@xopcai/xopc 0.0.230 → 0.0.232

package/dist/src/gateway/hono/routes/projects.js

@@ -18,15 +18,9 @@ import { TaskApplicationService } from "../../../tasks/task-application-service.
 import { defineTaskContract } from "../../../tasks/task-contract-definition.js";
 import { ProjectOperatingViewService, summarizeProjectOperatingView } from "../../../tasks/project-operating-view-service.js";
 import "../../../tasks/index.js";
-import { classifyFileReferenceFsError } from "../../file-reference-errors.js";
-import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { parseActivityIncludeRelated, parseActivityQuery } from "./activity.js";
-import { fuzzySearchWorkspaceFiles } from "../../workspace-file-search.js";
-import * as path$1 from "node:path";
 import { randomUUID } from "node:crypto";
-import { readFile, readdir, realpath, stat, writeFile } from "node:fs/promises";
 //#region src/gateway/hono/routes/projects.ts
-const log = createGatewayRouteLogger("Projects");
 function parseProjectStatus(raw) {
 	return raw === "planned" || raw === "active" || raw === "paused" || raw === "completed" || raw === "cancelled" || raw === "archived" ? raw : void 0;
 }
@@ -89,171 +83,6 @@ function enrichProjectWorkspace(service, project) {
 		effectiveWorkspaceRoot: resolveEffectiveWorkspaceRoot(service, project)
 	};
 }
-const SKIP_FILE_NAMES = new Set([".git", "node_modules"]);
-const PROJECT_FILE_MIME_BY_EXT = {
-	png: "image/png",
-	jpg: "image/jpeg",
-	jpeg: "image/jpeg",
-	gif: "image/gif",
-	webp: "image/webp",
-	bmp: "image/bmp",
-	svg: "image/svg+xml",
-	pdf: "application/pdf",
-	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-	pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
-	txt: "text/plain",
-	md: "text/markdown",
-	json: "application/json",
-	html: "text/html",
-	css: "text/css",
-	js: "text/javascript",
-	ts: "text/typescript",
-	mp3: "audio/mpeg",
-	wav: "audio/wav",
-	ogg: "audio/ogg",
-	webm: "video/webm",
-	mp4: "video/mp4",
-	mov: "video/quicktime"
-};
-function normalizeRelativePath(raw) {
-	return (raw ?? "").trim().replaceAll("\\", "/").replace(/^\/+/, "");
-}
-function isWithinDirectory(root, target) {
-	const relativePath = path$1.relative(root, target);
-	return relativePath === "" || !relativePath.startsWith("..") && !path$1.isAbsolute(relativePath);
-}
-async function resolveProjectWorkspaceRoot(service, projectId) {
-	const project = service.projects.get(projectId);
-	if (!project) return {
-		ok: false,
-		status: 404,
-		error: "Project not found"
-	};
-	const workspaceRoot = resolveEffectiveWorkspaceRoot(service, project);
-	if (!workspaceRoot?.trim()) return {
-		ok: false,
-		status: 400,
-		error: "Project workspace root is not set"
-	};
-	try {
-		const root = await realpath(workspaceRoot);
-		if (!(await stat(root)).isDirectory()) return {
-			ok: false,
-			status: 400,
-			error: "Project workspace root is not a directory"
-		};
-		return {
-			ok: true,
-			projectId: project.id,
-			root
-		};
-	} catch (err) {
-		log.warn({
-			err,
-			projectId: project.id,
-			path: workspaceRoot
-		}, "project workspace root unavailable");
-		return {
-			ok: false,
-			status: 404,
-			error: "Project workspace root is unavailable"
-		};
-	}
-}
-async function resolveProjectWorkspacePath(service, projectId, rawPath) {
-	const rootResult = await resolveProjectWorkspaceRoot(service, projectId);
-	if (rootResult.ok === false) return {
-		ok: false,
-		status: rootResult.status,
-		error: rootResult.error
-	};
-	const requestedPath = normalizeRelativePath(rawPath);
