@sanqianx/claude-ai-workbench 0.13.2 → 0.13.4

package/packages/server/lib/project-store.js

@@ -1,102 +1,102 @@
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const crypto = require('crypto');
-const { normalizeProject } = require('../../contracts');
-const { readJson, writeJson } = require('./json-file');
-
-const SCHEMA = 'agent-terminal-projects/v1';
-
-// Registry of user-created workspaces. Each project binds a display name to
-// an absolute local directory; its projectId doubles as the ContextResolver
-// workspaceRef so sessions inherit project ownership for free.
-class ProjectStore {
-  constructor(options = {}) {
-    if (!options.dataDir) throw new Error('ProjectStore dataDir is required');
-    this.projectFile = options.projectFile || path.join(options.dataDir, 'projects.v1.json');
-  }
-
-  _read() { return readJson(this.projectFile, { schema: SCHEMA, projects: [] }); }
-  _write(cfg) { writeJson(this.projectFile, cfg); }
-
-  list() {
-    return this._read().projects
-      .slice()
-      .sort((a, b) => String(a.createdAt).localeCompare(String(b.createdAt)));
-  }
-
-  get(id) {
-    return this._read().projects.find(item => item.id === id) || null;
-  }
-
-  create(input = {}) {
-    const cfg = this._read();
-    const rootPath = resolveExistingDirectory(input.rootPath);
-    const project = normalizeProject({ ...input, rootPath }, generateProjectId(cfg));
-    cfg.projects.push(project);
-    this._write(cfg);
-    return project;
-  }
-
-  rename(id, name) {
-    return this.update(id, { name });
-  }
-
-  update(id, input = {}) {
-    const cfg = this._read();
-    const index = cfg.projects.findIndex(item => item.id === id);
-    if (index < 0) throw Object.assign(new Error('project not found'), { status: 404 });
-    const current = cfg.projects[index];
-    const next = normalizeProject({
-      ...current,
-      ...Object.fromEntries(['name', 'defaultAiProfileId', 'defaultModel', 'defaultAgentId']
-        .filter(key => Object.prototype.hasOwnProperty.call(input, key)).map(key => [key, input[key]])),
-      rootPath: current.rootPath, createdAt: current.createdAt,
-    }, current.id);
-    next.updatedAt = new Date().toISOString();
-    cfg.projects[index] = next;
-    this._write(cfg);
-    return next;
-  }
-
-  remove(id) {
-    const cfg = this._read();
-    if (!cfg.projects.some(item => item.id === id)) return false;
-    cfg.projects = cfg.projects.filter(item => item.id !== id);
-    this._write(cfg);
-    return true;
-  }
-
-  toWorkspaceMap() {
-    const map = {};
-    for (const project of this.list()) map[project.id] = project.rootPath;
-    return map;
-  }
-}
-
-function generateProjectId(cfg) {
-  const taken = new Set(cfg.projects.map(item => item.id));
-  for (let attempt = 0; attempt < 32; attempt += 1) {
-    const id = `prj-${crypto.randomBytes(5).toString('hex')}`;
-    if (!taken.has(id)) return id;
-  }
-  throw new Error('unable to allocate a project id');
-}
-
-function resolveExistingDirectory(rootPath) {
-  const value = String(rootPath || '').trim();
-  if (!value) throw Object.assign(new Error('project rootPath is required'), { status: 400 });
-  let real;
-  try {
-    real = fs.realpathSync(path.resolve(value));
-  } catch {
-    throw Object.assign(new Error(`project directory does not exist: ${value}`), { status: 400 });
-  }
-  if (!fs.statSync(real).isDirectory()) {
-    throw Object.assign(new Error(`project rootPath is not a directory: ${value}`), { status: 400 });
-  }
-  return real;
-}
-
-module.exports = { ProjectStore };
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { normalizeProject } = require('../../contracts');
+const { readJson, writeJson } = require('./json-file');
+
+const SCHEMA = 'agent-terminal-projects/v1';
+
+// Registry of user-created workspaces. Each project binds a display name to
+// an absolute local directory; its projectId doubles as the ContextResolver
+// workspaceRef so sessions inherit project ownership for free.
