@ripla/godd-mcp 0.1.3-canary.21 → 0.1.3-canary.22

package/notes-api/app/routers/files.py

@@ -1,11 +1,11 @@
-"""Files router: get/put file content, history."""
+"""Files router: get/put/create/delete/rename file content, history."""
 
 from __future__ import annotations
 
 import json
 
 from fastapi import APIRouter, Depends, HTTPException
-from pydantic import BaseModel
+from pydantic import BaseModel, Field
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.config import settings
@@ -18,6 +18,7 @@ from app.services.github import (
     get_github_config,
     get_mock_file_content,
 )
+from app.services.github_pr import commit_file, delete_file, get_file_sha
 from app.services.pr_chain import save_to_working_branch
 
 router = APIRouter(prefix="/api", tags=["files"])
@@ -34,6 +35,23 @@ class FileUpdateBody(BaseModel):
     styles: dict | None = None
 
 
+class FileCreateBody(BaseModel):
+    """File creation request body."""
+
+    path: str = Field(..., min_length=1)
+    content: str = ""
+    message: str | None = None
+
+
+class FileRenameBody(BaseModel):
+    """File rename/move request body."""
+
+    new_path: str = Field(..., min_length=1, alias="newPath")
+    message: str | None = None
+
+    model_config = {"populate_by_name": True}
+
+
 @router.get("/files/{file_path:path}")
 async def get_file(file_path: str):
     """Get file content + optional sidecar styles."""
@@ -113,3 +131,111 @@ async def put_file(
         return result
     except Exception as e:
         raise HTTPException(status_code=500, detail=str(e)) from e
+
+
+@router.post("/files", status_code=201)
+async def create_file(
+    body: FileCreateBody,
+    payload: dict = Depends(auth_dependency),
+    _: dict = Depends(require_role("admin", "editor")),
+):
+    """Create a new file on the default branch."""
+    if settings.is_mock_mode():
+        raise HTTPException(
+            status_code=400, detail="Mock mode: file creation disabled",
+        )
+    try:
+        config = get_github_config()
+        existing = await get_file_sha(body.path, config["branch"], config)
+        if existing is not None:
+            raise HTTPException(
+                status_code=409, detail="File already exists",
+            )
+        message = body.message or f"docs: create {body.path.split('/')[-1]}"
+        result = await commit_file(
+            config["branch"], body.path, body.content, message, None, config,
+        )
+        return {"path": body.path, "sha": result["sha"]}
+    except HTTPException:
+        raise
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e)) from e
+
+
+@router.delete("/files/{file_path:path}")
+async def remove_file(
+    file_path: str,
+    payload: dict = Depends(auth_dependency),
+    _: dict = Depends(require_role("admin", "editor")),
+):
+    """Delete a file from the default branch."""
+    if settings.is_mock_mode():
+        raise HTTPException(
+            status_code=400, detail="Mock mode: file deletion disabled",
+        )
+    if not file_path:
+        raise HTTPException(status_code=400, detail="File path is required")
+    try:
+        config = get_github_config()
+        sha = await get_file_sha(file_path, config["branch"], config)
+        if sha is None:
+            raise HTTPException(status_code=404, detail="File not found")
+        message = f"docs: delete {file_path.split('/')[-1]}"
+        await delete_file(
+            config["branch"], file_path, sha, message, config,
+        )
+        return {"success": True, "path": file_path}
+    except HTTPException:
+        raise
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e)) from e
+
+
+@router.patch("/files/{file_path:path}")
+async def rename_file(
+    file_path: str,
+    body: FileRenameBody,
+    payload: dict = Depends(auth_dependency),
+    _: dict = Depends(require_role("admin", "editor")),
+):
+    """Rename/move a file (copy to new path + delete old)."""
+    if not file_path:
+        raise HTTPException(status_code=400, detail="File path is required")
+    if body.new_path == file_path:
+        raise HTTPException(
+            status_code=400, detail="New path is the same as current path",
+        )
+    if settings.is_mock_mode():
+        raise HTTPException(
+            status_code=400, detail="Mock mode: file rename disabled",
+        )
+    try:
+        config = get_github_config()
+        existing = await get_file_sha(body.new_path, config["branch"], config)
+        if existing is not None:
+            raise HTTPException(
+                status_code=409, detail="Target path already exists",
+            )
+
+        file_data = await fetch_file_content(file_path, config)
+        old_name = file_path.split("/")[-1]
+        new_name = body.new_path.split("/")[-1]
+        message = body.message or f"docs: rename {old_name} → {new_name}"
+
+        result = await commit_file(
+            config["branch"], body.new_path, file_data["content"],
+            message, None, config,
+        )
+        await delete_file(
+            config["branch"], file_path, file_data["sha"],
+            message, config,
+        )
+        return {
+            "oldPath": file_path,
+            "newPath": body.new_path,
+            "sha": result["sha"],
+        }
+    except HTTPException:
+        raise
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e)) from e

