@rexvane/piweb 0.3.1

package/scripts/sync-file-icons.mjs

@@ -0,0 +1,118 @@
+/**
+ * 从 material-icon-theme（MIT）抽一份常用文件/文件夹图标子集到 public/file-icons/，
+ * 并生成 src/lib/file-icons.json（扩展名 / 文件名 / 文件夹名 → 图标 id 的精简映射）。
+ * 项目树与文件查看器按映射取 /file-icons/<id>.svg，未命中回落到通用 file / folder。
+ * 用法：npm run sync:file-icons
+ */
+import { copyFile, mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const pkg = path.join(root, "node_modules", "material-icon-theme");
+const target = path.join(root, "public", "file-icons");
+const manifest = JSON.parse(await readFile(path.join(pkg, "dist", "material-icons.json"), "utf8"));
+
+/** 扩展名（不含点，小写）；多段扩展如 d.ts / test.ts 也在 fileExtensions 表里 */
+const EXTENSIONS = [
+	"ts", "tsx", "d.ts", "test.ts", "spec.ts", "test.tsx", "js", "jsx", "mjs", "cjs", "test.js", "spec.js",
+	"json", "jsonc", "json5", "jsonl", "md", "mdx", "markdown", "txt", "rtf", "log",
+	"py", "pyi", "pyc", "ipynb", "rb", "go", "rs", "java", "kt", "kts", "swift", "c", "h", "cpp", "cc", "hpp", "cs", "fs",
+	"css", "scss", "sass", "less", "styl", "html", "htm", "vue", "svelte", "astro", "php", "ejs", "hbs", "pug", "liquid",
+	"sh", "bash", "zsh", "fish", "ps1", "psm1", "bat", "cmd",
+	"yml", "yaml", "toml", "ini", "cfg", "conf", "env", "xml", "plist", "properties",
+	"svg", "png", "jpg", "jpeg", "gif", "webp", "ico", "bmp", "avif", "psd", "ai",
+	"mp3", "wav", "flac", "ogg", "mp4", "mkv", "mov", "webm", "avi",
+	"pdf", "doc", "docx", "xls", "xlsx", "ppt", "pptx", "csv", "tsv",
+	"zip", "tar", "gz", "tgz", "7z", "rar", "bz2", "xz",
+	"sql", "db", "sqlite", "sqlite3", "lock", "wasm", "lua", "r", "dart", "ex", "exs", "erl", "hs", "ml", "clj", "scala", "groovy", "gradle",
+	"tf", "tfvars", "hcl", "proto", "graphql", "gql", "prisma", "sol", "vim", "jl", "m", "mm", "pl", "nim", "zig", "v", "elm", "vala",
+	"cshtml", "razor", "cmake", "mk", "ninja", "nix", "bicep", "pem", "key", "crt", "cer", "pub", "ttf", "otf", "woff", "woff2", "eot",
+	"map", "patch", "diff", "asm", "s", "wat", "glsl", "hlsl", "shader", "unity", "prefab", "blend", "obj", "fbx", "stl", "gltf",
+	"ttl", "rdf", "owl", "tex", "bib", "org", "adoc", "rst", "po", "pot", "mo", "ics", "vcf", "gpg", "asc", "sig", "torrent",
+];
+
+/** 完整文件名（小写） */
+const FILE_NAMES = [
+	"package.json", "package-lock.json", "pnpm-lock.yaml", "yarn.lock", "bun.lockb", "bun.lock", "tsconfig.json", "tsconfig.base.json", "jsconfig.json",
+	".gitignore", ".gitattributes", ".gitmodules", ".gitkeep", ".editorconfig", ".npmrc", ".nvmrc", ".prettierrc", ".prettierignore", ".eslintrc", ".eslintrc.js", ".eslintrc.json",
+	"eslint.config.js", "eslint.config.mjs", "vitest.config.ts", "vitest.config.mts", "vite.config.ts", "vite.config.js", "next.config.ts", "next.config.js", "next.config.mjs",
+	"tailwind.config.js", "tailwind.config.ts", "postcss.config.js", "postcss.config.mjs", "babel.config.js", ".babelrc", "jest.config.js", "jest.config.ts",
+	"webpack.config.js", "rollup.config.js", "rollup.config.mjs", "tsup.config.ts", "turbo.json", "nx.json", "lerna.json", "vercel.json", "netlify.toml",
+	"dockerfile", "docker-compose.yml", "docker-compose.yaml", "compose.yml", "compose.yaml", ".dockerignore", "makefile", "cmakelists.txt", "justfile", "taskfile.yml",
