@reftrixmcp/mcp-server 0.1.7

package/dist/utils/path-security.js

@@ -0,0 +1,389 @@
+"use strict";
+// SPDX-FileCopyrightText: 2026 TKMD and Reftrix Contributors
+// SPDX-License-Identifier: AGPL-3.0-only
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENV_ALLOWED_WORKSPACE_PATHS = exports.ENV_DISABLE_LOCAL_PATH_ACCESS = void 0;
+exports.isLocalPathAccessDisabled = isLocalPathAccessDisabled;
+exports.getAllowedWorkspacePaths = getAllowedWorkspacePaths;
+exports.matchesBlockedFilePattern = matchesBlockedFilePattern;
+exports.validateProjectPath = validateProjectPath;
+exports.validateFilePath = validateFilePath;
+/**
+ * Path Security Utilities
+ *
+ * ローカルファイルシステムアクセスのセキュリティガード
+ * layout.search の project_context.project_path に対するセキュリティ対策
+ *
+ * セキュリティ要件:
+ * - 許可されたワークスペース配下のみアクセス可能
+ * - ディレクトリトラバーサル攻撃の防止
+ * - 環境変数による機能無効化オプション
+ *
+ * @module utils/path-security
+ */
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const logger_1 = require("./logger");
+// =====================================================
+// 定数
+// =====================================================
+/**
+ * ローカルパスアクセスを無効化する環境変数
+ * true に設定すると project_context.project_path 機能が無効化される
+ */
+exports.ENV_DISABLE_LOCAL_PATH_ACCESS = "REFTRIX_DISABLE_LOCAL_PATH_ACCESS";
+/**
+ * 許可されたワークスペースパスを指定する環境変数
+ * カンマ区切りで複数パスを指定可能
+ * 例: /home/user/projects,/var/www/apps
+ */
+exports.ENV_ALLOWED_WORKSPACE_PATHS = "REFTRIX_ALLOWED_WORKSPACE_PATHS";
+/**
+ * デフォルトの許可パス（環境変数未設定時）
+ * カレントワーキングディレクトリのみ許可
+ */
+const DEFAULT_ALLOWED_PATHS = [process.cwd()];
+/**
+ * 禁止されるパスパターン（システムディレクトリ等）
+ * これらのパスへのアクセスは常にブロックされる
+ */
+const BLOCKED_PATH_PATTERNS = [
+    // システムディレクトリ
+    /^\/etc\b/,
+    /^\/var\b/,
+    /^\/usr\b/,
+    /^\/bin\b/,
+    /^\/sbin\b/,
+    /^\/lib\b/,
+    /^\/opt\b/,
+    /^\/boot\b/,
+    /^\/root\b/,
+    /^\/proc\b/,
+    /^\/sys\b/,
+    /^\/dev\b/,
+    /^\/run\b/,
+    /^\/tmp\b/,
+    // Windows システムディレクトリ
+    /^[A-Za-z]:\\Windows\b/i,
+    /^[A-Za-z]:\\Program Files\b/i,
+    /^[A-Za-z]:\\ProgramData\b/i,
+    // 機密ディレクトリ
+    /\.ssh\b/,
+    /\.gnupg\b/,
+    /\.aws\b/,
+    /\.config\b/,
+    /credentials?\b/i,
+    /secrets?\b/i,
+    /\.env\b/,
+    /private_?keys?\b/i,
+];
+/**
+ * 禁止されるファイル名パターン
+ */
+const BLOCKED_FILE_PATTERNS = [
+    /^\.env/,
+    /^\.htpasswd$/,
+    /^id_rsa$/,
+    /^id_ed25519$/,
+    /^\.pem$/,
+    /^\.key$/,
+    /credentials\.json$/i,
+    /secrets?\.(json|yaml|yml|xml)$/i,
+];
+// =====================================================
+// ヘルパー関数
+// =====================================================
+/**
+ * ローカルパスアクセスが無効化されているか確認
+ */
+function isLocalPathAccessDisabled() {
+    const envValue = process.env[exports.ENV_DISABLE_LOCAL_PATH_ACCESS];
+    return envValue === "true" || envValue === "1";
+}
+/**
+ * 許可されたワークスペースパスを取得
+ */
+function getAllowedWorkspacePaths() {
+    const envValue = process.env[exports.ENV_ALLOWED_WORKSPACE_PATHS];
+    if (envValue) {
+        return envValue
+            .split(",")
+            .map((p) => p.trim())
+            .filter((p) => p.length > 0)
+            .map((p) => path.resolve(p));
+    }
+    return DEFAULT_ALLOWED_PATHS.map((p) => path.resolve(p));
+}
+/**
+ * パスがブロックされるパターンに一致するか確認
+ */
+function matchesBlockedPattern(normalizedPath) {
+    for (const pattern of BLOCKED_PATH_PATTERNS) {
+        if (pattern.test(normalizedPath)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * ファイル名がブロックされるパターンに一致するか確認
+ */
+function matchesBlockedFilePattern(filename) {
+    for (const pattern of BLOCKED_FILE_PATTERNS) {