package/notes-api/app/services/github_pr.py

@@ -104,6 +104,42 @@ async def commit_file(
     return {"sha": resp.json()["content"]["sha"]}
 
 
+async def delete_file(
+    branch_name: str,
+    file_path: str,
+    sha: str,
+    message: str,
+    config: dict,
+) -> None:
+    """Delete a file via Contents API."""
+    url = (
+        f"https://api.github.com/repos/{config['owner']}/{config['repo']}"
+        f"/contents/{file_path}"
+    )
+    body = {"message": message, "sha": sha, "branch": branch_name}
+    async with httpx.AsyncClient() as client:
+        resp = await client.request(
+            "DELETE", url, headers=_headers(config), json=body,
+        )
+        resp.raise_for_status()
+
+
+async def get_file_sha(
+    file_path: str, branch: str, config: dict,
+) -> str | None:
+    """Get the SHA of a file (needed for delete/rename)."""
+    url = (
+        f"https://api.github.com/repos/{config['owner']}/{config['repo']}"
+        f"/contents/{file_path}?ref={branch}"
+    )
+    async with httpx.AsyncClient() as client:
+        resp = await client.get(url, headers=_headers(config))
+        if resp.status_code == 404:
+            return None
+        resp.raise_for_status()
+    return resp.json().get("sha")
+
+
 async def find_open_auto_prs(config: dict) -> list:
     """Find open PRs with docs-auto label."""
     url = f"https://api.github.com/repos/{config['owner']}/{config['repo']}/pulls?state=open&per_page=100"

package/notes-api/tests/test_files.py

@@ -69,3 +69,120 @@ class TestPutFile:
             headers=auth_headers(viewer_token),
         )
         assert resp.status_code == 403
+
+
+class TestCreateFile:
+    async def test_create_file_mock_mode_rejected(
+        self, client: AsyncClient, mock_db, admin_token,
+    ):
+        """File creation is disabled in mock mode."""
+        resp = await client.post(
+            "/api/files",
+            json={"path": "docs/new.md", "content": "# New"},
+            headers=auth_headers(admin_token),
+        )
+        assert resp.status_code == 400
+        assert "Mock mode" in resp.json()["detail"]
+
+    async def test_create_file_unauthorized(self, client: AsyncClient):
+        """POST without auth returns 401."""
+        resp = await client.post(
+            "/api/files",
+            json={"path": "docs/x.md"},
+        )
+        assert resp.status_code == 401
+
+    async def test_create_file_viewer_forbidden(
+        self, client: AsyncClient, mock_db, viewer_token,
+    ):
+        """Viewers cannot create files."""
+        resp = await client.post(
+            "/api/files",
+            json={"path": "docs/x.md"},
+            headers=auth_headers(viewer_token),
+        )
+        assert resp.status_code == 403
+
+    async def test_create_file_empty_path_rejected(
+        self, client: AsyncClient, mock_db, admin_token,
+    ):
+        """Empty path is rejected by validation."""
+        resp = await client.post(
+            "/api/files",
+            json={"path": "", "content": "x"},
+            headers=auth_headers(admin_token),
+        )
+        assert resp.status_code == 422
+
+
+class TestDeleteFile:
+    async def test_delete_file_mock_mode_rejected(
+        self, client: AsyncClient, mock_db, admin_token,
+    ):
+        """File deletion is disabled in mock mode."""
+        resp = await client.delete(
+            "/api/files/docs/old.md",
+            headers=auth_headers(admin_token),
+        )
+        assert resp.status_code == 400
+        assert "Mock mode" in resp.json()["detail"]
+
+    async def test_delete_file_unauthorized(self, client: AsyncClient):
+        """DELETE without auth returns 401."""
+        resp = await client.delete("/api/files/docs/x.md")
+        assert resp.status_code == 401
+
+    async def test_delete_file_viewer_forbidden(
+        self, client: AsyncClient, mock_db, viewer_token,
+    ):
+        """Viewers cannot delete files."""
+        resp = await client.delete(
+            "/api/files/docs/x.md",
+            headers=auth_headers(viewer_token),
+        )
+        assert resp.status_code == 403
+
+
+class TestRenameFile:
+    async def test_rename_file_mock_mode_rejected(
+        self, client: AsyncClient, mock_db, admin_token,
+    ):
+        """File rename is disabled in mock mode."""
+        resp = await client.patch(
+            "/api/files/docs/old.md",
+            json={"newPath": "docs/new.md"},
+            headers=auth_headers(admin_token),
+        )
+        assert resp.status_code == 400
+        assert "Mock mode" in resp.json()["detail"]
+
+    async def test_rename_file_unauthorized(self, client: AsyncClient):
+        """PATCH without auth returns 401."""
+        resp = await client.patch(
+            "/api/files/docs/x.md",
+            json={"newPath": "docs/y.md"},
+        )
+        assert resp.status_code == 401
+
+    async def test_rename_file_viewer_forbidden(
+        self, client: AsyncClient, mock_db, viewer_token,
+    ):
+        """Viewers cannot rename files."""
+        resp = await client.patch(
+            "/api/files/docs/x.md",
+            json={"newPath": "docs/y.md"},
+            headers=auth_headers(viewer_token),
+        )
+        assert resp.status_code == 403
+
+    async def test_rename_file_same_path_rejected(
+        self, client: AsyncClient, mock_db, admin_token,
+    ):
+        """Rename to the same path is rejected."""
+        resp = await client.patch(
+            "/api/files/docs/x.md",
+            json={"newPath": "docs/x.md"},
+            headers=auth_headers(admin_token),
+        )
+        assert resp.status_code == 400
+        assert "same" in resp.json()["detail"]