-	const candidate = path$1.resolve(rootResult.root, requestedPath);
-	if (!isWithinDirectory(rootResult.root, candidate)) return {
-		ok: false,
-		status: 400,
-		error: "Path is outside project workspace"
-	};
-	const relativePath = path$1.relative(rootResult.root, candidate).split(path$1.sep).join("/");
-	return {
-		ok: true,
-		projectId: rootResult.projectId,
-		root: rootResult.root,
-		requestedPath,
-		absolutePath: candidate,
-		relativePath: relativePath === "." ? "" : relativePath
-	};
-}
-async function resolveExistingProjectWorkspacePath(service, projectId, rawPath) {
-	const resolved = await resolveProjectWorkspacePath(service, projectId, rawPath);
-	if (resolved.ok === false) return resolved;
-	if (!resolved.requestedPath.trim()) return {
-		ok: false,
-		status: 400,
-		error: "Missing path"
-	};
-	let realTarget;
-	try {
-		realTarget = await realpath(resolved.absolutePath);
-	} catch {
-		return {
-			ok: false,
-			status: 404,
-			error: "Not found"
-		};
-	}
-	if (!isWithinDirectory(resolved.root, realTarget)) return {
-		ok: false,
-		status: 400,
-		error: "Path is outside project workspace"
-	};
-	const targetStat = await stat(realTarget);
-	return {
-		...resolved,
-		absolutePath: realTarget,
-		stat: targetStat
-	};
-}
-async function resolveProjectWorkspaceWritePath(service, projectId, rawPath) {
-	const resolved = await resolveProjectWorkspacePath(service, projectId, rawPath);
-	if (resolved.ok === false) return resolved;
-	if (!resolved.requestedPath.trim()) return {
-		ok: false,
-		status: 400,
-		error: "Missing path"
-	};
-	try {
-		const realTarget = await realpath(resolved.absolutePath);
-		if (!isWithinDirectory(resolved.root, realTarget)) return {
-			ok: false,
-			status: 400,
-			error: "Path is outside project workspace"
-		};
-		return {
-			...resolved,
-			absolutePath: realTarget,
-			existingStat: await stat(realTarget)
-		};
-	} catch {
-		const parentPath = path$1.dirname(resolved.absolutePath);
-		try {
-			const realParent = await realpath(parentPath);
-			if (!isWithinDirectory(resolved.root, realParent)) return {
-				ok: false,
-				status: 400,
-				error: "Path is outside project workspace"
-			};
-		} catch {
-			return {
-				ok: false,
-				status: 404,
-				error: "Parent directory not found"
-			};
-		}
-		return resolved;
-	}
-}
 function textFromTranscriptContent(content) {
 	if (typeof content === "string") return content;
 	if (!Array.isArray(content)) return "";
@@ -846,343 +675,6 @@ function registerProjectsRoutes(authenticated, deps) {
 			}, 404);
 		}
 	});
-	authenticated.get("/api/projects/:id/files", async (c) => {
-		const resolved = await resolveProjectWorkspacePath(service, c.req.param("id"), c.req.query("path"));
-		if (resolved.ok === false) return c.json({
-			ok: false,
-			error: resolved.error
-		}, resolved.status);
-		const { root, absolutePath: candidate } = resolved;
-		let currentPath;
-		try {
-			currentPath = await realpath(candidate);
-			if (!isWithinDirectory(root, currentPath)) return c.json({
-				ok: false,
-				error: "Path is outside project workspace"
-			}, 400);
-			if (!(await stat(currentPath)).isDirectory()) return c.json({
-				ok: false,
-				error: "Path is not a directory"
-			}, 400);
-		} catch (err) {
-			log.warn({
-				err,
-				projectId: resolved.projectId,
-				path: candidate
-			}, "project file path unavailable");
-			return c.json({
-				ok: false,
-				error: "Path not found"
-			}, 404);
-		}
-		try {
-			const dirents = await readdir(currentPath, { withFileTypes: true });
