@shepai/cli 1.175.1-pr537.fc6a92c → 1.176.0

package/dist/src/presentation/web/app/api/agent-events/route.js

@@ -4,31 +4,85 @@
  * Streams agent lifecycle notification events to connected web UI clients
  * via Server-Sent Events (SSE).
  *
- * Business logic (polling, delta detection, event mapping) lives in
- * PollAgentEventsUseCase. This route is a thin SSE transport adapter:
- * - Creates a per-connection use case instance
- * - Sets up the SSE stream
- * - Calls useCase.execute() on each poll interval
- * - Formats returned events as SSE messages
- * - Handles heartbeat + cleanup
+ * Uses DB polling with a per-connection cache so only deltas are sent.
+ * This avoids cross-module singleton issues with an in-process event bus.
+ *
+ * - Polls features + agent runs every 500ms
+ * - Compares against cached state and emits only changes
+ * - Sends heartbeat comments every 30 seconds to keep connection alive
+ * - Supports optional ?runId query parameter to filter events
+ * - Cleans up intervals on client disconnect
  */
-import { apiError } from '../../../lib/api-error.js';
 import { resolve } from '../../../lib/server-container.js';
+import { AgentRunStatus, InteractiveSessionStatus, SdlcLifecycle, NotificationEventType, NotificationSeverity, } from '../../../../../../packages/core/src/domain/generated/output.js';
+import { isProcessAlive } from '../../../../../../packages/core/src/infrastructure/services/process/is-process-alive.js';
 // Force dynamic — SSE streams must never be statically optimized or cached
 export const dynamic = 'force-dynamic';
 const POLL_INTERVAL_MS = 2_000;
 const HEARTBEAT_INTERVAL_MS = 30_000;
+/**
+ * Maps SdlcLifecycle values to agent graph node names so the client
+ * can derive the correct FeatureLifecyclePhase via mapPhaseNameToLifecycle().
+ */
+const LIFECYCLE_TO_NODE = {
+    [SdlcLifecycle.Started]: 'requirements',
+    [SdlcLifecycle.Analyze]: 'analyze',
+    [SdlcLifecycle.Requirements]: 'requirements',
+    [SdlcLifecycle.Research]: 'research',
+    [SdlcLifecycle.Planning]: 'plan',
+    [SdlcLifecycle.Implementation]: 'implement',
+    [SdlcLifecycle.Review]: 'merge',
+    [SdlcLifecycle.Maintain]: 'maintain',
+    [SdlcLifecycle.Blocked]: 'blocked',
+    [SdlcLifecycle.Pending]: 'pending',
+    [SdlcLifecycle.Deleting]: 'blocked',
+    [SdlcLifecycle.AwaitingUpstream]: 'merge',
+    [SdlcLifecycle.Archived]: 'archived',
+};
+const STATUS_TO_EVENT = {
+    [AgentRunStatus.running]: {
+        eventType: NotificationEventType.AgentStarted,
+        severity: NotificationSeverity.Info,
+    },
+    [AgentRunStatus.waitingApproval]: {
+        eventType: NotificationEventType.WaitingApproval,
+        severity: NotificationSeverity.Warning,
+    },
+    [AgentRunStatus.completed]: {
+        eventType: NotificationEventType.AgentCompleted,
+        severity: NotificationSeverity.Success,
+    },
+    [AgentRunStatus.failed]: {
+        eventType: NotificationEventType.AgentFailed,
+        severity: NotificationSeverity.Error,
+    },
+    [AgentRunStatus.interrupted]: {
+        eventType: NotificationEventType.AgentFailed,
+        severity: NotificationSeverity.Warning,
+    },
+    [AgentRunStatus.cancelled]: {
+        eventType: NotificationEventType.AgentFailed,
+        severity: NotificationSeverity.Warning,
+    },
+};
+/** Map agent graph node name from AgentRun.result to a phase name. */
+function resultToPhase(result) {
+    if (!result?.startsWith('node:'))
+        return undefined;
+    return result.slice(5); // "node:analyze" → "analyze"
+}
 export function GET(request) {
     try {
         const url = new URL(request.url);
         const runIdFilter = url.searchParams.get('runId');
-        // Each SSE connection gets its own use case instance with fresh caches
-        const useCase = resolve('PollAgentEventsUseCase');
         const stream = new ReadableStream({
             start(controller) {
                 const encoder = new TextEncoder();
+                // Per-connection cache: featureId → last-seen state
+                const cache = new Map();
+                // Per-connection cache: sessionId → last-seen interactive session state
+                const sessionCache = new Map();
                 let stopped = false;
-                let pollErrorCount = 0;
                 function enqueue(text) {
                     if (stopped)
                         return;
@@ -39,21 +93,243 @@ export function GET(request) {
                         // Stream may be closed
                     }
                 }
+                function emitEvent(event) {
+                    // eslint-disable-next-line no-console
+                    console.log(`[SSE] emit: ${event.eventType} for "${event.featureName}"${event.phaseName ? ` (${event.phaseName})` : ''}`);
+                    enqueue(`event: notification\ndata: ${JSON.stringify(event)}\n\n`);
+                }
+                let pollErrorCount = 0;
                 async function poll() {
                     if (stopped)
                         return;
                     try {
-                        const events = await useCase.execute(runIdFilter);
-                        for (const item of events) {
-                            if (item.kind === 'notification') {
