@vincenthanxiaodu/pi-web 1.202608.1

package/dist/server/updates/restartRoutes.js

@@ -0,0 +1,48 @@
+import { spawn } from "node:child_process";
+function systemdRunnerAvailable() {
+    // A Docker deployment has no systemd user session, and the container image
+    // does not always set CONTAINER. Reporting "restart started" there was worse
+    // than reporting nothing: the caller was told work had begun that could never
+    // happen, and a fleet report inherited the same false claim for that machine.
+    if (isTruthyEnv("PI_WEB_DOCKER_RUNTIME"))
+        return false;
+    return process.env["CONTAINER"] === undefined || process.env["CONTAINER"] === "";
+}
+function isTruthyEnv(key) {
+    const value = process.env[key];
+    return value !== undefined && value !== "" && value !== "0" && value.toLowerCase() !== "false";
+}
+export function createRestartService(logger) {
+    return {
+        restartSupported() {
+            return systemdRunnerAvailable();
+        },
+        async restart() {
+            if (!systemdRunnerAvailable())
+                throw new Error("Detached restart is unavailable on this host (no systemd user session)");
+            const runner = spawn("systemd-run", ["--user", "--collect", "--unit=pi-web-restart", "--", "systemctl", "--user", "restart", "pi-web-sessiond", "pi-web"], {
+                detached: true,
+                stdio: "ignore",
+            });
+            runner.unref();
+            // Surface an immediate fork failure (missing systemd-run) synchronously.
+            await new Promise((resolve) => {
+                runner.once("error", (error) => { logger?.warn({ err: error }, "systemd-run failed to start restart"); resolve(); });
+                runner.once("spawn", () => { resolve(); });
+            });
+        },
+    };
+}
+export function registerRestartRoutes(app, deps = {}) {
+    const service = deps.restart ?? createRestartService(app.log);
+    app.post("/api/pi-web/restart", async (_request, reply) => {
+        try {
+            await service.restart();
+            return await reply.code(202).send({ started: true });
+        }
+        catch (error) {
+            return reply.code(400).send({ started: false, error: error instanceof Error ? error.message : String(error) });
+        }
+    });
+}
+//# sourceMappingURL=restartRoutes.js.map

package/dist/server/updates/restartRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restartRoutes.js","sourceRoot":"","sources":["../../../src/server/updates/restartRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAmB3C,SAAS,sBAAsB;IAC7B,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,IAAI,WAAW,CAAC,uBAAuB,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiE;IACpG,OAAO;QACL,gBAAgB;YACd,OAAO,sBAAsB,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,sBAAsB,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;YACzH,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE;gBACzJ,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,qCAAqC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,qBAAqB,CAAC,GAAoB,EAAE,OAAyB,EAAE;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE9D,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/updates/selfUpdateRoutes.js