-			const visibleEntries = (await Promise.all(dirents.filter((entry) => !SKIP_FILE_NAMES.has(entry.name)).map(async (entry) => {
-				const displayPath = path$1.join(currentPath, entry.name);
-				const absolutePath = await realpath(displayPath).catch(() => null);
-				if (!absolutePath || !isWithinDirectory(root, absolutePath)) return null;
-				const entryStat = await stat(absolutePath).catch(() => null);
-				if (!entryStat) return null;
-				const relativePath = path$1.relative(root, displayPath).split(path$1.sep).join("/");
-				return {
-					name: entry.name,
-					path: relativePath,
-					absolutePath,
-					type: entryStat.isDirectory() ? "directory" : "file",
-					size: entryStat?.isFile() ? entryStat.size : void 0,
-					updatedAt: entryStat?.mtime.toISOString()
-				};
-			}))).filter((entry) => entry !== null);
-			visibleEntries.sort((left, right) => {
-				if (left.type !== right.type) return left.type === "directory" ? -1 : 1;
-				return left.name.localeCompare(right.name);
-			});
-			const relativeCurrentPath = path$1.relative(root, currentPath).split(path$1.sep).join("/");
-			const parentRelativePath = relativeCurrentPath ? path$1.dirname(relativeCurrentPath).replaceAll("\\", "/") : null;
-			return c.json({
-				ok: true,
-				root,
-				path: relativeCurrentPath === "." ? "" : relativeCurrentPath,
-				parentPath: parentRelativePath === "." ? "" : parentRelativePath,
-				entries: visibleEntries
-			});
-		} catch (err) {
-			log.warn({
-				err,
-				projectId: resolved.projectId,
-				path: currentPath
-			}, "project file list failed");
-			if (err?.code === "EACCES") return c.json({
-				ok: false,
-				error: "Permission denied"
-			}, 403);
-			return c.json({
-				ok: false,
-				error: "Failed to read project files"
-			}, 500);
-		}
-	});
-	/** Fuzzy filename / path search across the entire project workspace. */
-	authenticated.get("/api/projects/:id/files/search", async (c) => {
-		const q = typeof c.req.query("q") === "string" ? c.req.query("q").trim() : "";
-		const limitRaw = c.req.query("limit");
-		const limit = Math.min(Math.max(parseInt(typeof limitRaw === "string" ? limitRaw : "50", 10) || 50, 1), 50);
-		const root = await resolveProjectWorkspaceRoot(service, c.req.param("id"));
-		if (root.ok === false) return c.json({
-			ok: false,
-			error: root.error
-		}, root.status);
-		const entries = await fuzzySearchWorkspaceFiles(root.root, q, limit);
-		return c.json({
-			ok: true,
-			entries
-		});
-	});
-	authenticated.get("/api/projects/:id/files/read", async (c) => {
-		const resolved = await resolveExistingProjectWorkspacePath(service, c.req.param("id"), c.req.query("path"));
-		if (resolved.ok === false) return c.json({
-			ok: false,
-			error: { message: resolved.error }
-		}, resolved.status);
-		if (!resolved.stat.isFile()) return c.json({
-			ok: false,
-			error: { message: "Not a file" }
-		}, 400);
-		try {
-			const content = await readFile(resolved.absolutePath, "utf-8");
-			return c.json({
-				ok: true,
-				payload: {
-					content,
-					path: resolved.relativePath,
-					absolutePath: resolved.absolutePath,
-					mtimeMs: resolved.stat.mtimeMs
-				}
-			});
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Read failed" }
-			}, 500);
-		}
-	});
-	authenticated.get("/api/projects/:id/files/raw", async (c) => {
-		const resolved = await resolveExistingProjectWorkspacePath(service, c.req.param("id"), c.req.query("path"));
-		if (resolved.ok === false) return c.json({
-			ok: false,