+class ProjectStore {
+  constructor(options = {}) {
+    if (!options.dataDir) throw new Error('ProjectStore dataDir is required');
+    this.projectFile = options.projectFile || path.join(options.dataDir, 'projects.v1.json');
+  }
+
+  _read() { return readJson(this.projectFile, { schema: SCHEMA, projects: [] }); }
+  _write(cfg) { writeJson(this.projectFile, cfg); }
+
+  list() {
+    return this._read().projects
+      .slice()
+      .sort((a, b) => String(a.createdAt).localeCompare(String(b.createdAt)));
+  }
+
+  get(id) {
+    return this._read().projects.find(item => item.id === id) || null;
+  }
+
+  create(input = {}) {
+    const cfg = this._read();
+    const rootPath = resolveExistingDirectory(input.rootPath);
+    const project = normalizeProject({ ...input, rootPath }, generateProjectId(cfg));
+    cfg.projects.push(project);
+    this._write(cfg);
+    return project;
+  }
+
+  rename(id, name) {
+    return this.update(id, { name });
+  }
+
+  update(id, input = {}) {
+    const cfg = this._read();
+    const index = cfg.projects.findIndex(item => item.id === id);
+    if (index < 0) throw Object.assign(new Error('project not found'), { status: 404 });
+    const current = cfg.projects[index];
+    const next = normalizeProject({
+      ...current,
+      ...Object.fromEntries(['name', 'defaultAiProfileId', 'defaultModel', 'defaultAgentId']
+        .filter(key => Object.prototype.hasOwnProperty.call(input, key)).map(key => [key, input[key]])),
+      rootPath: current.rootPath, createdAt: current.createdAt,
+    }, current.id);
+    next.updatedAt = new Date().toISOString();
+    cfg.projects[index] = next;
+    this._write(cfg);
+    return next;
+  }
+
+  remove(id) {
+    const cfg = this._read();
+    if (!cfg.projects.some(item => item.id === id)) return false;
+    cfg.projects = cfg.projects.filter(item => item.id !== id);
+    this._write(cfg);
+    return true;
+  }
+
+  toWorkspaceMap() {
+    const map = {};
+    for (const project of this.list()) map[project.id] = project.rootPath;
+    return map;
+  }
+}
+
+function generateProjectId(cfg) {
+  const taken = new Set(cfg.projects.map(item => item.id));
+  for (let attempt = 0; attempt < 32; attempt += 1) {
+    const id = `prj-${crypto.randomBytes(5).toString('hex')}`;
+    if (!taken.has(id)) return id;
+  }
+  throw new Error('unable to allocate a project id');
+}
+
+function resolveExistingDirectory(rootPath) {
+  const value = String(rootPath || '').trim();
+  if (!value) throw Object.assign(new Error('project rootPath is required'), { status: 400 });
+  let real;
+  try {
+    real = fs.realpathSync(path.resolve(value));
+  } catch {
+    throw Object.assign(new Error(`project directory does not exist: ${value}`), { status: 400 });
+  }
+  if (!fs.statSync(real).isDirectory()) {
+    throw Object.assign(new Error(`project rootPath is not a directory: ${value}`), { status: 400 });
+  }
+  return real;
+}
+
+module.exports = { ProjectStore };

package/packages/server/lib/runtime-loader.js

@@ -1,120 +1,120 @@
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-// Loading boundary between the packaged server and the legacy runtime tree
-// (src/backend/lib) it must run. Exactly one of two legal layouts is allowed:
-//
-// source layout — this module lives at <root>/packages/server/lib and the
-// same distribution root carries <root>/src/backend/lib. That root is only
-// accepted when it is verifiably THIS project's root: the package must sit
-// in a packages/ directory whose parent manifest is named as the workbench
-// root. An installed server package therefore can never borrow src/ code
-// from a consumer project or from an unrelated node_modules tree.
