@tom2012/cc-web 1.5.10

package/backend/dist/routes/filesystem.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=filesystem.d.ts.map

package/backend/dist/routes/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/routes/filesystem.ts"],"names":[],"mappings":"AAMA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA+NxB,eAAe,MAAM,CAAC"}

package/backend/dist/routes/filesystem.js

@@ -0,0 +1,243 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const config_1 = require("../config");
+const router = (0, express_1.Router)();
+/**
+ * Security: restrict filesystem access to registered project directories and home dir.
+ * Prevents path traversal attacks (e.g. reading /etc/shadow).
+ * Also resolves symlinks to prevent symlink-based traversal attacks.
+ */
+function isWithinAllowedDirs(p) {
+    const home = os.homedir();
+    if (p === home || p.startsWith(home + path.sep))
+        return true;
+    const projects = (0, config_1.getProjects)();
+    for (const proj of projects) {
+        const projectDir = path.resolve(proj.folderPath);
+        if (p === projectDir || p.startsWith(projectDir + path.sep))
+            return true;
+    }
+    return false;
+}
+function isPathAllowed(resolvedPath) {
+    if (!isWithinAllowedDirs(resolvedPath))
+        return false;
+    // Also verify the real path (after symlink resolution) is within allowed dirs.
+    // This prevents symlink attacks where a link inside an allowed dir points outside.
+    try {
+        const realPath = fs.realpathSync(resolvedPath);
+        if (realPath !== resolvedPath && !isWithinAllowedDirs(realPath))
+            return false;
+    }
+    catch {
+        // Path may not exist yet (e.g. for new file writes) — skip realpath check
+    }
+    return true;
+}
+// GET /api/filesystem?path=...
+router.get('/', (req, res) => {
+    const requestedPath = req.query['path'] || os.homedir();
+    // Normalize and resolve the path
+    const resolvedPath = path.resolve(requestedPath);
+    if (!isPathAllowed(resolvedPath)) {
+        res.status(403).json({ error: 'Access denied: path outside allowed directories' });
+        return;
+    }
+    let entries = [];
+    try {
+        const dirents = fs.readdirSync(resolvedPath, { withFileTypes: true });
+        entries = dirents
+            .map((d) => ({
+            name: d.name,
+            type: (d.isDirectory() ? 'dir' : 'file'),
+            path: path.join(resolvedPath, d.name),
+        }))
+            .sort((a, b) => {
+            // Directories first, then alphabetical
+            if (a.type === 'dir' && b.type !== 'dir')
+                return -1;
+            if (a.type !== 'dir' && b.type === 'dir')
+                return 1;
+            return a.name.localeCompare(b.name);
+        });
+    }
+    catch (err) {
+        const error = err;
+        if (error.code === 'EACCES') {
+            res.status(403).json({ error: 'Permission denied', path: resolvedPath });
+            return;
+        }
+        if (error.code === 'ENOENT') {
+            res.status(404).json({ error: 'Path not found', path: resolvedPath });
+            return;
+        }
+        res.status(500).json({ error: 'Failed to read directory', path: resolvedPath });
+        return;
+    }
+    const parent = path.dirname(resolvedPath);
+    res.json({
+        path: resolvedPath,
+        parent: parent !== resolvedPath ? parent : null,
+        entries,
+    });
+});
+// POST /api/filesystem/mkdir  body: { path: string, name: string }
+router.post('/mkdir', (req, res) => {
+    const { path: parentPath, name } = req.body;
+    if (!parentPath || !name) {
+        res.status(400).json({ error: 'path and name are required' });
+        return;
+    }
+    // Reject names with path separators, parent traversal, or dangerous characters
+    if (/[/\\\0:]/.test(name) || name === '..' || name === '.' || name.trim() !== name || name.length > 255) {
+        res.status(400).json({ error: 'Invalid folder name' });
+        return;