-			error: { message: resolved.error }
-		}, resolved.status);
-		if (!resolved.stat.isFile()) return c.json({
-			ok: false,
-			error: { message: "Not a file" }
-		}, 400);
-		const contentType = PROJECT_FILE_MIME_BY_EXT[resolved.relativePath.split(".").pop()?.toLowerCase() ?? ""] || "application/octet-stream";
-		try {
-			const buf = await readFile(resolved.absolutePath);
-			return new Response(buf, { headers: {
-				"Content-Type": contentType,
-				"Cache-Control": "private, max-age=3600"
-			} });
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Read failed" }
-			}, 500);
-		}
-	});
-	authenticated.get("/api/projects/:id/files/resolve-reference", async (c) => {
-		const rawPath = typeof c.req.query("path") === "string" ? c.req.query("path").trim() : "";
-		if (!rawPath) return c.json({
-			ok: false,
-			error: {
-				code: "INVALID_PATH",
-				message: "Missing path"
-			}
-		}, 400);
-		const resolved = await resolveProjectWorkspacePath(service, c.req.param("id"), rawPath);
-		if (resolved.ok === false) return c.json({
-			ok: false,
-			error: {
-				code: "PROJECT_WORKSPACE_RESOLUTION_FAILED",
-				message: resolved.error
-			}
-		}, resolved.status);
-		let st = null;
-		let statError = null;
-		let absolutePath = resolved.absolutePath;
-		try {
-			absolutePath = await realpath(resolved.absolutePath);
-			if (!isWithinDirectory(resolved.root, absolutePath)) return c.json({
-				ok: false,
-				error: {
-					code: "PROJECT_WORKSPACE_RESOLUTION_FAILED",
-					message: "Path is outside project workspace"
-				}
-			}, 400);
-			st = await stat(absolutePath);
-		} catch (err) {
-			statError = err;
-		}
-		const displayName = path$1.basename(rawPath);
-		if (!st) {
-			const failure = classifyFileReferenceFsError(statError);
-			if (failure.code !== "FILE_NOT_FOUND") {
-				log.warn({
-					err: statError,
-					projectId: resolved.projectId,
-					workspaceRoot: resolved.root,
-					candidate: resolved.absolutePath,
-					errorCode: failure.code
-				}, `Project file reference access failed: ${failure.message}`);
-				return c.json({
-					ok: false,
-					error: {
-						code: failure.code,
-						message: failure.message
-					}
-				}, failure.status === 403 ? 403 : 500);
-			}
-			return c.json({
-				ok: true,
-				payload: {
-					inputPath: rawPath,
-					displayName,
-					scope: "missing",
-					exists: false,
-					absolutePath: resolved.absolutePath,
-					capabilities: ["copyPath"],
-					errorCode: "FILE_NOT_FOUND"
-				}
-			});
-		}
-		return c.json({
-			ok: true,
-			payload: {
-				inputPath: rawPath,
-				displayName,
-				scope: "workspace",
-				exists: true,
-				isDirectory: st.isDirectory(),
-				absolutePath,
-				workspaceRelativePath: resolved.relativePath,
-				capabilities: st.isDirectory() ? [
-					"openExternal",
-					"revealInFolder",
-					"copyPath"
-				] : [
-					"preview",
-					"edit",
-					"openExternal",
-					"revealInFolder",
-					"copyPath"
-				],
-				mtimeMs: st.mtimeMs
-			}
-		});
-	});
-	authenticated.put("/api/projects/:id/files/write", async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const bodyRecord = typeof body === "object" && body !== null ? body : {};
-		const pathRel = typeof bodyRecord.path === "string" ? bodyRecord.path : "";
-		const content = typeof bodyRecord.content === "string" ? bodyRecord.content : "";
-		if (!pathRel.trim()) return c.json({
-			ok: false,
-			error: { message: "Missing path" }
-		}, 400);
-		const resolved = await resolveProjectWorkspaceWritePath(service, c.req.param("id"), pathRel);