-                                // eslint-disable-next-line no-console
-                                console.log(`[SSE] emit: ${item.event.eventType} for "${item.event.featureName}"${item.event.phaseName ? ` (${item.event.phaseName})` : ''}`);
-                                enqueue(`event: notification\ndata: ${JSON.stringify(item.event)}\n\n`);
+                        const listFeatures = resolve('ListFeaturesUseCase');
+                        const agentRunRepo = resolve('IAgentRunRepository');
+                        const phaseTimingRepo = resolve('IPhaseTimingRepository');
+                        const features = await listFeatures.execute();
+                        // Build current state for features with agent runs
+                        const entries = await Promise.all(features.map(async (feature) => {
+                            const run = feature.agentRunId
+                                ? await agentRunRepo.findById(feature.agentRunId)
+                                : null;
+                            return { feature, run };
+                        }));
+                        for (const { feature, run } of entries) {
+                            if (!run)
+                                continue;
+                            // Apply runId filter if present
+                            if (runIdFilter && run.id !== runIdFilter)
+                                continue;
+                            const prev = cache.get(feature.id);
+                            if (!prev) {
+                                // First time seeing this feature — seed cache, don't emit
+                                const completedPhases = new Set();
+                                try {
+                                    const timings = await phaseTimingRepo.findByRunId(run.id);
+                                    for (const t of timings) {
+                                        if (t.completedAt)
+                                            completedPhases.add(t.phase);
+                                    }
+                                }
+                                catch {
+                                    // Ignore timing errors
+                                }
+                                cache.set(feature.id, {
+                                    status: run.status,
+                                    lifecycle: feature.lifecycle,
+                                    completedPhases,
+                                    featureName: feature.name,
+                                    prStatus: feature.pr?.status,
+                                    prMergeable: feature.pr?.mergeable,
+                                    prCiStatus: feature.pr?.ciStatus,
+                                });
+                                continue;
+                            }
+                            // Check for status change
+                            if (prev.status !== run.status) {
+                                prev.status = run.status;
+                                const mapping = STATUS_TO_EVENT[run.status];
+                                if (mapping) {
+                                    const phase = resultToPhase(run.result);
+                                    emitEvent({
+                                        eventType: mapping.eventType,
+                                        agentRunId: run.id,
+                                        featureId: feature.id,
+                                        featureName: feature.name,
+                                        ...(phase && { phaseName: phase }),
+                                        message: `Agent status: ${run.status}`,
+                                        severity: mapping.severity,
+                                        timestamp: new Date().toISOString(),
+                                    });
+                                }
+                            }
+                            // Check for crashed agent: status is running/pending but PID is dead
+                            const isActive = run.status === AgentRunStatus.running || run.status === AgentRunStatus.pending;
+                            if (isActive && run.pid && !prev.crashEmitted && !isProcessAlive(run.pid)) {
+                                prev.crashEmitted = true;
+                                const phase = resultToPhase(run.result);
+                                emitEvent({
+                                    eventType: NotificationEventType.AgentFailed,
+                                    agentRunId: run.id,
+                                    featureId: feature.id,
+                                    featureName: feature.name,
+                                    ...(phase && { phaseName: phase }),
+                                    message: `Agent crashed (PID ${run.pid} dead)`,
+                                    severity: NotificationSeverity.Error,
+                                    timestamp: new Date().toISOString(),
+                                });
                             }
-                            else {
-                                enqueue(`event: interactive_session\ndata: ${JSON.stringify(item.event)}\n\n`);
+                            // Check for feature name change (AI metadata generation updates name)