package/notes-app/src/components/FileContextMenu.test.tsx

@@ -0,0 +1,51 @@
+import { describe, it, expect, vi } from "vitest";
+import { render, screen, fireEvent } from "@testing-library/react";
+import FileContextMenu from "./FileContextMenu";
+
+describe("FileContextMenu", () => {
+  const defaultProps = {
+    x: 100,
+    y: 200,
+    isDir: false,
+    onAction: vi.fn(),
+    onClose: vi.fn(),
+  };
+
+  it("renders rename and delete for files", () => {
+    render(<FileContextMenu {...defaultProps} />);
+    expect(screen.getByText("名前変更")).toBeTruthy();
+    expect(screen.getByText("削除")).toBeTruthy();
+    expect(screen.queryByText("新規ファイル")).toBeNull();
+  });
+
+  it("renders create, rename, and delete for directories", () => {
+    render(<FileContextMenu {...defaultProps} isDir />);
+    expect(screen.getByText("新規ファイル")).toBeTruthy();
+    expect(screen.getByText("名前変更")).toBeTruthy();
+    expect(screen.getByText("削除")).toBeTruthy();
+  });
+
+  it("calls onAction with correct action type", () => {
+    const onAction = vi.fn();
+    render(<FileContextMenu {...defaultProps} isDir onAction={onAction} />);
+
+    fireEvent.click(screen.getByText("新規ファイル"));
+    expect(onAction).toHaveBeenCalledWith("create");
+  });
+
+  it("calls onClose on Escape key", () => {
+    const onClose = vi.fn();
+    render(<FileContextMenu {...defaultProps} onClose={onClose} />);
+
+    fireEvent.keyDown(document, { key: "Escape" });
+    expect(onClose).toHaveBeenCalledOnce();
+  });
+
+  it("calls onClose on outside click", () => {
+    const onClose = vi.fn();
+    render(<FileContextMenu {...defaultProps} onClose={onClose} />);
+
+    fireEvent.mouseDown(document.body);
+    expect(onClose).toHaveBeenCalledOnce();
+  });
+});