+        if (pattern.test(filename)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * パスが許可されたワークスペース配下にあるか確認
+ */
+function isWithinAllowedWorkspace(normalizedPath, allowedPaths) {
+    for (const allowedPath of allowedPaths) {
+        // 正規化されたパスが許可パス配下にあるか確認
+        if (normalizedPath === allowedPath || normalizedPath.startsWith(allowedPath + path.sep)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * シンボリックリンクによるエスケープを検出
+ * 実パスが許可されたワークスペース外を指している場合を検出
+ */
+function detectSymlinkEscape(normalizedPath, allowedPaths) {
+    try {
+        if (!fs.existsSync(normalizedPath)) {
+            return false; // パスが存在しない場合はエスケープなし
+        }
+        const realPath = fs.realpathSync(normalizedPath);
+        return !isWithinAllowedWorkspace(realPath, allowedPaths);
+    }
+    catch {
+        // realpathSync が失敗した場合は安全側に倒す
+        return true;
+    }
+}
+// =====================================================
+// メイン検証関数
+// =====================================================
+/**
+ * プロジェクトパスを検証
+ *
+ * セキュリティチェック:
+ * 1. ローカルパスアクセスが無効化されていないか
+ * 2. パスが正規化後も許可されたワークスペース配下にあるか
+ * 3. ディレクトリトラバーサル攻撃パターンが含まれていないか
+ * 4. ブロックされるシステムパスパターンに一致しないか
+ * 5. シンボリックリンクによるワークスペース外へのエスケープがないか
+ *
+ * @param inputPath - 検証するパス
+ * @returns 検証結果
+ *
+ * @example
+ * ```typescript
+ * const result = validateProjectPath('/home/user/my-project');
+ * if (!result.isValid) {
+ *   throw new Error(result.error?.message);
+ * }
+ * // result.normalizedPath を使用
+ * ```
+ */
+function validateProjectPath(inputPath) {
+    // 1. ローカルパスアクセスが無効化されているか確認
+    if (isLocalPathAccessDisabled()) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] Local path access is disabled", {
+                reason: "REFTRIX_DISABLE_LOCAL_PATH_ACCESS is set",
+            });
+        }
+        return {
+            isValid: false,
+            error: {
+                code: "LOCAL_PATH_ACCESS_DISABLED",
+                message: "Local path access is disabled by environment configuration",
+            },
+        };
+    }
+    // 2. 入力パスを正規化（ディレクトリトラバーサル対策）
+    const normalizedPath = path.resolve(inputPath);
+    // 3. ディレクトリトラバーサルパターンの検出（正規化前の入力をチェック）
+    // 正規化で解決されるが、悪意のある入力パターンを検出してログ
+    if (inputPath.includes("..") || inputPath.includes("./")) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] Directory traversal pattern detected in input", {
+                inputPath,
+                normalizedPath,
+            });
+        }
+    }
+    // 4. ブロックされるパスパターンの確認
+    if (matchesBlockedPattern(normalizedPath)) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] Blocked path pattern detected", {
+                normalizedPath,
+            });
+        }
+        return {
+            isValid: false,
+            error: {
+                code: "BLOCKED_PATH_PATTERN",
+                message: `Access to path "${normalizedPath}" is blocked for security reasons`,
+            },
+        };
+    }
+    // 5. 許可されたワークスペース配下にあるか確認
+    const allowedPaths = getAllowedWorkspacePaths();
+    if (!isWithinAllowedWorkspace(normalizedPath, allowedPaths)) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] Path not within allowed workspace", {
+                normalizedPath,
+                allowedPaths,
+            });
+        }
+        return {
+            isValid: false,
+            error: {
+                code: "PATH_NOT_ALLOWED",
+                message: `Path "${normalizedPath}" is not within allowed workspace. Allowed: ${allowedPaths.join(", ")}`,
+            },
+        };
+    }
+    // 6. パスの存在確認
+    if (!fs.existsSync(normalizedPath)) {
+        return {