@@ -0,0 +1,145 @@
+import { execFile, spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { promisify } from "node:util";
+import { PI_WEB_UPDATE_REPO_ENV } from "../../shared/selfUpdate.js";
+import { packageVersion } from "../../piWebVersionReport.js";
+const execFileAsync = promisify(execFile);
+const GIT_FETCH_INTERVAL_MS = 60_000;
+/**
+ * Managed deployments (the nix flake, installer scripts) update through a
+ * command that owns version drift - for the flake that is the automated
+ * lock-and-switch pipeline, invoked via /pi-web update or the update UI.
+ * When this environment is set the git-checkout path is not offered, because
+ * a store build has no .git to compare against.
+ */
+export const PI_WEB_UPDATE_COMMAND_ENV = "PI_WEB_UPDATE_COMMAND";
+function updateCommand() {
+    const fromEnv = process.env[PI_WEB_UPDATE_COMMAND_ENV];
+    return fromEnv !== undefined && fromEnv !== "" ? fromEnv : undefined;
+}
+function repoCandidate() {
+    const fromEnv = process.env[PI_WEB_UPDATE_REPO_ENV];
+    if (fromEnv !== undefined && fromEnv !== "")
+        return fromEnv;
+    // A checkout built by `npm run build` carries its own package.json; walking
+    // up from the server bundle finds the repo root in local development.
+    const cwd = process.cwd();
+    const candidate = join(cwd, "package.json");
+    return existsSync(candidate) ? cwd : undefined;
+}
+async function gitShort(ref, cwd) {
+    try {
+        const { stdout } = await execFileAsync("git", ["rev-parse", "--short", ref], { cwd, timeout: 5000 });
+        return stdout.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function createSelfUpdateService(logger) {
+    let lastFetch = 0;
+    let fetchInFlight;
+    async function refreshRemote(repo) {
+        const now = Date.now();
+        if (now - lastFetch < GIT_FETCH_INTERVAL_MS)
+            return;
+        fetchInFlight ??= (async () => {
+            try {
+                await execFileAsync("git", ["fetch", "fork"], { cwd: repo, timeout: 10_000 });
+            }
+            catch (error) {
+                logger?.warn({ err: error, repo }, "failed to fetch fork remote for self-update check");
+            }
+            finally {
+                lastFetch = Date.now();
+                fetchInFlight = undefined;
+            }
+        })();
+        await fetchInFlight;
+    }
+    return {
+        async status() {
+            const command = updateCommand();
+            if (command !== undefined) {
+                return {
+                    enabled: true,
+                    current: packageVersion(),
+                    latest: undefined,
+                    available: false,
+                    branch: undefined,
+                    checkedAt: new Date().toISOString(),
+                };
+            }
+            const repo = repoCandidate();
+            if (repo === undefined) {
+                return { enabled: false, current: "", latest: undefined, available: false, branch: undefined, checkedAt: new Date().toISOString(), disabledReason: "no checkout (set PI_WEB_UPDATE_REPO)" };
+            }
+            await refreshRemote(repo);
+            const current = await gitShort("HEAD", repo);
+            const branch = await gitShort("--abbrev-ref", repo);
+            const latest = branch === undefined ? undefined : await gitShort(`fork/${branch}`, repo);
+            const available = current !== undefined && latest !== undefined && current !== latest;
+            return {
+                enabled: true,
+                current: current ?? "",
+                latest,
+                available,
+                branch,
+                checkedAt: new Date().toISOString(),
+            };
+        },
+        async apply() {
+            const command = updateCommand();
+            if (command !== undefined) {
+                // bash -lc so the command's own PATH expectations hold (home-manager
+                // switch needs the nix profile on PATH). Detached via systemd-run:
+                // the update restarts this very process.
+                const runner = spawn("systemd-run", ["--user", "--collect", "--unit=pi-web-self-update", "--", "/bin/bash", "-lc", command], {
+                    detached: true,
+                    stdio: "ignore",
+                });
+                runner.unref();
+                await new Promise((resolve) => {
+                    runner.once("error", (error) => { logger?.warn({ err: error }, "systemd-run failed to start command self-update"); resolve(); });
+                    runner.once("spawn", () => { resolve(); });
+                });
+                return;
+            }
+            const repo = repoCandidate();
+            if (repo === undefined)
+                throw new Error("no checkout to update (set PI_WEB_UPDATE_REPO)");
+            const script = join(repo, "scripts", "auto-update.sh");
+            if (!existsSync(script))
+                throw new Error(`no auto-update script at ${script}`);
+            // systemd-run detaches the apply from this process, so the restart of
+            // the web process mid-apply cannot kill it. Fall back to a plain fork
+            // when systemd is unavailable (containers), where the web process being
+            // recycled is less disruptive.
+            const runner = spawn("systemd-run", ["--user", "--collect", "--unit=pi-web-self-update", "--", "bash", script], {
+                detached: true,
+                stdio: "ignore",
+            });
+            runner.unref();
+            // Surface an immediate fork failure (missing systemd-run) synchronously.
+            await new Promise((resolve) => {
+                runner.once("error", (error) => { logger?.warn({ err: error }, "systemd-run failed to start self-update; falling back"); resolve(); });
+                runner.once("spawn", () => { resolve(); });
+            });
+        },
+    };
+}
+export function registerSelfUpdateRoutes(app, deps = {}) {
+    const service = deps.selfUpdate ?? createSelfUpdateService(app.log);
+    app.get("/api/pi-web/update/status", async () => service.status());
+    app.post("/api/pi-web/update/apply", async (_request, reply) => {
+        try {
+            await service.apply();
+            return await reply.code(202).send({ started: true });
+        }
+        catch (error) {
+            return reply.code(400).send({ started: false, error: error instanceof Error ? error.message : String(error) });
+        }
+    });
+}
+//# sourceMappingURL=selfUpdateRoutes.js.map