-//
-// sdk-bundle layout — a standalone packed server package carries its own
-// legacy tree at <package>/legacy/src/backend/lib. pack-sdk.js stamps the
-// STAGED manifest with runtimeLayout='sdk-bundle'; older packages without
-// the marker are recognized by the legacy tree itself. Once the bundle
-// layout is established it is locked: a missing file, or a missing legacy
-// tree entirely, fails the load. There is no fallback to source code
-// outside the package, so a broken artifact can never appear to work.
-//
-// Module names are restricted to plain lowercase identifiers — no path
-// separators, no extension, no traversal — and every resolution stays
-// inside the chosen legacy directory. This module deliberately requires
-// nothing from the server itself (no index.js, no Service), so loading the
-// runtime can never become a require cycle.
-
-const SERVER_PACKAGE_DIR = path.join(__dirname, '..');
-const SERVER_PACKAGE_NAME = '@claude-ai-workbench/server';
-const SOURCE_ROOT_PACKAGE_NAME = '@sanqianx/claude-ai-workbench';
-const RUNTIME_LAYOUT_MARKER = 'sdk-bundle';
-const MODULE_NAME_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;
-
-function fail(code, message) {
-  const error = new Error(message);
-  error.code = code;
-  throw error;
-}
-
-function isRealDirectory(candidate) {
-  try { return fs.statSync(candidate).isDirectory(); } catch { return false; }
-}
-
-function readManifest(dir) {
-  let parsed;
-  try {
-    parsed = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8'));
-  } catch (error) {
-    fail('RUNTIME_PACKAGE_MANIFEST_INVALID', `package manifest at ${dir} is missing or unreadable: ${error.message}`);
-  }
-  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-    fail('RUNTIME_PACKAGE_MANIFEST_INVALID', `package manifest at ${dir} is not a JSON object`);
-  }
-  return parsed;
-}
-
-// Resolves to { kind: 'source' | 'sdk-bundle', legacyDir, marker } or throws
-// RUNTIME_LAYOUT_UNKNOWN. It never guesses: anything that cannot be proven
-// from the package's own bytes is an error, not a fallback.
-function resolveRuntimeLayout(serverPackageDir) {
-  const pkgDir = serverPackageDir || SERVER_PACKAGE_DIR;
-  const manifest = readManifest(pkgDir);
-  const bundleLegacyDir = path.join(pkgDir, 'legacy', 'src', 'backend', 'lib');
-  if (manifest.runtimeLayout !== undefined) {
-    if (manifest.runtimeLayout !== RUNTIME_LAYOUT_MARKER) {
-      fail('RUNTIME_LAYOUT_UNKNOWN', `package manifest declares unsupported runtimeLayout '${String(manifest.runtimeLayout)}'`);
-    }
-    return { kind: 'sdk-bundle', legacyDir: bundleLegacyDir, marker: true };
-  }
-  if (isRealDirectory(bundleLegacyDir)) {
-    return { kind: 'sdk-bundle', legacyDir: bundleLegacyDir, marker: false };
-  }
-  if (manifest.name !== SERVER_PACKAGE_NAME) {
-    fail('RUNTIME_LAYOUT_UNKNOWN', `package manifest must be named ${SERVER_PACKAGE_NAME} to use the source layout`);
-  }
-  if (path.basename(path.dirname(pkgDir)) !== 'packages') {
-    fail('RUNTIME_LAYOUT_UNKNOWN', 'server package does not sit inside a packages/ directory of a project root; refusing to look for source code elsewhere');
-  }
-  const rootDir = path.dirname(path.dirname(pkgDir));
-  let rootManifest;
-  try {
-    rootManifest = JSON.parse(fs.readFileSync(path.join(rootDir, 'package.json'), 'utf8'));
-  } catch {
-    fail('RUNTIME_LAYOUT_UNKNOWN', 'no readable project root manifest above packages/; refusing to look for source code elsewhere');
-  }
-  if (!rootManifest || rootManifest.name !== SOURCE_ROOT_PACKAGE_NAME) {
-    fail('RUNTIME_LAYOUT_UNKNOWN', `project root manifest is not ${SOURCE_ROOT_PACKAGE_NAME}; refusing to borrow its source tree`);
-  }
-  const sourceLegacyDir = path.join(rootDir, 'src', 'backend', 'lib');
-  if (!isRealDirectory(sourceLegacyDir)) {
-    fail('RUNTIME_LAYOUT_UNKNOWN', `verified ${SOURCE_ROOT_PACKAGE_NAME} root has no src/backend/lib runtime tree`);