+            isValid: false,
+            error: {
+                code: "PATH_NOT_FOUND",
+                message: `Path "${normalizedPath}" does not exist`,
+            },
+        };
+    }
+    // 7. ディレクトリであることを確認
+    try {
+        const stat = fs.statSync(normalizedPath);
+        if (!stat.isDirectory()) {
+            return {
+                isValid: false,
+                error: {
+                    code: "PATH_NOT_DIRECTORY",
+                    message: `Path "${normalizedPath}" is not a directory`,
+                },
+            };
+        }
+    }
+    catch {
+        return {
+            isValid: false,
+            error: {
+                code: "PATH_NOT_FOUND",
+                message: `Cannot access path "${normalizedPath}"`,
+            },
+        };
+    }
+    // 8. シンボリックリンクによるエスケープ検出
+    if (detectSymlinkEscape(normalizedPath, allowedPaths)) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] Symlink escape detected", {
+                normalizedPath,
+            });
+        }
+        return {
+            isValid: false,
+            error: {
+                code: "SYMLINK_ESCAPE_DETECTED",
+                message: `Path "${normalizedPath}" resolves to a location outside allowed workspace via symlink`,
+            },
+        };
+    }
+    // 検証成功
+    if ((0, logger_1.isDevelopment)()) {
+        logger_1.logger.debug("[PathSecurity] Path validated successfully", {
+            normalizedPath,
+        });
+    }
+    return {
+        isValid: true,
+        normalizedPath,
+    };
+}
+/**
+ * ファイルパスを検証（スキャン対象ファイル用）
+ *
+ * @param filePath - 検証するファイルパス
+ * @param workspacePath - 許可されたワークスペースパス
+ * @returns 検証成功かどうか
+ */
+function validateFilePath(filePath, workspacePath) {
+    const normalizedFilePath = path.resolve(filePath);
+    const normalizedWorkspace = path.resolve(workspacePath);
+    // ワークスペース配下であることを確認
+    if (!normalizedFilePath.startsWith(normalizedWorkspace + path.sep)) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] File path outside workspace", {
+                filePath: normalizedFilePath,
+                workspace: normalizedWorkspace,
+            });
+        }
+        return false;
+    }
+    // ブロックされるパスパターンの確認
+    if (matchesBlockedPattern(normalizedFilePath)) {
+        return false;
+    }
+    // ブロックされるファイル名パターンの確認
+    const filename = path.basename(normalizedFilePath);
+    if (matchesBlockedFilePattern(filename)) {
+        if ((0, logger_1.isDevelopment)()) {
+            logger_1.logger.warn("[PathSecurity] Blocked file pattern detected", {
+                filename,
+            });
+        }
+        return false;
+    }
+    return true;
+}
+// =====================================================
+// 開発環境ログ
+// =====================================================
+if ((0, logger_1.isDevelopment)()) {
+    logger_1.logger.debug("[PathSecurity] Module loaded", {
+        localPathAccessDisabled: isLocalPathAccessDisabled(),
+        allowedWorkspacePaths: getAllowedWorkspacePaths(),
+    });
+}
+//# sourceMappingURL=path-security.js.map