package/dist/server/updates/selfUpdateRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfUpdateRoutes.js","sourceRoot":"","sources":["../../../src/server/updates/selfUpdateRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAG7D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,SAAS,aAAa;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvD,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAkBD,SAAS,aAAa;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IAC5D,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAiE;IACvG,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,aAAwC,CAAC;IAE7C,KAAK,UAAU,aAAa,CAAC,IAAY;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,SAAS,GAAG,qBAAqB;YAAE,OAAO;QACpD,aAAa,KAAK,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,mDAAmD,CAAC,CAAC;YAC1F,CAAC;oBAAS,CAAC;gBACT,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,aAAa,CAAC;IACtB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM;YACV,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,cAAc,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,sCAAsC,EAAE,CAAC;YAC9L,CAAC;YACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAE1B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;YACzF,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC;YACtF,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,IAAI,EAAE;gBACtB,MAAM;gBACN,SAAS;gBACT,MAAM;gBACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,qEAAqE;gBACrE,mEAAmE;gBACnE,yCAAyC;gBACzC,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;oBAC3H,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;YACvD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;YAC/E,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,+BAA+B;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;gBAC9G,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,uDAAuD,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,wBAAwB,CAAC,GAAoB,EAAE,OAA4B,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpE,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnE,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/webSocketBridge.js

@@ -0,0 +1,32 @@
+import { WebSocket } from "ws";
+export function bridgeSockets(client, upstream) {
+    const sendToClient = createBufferedSender(client);
+    const sendToUpstream = createBufferedSender(upstream);
+    client.on("message", (data) => { sendToUpstream(data); });
+    upstream.on("message", (data) => { sendToClient(data); });
+    client.on("close", () => { upstream.close(); });
+    upstream.on("close", () => { client.close(); });
+    upstream.on("error", () => { client.close(); });
+    client.on("error", () => { upstream.close(); });
+}
+export function createBufferedSender(socket) {
+    const queue = [];
+    const flush = () => {
+        while (socket.readyState === WebSocket.OPEN) {
+            const data = queue.shift();
+            if (data === undefined)
+                return;
+            socket.send(data);
+        }
+    };
+    socket.on("open", flush);
+    return (data) => {
+        if (socket.readyState === WebSocket.OPEN) {
+            socket.send(data);
+            return;
+        }
+        if (socket.readyState === WebSocket.CONNECTING)
+            queue.push(data);
+    };
+}
+//# sourceMappingURL=webSocketBridge.js.map

package/dist/server/webSocketBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webSocketBridge.js","sourceRoot":"","sources":["../../src/server/webSocketBridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAa,MAAM,IAAI,CAAC;AAE1C,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,QAAmB;IAClE,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO;YAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzB,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/workingDirectory.js