package/notes-app/src/components/FileContextMenu.tsx

@@ -0,0 +1,60 @@
+import { useEffect, useRef } from "react";
+
+export type FileAction = "create" | "rename" | "delete";
+
+type Props = {
+  x: number;
+  y: number;
+  isDir: boolean;
+  onAction: (action: FileAction) => void;
+  onClose: () => void;
+};
+
+export default function FileContextMenu({ x, y, isDir, onAction, onClose }: Props) {
+  const ref = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    function handleClick(e: MouseEvent) {
+      if (ref.current && !ref.current.contains(e.target as Node)) {
+        onClose();
+      }
+    }
+    function handleEsc(e: KeyboardEvent) {
+      if (e.key === "Escape") onClose();
+    }
+    document.addEventListener("mousedown", handleClick);
+    document.addEventListener("keydown", handleEsc);
+    return () => {
+      document.removeEventListener("mousedown", handleClick);
+      document.removeEventListener("keydown", handleEsc);
+    };
+  }, [onClose]);
+
+  const items: { label: string; action: FileAction; icon: string }[] = [];
+  if (isDir) {
+    items.push({ label: "新規ファイル", action: "create", icon: "📄" });
+  }
+  items.push({ label: "名前変更", action: "rename", icon: "✏️" });
+  items.push({ label: "削除", action: "delete", icon: "🗑️" });
+
+  return (
+    <div
+      ref={ref}
+      className="fixed z-50 bg-gray-800 border border-gray-600 rounded shadow-lg py-1 min-w-[140px]"
+      style={{ left: x, top: y }}
+    >
+      {items.map((item) => (
+        <button
+          key={item.action}
+          onClick={() => onAction(item.action)}
+          className={`w-full text-left px-3 py-1.5 text-sm hover:bg-gray-700 flex items-center gap-2 ${
+            item.action === "delete" ? "text-red-400 hover:text-red-300" : "text-gray-200"
+          }`}
+        >
+          <span>{item.icon}</span>
+          <span>{item.label}</span>
+        </button>
+      ))}
+    </div>
+  );
+}

package/notes-app/src/components/FileDialogs.test.tsx

@@ -0,0 +1,140 @@
+import { describe, it, expect, vi } from "vitest";
+import { render, screen, fireEvent } from "@testing-library/react";
+import { CreateFileDialog, RenameDialog, DeleteConfirmDialog } from "./FileDialogs";
+
+describe("CreateFileDialog", () => {
+  it("renders with parent path", () => {
+    render(
+      <CreateFileDialog
+        parentPath="docs/001_project"
+        onConfirm={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    expect(screen.getByText("新規ファイル作成")).toBeTruthy();
+    expect(screen.getByText("場所: docs/001_project/")).toBeTruthy();
+  });
+
+  it("disables submit when name is empty", () => {
+    render(
+      <CreateFileDialog
+        parentPath="docs"
+        onConfirm={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    const submitBtn = screen.getByText("作成");
+    expect(submitBtn).toHaveProperty("disabled", true);
+  });
+
+  it("calls onConfirm with trimmed name on submit", () => {