+    }
+    const resolvedParent = path.resolve(parentPath);
+    if (!isPathAllowed(resolvedParent)) {
+        res.status(403).json({ error: 'Access denied: path outside allowed directories' });
+        return;
+    }
+    const newDir = path.join(resolvedParent, name);
+    try {
+        fs.mkdirSync(newDir, { recursive: false });
+        res.json({ path: newDir });
+    }
+    catch (err) {
+        const error = err;
+        if (error.code === 'EEXIST') {
+            res.status(409).json({ error: 'Folder already exists' });
+            return;
+        }
+        if (error.code === 'EACCES') {
+            res.status(403).json({ error: 'Permission denied' });
+            return;
+        }
+        res.status(500).json({ error: 'Failed to create folder' });
+    }
+});
+// GET /api/filesystem/file?path=...
+router.get('/file', (req, res) => {
+    const requestedPath = req.query['path'];
+    if (!requestedPath) {
+        res.status(400).json({ error: 'path is required' });
+        return;
+    }
+    const resolvedPath = path.resolve(requestedPath);
+    if (!isPathAllowed(resolvedPath)) {
+        res.status(403).json({ error: 'Access denied: path outside allowed directories' });
+        return;
+    }
+    const SIZE_LIMIT = parseInt(process.env.CCWEB_FILE_SIZE_LIMIT || '', 10) || 1 * 1024 * 1024; // 1 MB default
+    let stat;
+    try {
+        stat = fs.statSync(resolvedPath);
+    }
+    catch (err) {
+        const error = err;
+        if (error.code === 'ENOENT') {
+            res.status(404).json({ error: 'File not found' });
+            return;
+        }
+        res.status(500).json({ error: 'Failed to stat file' });
+        return;
+    }
+    if (!stat.isFile()) {
+        res.status(400).json({ error: 'Path is not a file' });
+        return;
+    }
+    if (stat.size > SIZE_LIMIT) {
+        res.json({ path: resolvedPath, tooLarge: true, size: stat.size, content: null });
+        return;
+    }
+    let buffer;
+    try {
+        buffer = fs.readFileSync(resolvedPath);
+    }
+    catch (err) {
+        const error = err;
+        if (error.code === 'EACCES') {
+            res.status(403).json({ error: 'Permission denied' });
+            return;
+        }
+        res.status(500).json({ error: 'Failed to read file' });
+        return;
+    }
+    // Heuristic binary detection: look for null bytes in first 8KB
+    const sample = buffer.slice(0, 8192);
+    const isBinary = sample.includes(0);
+    if (isBinary) {
+        res.json({ path: resolvedPath, binary: true, size: stat.size, content: null });
+        return;
+    }
+    res.json({ path: resolvedPath, binary: false, tooLarge: false, size: stat.size, content: buffer.toString('utf8') });
+});
+// PUT /api/filesystem/file  body: { path: string, content: string }
+router.put('/file', (req, res) => {
+    const { path: filePath, content } = req.body;
+    if (!filePath || content === undefined) {
+        res.status(400).json({ error: 'path and content are required' });
+        return;
+    }
+    const resolvedPath = path.resolve(filePath);
+    if (!isPathAllowed(resolvedPath)) {
+        res.status(403).json({ error: 'Access denied: path outside allowed directories' });
+        return;
+    }
+    const WRITE_LIMIT = parseInt(process.env.CCWEB_FILE_SIZE_LIMIT || '', 10) || 10 * 1024 * 1024; // 10 MB
+    if (Buffer.byteLength(content, 'utf-8') > WRITE_LIMIT) {
+        res.status(413).json({ error: 'File too large to write' });
+        return;
+    }
+    try {
+        fs.writeFileSync(resolvedPath, content, 'utf-8');
+        res.json({ path: resolvedPath, size: Buffer.byteLength(content, 'utf-8') });
+    }
+    catch (err) {
+        const error = err;
+        if (error.code === 'EACCES') {
+            res.status(403).json({ error: 'Permission denied' });
+            return;
+        }
+        res.status(500).json({ error: 'Failed to write file' });
+    }
+});
+exports.default = router;
+//# sourceMappingURL=filesystem.js.map