package/dist/utils/path-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-security.js","sourceRoot":"","sources":["../../src/utils/path-security.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkIzC,8DAGC;AAKD,4DAYC;AAiBD,8DAOC;AA2DD,kDA6HC;AASD,4CAgCC;AA7YD;;;;;;;;;;;;GAYG;AAEH,2CAA6B;AAC7B,uCAAyB;AACzB,qCAAiD;AAEjD,wDAAwD;AACxD,KAAK;AACL,wDAAwD;AAExD;;;GAGG;AACU,QAAA,6BAA6B,GAAG,mCAAmC,CAAC;AAEjF;;;;GAIG;AACU,QAAA,2BAA2B,GAAG,iCAAiC,CAAC;AAE7E;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAE9C;;;GAGG;AACH,MAAM,qBAAqB,GAAG;IAC5B,aAAa;IACb,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,WAAW;IACX,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,qBAAqB;IACrB,wBAAwB;IACxB,8BAA8B;IAC9B,4BAA4B;IAC5B,WAAW;IACX,SAAS;IACT,WAAW;IACX,SAAS;IACT,YAAY;IACZ,iBAAiB;IACjB,aAAa;IACb,SAAS;IACT,mBAAmB;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAAG;IAC5B,QAAQ;IACR,cAAc;IACd,UAAU;IACV,cAAc;IACd,SAAS;IACT,SAAS;IACT,qBAAqB;IACrB,iCAAiC;CAClC,CAAC;AAiCF,wDAAwD;AACxD,SAAS;AACT,wDAAwD;AAExD;;GAEG;AACH,SAAgB,yBAAyB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qCAA6B,CAAC,CAAC;IAC5D,OAAO,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mCAA2B,CAAC,CAAC;IAE1D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ;aACZ,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,cAAsB;IACnD,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CAAC,QAAgB;IACxD,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,cAAsB,EAAE,YAAsB;IAC9E,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,wBAAwB;QACxB,IAAI,cAAc,KAAK,WAAW,IAAI,cAAc,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,cAAsB,EAAE,YAAsB;IACzE,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,qBAAqB;QACrC,CAAC;QAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QACjD,OAAO,CAAC,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,UAAU;AACV,wDAAwD;AAExD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,mBAAmB,CAAC,SAAiB;IACnD,4BAA4B;IAC5B,IAAI,yBAAyB,EAAE,EAAE,CAAC;QAChC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC1D,MAAM,EAAE,0CAA0C;aACnD,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,4DAA4D;aACtE;SACF,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/C,uCAAuC;IACvC,gCAAgC;IAChC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBAC1E,SAAS;gBACT,cAAc;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,IAAI,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC1D,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,mBAAmB,cAAc,mCAAmC;aAC9E;SACF,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,wBAAwB,EAAE,CAAC;IAChD,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;gBAC9D,cAAc;gBACd,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,SAAS,cAAc,+CAA+C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACzG;SACF,CAAC;IACJ,CAAC;IAED,aAAa;IACb,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,SAAS,cAAc,kBAAkB;aACnD;SACF,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,SAAS,cAAc,sBAAsB;iBACvD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,uBAAuB,cAAc,GAAG;aAClD;SACF,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,IAAI,mBAAmB,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC;QACtD,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACpD,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,SAAS,cAAc,gEAAgE;aACjG;SACF,CAAC;IACJ,CAAC;IAED,OAAO;IACP,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;YACzD,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,aAAqB;IACtE,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAExD,oBAAoB;IACpB,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,mBAAmB;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC1D,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,SAAS;AACT,wDAAwD;AAExD,IAAI,IAAA,sBAAa,GAAE,EAAE,CAAC;IACpB,eAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;QAC3C,uBAAuB,EAAE,yBAAyB,EAAE;QACpD,qBAAqB,EAAE,wBAAwB,EAAE;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/prisma-wrapper-factory.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Prisma Wrapper Factory
+ * IPrismaClient インターフェースに適合するラッパーを生成するユーティリティ
+ *
+ * 目的:
+ * - index.ts での重複コード削減（38行 → 12行）
+ * - Layout/Motion 両方で共通化
+ * - テスト可能性向上
+ *
+ * @module utils/prisma-wrapper-factory
+ */
+/**
+ * サポートされるテーブル名
+ */
+export type SupportedTableName = "sectionPattern" | "sectionEmbedding" | "motionPattern" | "motionEmbedding" | "motionAnalysisResult" | "motionAnalysisEmbedding" | "webPage" | "qualityEvaluation" | "qualityBenchmark" | "jSAnimationPattern" | "jSAnimationEmbedding" | "backgroundDesignEmbedding";
+/**
+ * テーブルラッパー設定
+ */
+export interface TableWrapperConfig {
+    tableName: SupportedTableName;
+}
+/**
+ * Prismaラッパー設定
+ */
+export interface PrismaWrapperConfig {
+    /** ラップするテーブル名の配列 */
+    tables: SupportedTableName[];
+    /** トランザクションをサポートするか */
+    supportsTransaction: boolean;
+}
+/**
+ * ラップされたテーブル（create/createMany/upsert/deleteMany/findUnique/findManyメソッドをサポート）
+ */
+export interface WrappedTable {
+    create: (args: {
+        data: unknown;
+    }) => Promise<{
+        id: string;
+    }>;
+    createMany?: (args: {
+        data: unknown[];
+    }) => Promise<{
+        count: number;
+    }>;
+    upsert?: (args: {
+        where: unknown;
+        create: unknown;
+        update: unknown;
+    }) => Promise<{
+        id: string;
+    }>;
+    deleteMany?: (args: {
+        where: unknown;
+    }) => Promise<{
+        count: number;
+    }>;
+    findUnique?: (args: {
+        where: unknown;
+        include?: unknown;
+    }) => Promise<unknown | null>;
+    findMany?: (args: {
+        where: unknown;
+        include?: unknown;
+    }) => Promise<unknown[]>;
+}
+/**
+ * テーブルの最小インターフェース
+ * 注: anyを使用しているのは、実際のPrismaClientのcreate引数が
+ * 非常に複雑で、ジェネリクスやSelectSubset等の型を含むため
+ */
+interface MinimalTable {
+    create: (...args: any[]) => Promise<{
+        id: string;
+    } | any>;
+    createMany?: (...args: any[]) => Promise<{
+        count: number;
+    } | any>;
+    upsert?: (...args: any[]) => Promise<{
+        id: string;
+    } | any>;
+    deleteMany?: (...args: any[]) => Promise<{
+        count: number;
+    } | any>;
+    findUnique?: (...args: any[]) => Promise<any | null>;
+    findMany?: (...args: any[]) => Promise<any[]>;
+}
+/**
+ * Prismaトランザクションオプション
+ */
+export interface TransactionOptions {
+    /** 接続取得の最大待機時間（ミリ秒） */
+    maxWait?: number;
+    /** トランザクションの最大実行時間（ミリ秒） */
+    timeout?: number;
+    /** 分離レベル */
+    isolationLevel?: "ReadUncommitted" | "ReadCommitted" | "RepeatableRead" | "Serializable";
+}
+/**
+ * Prismaクライアントの最小インターフェース
+ */
+interface MinimalPrismaClient {
+    sectionPattern?: MinimalTable;
+    sectionEmbedding?: MinimalTable;
+    motionPattern?: MinimalTable;
+    motionEmbedding?: MinimalTable;
+    motionAnalysisResult?: MinimalTable;
+    motionAnalysisEmbedding?: MinimalTable;
+    webPage?: MinimalTable;
+    qualityEvaluation?: MinimalTable;
+    qualityBenchmark?: MinimalTable;
+    jSAnimationPattern?: MinimalTable;
+    jSAnimationEmbedding?: MinimalTable;
+    backgroundDesignEmbedding?: MinimalTable;
+    $executeRawUnsafe: (...args: any[]) => Promise<unknown>;
+    $queryRawUnsafe: (...args: any[]) => Promise<unknown>;
+    $transaction?: <T>(fn: (tx: any) => Promise<T>, options?: TransactionOptions) => Promise<T>;
+}
+/**
+ * 単一テーブルのcreateメソッドをラップする
+ *
+ * @param prisma - PrismaClient
+ * @param tableName - テーブル名
+ * @returns createメソッドがidのみ返すラッパー
+ *
+ * @example
+ * const wrapper = createTableWrapper(prisma, 'sectionPattern');
+ * const { id } = await wrapper.create({ data: {...} });
+ */
+export declare function createTableWrapper<T extends MinimalPrismaClient>(prisma: T, tableName: SupportedTableName): WrappedTable;