+                            if (prev.featureName !== feature.name) {
+                                prev.featureName = feature.name;
+                                const nodeName = LIFECYCLE_TO_NODE[feature.lifecycle] ?? 'requirements';
+                                emitEvent({
+                                    eventType: NotificationEventType.PhaseCompleted,
+                                    agentRunId: run.id,
+                                    featureId: feature.id,
+                                    featureName: feature.name,
+                                    phaseName: nodeName,
+                                    message: `Feature metadata updated`,
+                                    severity: NotificationSeverity.Info,
+                                    timestamp: new Date().toISOString(),
+                                });
+                            }
+                            // Check for lifecycle change (agent stays "running" but moves through phases)
+                            if (prev.lifecycle !== feature.lifecycle) {
+                                const prevLifecycle = prev.lifecycle;
+                                prev.lifecycle = feature.lifecycle;
+                                const nodeName = LIFECYCLE_TO_NODE[feature.lifecycle];
+                                // Emit MergeReviewReady when lifecycle transitions TO Review
+                                if (feature.lifecycle === SdlcLifecycle.Review &&
+                                    prevLifecycle !== SdlcLifecycle.Review) {
+                                    const prUrl = feature.pr?.url;
+                                    const message = prUrl
+                                        ? `Ready for merge review — PR: ${prUrl}`
+                                        : 'Ready for merge review';
+                                    emitEvent({
+                                        eventType: NotificationEventType.MergeReviewReady,
+                                        agentRunId: run.id,
+                                        featureId: feature.id,
+                                        featureName: feature.name,
+                                        phaseName: 'merge',
+                                        message,
+                                        severity: NotificationSeverity.Info,
+                                        timestamp: new Date().toISOString(),
+                                    });
+                                }
+                                else if (nodeName) {
+                                    emitEvent({
+                                        eventType: NotificationEventType.PhaseCompleted,
+                                        agentRunId: run.id,
+                                        featureId: feature.id,
+                                        featureName: feature.name,
+                                        phaseName: nodeName,
+                                        message: `Entered ${nodeName} phase`,
+                                        severity: NotificationSeverity.Info,
+                                        timestamp: new Date().toISOString(),
+                                    });
+                                }
+                            }
+                            // Check for PR data changes (status / mergeable / CI status)
+                            const curPrStatus = feature.pr?.status;
+                            const curMergeable = feature.pr?.mergeable;
+                            const curCiStatus = feature.pr?.ciStatus;
+                            if (curPrStatus !== prev.prStatus ||
+                                curMergeable !== prev.prMergeable ||
+                                curCiStatus !== prev.prCiStatus) {
+                                prev.prStatus = curPrStatus;
+                                prev.prMergeable = curMergeable;
+                                prev.prCiStatus = curCiStatus;
+                                const nodeName = LIFECYCLE_TO_NODE[feature.lifecycle] ?? 'merge';
+                                emitEvent({
+                                    eventType: NotificationEventType.PhaseCompleted,
+                                    agentRunId: run.id,
+                                    featureId: feature.id,
+                                    featureName: feature.name,
+                                    phaseName: nodeName,
+                                    message: curMergeable === false
+                                        ? `PR #${feature.pr?.number} has merge conflicts`
+                                        : `PR status updated`,
+                                    severity: curMergeable === false
+                                        ? NotificationSeverity.Warning
+                                        : NotificationSeverity.Info,
+                                    timestamp: new Date().toISOString(),
+                                });
+                            }
+                            // Check for new phase completions
+                            try {
+                                const timings = await phaseTimingRepo.findByRunId(run.id);
+                                for (const t of timings) {