+    const onConfirm = vi.fn();
+    render(
+      <CreateFileDialog
+        parentPath="docs"
+        onConfirm={onConfirm}
+        onCancel={vi.fn()}
+      />,
+    );
+    const input = screen.getByPlaceholderText("ファイル名 (例: README.md)");
+    fireEvent.change(input, { target: { value: "  test.md  " } });
+    fireEvent.submit(input.closest("form")!);
+    expect(onConfirm).toHaveBeenCalledWith("test.md");
+  });
+
+  it("calls onCancel on cancel button", () => {
+    const onCancel = vi.fn();
+    render(
+      <CreateFileDialog
+        parentPath="docs"
+        onConfirm={vi.fn()}
+        onCancel={onCancel}
+      />,
+    );
+    fireEvent.click(screen.getByText("キャンセル"));
+    expect(onCancel).toHaveBeenCalledOnce();
+  });
+});
+
+describe("RenameDialog", () => {
+  it("renders with current name pre-filled", () => {
+    render(
+      <RenameDialog
+        currentName="README.md"
+        onConfirm={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    expect(screen.getByText("名前変更")).toBeTruthy();
+    const input = screen.getByDisplayValue("README.md");
+    expect(input).toBeTruthy();
+  });
+
+  it("disables submit when name is unchanged", () => {
+    render(
+      <RenameDialog
+        currentName="test.md"
+        onConfirm={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    const submitBtn = screen.getByText("変更");
+    expect(submitBtn).toHaveProperty("disabled", true);
+  });
+
+  it("calls onConfirm with new name", () => {
+    const onConfirm = vi.fn();
+    render(
+      <RenameDialog
+        currentName="old.md"
+        onConfirm={onConfirm}
+        onCancel={vi.fn()}
+      />,
+    );
+    const input = screen.getByDisplayValue("old.md");
+    fireEvent.change(input, { target: { value: "new.md" } });
+    fireEvent.submit(input.closest("form")!);
+    expect(onConfirm).toHaveBeenCalledWith("new.md");
+  });
+});
+
+describe("DeleteConfirmDialog", () => {
+  it("renders file name and warning", () => {
+    render(
+      <DeleteConfirmDialog
+        fileName="test.md"
+        onConfirm={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    expect(screen.getByText("ファイル削除")).toBeTruthy();
+    expect(screen.getByText("test.md")).toBeTruthy();
+    expect(screen.getByText("この操作は取り消せません。")).toBeTruthy();
+  });
+
+  it("calls onConfirm on delete button", () => {
+    const onConfirm = vi.fn();
+    render(
+      <DeleteConfirmDialog
+        fileName="x.md"
+        onConfirm={onConfirm}
+        onCancel={vi.fn()}
+      />,
+    );
+    fireEvent.click(screen.getByText("削除"));
+    expect(onConfirm).toHaveBeenCalledOnce();
+  });
+
+  it("calls onCancel on cancel button", () => {
+    const onCancel = vi.fn();
+    render(
+      <DeleteConfirmDialog
+        fileName="x.md"
+        onConfirm={vi.fn()}
+        onCancel={onCancel}
+      />,
+    );
+    fireEvent.click(screen.getByText("キャンセル"));
+    expect(onCancel).toHaveBeenCalledOnce();
+  });
+});