+	"readme.md", "readme", "license", "license.md", "license.txt", "changelog.md", "changelog", "contributing.md", "code_of_conduct.md", "security.md", "authors", "codeowners",
+	".env", ".env.local", ".env.example", ".env.development", ".env.production", ".env.test",
+	"cargo.toml", "cargo.lock", "go.mod", "go.sum", "pyproject.toml", "requirements.txt", "requirements-dev.txt", "poetry.lock", "uv.lock", "pipfile", "pipfile.lock", "setup.py", "setup.cfg", "tox.ini", "pytest.ini",
+	"gemfile", "gemfile.lock", "rakefile", "composer.json", "composer.lock", "build.gradle", "build.gradle.kts", "settings.gradle", "pom.xml", "mix.exs", "deno.json", "deno.jsonc",
+	"agents.md", "claude.md", ".cursorrules", "robots.txt", "sitemap.xml", "manifest.json", "favicon.ico", "index.html", "index.js", "index.ts", ".gitlab-ci.yml", "jenkinsfile", ".travis.yml", "procfile", "now.json", "renovate.json", ".releaserc", "commitlint.config.js", ".huskyrc", ".lintstagedrc", "nodemon.json", "pm2.config.js", "ecosystem.config.js",
+];
+
+/** 文件夹名（小写），展开态用 <id>-open */
+const FOLDER_NAMES = [
+	"src", "source", "lib", "libs", "components", "component", "hooks", "utils", "util", "helpers", "helper", "api", "apis", "app", "apps", "pages", "public", "static", "assets", "images", "image", "img", "icons", "icon",
+	"styles", "style", "css", "scss", "sass", "less", "fonts", "font", "test", "tests", "__tests__", "spec", "specs", "e2e", "docs", "doc", "documentation", "scripts", "script", "bin", "build", "dist", "out", "output", "release",
+	"node_modules", ".git", ".github", ".gitlab", ".vscode", ".idea", ".husky", "config", "configs", "configuration", "settings", "types", "typings", "@types", "interfaces", "models", "model", "entities", "controllers", "controller",
+	"services", "service", "middleware", "middlewares", "routes", "router", "routers", "views", "view", "layouts", "layout", "templates", "template", "data", "database", "db", "migrations", "migration", "seeds", "seed",
+	"server", "client", "shared", "common", "core", "plugins", "plugin", "extensions", "extension", "packages", "package", "modules", "module", "tools", "tooling", "examples", "example", "demo", "demos", "samples", "sample",
+	"vendor", "vendors", "third_party", "third-party", "temp", "tmp", "cache", ".cache", "logs", "log", "locale", "locales", "i18n", "lang", "langs", "translations", "media", "video", "videos", "audio", "sounds",
+	"python", "java", "rust", "android", "ios", "web", "mobile", "desktop", "backend", "frontend", "functions", "lambda", "cloud", "aws", "azure", "gcp", "docker", "k8s", "kubernetes", "terraform", "ci", ".circleci", "workflows",
+	"store", "stores", "redux", "context", "contexts", "providers", "provider", "state", "prisma", "supabase", "generated", "gen", "proto", "schemas", "schema", "contracts", "contract", "tasks", "task", "jobs", "job", "queue", "workers", "worker",
+	"mock", "mocks", "__mocks__", "fixtures", "fixture", "stories", "benchmark", "benchmarks", "coverage", ".next", ".nuxt", ".svelte-kit", ".turbo", ".venv", "venv", "env", "__pycache__", ".pytest_cache", ".mypy_cache", "target",