+                                    if (t.completedAt && !prev.completedPhases.has(t.phase)) {
+                                        prev.completedPhases.add(t.phase);
+                                        emitEvent({
+                                            eventType: NotificationEventType.PhaseCompleted,
+                                            agentRunId: run.id,
+                                            featureId: feature.id,
+                                            featureName: feature.name,
+                                            phaseName: t.phase,
+                                            message: `Completed ${t.phase} phase`,
+                                            severity: NotificationSeverity.Info,
+                                            timestamp: new Date().toISOString(),
+                                        });
+                                    }
+                                }
+                            }
+                            catch {
+                                // Ignore timing errors
                             }
                         }
+                        // Poll interactive sessions for lifecycle status changes
+                        try {
+                            const sessionRepo = resolve('IInteractiveSessionRepository');
+                            const activeSessions = await sessionRepo.findAllActive();
+                            for (const session of activeSessions) {
+                                const prev = sessionCache.get(session.id);
+                                if (prev?.status !== session.status) {
+                                    sessionCache.set(session.id, { status: session.status });
+                                    const eventType = session.status === InteractiveSessionStatus.booting
+                                        ? 'interactive_session_booting'
+                                        : session.status === InteractiveSessionStatus.ready
+                                            ? 'interactive_session_ready'
+                                            : session.status === InteractiveSessionStatus.error
+                                                ? 'interactive_session_error'
+                                                : 'interactive_session_stopped';
+                                    const payload = {
+                                        type: eventType,
+                                        sessionId: session.id,
+                                        featureId: session.featureId,
+                                    };
+                                    enqueue(`event: interactive_session\ndata: ${JSON.stringify(payload)}\n\n`);
+                                }
+                            }
+                            // Emit stopped/error events for sessions that disappeared from active list
+                            for (const [sessionId, cached] of sessionCache) {
+                                if ((cached.status === InteractiveSessionStatus.booting ||
+                                    cached.status === InteractiveSessionStatus.ready) &&
+                                    !activeSessions.find((s) => s.id === sessionId)) {
+                                    // Session no longer active — fetch to get final status
+                                    const session = await sessionRepo.findById(sessionId);
+                                    if (session) {
+                                        sessionCache.set(sessionId, { status: session.status });
+                                        const eventType = session.status === InteractiveSessionStatus.error
+                                            ? 'interactive_session_error'
+                                            : 'interactive_session_stopped';
+                                        const payload = {
+                                            type: eventType,
+                                            sessionId: session.id,
+                                            featureId: session.featureId,
+                                        };
+                                        enqueue(`event: interactive_session\ndata: ${JSON.stringify(payload)}\n\n`);
+                                    }
+                                    else {
+                                        sessionCache.delete(sessionId);
+                                    }
+                                }
+                            }
+                        }
+                        catch {
+                            // Ignore interactive session poll errors to not affect main polling
+                        }
                         pollErrorCount = 0; // Reset on success
                     }
                     catch (error) {
@@ -96,6 +372,11 @@ export function GET(request) {
         });
     }
     catch (error) {
-        return apiError(error);
+        // eslint-disable-next-line no-console
+        console.error('[SSE route] GET handler error:', error);
+        return new Response(JSON.stringify({ error: String(error) }), {
+            status: 500,
+            headers: { 'Content-Type': 'application/json' },
+        });
     }
 }