-  }
-  return { kind: 'source', legacyDir: sourceLegacyDir, marker: false };
-}
-
-function loadLegacyRuntime(name) {
-  if (typeof name !== 'string' || !MODULE_NAME_PATTERN.test(name)) {
-    fail('RUNTIME_MODULE_NAME_INVALID', 'legacy runtime module name must be a plain lowercase identifier (no path, extension or traversal)');
-  }
-  const layout = resolveRuntimeLayout();
-  const resolved = path.resolve(layout.legacyDir, `${name}.js`);
-  if (!resolved.startsWith(`${layout.legacyDir}${path.sep}`)) {
-    fail('RUNTIME_MODULE_NAME_INVALID', 'legacy runtime module name escapes the runtime directory');
-  }
-  if (!fs.existsSync(resolved)) {
-    const where = layout.kind === 'sdk-bundle'
-      ? 'this sdk bundle ships its own legacy tree and must fail on gaps instead of borrowing source code'
-      : 'the verified source tree does not contain it';
-    fail('RUNTIME_MODULE_MISSING', `legacy runtime module '${name}' is not available: expected ${resolved} (${where})`);
-  }
-  return require(resolved);
-}
-
-module.exports = {
-  loadLegacyRuntime,
-  resolveRuntimeLayout,
-  RUNTIME_LAYOUT_MARKER,
-};
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+// Loading boundary between the packaged server and the legacy runtime tree
+// (src/backend/lib) it must run. Exactly one of two legal layouts is allowed:
+//
+// source layout — this module lives at <root>/packages/server/lib and the
+// same distribution root carries <root>/src/backend/lib. That root is only
+// accepted when it is verifiably THIS project's root: the package must sit
+// in a packages/ directory whose parent manifest is named as the workbench
+// root. An installed server package therefore can never borrow src/ code
+// from a consumer project or from an unrelated node_modules tree.
+//
+// sdk-bundle layout — a standalone packed server package carries its own
+// legacy tree at <package>/legacy/src/backend/lib. pack-sdk.js stamps the
+// STAGED manifest with runtimeLayout='sdk-bundle'; older packages without
+// the marker are recognized by the legacy tree itself. Once the bundle
+// layout is established it is locked: a missing file, or a missing legacy
+// tree entirely, fails the load. There is no fallback to source code
+// outside the package, so a broken artifact can never appear to work.
+//
+// Module names are restricted to plain lowercase identifiers — no path
+// separators, no extension, no traversal — and every resolution stays
+// inside the chosen legacy directory. This module deliberately requires
+// nothing from the server itself (no index.js, no Service), so loading the
+// runtime can never become a require cycle.
+
+const SERVER_PACKAGE_DIR = path.join(__dirname, '..');
+const SERVER_PACKAGE_NAME = '@claude-ai-workbench/server';
+const SOURCE_ROOT_PACKAGE_NAME = '@sanqianx/claude-ai-workbench';
+const RUNTIME_LAYOUT_MARKER = 'sdk-bundle';
+const MODULE_NAME_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+
+function fail(code, message) {
+  const error = new Error(message);
+  error.code = code;
+  throw error;
+}
+
+function isRealDirectory(candidate) {
+  try { return fs.statSync(candidate).isDirectory(); } catch { return false; }
+}
+
+function readManifest(dir) {
+  let parsed;
+  try {
+    parsed = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8'));
+  } catch (error) {
+    fail('RUNTIME_PACKAGE_MANIFEST_INVALID', `package manifest at ${dir} is missing or unreadable: ${error.message}`);
+  }
+  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+    fail('RUNTIME_PACKAGE_MANIFEST_INVALID', `package manifest at ${dir} is not a JSON object`);
+  }
+  return parsed;
+}
+
+// Resolves to { kind: 'source' | 'sdk-bundle', legacyDir, marker } or throws
+// RUNTIME_LAYOUT_UNKNOWN. It never guesses: anything that cannot be proven
+// from the package's own bytes is an error, not a fallback.