package/backend/dist/routes/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../src/routes/filesystem.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAAoD;AACpD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,sCAAwC;AAExC,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB;IACzC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,+EAA+E;IAC/E,mFAAmF;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IACpD,MAAM,aAAa,GAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAwB,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAEhF,iCAAiC;IACjC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEjD,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAA2D,EAAE,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,GAAG,OAAO;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAmB;YAC1D,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,uCAAuC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1C,GAAG,CAAC,IAAI,CAAC;QACP,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC/C,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IAC1D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAwC,CAAC;IAEhF,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IACxD,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAC;IAC9D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEjD,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,eAAe;IAE5G,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEpC,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACtH,CAAC,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IACxD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAA2C,CAAC;IAEpF,IAAI,CAAC,QAAQ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;IACvG,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,WAAW,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,kBAAe,MAAM,CAAC"}

package/backend/dist/routes/projects.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=projects.d.ts.map

package/backend/dist/routes/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAaA,QAAA,MAAM,MAAM,4CAAW,CAAC;AAkOxB,eAAe,MAAM,CAAC"}

package/backend/dist/routes/projects.js

@@ -0,0 +1,235 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const uuid_1 = require("uuid");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("../config");
+const terminal_manager_1 = require("../terminal-manager");
+const usage_terminal_1 = require("../usage-terminal");
+const session_manager_1 = require("../session-manager");
+const VALID_CLI_TOOLS = ['claude', 'opencode', 'codex', 'qwen'];
+const router = (0, express_1.Router)();
+/** Initialize .notebook/ directory structure in a project folder */
+function initNotebook(folderPath) {
+    try {
+        const notebookDir = path.join(folderPath, '.notebook', 'pages');
+        if (!fs.existsSync(notebookDir)) {
+            fs.mkdirSync(notebookDir, { recursive: true });
+        }
+        const graphFile = path.join(folderPath, '.notebook', 'graph.yaml');
+        if (!fs.existsSync(graphFile)) {
+            fs.writeFileSync(graphFile, 'pages: []\nrelations: []\n', 'utf-8');
+        }
+    }
+    catch (err) {
+        console.error('[Projects] Failed to init .notebook/:', err);
+    }
+}
+// GET /api/projects
+router.get('/', (_req, res) => {
+    const projects = (0, config_1.getProjects)();
+    res.json(projects);
+});
+// GET /api/projects/activity  →  { [projectId]: lastActivityAt (epoch ms) }
+router.get('/activity', (_req, res) => {
+    res.json(terminal_manager_1.terminalManager.getAllActivity());
+});
+// POST /api/projects
+router.post('/', (req, res) => {
+    const { name, folderPath, permissionMode, cliTool } = req.body;
+    if (!name || !folderPath || !permissionMode) {
+        res.status(400).json({ error: 'name, folderPath, and permissionMode are required' });
+        return;
+    }
+    if (permissionMode !== 'limited' && permissionMode !== 'unlimited') {
+        res.status(400).json({ error: 'permissionMode must be "limited" or "unlimited"' });
+        return;
+    }
+    if (cliTool && !VALID_CLI_TOOLS.includes(cliTool)) {
+        res.status(400).json({ error: `cliTool must be one of: ${VALID_CLI_TOOLS.join(', ')}` });
+        return;
+    }
+    const project = {
+        id: (0, uuid_1.v4)(),
+        name,
+        folderPath,
+        permissionMode,
+        cliTool: cliTool ?? 'claude',
+        createdAt: new Date().toISOString(),
+        status: 'running',
+    };
+    (0, config_1.saveProject)(project);
+    // Write .ccweb/project.json into the project folder
+    try {
+        (0, config_1.writeProjectConfig)(folderPath, project);
+    }
+    catch (err) {
+        console.error('[Projects] Failed to write .ccweb/project.json:', err);
+    }
+    initNotebook(folderPath);
+    // Start terminal; broadcast is a no-op until a WS client connects