package/notes-app/src/components/FileDialogs.tsx

@@ -0,0 +1,174 @@
+import { useState, useRef, useEffect } from "react";
+
+type DialogBackdropProps = {
+  children: React.ReactNode;
+  onClose: () => void;
+};
+
+function DialogBackdrop({ children, onClose }: DialogBackdropProps) {
+  return (
+    <div
+      className="fixed inset-0 z-50 bg-black/50 flex items-center justify-center"
+      onClick={(e) => { if (e.target === e.currentTarget) onClose(); }}
+      onKeyDown={(e) => { if (e.key === "Escape") onClose(); }}
+      role="dialog"
+      aria-modal="true"
+    >
+      {children}
+    </div>
+  );
+}
+
+type CreateFileDialogProps = {
+  parentPath: string;
+  onConfirm: (fileName: string) => void;
+  onCancel: () => void;
+};
+
+export function CreateFileDialog({ parentPath, onConfirm, onCancel }: CreateFileDialogProps) {
+  const [name, setName] = useState("");
+  const inputRef = useRef<HTMLInputElement>(null);
+
+  useEffect(() => {
+    inputRef.current?.focus();
+  }, []);
+
+  function handleSubmit(e: React.FormEvent) {
+    e.preventDefault();
+    const trimmed = name.trim();
+    if (!trimmed) return;
+    onConfirm(trimmed);
+  }
+
+  return (
+    <DialogBackdrop onClose={onCancel}>
+      <form
+        onSubmit={handleSubmit}
+        className="bg-gray-800 border border-gray-600 rounded-lg shadow-xl p-5 w-96"
+        onClick={(e) => e.stopPropagation()}
+      >
+        <h3 className="text-sm font-bold text-gray-100 mb-3">新規ファイル作成</h3>
+        <p className="text-xs text-gray-400 mb-2 truncate">場所: {parentPath}/</p>
+        <input
+          ref={inputRef}
+          type="text"
+          value={name}
+          onChange={(e) => setName(e.target.value)}
+          placeholder="ファイル名 (例: README.md)"
+          className="w-full px-3 py-2 bg-gray-700 border border-gray-600 rounded text-sm text-gray-100 placeholder-gray-500 focus:outline-none focus:border-blue-500"
+        />
+        <div className="flex justify-end gap-2 mt-4">
+          <button
+            type="button"
+            onClick={onCancel}
+            className="px-3 py-1.5 text-sm text-gray-400 hover:text-gray-200"
+          >
+            キャンセル
+          </button>
+          <button
+            type="submit"
+            disabled={!name.trim()}
+            className="px-3 py-1.5 text-sm bg-blue-600 hover:bg-blue-700 text-white rounded disabled:opacity-50 disabled:cursor-not-allowed"
+          >
+            作成
+          </button>
+        </div>
+      </form>
+    </DialogBackdrop>
+  );
+}
+
+type RenameDialogProps = {
+  currentName: string;
+  onConfirm: (newName: string) => void;
+  onCancel: () => void;
+};
+
+export function RenameDialog({ currentName, onConfirm, onCancel }: RenameDialogProps) {
+  const [name, setName] = useState(currentName);
+  const inputRef = useRef<HTMLInputElement>(null);
+
+  useEffect(() => {
+    inputRef.current?.focus();
+    inputRef.current?.select();
+  }, []);
+
+  function handleSubmit(e: React.FormEvent) {
+    e.preventDefault();
+    const trimmed = name.trim();
+    if (!trimmed || trimmed === currentName) return;
+    onConfirm(trimmed);
+  }
+
+  return (
+    <DialogBackdrop onClose={onCancel}>
+      <form
+        onSubmit={handleSubmit}
+        className="bg-gray-800 border border-gray-600 rounded-lg shadow-xl p-5 w-96"
+        onClick={(e) => e.stopPropagation()}
+      >
+        <h3 className="text-sm font-bold text-gray-100 mb-3">名前変更</h3>
+        <input
+          ref={inputRef}
+          type="text"
+          value={name}
+          onChange={(e) => setName(e.target.value)}
+          className="w-full px-3 py-2 bg-gray-700 border border-gray-600 rounded text-sm text-gray-100 focus:outline-none focus:border-blue-500"
+        />
+        <div className="flex justify-end gap-2 mt-4">
+          <button
+            type="button"
+            onClick={onCancel}
+            className="px-3 py-1.5 text-sm text-gray-400 hover:text-gray-200"
+          >
+            キャンセル
+          </button>
+          <button
+            type="submit"
+            disabled={!name.trim() || name.trim() === currentName}
+            className="px-3 py-1.5 text-sm bg-blue-600 hover:bg-blue-700 text-white rounded disabled:opacity-50 disabled:cursor-not-allowed"
+          >
+            変更
+          </button>
+        </div>
+      </form>
+    </DialogBackdrop>
+  );
+}
+
+type DeleteConfirmDialogProps = {
+  fileName: string;
+  onConfirm: () => void;
+  onCancel: () => void;
+};
+
+export function DeleteConfirmDialog({ fileName, onConfirm, onCancel }: DeleteConfirmDialogProps) {
+  return (
+    <DialogBackdrop onClose={onCancel}>
+      <div
+        className="bg-gray-800 border border-gray-600 rounded-lg shadow-xl p-5 w-96"
+        onClick={(e) => e.stopPropagation()}
+      >
+        <h3 className="text-sm font-bold text-red-400 mb-3">ファイル削除</h3>
+        <p className="text-sm text-gray-300 mb-1">
+          <span className="font-mono text-gray-100">{fileName}</span> を削除しますか？
+        </p>
+        <p className="text-xs text-gray-500 mb-4">この操作は取り消せません。</p>
+        <div className="flex justify-end gap-2">
+          <button
+            onClick={onCancel}
+            className="px-3 py-1.5 text-sm text-gray-400 hover:text-gray-200"
+          >
+            キャンセル
+          </button>
+          <button
+            onClick={onConfirm}
+            className="px-3 py-1.5 text-sm bg-red-600 hover:bg-red-700 text-white rounded"
+          >
+            削除
+          </button>
+        </div>
+      </div>
+    </DialogBackdrop>
+  );
+}