@@ -0,0 +1,44 @@
+import { isAbsolute, resolve } from "node:path";
+/**
+ * Working-directory normalization boundaries.
+ *
+ * Cwd strings reach the server from three kinds of sources with different trust:
+ *
+ * 1. HTTP requests (web UI, federation proxies): normalize strictly with
+ *    `normalizeRequestCwd` at route parsing. Relative paths are rejected instead
+ *    of being silently resolved against the daemon's own working directory.
+ * 2. Data pi-web writes itself (archive store records): canonicalized on write
+ *    and on load with `canonicalizeStoredCwd`, so internal `===` comparisons are
+ *    safe by construction.
+ * 3. Data other writers own (Pi session file headers via the SDK): canonicalized
+ *    on read at the gateway, and compared tolerantly with `cwdPathsEqual` where a
+ *    raw value can still appear (e.g. runtime cwd of sessions opened from files).
+ *
+ * Inside these boundaries, plain string equality on cwd values is safe.
+ */
+/**
+ * Strictly normalize a client-supplied working directory at an HTTP boundary.
+ * Throws for non-string, empty, or relative input; returns the resolved
+ * (separator- and trailing-slash-normalized) absolute path otherwise.
+ */
+export function normalizeRequestCwd(cwd) {
+    if (typeof cwd !== "string" || cwd === "")
+        throw new Error("cwd is required");
+    if (!isAbsolute(cwd))
+        throw new Error("cwd must be an absolute path");
+    return resolve(cwd);
+}
+/**
+ * Leniently canonicalize a working directory loaded from stored data.
+ * Absolute paths are resolved to canonical form; anything else (legacy empty or
+ * relative values) is preserved as-is so a single bad record cannot fail a whole
+ * load, and never silently resolves against this process's working directory.
+ */
+export function canonicalizeStoredCwd(cwd) {
+    return isAbsolute(cwd) ? resolve(cwd) : cwd;
+}
+/** Compare two working-directory paths, tolerating separator and normalization differences (e.g. Windows backslash vs forward slash). */
+export function cwdPathsEqual(a, b) {
+    return resolve(a) === resolve(b);
+}
+//# sourceMappingURL=workingDirectory.js.map

package/dist/server/workingDirectory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workingDirectory.js","sourceRoot":"","sources":["../../src/server/workingDirectory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,yIAAyI;AACzI,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/server/workspaceExplorerRoutes.js