+    terminal_manager_1.terminalManager.getOrCreate(project);
+    res.status(201).json(project);
+});
+// POST /api/projects/open — open an existing project from its folder (.ccweb/project.json)
+router.post('/open', (req, res) => {
+    const { folderPath } = req.body;
+    if (!folderPath) {
+        res.status(400).json({ error: 'folderPath is required' });
+        return;
+    }
+    if (!fs.existsSync(folderPath)) {
+        res.status(400).json({ error: 'Folder does not exist' });
+        return;
+    }
+    const config = (0, config_1.readProjectConfig)(folderPath);
+    if (!config) {
+        res.status(400).json({ error: 'No .ccweb/project.json found in this folder. This folder has not been used as a CC Web project before.' });
+        return;
+    }
+    // Check if this project is already registered
+    const existing = (0, config_1.getProjects)().find((p) => p.folderPath === folderPath);
+    if (existing) {
+        res.status(409).json({ error: 'This project is already open', project: existing });
+        return;
+    }
+    const project = {
+        id: config.id,
+        name: config.name,
+        folderPath,
+        permissionMode: config.permissionMode,
+        cliTool: config.cliTool ?? 'claude',
+        createdAt: config.createdAt,
+        status: 'running',
+    };
+    (0, config_1.saveProject)(project);
+    initNotebook(folderPath);
+    // Start terminal
+    terminal_manager_1.terminalManager.getOrCreate(project);
+    res.status(200).json(project);
+});
+// DELETE /api/projects/:id
+router.delete('/:id', (req, res) => {
+    const { id } = req.params;
+    const project = (0, config_1.getProject)(id);
+    if (!project) {
+        res.status(404).json({ error: 'Project not found' });
+        return;
+    }
+    terminal_manager_1.terminalManager.stop(id);
+    (0, config_1.deleteProject)(id);
+    res.json({ success: true });
+});
+// PATCH /api/projects/:id/stop
+router.patch('/:id/stop', (req, res) => {
+    const { id } = req.params;
+    const project = (0, config_1.getProject)(id);
+    if (!project) {
+        res.status(404).json({ error: 'Project not found' });
+        return;
+    }
+    terminal_manager_1.terminalManager.stop(id);
+    // terminalManager.stop() already sets status='stopped' and saves
+    // Re-read the project to return fresh state
+    res.json((0, config_1.getProject)(id) ?? project);
+});
+// PATCH /api/projects/:id/start
+router.patch('/:id/start', (req, res) => {
+    const { id } = req.params;
+    const project = (0, config_1.getProject)(id);
+    if (!project) {
+        res.status(404).json({ error: 'Project not found' });
+        return;
+    }
+    project.status = 'running';
+    (0, config_1.saveProject)(project);
+    terminal_manager_1.terminalManager.getOrCreate(project);
+    res.json(project);
+});
+// PATCH /api/projects/:id/archive
+router.patch('/:id/archive', (req, res) => {
+    const { id } = req.params;
+    const project = (0, config_1.getProject)(id);
+    if (!project) {
+        res.status(404).json({ error: 'Project not found' });
+        return;
+    }
+    // Stop terminal before archiving
+    terminal_manager_1.terminalManager.stop(id);
+    project.archived = true;
+    project.status = 'stopped';
+    (0, config_1.saveProject)(project);
+    res.json((0, config_1.getProject)(id) ?? project);
+});
+// PATCH /api/projects/:id/unarchive
+router.patch('/:id/unarchive', (req, res) => {
+    const { id } = req.params;
+    const project = (0, config_1.getProject)(id);
+    if (!project) {
+        res.status(404).json({ error: 'Project not found' });
+        return;
+    }
+    project.archived = false;
+    (0, config_1.saveProject)(project);
+    res.json((0, config_1.getProject)(id) ?? project);
+});
+// GET /api/projects/:id/sessions
+router.get('/:id/sessions', (req, res) => {
+    const { id } = req.params;
+    res.json(session_manager_1.sessionManager.listSessions(id));
+});
+// GET /api/projects/:id/sessions/:sessionId
+router.get('/:id/sessions/:sessionId', (req, res) => {
+    const { id, sessionId } = req.params;
+    const session = session_manager_1.sessionManager.getSession(id, sessionId);
+    if (!session) {
+        res.status(404).json({ error: 'Session not found' });
+        return;
+    }
+    res.json(session);
+});
+// GET /api/projects/usage  →  Claude Code usage via OAuth API
+// Pass ?refresh=true to bust the cache (e.g. after plan upgrade)
+router.get('/usage', (req, res) => {
+    if (req.query['refresh'] === 'true')
+        usage_terminal_1.usageTerminal.clearUsageCache();
+    usage_terminal_1.usageTerminal.queryUsage()
+        .then((data) => res.json(data))
+        .catch(() => res.json(null));
+});
+exports.default = router;
+//# sourceMappingURL=projects.js.map