package/dist/src/presentation/web/app/api/attachments/preview/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/attachments/preview/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA+D3C,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA4BrE"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/attachments/preview/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA8D3C,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA0BrE"}

package/dist/src/presentation/web/app/api/attachments/preview/route.js

@@ -2,7 +2,6 @@ import { NextResponse } from 'next/server';
 import { readFile, stat, readdir } from 'fs/promises';
 import { basename, extname, join, resolve } from 'path';
 import { getShepHomeDir } from '../../../../../../../packages/core/src/infrastructure/services/filesystem/shep-directory.service.js';
-import { ensureContainedPath } from '../../../../../../../packages/core/src/infrastructure/services/filesystem/path-sanitizers.js';
 const MIME_MAP = {
     '.png': 'image/png',
     '.jpg': 'image/jpeg',
@@ -65,10 +64,7 @@ export async function GET(request) {
     }
     // Security: only allow paths within SHEP_HOME/attachments
     const attachmentsRoot = resolve(getShepHomeDir(), 'attachments');
-    try {
-        ensureContainedPath(path, attachmentsRoot);
-    }
-    catch {
+    if (!resolve(path).startsWith(attachmentsRoot)) {
         return NextResponse.json({ error: 'Access denied' }, { status: 403 });
     }
     try {

package/dist/src/presentation/web/app/api/attachments/upload/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/attachments/upload/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsE3C,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAiDlE"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/attachments/upload/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAqE3C,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAkDlE"}

package/dist/src/presentation/web/app/api/attachments/upload/route.js

@@ -1,5 +1,4 @@
 import { NextResponse } from 'next/server';
-import { apiError } from '../../../../lib/api-error.js';
 import { resolve } from '../../../../lib/server-container.js';
 const MAX_FILE_SIZE = 10 * 1024 * 1024; // 10 MB
 const ALLOWED_EXTENSIONS = new Set([
@@ -95,6 +94,7 @@ export async function POST(request) {
         });
     }
     catch (error) {
-        return apiError(error, 500, 'Upload failed');
+        const message = error instanceof Error ? error.message : 'Upload failed';
+        return NextResponse.json({ error: message }, { status: 500 });
     }
 }

package/dist/src/presentation/web/app/api/attachments/upload-from-path/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/attachments/upload-from-path/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAqF3C,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAkDlE"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/attachments/upload-from-path/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoF3C,wBAAsB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAmDlE"}

package/dist/src/presentation/web/app/api/attachments/upload-from-path/route.js

@@ -1,5 +1,4 @@
 import { NextResponse } from 'next/server';
-import { apiError } from '../../../../lib/api-error.js';
 import { readFile } from 'fs/promises';
 import { extname, basename } from 'path';
 import { resolve as resolvePath } from 'path';
@@ -115,6 +114,7 @@ export async function POST(request) {
         });
     }
     catch (error) {
-        return apiError(error, 500, 'Upload failed');
+        const message = error instanceof Error ? error.message : 'Upload failed';
+        return NextResponse.json({ error: message }, { status: 500 });
     }
 }

package/dist/src/presentation/web/app/api/cli-upgrade/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/cli-upgrade/route.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAEvC,wBAAsB,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,CA8C9C"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/cli-upgrade/route.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAEvC,wBAAsB,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,CA4C9C"}

package/dist/src/presentation/web/app/api/cli-upgrade/route.js

@@ -21,9 +21,7 @@ export async function POST() {
                 }
             }
             catch (error) {
-                // eslint-disable-next-line no-console
-                console.error('[API Error]', error);
-                const message = 'Upgrade failed';
+                const message = error instanceof Error ? error.message : 'Upgrade failed';
                 controller.enqueue(encoder.encode(`event: done\ndata: ${JSON.stringify({ status: 'error', currentVersion: '', latestVersion: null, errorMessage: message })}\n\n`));
             }
             finally {

package/dist/src/presentation/web/app/api/deployment-logs/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/deployment-logs/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAIvC,wBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAkF9C"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/deployment-logs/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAIvC,wBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAuF9C"}