+	"notebooks", "notebook", "ml", "models", "datasets", "dataset", "features", "feature", "domain", "infra", "infrastructure", "deploy", "deployment", "deployments", "environments", "environment", "secrets", "keys", "certs", "certificates",
+	"docs-site", "website", "site", "blog", "content", "posts", "admin", "auth", "user", "users", "account", "accounts", "payment", "payments", "billing", "cart", "checkout", "product", "products", "order", "orders", "search", "chat", "messages",
+	"ui", "widgets", "widget", "elements", "element", "primitives", "atoms", "molecules", "organisms", "theme", "themes", "design", "designs", "graphics", "graphql", "gql", "rest", "grpc", "socket", "sockets", "websocket", "events", "event", "listeners",
+	"resources", "resource", "res", "raw", "wasm", "native", "cpp", "c", "include", "includes", "headers", "objects", "obj", "debug", "dll", "libraries", "library", "framework", "frameworks", "sdk", "cli", "commands", "command", "console",
+	"history", "archive", "archives", "backup", "backups", "old", "legacy", "deprecated", "draft", "drafts", "review", "reviews", "meta", "metadata", "manifest", "manifests", "spec-files", "requirements", "tasks-old", "todo",
+	"pi", ".pi", "skills", "skill", "prompts", "prompt", "agents", "agent", "memory", "sessions", "session",
+];
+
+const defs = manifest.iconDefinitions ?? {};
+const has = (id) => typeof id === "string" && Boolean(defs[id]);
+const used = new Set();
+const ext = {};
+const name = {};
+const folder = {};
+const lower = (s) => s.toLowerCase();
+
+for (const e of EXTENSIONS) {
+	const id = manifest.fileExtensions?.[lower(e)];
+	if (has(id)) {
+		ext[lower(e)] = id;
+		used.add(id);
+	}
+}
+for (const n of FILE_NAMES) {
+	const id = manifest.fileNames?.[lower(n)];
+	if (has(id)) {
+		name[lower(n)] = id;
+		used.add(id);
+	}
+}
+for (const f of FOLDER_NAMES) {
+	const id = manifest.folderNames?.[lower(f)];
+	const openId = manifest.folderNamesExpanded?.[lower(f)] ?? (id ? `${id}-open` : undefined);
+	if (has(id) && has(openId)) {
+		folder[lower(f)] = id;
+		used.add(id);
+		used.add(openId);
+	}
+}
+const defaults = { file: manifest.file ?? "file", folder: manifest.folder ?? "folder", folderOpen: manifest.folderExpanded ?? "folder-open" };
+for (const id of Object.values(defaults)) {
+	if (!has(id)) throw new Error(`material-icon-theme missing default icon ${id}`);
+	used.add(id);
+}
+
+await mkdir(target, { recursive: true });
+let copied = 0;
+for (const id of used) {
+	const rel = String(defs[id].iconPath ?? `./../icons/${id}.svg`).replace(/^\.\/\.\.\//, "");
+	await copyFile(path.join(pkg, rel), path.join(target, `${id}.svg`));
+	copied += 1;
+}
+await copyFile(path.join(pkg, "LICENSE"), path.join(target, "LICENSE"));
+
+const sortKeys = (o) => Object.fromEntries(Object.entries(o).sort(([a], [b]) => a.localeCompare(b)));
+const json = { defaults, ext: sortKeys(ext), name: sortKeys(name), folder: sortKeys(folder) };
+await writeFile(path.join(root, "src", "lib", "file-icons.json"), `${JSON.stringify(json, null, "\t")}\n`, "utf8");
+console.log(`Synced ${copied} file icons (${Object.keys(ext).length} extensions, ${Object.keys(name).length} file names, ${Object.keys(folder).length} folders).`);