+/**
+ * IPrismaClient互換のラッパーを生成する
+ *
+ * @param prisma - PrismaClient
+ * @param config - ラッパー設定
+ * @returns IPrismaClient互換のオブジェクト
+ *
+ * @example
+ * // Layout用（トランザクションなし）
+ * const layoutWrapper = createPrismaWrapper(prisma, {
+ *   tables: ['sectionPattern', 'sectionEmbedding'],
+ *   supportsTransaction: false,
+ * });
+ *
+ * // Motion用（トランザクションあり）
+ * const motionWrapper = createPrismaWrapper(prisma, {
+ *   tables: ['motionPattern', 'motionEmbedding'],
+ *   supportsTransaction: true,
+ * });
+ */
+export declare function createPrismaWrapper<T extends MinimalPrismaClient>(prisma: T, config: PrismaWrapperConfig): Record<string, unknown>;
+export {};
+//# sourceMappingURL=prisma-wrapper-factory.d.ts.map

package/dist/utils/prisma-wrapper-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-wrapper-factory.d.ts","sourceRoot":"","sources":["../../src/utils/prisma-wrapper-factory.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAMH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,sBAAsB,GACtB,yBAAyB,GACzB,SAAS,GACT,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,sBAAsB,GACtB,2BAA2B,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,kBAAkB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oBAAoB;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,uBAAuB;IACvB,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtF,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CAChF;AAED;;;;GAIG;AACH,UAAU,YAAY;IAEpB,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG,CAAC,CAAC;IAE1D,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG,CAAC,CAAC;IAElE,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG,CAAC,CAAC;IAE3D,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG,CAAC,CAAC;IAElE,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAErD,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uBAAuB;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY;IACZ,cAAc,CAAC,EAAE,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,CAAC;CAC1F;AAED;;GAEG;AACH,UAAU,mBAAmB;IAC3B,cAAc,CAAC,EAAE,YAAY,CAAC;IAC9B,gBAAgB,CAAC,EAAE,YAAY,CAAC;IAChC,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,eAAe,CAAC,EAAE,YAAY,CAAC;IAC/B,oBAAoB,CAAC,EAAE,YAAY,CAAC;IACpC,uBAAuB,CAAC,EAAE,YAAY,CAAC;IACvC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,iBAAiB,CAAC,EAAE,YAAY,CAAC;IACjC,gBAAgB,CAAC,EAAE,YAAY,CAAC;IAChC,kBAAkB,CAAC,EAAE,YAAY,CAAC;IAClC,oBAAoB,CAAC,EAAE,YAAY,CAAC;IACpC,yBAAyB,CAAC,EAAE,YAAY,CAAC;IAEzC,iBAAiB,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAExD,eAAe,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtD,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7F;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,mBAAmB,EAC9D,MAAM,EAAE,CAAC,EACT,SAAS,EAAE,kBAAkB,GAC5B,YAAY,CAsEd;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,mBAAmB,EAC/D,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgDzB"}

package/dist/utils/prisma-wrapper-factory.js

@@ -0,0 +1,124 @@
+"use strict";
+// SPDX-FileCopyrightText: 2026 TKMD and Reftrix Contributors
+// SPDX-License-Identifier: AGPL-3.0-only
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTableWrapper = createTableWrapper;
+exports.createPrismaWrapper = createPrismaWrapper;
+// =====================================================
+// ファクトリ関数
+// =====================================================
+/**
+ * 単一テーブルのcreateメソッドをラップする
+ *
+ * @param prisma - PrismaClient
+ * @param tableName - テーブル名
+ * @returns createメソッドがidのみ返すラッパー
+ *
+ * @example
+ * const wrapper = createTableWrapper(prisma, 'sectionPattern');