package/notes-app/src/lib/api.ts

@@ -99,3 +99,46 @@ export async function fetchMe(): Promise<UserInfo | null> {
   if (!res.ok) return null;
   return res.json();
 }
+
+export async function createFileApi(
+  path: string,
+  content = "",
+): Promise<{ path: string; sha: string }> {
+  const res = await apiFetch("/files", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ path, content }),
+  });
+  if (!res.ok) {
+    const detail = await res.json().catch(() => null);
+    throw new Error(detail?.detail ?? `Create failed: ${res.status}`);
+  }
+  return res.json();
+}
+
+export async function deleteFileApi(
+  path: string,
+): Promise<{ success: boolean }> {
+  const res = await apiFetch(`/files/${path}`, { method: "DELETE" });
+  if (!res.ok) {
+    const detail = await res.json().catch(() => null);
+    throw new Error(detail?.detail ?? `Delete failed: ${res.status}`);
+  }
+  return res.json();
+}
+
+export async function renameFileApi(
+  oldPath: string,
+  newPath: string,
+): Promise<{ oldPath: string; newPath: string; sha: string }> {
+  const res = await apiFetch(`/files/${oldPath}`, {
+    method: "PATCH",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ newPath }),
+  });
+  if (!res.ok) {
+    const detail = await res.json().catch(() => null);
+    throw new Error(detail?.detail ?? `Rename failed: ${res.status}`);
+  }
+  return res.json();
+}

package/notes-app/src/pages/MainPage.tsx

@@ -5,8 +5,12 @@ import { useAuth } from "@/contexts/AuthContext";
 import { useToast } from "@/contexts/ToastContext";
 import { useEditSession } from "@/hooks/useEditSession";
 import { useAutoSave } from "@/hooks/useAutoSave";
+import { createFileApi, deleteFileApi, renameFileApi } from "@/lib/api";
 import EditToolbar from "@/components/EditToolbar";
 import SaveStatusIndicator from "@/components/SaveStatusIndicator";
+import FileContextMenu from "@/components/FileContextMenu";
+import type { FileAction } from "@/components/FileContextMenu";
+import { CreateFileDialog, RenameDialog, DeleteConfirmDialog } from "@/components/FileDialogs";
 import { TreeSkeleton, ContentSkeleton, InlineError } from "@/components/Skeleton";
 import type { TiptapSidecarStyles } from "@/components/MarkdownEditor";
 import type { SidecarStyles } from "@/lib/csv-utils";
@@ -169,20 +173,28 @@ function TreeNode({
   depth,
   selected,
   onSelect,
+  onContextMenu,
 }: {
   entry: TreeEntry;
   depth: number;
   selected: string | null;
   onSelect: (path: string) => void;
+  onContextMenu?: (e: React.MouseEvent, entry: TreeEntry) => void;
 }) {
   const [open, setOpen] = useState(depth === 0);
   const pl = depth * 12;
 
+  function handleCtx(e: React.MouseEvent) {
+    e.preventDefault();
+    onContextMenu?.(e, entry);
+  }
+
   if (entry.type === "dir") {
     return (
       <div>
         <button
           onClick={() => setOpen(!open)}
+          onContextMenu={handleCtx}
           className="w-full text-left py-1 px-2 text-sm hover:bg-gray-700 rounded flex items-center gap-1"
           style={{ paddingLeft: pl }}
         >
@@ -198,6 +210,7 @@ function TreeNode({
               depth={depth + 1}
               selected={selected}
               onSelect={onSelect}
+              onContextMenu={onContextMenu}
             />
           ))}
       </div>
@@ -208,6 +221,7 @@ function TreeNode({
   return (
     <button
       onClick={() => onSelect(entry.path)}
+      onContextMenu={handleCtx}
       className={`w-full text-left py-1 px-2 text-sm rounded flex items-center gap-1 ${
         isSelected ? "bg-blue-600 text-white" : "hover:bg-gray-700"
       }`}
@@ -234,6 +248,14 @@ export default function MainPage() {
   const [fileLoading, setFileLoading] = useState(false);
   const [editing, setEditing] = useState(false);
 
+  const [ctxMenu, setCtxMenu] = useState<{
+    x: number; y: number; entry: TreeEntry;
+  } | null>(null);
+  const [dialog, setDialog] = useState<{
+    type: "create" | "rename" | "delete";
+    entry: TreeEntry;
+  } | null>(null);
+
   const loadTree = useCallback(() => {
     setApiState("loading");
     fetch(`${API_BASE}/tree`)
@@ -325,6 +347,79 @@ export default function MainPage() {
     setEditing(false);
   }, [autoSave]);
 