package/scripts/sync-provider-icons.mjs

@@ -0,0 +1,41 @@
+import { copyFile, mkdir } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const source = path.join(root, "node_modules", "@lobehub", "icons-static-svg", "icons");
+const target = path.join(root, "public", "provider-icons");
+const slugs = [
+	"antgroup-color",
+	"anthropic",
+	"azure-color",
+	"baseten",
+	"bedrock-color",
+	"cerebras-color",
+	"cloudflare-color",
+	"deepseek-color",
+	"fireworks-color",
+	"githubcopilot",
+	"google-color",
+	"googlecloud-color",
+	"groq",
+	"huggingface-color",
+	"kimi-color",
+	"minimax-color",
+	"mistral-color",
+	"moonshot",
+	"nvidia-color",
+	"openai",
+	"opencode",
+	"openrouter-color",
+	"qwen-color",
+	"together-color",
+	"vercel",
+	"xai",
+	"xiaomimimo",
+	"zai",
+];
+
+await mkdir(target, { recursive: true });
+await Promise.all(slugs.map((slug) => copyFile(path.join(source, `${slug}.svg`), path.join(target, `${slug}.svg`))));
+console.log(`Synced ${slugs.length} provider icons.`);

package/src/app/api/agent/[id]/events/route.ts

@@ -0,0 +1,81 @@
+import { buildSnapshot, getManaged, subscribe, unsubscribe } from "@/lib/agent-manager";
+import { BoundaryError, resolveSessionPath } from "@/lib/path-security";
+
+export const dynamic = "force-dynamic";
+
+/** SSE：先推完整快照，再推增量；心跳保活；断线由浏览器 EventSource 自动重连（带 Last-Event-ID） */
+export async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {
+	const { id } = await params;
+	let sessionPath: string;
+	try {
+		// allowPending：Hero 发首条消息时订阅先于 JSONL 落盘；此时拒绝会让
+		// EventSource 收到 400 并永久放弃重连，实时视图永远拿不到快照。
+		sessionPath = await resolveSessionPath(id, { allowPending: true });
+	} catch (error) {
+		return new Response(error instanceof BoundaryError ? error.message : "invalid session", { status: 400 });
+	}
+	const m = getManaged(sessionPath);
+	const rawLastEventId = req.headers.get("last-event-id");
+	const parsedLastEventId = rawLastEventId === null ? undefined : Number.parseInt(rawLastEventId, 10);
+	const lastEventId = Number.isSafeInteger(parsedLastEventId) && (parsedLastEventId ?? -1) >= 0 ? parsedLastEventId : undefined;
+
+	const encoder = new TextEncoder();
+	let closed = false;
+	let subscriber: ((seq: number, json: string) => void) | null = null;
+	let ping: ReturnType<typeof setInterval> | null = null;
+
+	const stream = new ReadableStream<Uint8Array>({
+		async start(controller) {
+			const write = (chunk: string) => {
+				if (!closed) controller.enqueue(encoder.encode(chunk));
+			};
+			const close = () => {
+				if (closed) return;
+				closed = true;
+				if (ping) clearInterval(ping);
+				if (subscriber) unsubscribe(m, subscriber);
+				try {
+					controller.close();
+				} catch {
+					/* already closed */
+				}
+			};
+			subscriber = (seq: number, json: string) => {
+				write(`id: ${seq}\ndata: ${json}\n\n`);
+				if (json.includes('"state":"disposed"')) close();
+			};
+			const send = subscriber;
+
+			ping = setInterval(() => write(`: ping\n\n`), 15_000);
+			write(`retry: 2000\n\n`);
+
+			req.signal.addEventListener("abort", close, { once: true });
+
+			// 自动重连优先从环形缓冲续放；缓冲断档时才回退到完整快照。
+			if (lastEventId !== undefined && subscribe(m, send, lastEventId)) return;
+			const snap = await buildSnapshot(m);
+			if (closed) return;
+			send(snap.seq, JSON.stringify({ type: "snapshot", snapshot: snap, ts: Date.now() }));
+			if (!subscribe(m, send, snap.seq)) {
+				const latest = await buildSnapshot(m);
+				if (closed) return;
+				send(latest.seq, JSON.stringify({ type: "snapshot", snapshot: latest, ts: Date.now() }));
+				subscribe(m, send, latest.seq);
+			}
+		},
+		cancel() {
+			closed = true;
+			if (ping) clearInterval(ping);
+			if (subscriber) unsubscribe(m, subscriber);
+		},
+	});
+
+	return new Response(stream, {
+		headers: {
+			"Content-Type": "text/event-stream; charset=utf-8",
+			"Cache-Control": "no-cache, no-transform",
+			Connection: "keep-alive",
+			"X-Accel-Buffering": "no",
+		},
+	});
+}

package/src/app/api/agent/[id]/route.ts

@@ -0,0 +1,24 @@
+import { NextResponse } from "next/server";
+import { execute, getManaged } from "@/lib/agent-manager";
+import { parseAgentCommand } from "@/lib/command-validation";
+import { BoundaryError, resolveSessionPath } from "@/lib/path-security";
+
+export const dynamic = "force-dynamic";
+
+export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
+	const { id } = await params;
+	try {
+		const sessionPath = await resolveSessionPath(id, { allowPending: true });
+		const parsed = parseAgentCommand(await req.json());
+		if (!parsed.ok) return NextResponse.json({ success: false, error: parsed.error }, { status: 400 });
+		const result = await execute(getManaged(sessionPath), parsed.command);
+		if (!result.ok) return NextResponse.json({ success: false, error: result.error }, { status: 400 });
+		return NextResponse.json({ success: true, data: result.data ?? {} });
+	} catch (error) {
+		const message = error instanceof Error ? error.message : "request failed";
+		return NextResponse.json(
+			{ success: false, error: message },
+			{ status: error instanceof BoundaryError || error instanceof SyntaxError ? 400 : 500 },
+		);
+	}
+}