+ * const { id } = await wrapper.create({ data: {...} });
+ */
+function createTableWrapper(prisma, tableName) {
+    const table = prisma[tableName];
+    if (!table) {
+        throw new Error(`Table '${tableName}' not found in PrismaClient`);
+    }
+    const wrapper = {
+        create: async (args) => {
+            const result = await table.create(args);
+            return { id: result.id };
+        },
+    };
+    // createMany が利用可能な場合のみラップ
+    if (table.createMany) {
+        wrapper.createMany = async (args) => {
+            const result = await table.createMany(args);
+            return { count: result.count };
+        };
+    }
+    // upsert が利用可能な場合のみラップ
+    if (table.upsert) {
+        wrapper.upsert = async (args) => {
+            const result = await table.upsert(args);
+            return { id: result.id };
+        };
+    }
+    // deleteMany が利用可能な場合のみラップ
+    if (table.deleteMany) {
+        wrapper.deleteMany = async (args) => {
+            const result = await table.deleteMany(args);
+            return { count: result.count };
+        };
+    }
+    // findUnique が利用可能な場合のみラップ
+    if (table.findUnique) {
+        wrapper.findUnique = async (args) => {
+            const result = await table.findUnique(args);
+            return result;
+        };
+    }
+    // findMany が利用可能な場合のみラップ
+    if (table.findMany) {
+        wrapper.findMany = async (args) => {
+            const result = await table.findMany(args);
+            return result;
+        };
+    }
+    return wrapper;
+}
+/**
+ * IPrismaClient互換のラッパーを生成する
+ *
+ * @param prisma - PrismaClient
+ * @param config - ラッパー設定
+ * @returns IPrismaClient互換のオブジェクト
+ *
+ * @example
+ * // Layout用（トランザクションなし）
+ * const layoutWrapper = createPrismaWrapper(prisma, {
+ *   tables: ['sectionPattern', 'sectionEmbedding'],
+ *   supportsTransaction: false,
+ * });
+ *
+ * // Motion用（トランザクションあり）
+ * const motionWrapper = createPrismaWrapper(prisma, {
+ *   tables: ['motionPattern', 'motionEmbedding'],
+ *   supportsTransaction: true,
+ * });
+ */
+function createPrismaWrapper(prisma, config) {
+    const wrapper = {};
+    // 各テーブルのラッパーを生成
+    for (const tableName of config.tables) {
+        wrapper[tableName] = createTableWrapper(prisma, tableName);
+    }
+    // $executeRawUnsafe をバインド
+    wrapper.$executeRawUnsafe = prisma.$executeRawUnsafe.bind(prisma);
+    // $queryRawUnsafe をバインド（ベクトル検索等で使用）
+    wrapper.$queryRawUnsafe = prisma.$queryRawUnsafe.bind(prisma);
+    // トランザクションサポート
+    if (config.supportsTransaction) {
+        wrapper.$transaction = async (fn, options) => {
+            if (!prisma.$transaction) {
+                throw new Error("PrismaClient does not support transactions");
+            }
+            return prisma.$transaction(async (tx) => {
+                const txPrisma = tx;
+                // トランザクション用のラッパーを生成
+                const txWrapper = {};
+                for (const tableName of config.tables) {
+                    txWrapper[tableName] = createTableWrapper(txPrisma, tableName);
+                }
+                txWrapper.$executeRawUnsafe = txPrisma.$executeRawUnsafe.bind(txPrisma);
+                txWrapper.$queryRawUnsafe = txPrisma.$queryRawUnsafe.bind(txPrisma);
+                // ネストされたトランザクションを防止
+                txWrapper.$transaction = async () => {
+                    throw new Error("Nested transactions not supported");
+                };
+                return fn(txWrapper);
+            }, options);
+        };
+    }
+    return wrapper;
+}
+//# sourceMappingURL=prisma-wrapper-factory.js.map