@@ -0,0 +1,147 @@
+import { deleteWorkspaceFile, moveWorkspaceFile, readWorkspaceFile, writeWorkspaceFile } from "./workspaces/fileContentService.js";
+import { isAbsoluteishFileSuggestionQuery, listFileSuggestions, listPathSuggestions } from "./workspaces/fileSuggestions.js";
+import { listWorkspaceTree } from "./workspaces/fileTreeService.js";
+import { readWorkspaceFilePreview } from "./workspaces/filePreviewService.js";
+import { workspaceFilePreviewResponsePolicy } from "./workspaces/filePreviewResponsePolicy.js";
+import { applyWorkspaceFilePreviewErrorResponsePolicy } from "./workspaces/filePreviewResponseHeaders.js";
+import { readWorkspaceGoals } from "./goals/goalStore.js";
+import { archiveWorkspaceGoal, GoalArchiveError } from "./goals/goalArchive.js";
+import { resolveWorkspaceContext } from "./workspaces/workspaceContext.js";
+import { pathAccessForWorkspaceContext } from "./workspaces/effectivePathAccess.js";
+import { sendWorkspaceRequestError } from "./workspaces/workspaceRouteErrors.js";
+export function registerWorkspaceExplorerRoutes(app, projects, workspaces, prefix = "/api", options = {}) {
+    registerWorkspaceFileContentParsers(app);
+    app.get(`${prefix}/projects/:projectId/workspaces/:workspaceId/tree`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            return await listWorkspaceTree(context.root, request.query.path, await pathAccessForWorkspaceContext(context, options.config));
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    // Goals are read straight from the workspace's `.pi/goals/` directory rather
+    // than through a session: the records outlive any one session, and several
+    // sessions of the same workspace share the directory.
+    app.get(`${prefix}/projects/:projectId/workspaces/:workspaceId/goals`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            return await readWorkspaceGoals(context.root);
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    /**
+     * Archiving is the one write pi-web makes to goal state, and only because a
+     * paused goal has no other way out of the panel: the extension's own clear
+     * command refuses without a confirmable UI, which a web session has not got.
+     * The protocol it follows is the extension's (see docs/pi-goal-integration.md).
+     */
+    app.post(`${prefix}/projects/:projectId/workspaces/:workspaceId/goals/:goalId/archive`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            return await archiveWorkspaceGoal(context.root, request.params.goalId);
+        }
+        catch (error) {
+            if (error instanceof GoalArchiveError)
+                return reply.code(error.code === "locked" ? 409 : 400).send({ error: error.message, code: error.code });
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    app.get(`${prefix}/projects/:projectId/workspaces/:workspaceId/file`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            return await readWorkspaceFile(context.root, request.query.path, await pathAccessForWorkspaceContext(context, options.config));
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    app.put(`${prefix}/projects/:projectId/workspaces/:workspaceId/file`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            const writeOptions = {
+                createDirs: request.query.createDirs !== "false",
+                overwrite: request.query.overwrite !== "false",
+            };
+            return await writeWorkspaceFile(context.root, request.query.path, request.body, writeOptions);
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    app.delete(`${prefix}/projects/:projectId/workspaces/:workspaceId/file`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            return await deleteWorkspaceFile(context.root, request.query.path);
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    app.post(`${prefix}/projects/:projectId/workspaces/:workspaceId/file/move`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            return await moveWorkspaceFile(context.root, request.query.fromPath, request.query.toPath, {
+                createDirs: request.query.createDirs !== "false",
+                overwrite: request.query.overwrite === "true",
+            });
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    app.get(`${prefix}/projects/:projectId/workspaces/:workspaceId/file/preview`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            const download = request.query.download === "1" || request.query.download === "true";
+            const preview = await readWorkspaceFilePreview(context.root, request.query.path, await pathAccessForWorkspaceContext(context, options.config), { download });
+            const policy = workspaceFilePreviewResponsePolicy(preview.path, { download });
+            return await reply
+                .header("Content-Type", policy.contentType)
+                .header("Cache-Control", "private, max-age=3600")
+                .header("Content-Length", String(preview.size))
+                .header("Content-Disposition", policy.contentDisposition)
+                .header("Content-Security-Policy", policy.contentSecurityPolicy)
+                .header("Last-Modified", new Date(preview.modifiedAt).toUTCString())
+                .header("X-Content-Type-Options", policy.contentTypeOptions)
+                .send(preview.body);
+        }
+        catch (error) {
+            applyWorkspaceFilePreviewErrorResponsePolicy(reply);
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+    app.get(`${prefix}/projects/:projectId/workspaces/:workspaceId/files`, async (request, reply) => {
+        try {
+            const context = await resolveWorkspaceContext(projects, workspaces, request.params.projectId, request.params.workspaceId);
+            const query = request.query.q ?? "";
+            const pathAccess = isAbsoluteishFileSuggestionQuery(query) ? await pathAccessForWorkspaceContext(context, options.config) : undefined;
+            if (request.query.mode === "path")
+                return await listPathSuggestions(context.root, query, pathAccess);
+            return await listFileSuggestions(context.root, query, { kind: request.query.kind, scope: request.query.scope, pathAccess });
+        }
+        catch (error) {
+            return sendWorkspaceRequestError(reply, error, 400);
+        }
+    });
+}
+function registerWorkspaceFileContentParsers(app) {
+    // Fastify's default parser only handles JSON; workspace file writes need to
+    // accept text and arbitrary binary payloads. This route module is registered
+    // for both local aliases, so parser registration must tolerate repeats.
+    try {
+        app.addContentTypeParser("text/plain", { parseAs: "string" }, (_request, body, done) => { done(null, Buffer.from(body)); });
+    }
+    catch { /* already registered */ }
+    try {
+        app.addContentTypeParser("application/octet-stream", { parseAs: "buffer" }, (_request, body, done) => { done(null, body); });
+    }
+    catch { /* already registered */ }
+    try {
+        app.addContentTypeParser(/^([a-z]+\/[a-z0-9.+-]+)$/u, { parseAs: "buffer" }, (_request, body, done) => { done(null, body); });
+    }
+    catch { /* already registered */ }
+}
+//# sourceMappingURL=workspaceExplorerRoutes.js.map