package/src/app/api/agent/[id]/tree/route.ts

@@ -0,0 +1,49 @@
+import { NextResponse } from "next/server";
+import { getManaged } from "@/lib/agent-manager";
+import { BoundaryError, resolveSessionPath } from "@/lib/path-security";
+
+export const dynamic = "force-dynamic";
+
+function messageText(content: unknown): string {
+	if (typeof content === "string") return content;
+	if (!Array.isArray(content)) return "";
+	return content
+		.map((item) => (typeof item === "string" ? item : item && typeof item === "object" && "text" in item ? String(item.text ?? "") : ""))
+		.join(" ");
+}
+
+/** 会话树上的用户消息（分支点）：保持 Pi JSONL 树的真实层级与活动分支。 */
+export async function GET(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+	const { id } = await params;
+	try {
+		const m = getManaged(await resolveSessionPath(id, { allowPending: true }));
+		const activeBranch = m.sm.getBranch() as unknown as any[];
+		const activeUserId = [...activeBranch]
+			.reverse()
+			.find((entry) => entry?.type === "message" && entry?.message?.role === "user")?.id ?? "";
+		const userMessages: Array<{ entryId: string; ts: number; text: string; depth: number; label?: string }> = [];
+		const walk = (nodes: Array<{ entry: any; children: any[]; label?: string }>, depth: number) => {
+			for (const node of nodes) {
+				const entry = node.entry;
+				if (entry?.type === "message" && entry?.message?.role === "user" && entry.id) {
+					const parsedTimestamp = typeof entry.timestamp === "string" ? Date.parse(entry.timestamp) : Number(entry.timestamp);
+					userMessages.push({
+						entryId: String(entry.id),
+						ts: Number.isFinite(parsedTimestamp) ? parsedTimestamp : 0,
+						text: messageText(entry.message.content).replace(/\s+/g, " ").slice(0, 160),
+						depth,
+						label: node.label || undefined,
+					});
+				}
+				walk(node.children ?? [], depth + 1);
+			}
+		};
+		walk(m.sm.getTree() as unknown as Array<{ entry: any; children: any[]; label?: string }>, 0);
+		return NextResponse.json({ success: true, data: { userMessages, activeUserId } });
+	} catch (error) {
+		return NextResponse.json(
+			{ success: false, error: error instanceof Error ? error.message : "request failed" },
+			{ status: error instanceof BoundaryError ? 400 : 500 },
+		);
+	}
+}

package/src/app/api/agent/new/route.ts

@@ -0,0 +1,19 @@
+import { NextResponse } from "next/server";
+import { createNewSession } from "@/lib/agent-manager";
+import { BoundaryError, resolveWorkspacePath } from "@/lib/path-security";
+
+export const dynamic = "force-dynamic";
+
+export async function POST(req: Request) {
+	try {
+		const body = (await req.json()) as { cwd?: unknown };
+		const cwd = await resolveWorkspacePath(body.cwd ?? process.cwd());
+		const { sessionPath } = await createNewSession(cwd);
+		return NextResponse.json({ success: true, data: { sessionPath } });
+	} catch (error) {
+		return NextResponse.json(
+			{ success: false, error: error instanceof Error ? error.message : "request failed" },
+			{ status: error instanceof BoundaryError || error instanceof SyntaxError ? 400 : 500 },
+		);
+	}
+}