package/backend/dist/routes/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAA2C;AAC3C,+BAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAE7B,sCAAuH;AACvH,0DAAsD;AACtD,sDAAkD;AAClD,wDAAoD;AAGpD,MAAM,eAAe,GAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAE3E,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB,oEAAoE;AACpE,SAAS,YAAY,CAAC,UAAkB;IACtC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,oBAAoB;AACpB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAiB,EAAE,GAAa,EAAQ,EAAE;IACzD,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAiB,EAAE,GAAa,EAAQ,EAAE;IACjE,GAAG,CAAC,IAAI,CAAC,kCAAe,CAAC,cAAc,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,qBAAqB;AACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IACzD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAKzD,CAAC;IAEF,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAY;QACvB,EAAE,EAAE,IAAA,SAAM,GAAE;QACZ,IAAI;QACJ,UAAU;QACV,cAAc;QACd,OAAO,EAAE,OAAO,IAAI,QAAQ;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,SAAS;KAClB,CAAC;IAEF,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAErB,oDAAoD;IACpD,IAAI,CAAC;QACH,IAAA,2BAAkB,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,YAAY,CAAC,UAAU,CAAC,CAAC;IAEzB,kEAAkE;IAClE,kCAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAErC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAA+B,CAAC;IAE3D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,0BAAiB,EAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wGAAwG,EAAE,CAAC,CAAC;QAC1I,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAY;QACvB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU;QACV,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,QAAQ;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,SAAS;KAClB,CAAC;IAEF,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAErB,YAAY,CAAC,UAAU,CAAC,CAAC;IAEzB,iBAAiB;IACjB,kCAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAErC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAC9D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,kCAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,IAAA,sBAAa,EAAC,EAAE,CAAC,CAAC;IAElB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,+BAA+B;AAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAClE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,kCAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,iEAAiE;IAEjE,4CAA4C;IAC5C,GAAG,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,gCAAgC;AAChC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IACnE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAErB,kCAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAErC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,kCAAkC;AAClC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IACrE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE/E,iCAAiC;IACjC,kCAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAErB,GAAG,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IACvE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE/E,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC;IACzB,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;IAErB,GAAG,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,iCAAiC;AACjC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IACpE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,GAAG,CAAC,IAAI,CAAC,gCAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,4CAA4C;AAC5C,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAC/E,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACrC,MAAM,OAAO,GAAG,gCAAc,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC/E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,8DAA8D;AAC9D,iEAAiE;AACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAC7D,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM;QAAE,8BAAa,CAAC,eAAe,EAAE,CAAC;IACrE,8BAAa,CAAC,UAAU,EAAE;SACvB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC9B,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,kBAAe,MAAM,CAAC"}

package/backend/dist/routes/shortcuts.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=shortcuts.d.ts.map

package/backend/dist/routes/shortcuts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcuts.d.ts","sourceRoot":"","sources":["../../src/routes/shortcuts.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA2ExB,eAAe,MAAM,CAAC"}