package/dist/server/workspaceExplorerRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceExplorerRoutes.js","sourceRoot":"","sources":["../../src/server/workspaceExplorerRoutes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACnI,OAAO,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC7H,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,kCAAkC,EAAE,MAAM,2CAA2C,CAAC;AAC/F,OAAO,EAAE,4CAA4C,EAAE,MAAM,4CAA4C,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AAEpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAMjF,MAAM,UAAU,+BAA+B,CAAC,GAAoB,EAAE,QAAwB,EAAE,UAA4B,EAAE,MAAM,GAAG,MAAM,EAAE,UAAyC,EAAE;IACxL,mCAAmC,CAAC,GAAG,CAAC,CAAC;IAEzC,GAAG,CAAC,GAAG,CAAyF,GAAG,MAAM,mDAAmD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrL,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,2EAA2E;IAC3E,sDAAsD;IACtD,GAAG,CAAC,GAAG,CAAyD,GAAG,MAAM,oDAAoD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtJ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,OAAO,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,IAAI,CAAyE,GAAG,MAAM,oEAAoE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvL,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,OAAO,MAAM,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/I,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAyF,GAAG,MAAM,mDAAmD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrL,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAgJ,GAAG,MAAM,mDAAmD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5O,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,MAAM,YAAY,GAA8B;gBAC9C,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,OAAO;gBAChD,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO;aAC/C,CAAC;YACF,OAAO,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAyF,GAAG,MAAM,mDAAmD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxL,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,OAAO,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAuJ,GAAG,MAAM,wDAAwD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACzP,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;gBACzF,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,OAAO;gBAChD,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM;aAC9C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAA4G,GAAG,MAAM,2DAA2D,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChN,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC;YACrF,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7J,MAAM,MAAM,GAAG,kCAAkC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9E,OAAO,MAAM,KAAK;iBACf,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC;iBAC1C,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC;iBAChD,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;iBAC9C,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,kBAAkB,CAAC;iBACxD,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,qBAAqB,CAAC;iBAC/D,MAAM,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;iBACnE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,CAAC;iBAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4CAA4C,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAmL,GAAG,MAAM,oDAAoD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChR,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1H,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,6BAA6B,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACrG,OAAO,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mCAAmC,CAAC,GAAoB;IAC/D,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,CAAC;QAAC,GAAG,CAAC,oBAAoB,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACvK,IAAI,CAAC;QAAC,GAAG,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACxK,IAAI,CAAC;QAAC,GAAG,CAAC,oBAAoB,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;AAC3K,CAAC"}

package/dist/server/workspaces/effectivePathAccess.js

@@ -0,0 +1,8 @@
+import { loadEffectiveProjectPathAccess } from "./projectPiWebConfig.js";
+export async function pathAccessForWorkspaceContext(context, config) {
+    if (config === undefined)
+        return undefined;
+    const response = await config.read();
+    return loadEffectiveProjectPathAccess(context.project.path, response.effectiveConfig);
+}
+//# sourceMappingURL=effectivePathAccess.js.map

package/dist/server/workspaces/effectivePathAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effectivePathAccess.js","sourceRoot":"","sources":["../../../src/server/workspaces/effectivePathAccess.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAyB,EAAE,MAAoD;IACjI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,8BAA8B,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;AACxF,CAAC"}