package/src/app/api/config/route.ts

@@ -0,0 +1,22 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { NextResponse } from "next/server";
+import { getAgentDir } from "@/lib/pi";
+
+export const dynamic = "force-dynamic";
+
+/** 下载 ~/.pi/agent/settings.json（对应 dsh 设置里的「打开配置文件」） */
+export async function GET() {
+	try {
+		const file = path.join(getAgentDir(), "settings.json");
+		const content = await fs.readFile(file, "utf8");
+		return new Response(content, {
+			headers: {
+				"Content-Type": "application/json; charset=utf-8",
+				"Content-Disposition": 'attachment; filename="settings.json"',
+			},
+		});
+	} catch (err: any) {
+		return NextResponse.json({ success: false, error: String(err?.message ?? err) }, { status: 500 });
+	}
+}

package/src/app/api/files/route.ts

@@ -0,0 +1,63 @@
+import { NextResponse } from "next/server";
+import { BoundaryError } from "@/lib/path-security";
+import { listWorkspaceDir, openInEditor, parseUploadLength, readWorkspaceFile, saveUploadStream } from "@/lib/files-service";
+
+export const dynamic = "force-dynamic";
+
+/** 工作区文件浏览：?cwd=&path=（目录列表）；?read=1&cwd=&path=（文本预览） */
+export async function GET(req: Request) {
+	const url = new URL(req.url);
+	try {
+		if (url.searchParams.get("read") === "1") {
+			return NextResponse.json({ success: true, data: await readWorkspaceFile(url.searchParams.get("cwd"), url.searchParams.get("path")) });
+		}
+		return NextResponse.json({ success: true, data: await listWorkspaceDir(url.searchParams.get("cwd"), url.searchParams.get("path"), url.searchParams.get("offset")) });
+	} catch (err: any) {
+		return NextResponse.json(
+			{ success: false, error: String(err?.message ?? err) },
+			{ status: err instanceof BoundaryError ? 400 : 500 },
+		);
+	}
+}
+
+/** POST ?action=upload&name= streams bytes; POST { action: "open", cwd, path, line? } opens an editor. */
+export async function POST(req: Request) {
+	try {
+		const url = new URL(req.url);
+		if (url.searchParams.get("action") === "upload") {
+			const declared = req.headers.get("x-upload-size");
+			const contentLength = req.headers.get("content-length");
+			const expectedSize = parseUploadLength(declared ?? contentLength);
+			if (declared !== null && contentLength !== null && parseUploadLength(contentLength) !== expectedSize) {
+				throw new BoundaryError("conflicting upload sizes");
+			}
+			return NextResponse.json({ success: true, data: await saveUploadStream(url.searchParams.get("name"), req.body, expectedSize) });
+		}
+		const reader = req.body?.getReader();
+		if (!reader) throw new BoundaryError("missing request body");
+		const chunks: Uint8Array[] = [];
+		let length = 0;
+		try {
+			for (;;) {
+				const { done, value } = await reader.read();
+				if (done) break;
+				length += value.byteLength;
+				if (length > 64 * 1024) throw new BoundaryError("request body too large");
+				chunks.push(value);
+			}
+		} finally {
+			await reader.cancel().catch(() => undefined);
+			reader.releaseLock();
+		}
+		const body = JSON.parse(Buffer.concat(chunks).toString("utf8")) as { action?: string; cwd?: unknown; path?: unknown; line?: unknown; name?: unknown };
+		if (body.action === "open") {
+			return NextResponse.json({ success: true, data: await openInEditor(body.cwd, body.path, body.line) });
+		}
+		return NextResponse.json({ success: false, error: "unknown action" }, { status: 400 });
+	} catch (err: any) {
+		return NextResponse.json(
+			{ success: false, error: String(err?.message ?? err) },
+			{ status: err instanceof BoundaryError || err instanceof SyntaxError ? 400 : 500 },
+		);
+	}
+}

package/src/app/api/git/route.ts

@@ -0,0 +1,32 @@
+import { NextResponse } from "next/server";
+import { BoundaryError } from "@/lib/path-security";
+import { gitDiff, gitInfo, gitShow } from "@/lib/git-service";
+
+export const dynamic = "force-dynamic";
+
+/**
+ * 工作区 Git 只读接口：
+ * ?cwd=                       状态（分支、上游、ahead/behind、变更文件、最近提交）
+ * ?cwd=&diff=<path>&mode=     单文件差异（mode: staged | worktree | untracked）
+ * ?cwd=&show=<hash>           单次提交内容
+ */
+export async function GET(req: Request) {
+	const url = new URL(req.url);
+	const cwd = url.searchParams.get("cwd");
+	try {
+		const diff = url.searchParams.get("diff");
+		if (diff !== null) {
+			return NextResponse.json({ success: true, data: await gitDiff(cwd, diff, url.searchParams.get("mode") ?? "worktree") });
+		}
+		const show = url.searchParams.get("show");
+		if (show !== null) {
+			return NextResponse.json({ success: true, data: await gitShow(cwd, show) });
+		}
+		return NextResponse.json({ success: true, data: await gitInfo(cwd) });
+	} catch (err: any) {
+		return NextResponse.json(
+			{ success: false, error: String(err?.message ?? err) },
+			{ status: err instanceof BoundaryError ? 400 : 500 },
+		);
+	}
+}