+function resolveRuntimeLayout(serverPackageDir) {
+  const pkgDir = serverPackageDir || SERVER_PACKAGE_DIR;
+  const manifest = readManifest(pkgDir);
+  const bundleLegacyDir = path.join(pkgDir, 'legacy', 'src', 'backend', 'lib');
+  if (manifest.runtimeLayout !== undefined) {
+    if (manifest.runtimeLayout !== RUNTIME_LAYOUT_MARKER) {
+      fail('RUNTIME_LAYOUT_UNKNOWN', `package manifest declares unsupported runtimeLayout '${String(manifest.runtimeLayout)}'`);
+    }
+    return { kind: 'sdk-bundle', legacyDir: bundleLegacyDir, marker: true };
+  }
+  if (isRealDirectory(bundleLegacyDir)) {
+    return { kind: 'sdk-bundle', legacyDir: bundleLegacyDir, marker: false };
+  }
+  if (manifest.name !== SERVER_PACKAGE_NAME) {
+    fail('RUNTIME_LAYOUT_UNKNOWN', `package manifest must be named ${SERVER_PACKAGE_NAME} to use the source layout`);
+  }
+  if (path.basename(path.dirname(pkgDir)) !== 'packages') {
+    fail('RUNTIME_LAYOUT_UNKNOWN', 'server package does not sit inside a packages/ directory of a project root; refusing to look for source code elsewhere');
+  }
+  const rootDir = path.dirname(path.dirname(pkgDir));
+  let rootManifest;
+  try {
+    rootManifest = JSON.parse(fs.readFileSync(path.join(rootDir, 'package.json'), 'utf8'));
+  } catch {
+    fail('RUNTIME_LAYOUT_UNKNOWN', 'no readable project root manifest above packages/; refusing to look for source code elsewhere');
+  }
+  if (!rootManifest || rootManifest.name !== SOURCE_ROOT_PACKAGE_NAME) {
+    fail('RUNTIME_LAYOUT_UNKNOWN', `project root manifest is not ${SOURCE_ROOT_PACKAGE_NAME}; refusing to borrow its source tree`);
+  }
+  const sourceLegacyDir = path.join(rootDir, 'src', 'backend', 'lib');
+  if (!isRealDirectory(sourceLegacyDir)) {
+    fail('RUNTIME_LAYOUT_UNKNOWN', `verified ${SOURCE_ROOT_PACKAGE_NAME} root has no src/backend/lib runtime tree`);
+  }
+  return { kind: 'source', legacyDir: sourceLegacyDir, marker: false };
+}
+
+function loadLegacyRuntime(name) {
+  if (typeof name !== 'string' || !MODULE_NAME_PATTERN.test(name)) {
+    fail('RUNTIME_MODULE_NAME_INVALID', 'legacy runtime module name must be a plain lowercase identifier (no path, extension or traversal)');
+  }
+  const layout = resolveRuntimeLayout();
+  const resolved = path.resolve(layout.legacyDir, `${name}.js`);
+  if (!resolved.startsWith(`${layout.legacyDir}${path.sep}`)) {
+    fail('RUNTIME_MODULE_NAME_INVALID', 'legacy runtime module name escapes the runtime directory');
+  }
+  if (!fs.existsSync(resolved)) {
+    const where = layout.kind === 'sdk-bundle'
+      ? 'this sdk bundle ships its own legacy tree and must fail on gaps instead of borrowing source code'
+      : 'the verified source tree does not contain it';
+    fail('RUNTIME_MODULE_MISSING', `legacy runtime module '${name}' is not available: expected ${resolved} (${where})`);
+  }
+  return require(resolved);
+}
+
+module.exports = {
+  loadLegacyRuntime,
+  resolveRuntimeLayout,
+  RUNTIME_LAYOUT_MARKER,
+};

package/packages/server/lib/session-archive-store.js

@@ -1,53 +1,53 @@
-'use strict';
-
-const path = require('path');
-const { readJson, writeJson } = require('./json-file');
-
-const SCHEMA = 'agent-terminal-session-archive/v1';
-
-// Sidecar marking sessions the user archived. Session records themselves stay
-// owned by the runner, so archiving never rewrites runner history — it only
-// flips visibility in listings and can be undone at any time.
