUEST, `Root directory cannot be registered as a project`);
+    }
+    // Reject the home directory itself
+    if (resolvedPath === homedir()) {
+        throw new AppError(ErrorCode.INVALID_REQUEST, `Home directory cannot be registered as a project`);
+    }
+    return resolvedPath;
+}
+//# sourceMappingURL=validate-project-path.js.map

package/dist/utils/validate-project-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-project-path.js","sourceRoot":"","sources":["../../src/utils/validate-project-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,gEAAgE;AAChE,MAAM,iBAAiB,GAAG;IACxB,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;CACP,CAAC;AAEF,qEAAqE;AACrE,MAAM,kBAAkB,GAAG,CAAC,cAAc,CAAC,CAAC;AAE5C,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;AAE7F;;;GAGG;AACH,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAE5C,IAAI,WAAqB,CAAC;IAC1B,IAAI,KAAK,EAAE,CAAC;QACV,WAAW,GAAG,oBAAoB,CAAC;IACrC,CAAC;SAAM,IAAI,KAAK,EAAE,CAAC;QACjB,yDAAyD;QACzD,WAAW,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,iBAAiB,CAAC;IAClC,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;IAE3E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9D,IAAI,gBAAgB,KAAK,aAAa,IAAI,gBAAgB,CAAC,UAAU,CAAC,aAAa,GAAG,GAAG,CAAC,EAAE,CAAC;YAC3F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,IAAI,gBAAgB,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe;IACvD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAChF,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpC,wCAAwC;IACxC,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,0BAA0B;IAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,2BAA2B,YAAY,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,sBAAsB;IACtB,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,eAAe,EACzB,kDAAkD,YAAY,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,YAAY,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,eAAe,EACzB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,KAAK,OAAO,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,eAAe,EACzB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@pocketcoder/host",
+  "version": "0.0.2",
+  "description": "PocketCoder host daemon - connects your local machine to PocketCoder cloud",
+  "type": "module",
+  "license": "Elastic-2.0",
+  "author": "PocketCoder",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gpuente/pocketcoder.git",
+    "directory": "apps/host"
+  },
+  "keywords": [
+    "pocketcoder",
+    "claude",
+    "ai",
+    "coding",
+    "mobile",
+    "cli"
+  ],
+  "bin": {
+    "pocketcoder": "dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@pocketcoder/shared": "^0.0.2",
+    "better-sqlite3": "^11.8.1",
+    "chokidar": "^4.0.3",
+    "commander": "^13.1.0",
+    "execa": "^9.5.2",
+    "fastify": "^5.2.1",
+    "node-pty": "^1.1.0",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3",
+    "pino-roll": "^4.0.0",
+    "ws": "^8.18.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/ws": "^8.5.14",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.3",
+    "vitest": "^4.0.18"
+  },
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src/",
+    "test": "vitest",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "clean": "rm -rf dist",
+    "postinstall": "chmod +x node_modules/node-pty/prebuilds/*/spawn-helper 2>/dev/null || true"
+  }
+}