package/src/app/api/growth/route.ts

@@ -0,0 +1,50 @@
+import { NextResponse } from "next/server";
+import { getManaged, growthSnapshot } from "@/lib/agent-manager";
+import { GrowthError, changesBetween, fileContent, filePatch, isAvailable, listTree, readSteps } from "@/lib/growth-service";
+import { BoundaryError, resolveSessionPath, resolveWorkspacePath } from "@/lib/path-security";
+
+export const dynamic = "force-dynamic";
+
+function status(err: unknown): number {
+	if (err instanceof BoundaryError) return 400;
+	if (err instanceof GrowthError) return err.code === "not-found" ? 404 : err.code === "unavailable" ? 503 : err.code === "too-large" ? 413 : 500;
+	return 500;
+}
+
+/**
+ * 项目生长（影子仓库快照）只读接口：
+ * ?cwd=&session=<jsonl 路径>        本会话的步（省略 session = 工作区全部步）
+ * ?cwd=&tree=<hash>&list=1           某一步的文件清单
+ * ?cwd=&from=<tree>&to=<tree>&changes=1   两步之间的变更清单
+ * ?cwd=&from=&to=&path=[&renamedFrom=]    单文件整文件上下文的 unified diff
+ * ?cwd=&tree=&path=&content=1        某一步里单文件全文
+ */
+export async function GET(req: Request) {
+	const url = new URL(req.url);
+	const q = (k: string) => url.searchParams.get(k);
+	try {
+		const cwd = await resolveWorkspacePath(q("cwd"));
+		if (q("list") === "1") return NextResponse.json({ success: true, data: { files: await listTree(cwd, q("tree")) } });
+		if (q("changes") === "1") return NextResponse.json({ success: true, data: { changes: await changesBetween(cwd, q("from"), q("to")) } });
+		if (q("content") === "1") return NextResponse.json({ success: true, data: await fileContent(cwd, q("tree"), q("path")) });
+		if (q("path") !== null) return NextResponse.json({ success: true, data: await filePatch(cwd, q("from"), q("to"), q("path"), q("renamedFrom") ?? undefined) });
+		const available = await isAvailable();
+		if (!available) return NextResponse.json({ success: true, data: { available: false, steps: [] } });
+		return NextResponse.json({ success: true, data: { available: true, steps: await readSteps(cwd, q("session") ?? undefined) } });
+	} catch (err: any) {
+		return NextResponse.json({ success: false, error: String(err?.message ?? err) }, { status: status(err) });
+	}
+}
+
+/** POST { action: "snapshot", session: <会话 id>, label? }：手动拍一张快照（记步并广播给会话订阅者） */
+export async function POST(req: Request) {
+	try {
+		const body = (await req.json()) as { action?: string; session?: unknown; label?: unknown };
+		if (body.action !== "snapshot") return NextResponse.json({ success: false, error: "unknown action" }, { status: 400 });
+		const sessionPath = await resolveSessionPath(String(body.session ?? ""), { allowPending: true });
+		const step = await growthSnapshot(getManaged(sessionPath), typeof body.label === "string" ? body.label : "");
+		return NextResponse.json({ success: true, data: { step } });
+	} catch (err: any) {
+		return NextResponse.json({ success: false, error: String(err?.message ?? err) }, { status: err instanceof SyntaxError ? 400 : status(err) });
+	}
+}

package/src/app/api/health/route.ts

@@ -0,0 +1,7 @@
+import { NextResponse } from "next/server";
+
+export const dynamic = "force-dynamic";
+
+export function GET() {
+	return NextResponse.json({ success: true, data: { ok: true, service: "piweb" } }, { headers: { "Cache-Control": "no-store" } });
+}