package/dist/src/presentation/web/app/api/deployment-logs/route.js

@@ -10,7 +10,6 @@
  * - Sends heartbeat comments every 30 seconds to keep connection alive
  * - Cleans up EventEmitter subscription on client disconnect
  */
-import { apiError } from '../../../lib/api-error.js';
 import { resolve } from '../../../lib/server-container.js';
 // Force dynamic — SSE streams must never be statically optimized or cached
 export const dynamic = 'force-dynamic';
@@ -85,6 +84,11 @@ export function GET(request) {
         });
     }
     catch (error) {
-        return apiError(error);
+        // eslint-disable-next-line no-console
+        console.error('[SSE route] GET /api/deployment-logs error:', error);
+        return new Response(JSON.stringify({ error: String(error) }), {
+            status: 500,
+            headers: { 'Content-Type': 'application/json' },
+        });
     }
 }

package/dist/src/presentation/web/app/api/dialog/pick-files/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/dialog/pick-files/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C,wBAAsB,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAclD"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/dialog/pick-files/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C,wBAAsB,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAUlD"}

package/dist/src/presentation/web/app/api/dialog/pick-files/route.js

@@ -7,8 +7,7 @@ export async function POST() {
         return NextResponse.json({ files, cancelled: files === null });
     }
     catch (error) {
-        // eslint-disable-next-line no-console
-        console.error('[API Error]', error);
-        return NextResponse.json({ files: null, cancelled: false, error: 'Failed to open file dialog' }, { status: 500 });
+        const message = error instanceof Error ? error.message : 'Failed to open file dialog';
+        return NextResponse.json({ files: null, cancelled: false, error: message }, { status: 500 });
     }
 }

package/dist/src/presentation/web/app/api/directory/list/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/directory/list/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAc3C,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CA+EjE"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/presentation/web/app/api/directory/list/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAY3C,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CA6EjE"}

package/dist/src/presentation/web/app/api/directory/list/route.js

@@ -1,9 +1,7 @@
 import { NextResponse } from 'next/server';
-import { apiError } from '../../../../lib/api-error.js';
 import { readdir, stat } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import path from 'node:path';
-import { ensureContainedPath } from '../../../../../../../packages/core/src/infrastructure/services/filesystem/path-sanitizers.js';
 export async function GET(request) {
     const url = new URL(request.url);
     const rawPath = url.searchParams.get('path') ?? homedir();
@@ -22,7 +20,8 @@ export async function GET(request) {
         if (isErrnoException(error) && error.code === 'ENOENT') {
             return NextResponse.json({ error: 'Directory not found' }, { status: 404 });
         }
-        return apiError(error, 500, 'Failed to access path');
+        const message = error instanceof Error ? error.message : 'Failed to access path';
+        return NextResponse.json({ error: message }, { status: 500 });
     }
     try {
         const dirents = await readdir(resolvedPath, { withFileTypes: true });
@@ -33,9 +32,6 @@ export async function GET(request) {
             }
             const entryPath = path.join(resolvedPath, dirent.name);
             try {
-                // Validate that the resolved entry stays within the listed directory
-                // (defeats symlink-based path traversal)
-                ensureContainedPath(entryPath, resolvedPath);
                 if (dirent.isDirectory()) {
                     const entryStat = await stat(entryPath);
                     return {
@@ -58,7 +54,7 @@ export async function GET(request) {
                 }
             }
             catch {
-                // Skip inaccessible entries (permission denied, broken symlinks, traversal)
+                // Skip inaccessible entries (permission denied, broken symlinks)
             }
             return null;
         });
@@ -71,7 +67,8 @@ export async function GET(request) {
         return NextResponse.json({ entries, currentPath: resolvedPath });
     }
     catch (error) {
-        return apiError(error, 500, 'Failed to read directory');
+        const message = error instanceof Error ? error.message : 'Failed to read directory';
+        return NextResponse.json({ error: message }, { status: 500 });
     }
 }
 function isErrnoException(error) {

package/dist/src/presentation/web/app/api/feature-logs/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/feature-logs/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,eAAO,MAAM,OAAO,kBAAkB,CAAC;AA0BvC,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiJ7D"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/feature-logs/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,eAAO,MAAM,OAAO,kBAAkB,CAAC;AA0BvC,wBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAsJ7D"}