package/backend/dist/routes/shortcuts.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const uuid_1 = require("uuid");
+const config_1 = require("../config");
+const router = (0, express_1.Router)();
+/** Detect circular parentId references (A→B→A). Returns true if adding parentId to targetId would create a cycle. */
+function hasCycle(shortcuts, targetId, parentId) {
+    let current = parentId;
+    const visited = new Set();
+    while (current) {
+        if (current === targetId || visited.has(current))
+            return true;
+        visited.add(current);
+        current = shortcuts.find((s) => s.id === current)?.parentId;
+    }
+    return false;
+}
+// GET /api/shortcuts
+router.get('/', (_req, res) => {
+    res.json((0, config_1.getGlobalShortcuts)());
+});
+// POST /api/shortcuts
+router.post('/', (req, res) => {
+    const { label, command, parentId } = req.body;
+    if (!command?.trim()) {
+        res.status(400).json({ error: 'command is required' });
+        return;
+    }
+    const shortcuts = (0, config_1.getGlobalShortcuts)();
+    if (parentId && !shortcuts.some((s) => s.id === parentId)) {
+        res.status(400).json({ error: 'Parent shortcut not found' });
+        return;
+    }
+    const shortcut = {
+        id: (0, uuid_1.v4)(),
+        label: label?.trim() || command.trim(),
+        command: command.trim(),
+        ...(parentId ? { parentId } : {}),
+    };
+    shortcuts.push(shortcut);
+    (0, config_1.saveGlobalShortcuts)(shortcuts);
+    res.status(201).json(shortcut);
+});
+// PUT /api/shortcuts/:id
+router.put('/:id', (req, res) => {
+    const { id } = req.params;
+    const { label, command } = req.body;
+    if (!command?.trim()) {
+        res.status(400).json({ error: 'command is required' });
+        return;
+    }
+    const shortcuts = (0, config_1.getGlobalShortcuts)();
+    const idx = shortcuts.findIndex((s) => s.id === id);
+    if (idx < 0) {
+        res.status(404).json({ error: 'Not found' });
+        return;
+    }
+    const { parentId } = req.body;
+    if (parentId && !shortcuts.some((s) => s.id === parentId)) {
+        res.status(400).json({ error: 'Parent shortcut not found' });
+        return;
+    }
+    if (parentId && hasCycle(shortcuts, id, parentId)) {
+        res.status(400).json({ error: 'Circular parent reference detected' });
+        return;
+    }
+    shortcuts[idx] = {
+        id, label: label?.trim() || command.trim(), command: command.trim(),
+        ...(parentId ? { parentId } : parentId === null ? {} : { parentId: shortcuts[idx].parentId }),
+    };
+    (0, config_1.saveGlobalShortcuts)(shortcuts);
+    res.json(shortcuts[idx]);
+});
+// DELETE /api/shortcuts/:id
+router.delete('/:id', (req, res) => {
+    const { id } = req.params;
+    const shortcuts = (0, config_1.getGlobalShortcuts)();
+    const filtered = shortcuts.filter((s) => s.id !== id);
+    if (filtered.length === shortcuts.length) {
+        res.status(404).json({ error: 'Not found' });
+        return;
+    }
+    (0, config_1.saveGlobalShortcuts)(filtered);
+    res.json({ success: true });
+});
+exports.default = router;
+//# sourceMappingURL=shortcuts.js.map

package/backend/dist/routes/shortcuts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortcuts.js","sourceRoot":"","sources":["../../src/routes/shortcuts.ts"],"names":[],"mappings":";;AAAA,qCAA2C;AAC3C,+BAAoC;AAEpC,sCAAoF;AAEpF,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB,qHAAqH;AACrH,SAAS,QAAQ,CAAC,SAA2B,EAAE,QAAgB,EAAE,QAAgB;IAC/E,IAAI,OAAO,GAAuB,QAAQ,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,QAAQ,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qBAAqB;AACrB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAiB,EAAE,GAAa,EAAQ,EAAE;IACzD,GAAG,CAAC,IAAI,CAAC,IAAA,2BAAkB,GAAE,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,sBAAsB;AACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IACzD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAA+D,CAAC;IACzG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAEzF,MAAM,SAAS,GAAG,IAAA,2BAAkB,GAAE,CAAC;IACvC,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAAC,OAAO;IACvE,CAAC;IAED,MAAM,QAAQ,GAAmB;QAC/B,EAAE,EAAE,IAAA,SAAM,GAAE;QACZ,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE;QACtC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,IAAA,4BAAmB,EAAC,SAAS,CAAC,CAAC;IAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,yBAAyB;AACzB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAC3D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAA4C,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAEzF,MAAM,SAAS,GAAG,IAAA,2BAAkB,GAAE,CAAC;IACvC,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAEtE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAoC,CAAC;IAC9D,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAAC,OAAO;IACvE,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAAC,OAAO;IAChF,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,GAAG;QACf,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACnE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;KAC9F,CAAC;IACF,IAAA,4BAAmB,EAAC,SAAS,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH,4BAA4B;AAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAgB,EAAE,GAAa,EAAQ,EAAE;IAC9D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAA,2BAAkB,GAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACnG,IAAA,4BAAmB,EAAC,QAAQ,CAAC,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,kBAAe,MAAM,CAAC"}

package/backend/dist/routes/update.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=update.d.ts.map

package/backend/dist/routes/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/routes/update.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA2HxB,eAAe,MAAM,CAAC"}