+  const handleTreeContextMenu = useCallback(
+    (e: React.MouseEvent, entry: TreeEntry) => {
+      if (!canEdit || apiState !== "ready") return;
+      setCtxMenu({ x: e.clientX, y: e.clientY, entry });
+    },
+    [canEdit, apiState],
+  );
+
+  const handleContextAction = useCallback(
+    (action: FileAction) => {
+      if (!ctxMenu) return;
+      setDialog({ type: action, entry: ctxMenu.entry });
+      setCtxMenu(null);
+    },
+    [ctxMenu],
+  );
+
+  const handleCreateFile = useCallback(
+    async (fileName: string) => {
+      if (!dialog || dialog.type !== "create") return;
+      const parentPath = dialog.entry.path;
+      const fullPath = `${parentPath}/${fileName}`;
+      setDialog(null);
+      try {
+        await createFileApi(fullPath);
+        showToast(`${fileName} を作成しました`, "success");
+        loadTree();
+        handleFileSelect(fullPath);
+      } catch (e) {
+        showToast(`作成に失敗しました: ${(e as Error).message}`, "error");
+      }
+    },
+    [dialog, showToast, loadTree, handleFileSelect],
+  );
+
+  const handleDeleteFile = useCallback(async () => {
+    if (!dialog || dialog.type !== "delete") return;
+    const path = dialog.entry.path;
+    setDialog(null);
+    try {
+      await deleteFileApi(path);
+      showToast(`${dialog.entry.name} を削除しました`, "success");
+      if (selectedFile === path) {
+        setSelectedFile(null);
+        setFileContent(null);
+      }
+      loadTree();
+    } catch (e) {
+      showToast(`削除に失敗しました: ${(e as Error).message}`, "error");
+    }
+  }, [dialog, showToast, selectedFile, loadTree]);
+
+  const handleRenameFile = useCallback(
+    async (newName: string) => {
+      if (!dialog || dialog.type !== "rename") return;
+      const oldPath = dialog.entry.path;
+      const parentDir = oldPath.substring(0, oldPath.lastIndexOf("/"));
+      const newPath = parentDir ? `${parentDir}/${newName}` : newName;
+      setDialog(null);
+      try {
+        await renameFileApi(oldPath, newPath);
+        showToast(`${dialog.entry.name} → ${newName} に変更しました`, "success");
+        if (selectedFile === oldPath) {
+          handleFileSelect(newPath);
+        }
+        loadTree();
+      } catch (e) {
+        showToast(`名前変更に失敗しました: ${(e as Error).message}`, "error");
+      }
+    },
+    [dialog, showToast, selectedFile, loadTree, handleFileSelect],
+  );
+
   const ext = fileContent ? getFileExt(fileContent.path) : "";
 
   return (
@@ -373,6 +468,7 @@ export default function MainPage() {
                   depth={0}
                   selected={selectedFile}
                   onSelect={handleFileSelect}
+                  onContextMenu={handleTreeContextMenu}
                 />
               ))}
             </div>
@@ -386,6 +482,7 @@ export default function MainPage() {
                 depth={0}
                 selected={selectedFile}
                 onSelect={handleFileSelect}
+                onContextMenu={handleTreeContextMenu}
               />
             ))}
         </div>
@@ -480,6 +577,38 @@ export default function MainPage() {
           onClearError={editSession.clearError}
         />
       </main>
+
+      {ctxMenu && (
+        <FileContextMenu
+          x={ctxMenu.x}
+          y={ctxMenu.y}
+          isDir={ctxMenu.entry.type === "dir"}
+          onAction={handleContextAction}
+          onClose={() => setCtxMenu(null)}
+        />
+      )}
+
+      {dialog?.type === "create" && (
+        <CreateFileDialog
+          parentPath={dialog.entry.path}
+          onConfirm={handleCreateFile}
+          onCancel={() => setDialog(null)}
+        />
+      )}
+      {dialog?.type === "rename" && (
+        <RenameDialog
+          currentName={dialog.entry.name}
+          onConfirm={handleRenameFile}
+          onCancel={() => setDialog(null)}
+        />
+      )}
+      {dialog?.type === "delete" && (
+        <DeleteConfirmDialog
+          fileName={dialog.entry.name}
+          onConfirm={handleDeleteFile}
+          onCancel={() => setDialog(null)}
+        />
+      )}
     </div>
   );
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ripla/godd-mcp",
-  "version": "0.1.3-canary.21",
+  "version": "0.1.3-canary.22",
   "type": "module",
   "description": "GoDD (Governance-orchestrated Driven Development) MCP Server - Encrypted prompt distribution via Model Context Protocol",
   "main": "dist/index.js",