package/dist/src/presentation/web/app/api/feature-logs/route.js

@@ -11,7 +11,6 @@
  * - Sends heartbeat comments every 30 seconds to keep connection alive
  * - Cleans up watchers/intervals on client disconnect
  */
-import { apiError } from '../../../lib/api-error.js';
 import { resolve } from '../../../lib/server-container.js';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
@@ -175,6 +174,11 @@ export async function GET(request) {
         });
     }
     catch (error) {
-        return apiError(error);
+        // eslint-disable-next-line no-console
+        console.error('[SSE route] GET /api/feature-logs error:', error);
+        return new Response(JSON.stringify({ error: String(error) }), {
+            status: 500,
+            headers: { 'Content-Type': 'application/json' },
+        });
     }
 }

package/dist/src/presentation/web/app/api/graph-data/route.d.ts

@@ -7,5 +7,8 @@ export declare const dynamic = "force-dynamic";
  * Used by the client-side polling fallback instead of a server action
  * so that periodic syncs don't trigger the Next.js "Rendering…" indicator.
  */
-export declare function GET(): Promise<NextResponse<unknown>>;
+export declare function GET(): Promise<NextResponse<{
+    nodes: import("../../../components/features/features-canvas/index.js").CanvasNodeType[];
+    edges: import("@xyflow/react").Edge[];
+}>>;
 //# sourceMappingURL=route.d.ts.map

package/dist/src/presentation/web/app/api/graph-data/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/graph-data/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,6EAA6E;AAC7E,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAEvC;;;;;GAKG;AACH,wBAAsB,GAAG,mCAOxB"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/graph-data/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,6EAA6E;AAC7E,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAEvC;;;;;GAKG;AACH,wBAAsB,GAAG;;;IAGxB"}

package/dist/src/presentation/web/app/api/graph-data/route.js

@@ -1,5 +1,4 @@
 import { NextResponse } from 'next/server';
-import { apiError } from '../../../lib/api-error.js';
 import { getGraphData } from '../../(dashboard)/get-graph-data.js';
 /** Prevent Next.js from statically prerendering this route at build time. */
 export const dynamic = 'force-dynamic';
@@ -10,11 +9,6 @@ export const dynamic = 'force-dynamic';
  * so that periodic syncs don't trigger the Next.js "Rendering…" indicator.
  */
 export async function GET() {
-    try {
-        const data = await getGraphData();
-        return NextResponse.json(data);
-    }
-    catch (error) {
-        return apiError(error);
-    }
+    const data = await getGraphData();
+    return NextResponse.json(data);
 }

package/dist/src/presentation/web/app/api/interactive/chat/[featureId]/mark-read/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../../../src/presentation/web/app/api/interactive/chat/[featureId]/mark-read/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAEvC,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxC;AAED,wBAAsB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAShG"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../../../src/presentation/web/app/api/interactive/chat/[featureId]/mark-read/route.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,eAAO,MAAM,OAAO,kBAAkB,CAAC;AAEvC,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxC;AAED,wBAAsB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAchG"}

package/dist/src/presentation/web/app/api/interactive/chat/[featureId]/mark-read/route.js

@@ -7,7 +7,6 @@
  * opens/views the chat tab for a feature.
  */
 import { NextResponse } from 'next/server';
-import { apiError } from '../../../../../../lib/api-error.js';
 import { resolve } from '../../../../../../lib/server-container.js';
 export const dynamic = 'force-dynamic';
 export async function POST(_request, { params }) {
@@ -18,6 +17,8 @@ export async function POST(_request, { params }) {
         return NextResponse.json({ ok: true });
     }
     catch (error) {
-        return apiError(error);
+        // eslint-disable-next-line no-console
+        console.error('[POST /api/interactive/chat/:featureId/mark-read]', error);
+        return NextResponse.json({ error: error instanceof Error ? error.message : 'Internal server error' }, { status: 500 });
     }
 }