-class SessionArchiveStore {
-  constructor(options = {}) {
-    if (!options.dataDir) throw new Error('SessionArchiveStore dataDir is required');
-    this.archiveFile = options.archiveFile || path.join(options.dataDir, 'archived-sessions.v1.json');
-  }
-
-  _read() { return readJson(this.archiveFile, { schema: SCHEMA, sessions: {} }); }
-  _write(cfg) { writeJson(this.archiveFile, cfg); }
-
-  isArchived(sessionId) { return Boolean(this._read().sessions[sessionId]); }
-  // Marks older than maxAgeMs. Entries without a parseable archivedAt never
-  // expire — deleting what cannot be dated is not a safe default.
-  expired(maxAgeMs, now = Date.now()) {
-    const cfg = this._read();
-    const ids = [];
-    for (const [sessionId, meta] of Object.entries(cfg.sessions)) {
-      const archivedAt = Date.parse(meta && meta.archivedAt);
-      if (Number.isFinite(archivedAt) && now - archivedAt > maxAgeMs) ids.push(sessionId);
-    }
-    return ids;
-  }
-
-  archive(sessionId) {
-    const cfg = this._read();
-    if (!cfg.sessions[sessionId]) {
-      cfg.sessions[sessionId] = { archivedAt: new Date().toISOString() };
-      this._write(cfg);
-    }
-    return cfg.sessions[sessionId];
-  }
-
-  restore(sessionId) {
-    const cfg = this._read();
-    if (!cfg.sessions[sessionId]) return false;
-    delete cfg.sessions[sessionId];
-    this._write(cfg);
-    return true;
-  }
-
-  forget(sessionId) { this.restore(sessionId); }
-}
-
-module.exports = { SessionArchiveStore };
+'use strict';
+
+const path = require('path');
+const { readJson, writeJson } = require('./json-file');
+
+const SCHEMA = 'agent-terminal-session-archive/v1';
+
+// Sidecar marking sessions the user archived. Session records themselves stay
+// owned by the runner, so archiving never rewrites runner history — it only
+// flips visibility in listings and can be undone at any time.
+class SessionArchiveStore {
+  constructor(options = {}) {
+    if (!options.dataDir) throw new Error('SessionArchiveStore dataDir is required');
+    this.archiveFile = options.archiveFile || path.join(options.dataDir, 'archived-sessions.v1.json');
+  }
+
+  _read() { return readJson(this.archiveFile, { schema: SCHEMA, sessions: {} }); }
+  _write(cfg) { writeJson(this.archiveFile, cfg); }
+
+  isArchived(sessionId) { return Boolean(this._read().sessions[sessionId]); }
+  // Marks older than maxAgeMs. Entries without a parseable archivedAt never
+  // expire — deleting what cannot be dated is not a safe default.
+  expired(maxAgeMs, now = Date.now()) {
+    const cfg = this._read();
+    const ids = [];
+    for (const [sessionId, meta] of Object.entries(cfg.sessions)) {
+      const archivedAt = Date.parse(meta && meta.archivedAt);
+      if (Number.isFinite(archivedAt) && now - archivedAt > maxAgeMs) ids.push(sessionId);
+    }
+    return ids;
+  }
+
+  archive(sessionId) {
+    const cfg = this._read();
+    if (!cfg.sessions[sessionId]) {
+      cfg.sessions[sessionId] = { archivedAt: new Date().toISOString() };
+      this._write(cfg);
+    }
+    return cfg.sessions[sessionId];
+  }
+
+  restore(sessionId) {
+    const cfg = this._read();
+    if (!cfg.sessions[sessionId]) return false;
+    delete cfg.sessions[sessionId];
+    this._write(cfg);
+    return true;
+  }
+
+  forget(sessionId) { this.restore(sessionId); }
+}
+
+module.exports = { SessionArchiveStore };