-		if (resolved.ok === false) return c.json({
-			ok: false,
-			error: { message: resolved.error }
-		}, resolved.status);
-		if (resolved.existingStat && !resolved.existingStat.isFile()) return c.json({
-			ok: false,
-			error: { message: "Not a file" }
-		}, 400);
-		try {
-			await writeFile(resolved.absolutePath, content, "utf-8");
-			const mtimeMs = (await stat(resolved.absolutePath).catch(() => ({ mtimeMs: Date.now() }))).mtimeMs;
-			return c.json({
-				ok: true,
-				payload: {
-					path: resolved.relativePath,
-					mtimeMs
-				}
-			});
-		} catch (err) {
-			log.error({
-				err,
-				projectId: resolved.projectId,
-				path: resolved.absolutePath
-			}, "project file write failed");
-			return c.json({
-				ok: false,
-				error: { message: "Write failed" }
-			}, 500);
-		}
-	});
-	authenticated.post("/api/projects/:id/files/upload", async (c) => {
-		let body;
-		try {
-			body = await c.req.parseBody();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid multipart body" }
-			}, 400);
-		}
-		const file = body.file;
-		if (!(file instanceof File)) return c.json({
-			ok: false,
-			error: { message: "Missing file" }
-		}, 400);
-		const requestedPath = typeof body.path === "string" ? body.path.trim() : "";
-		if (!requestedPath) return c.json({
-			ok: false,
-			error: { message: "Missing path" }
-		}, 400);
-		const resolved = await resolveProjectWorkspaceWritePath(service, c.req.param("id"), requestedPath);
-		if (resolved.ok === false) return c.json({
-			ok: false,
-			error: { message: resolved.error }
-		}, resolved.status);
-		if (resolved.existingStat) return c.json({
-			ok: false,
-			error: { message: "File already exists" }
-		}, 409);
-		try {
-			await writeFile(resolved.absolutePath, Buffer.from(await file.arrayBuffer()), { flag: "wx" });
-			const entryStat = await stat(resolved.absolutePath);
-			return c.json({
-				ok: true,
-				entry: {
-					name: path$1.basename(resolved.relativePath),
-					path: resolved.relativePath,
-					absolutePath: resolved.absolutePath,
-					type: "file",
-					size: entryStat.size,
-					updatedAt: entryStat.mtime.toISOString()
-				}
-			}, 201);
-		} catch (err) {
-			log.error({
-				err,
-				projectId: resolved.projectId,
-				path: resolved.absolutePath
-			}, "project file upload failed");
-			return c.json({
-				ok: false,
-				error: { message: "Upload failed" }
-			}, 500);
-		}
-	});
 	authenticated.post("/api/projects/:id/sessions/:sessionKey", async (c) => {
 		try {
 			service.projects.attachSession(c.req.param("sessionKey"), c.req.param("id"));

package/dist/src/gateway/hono/routes/realtime.js

@@ -1,4 +1,5 @@
 import { realtimeClientKindSchema } from "../../../../packages/realtime-protocol/src/index.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { z } from "zod";
 //#region src/gateway/hono/routes/realtime.ts
 const ticketRequestSchema = z.strictObject({
@@ -16,9 +17,15 @@ function registerRealtimeRoutes(authenticated, deps) {
 			}
 		}, 400);
 		try {
+			const principal = getGatewayPrincipal(c);
 			return c.json({
 				ok: true,
-				payload: deps.service.realtime.tickets.issue(parsed.data.clientId, parsed.data.clientKind)
+				payload: deps.service.realtime.tickets.issue(parsed.data.clientId, parsed.data.clientKind, {
+					principalId: principal.principalId,
+					...principal.deviceId ? { deviceId: principal.deviceId } : {},
+					...principal.accessSessionId ? { accessSessionId: principal.accessSessionId } : {},
+					scopes: principal.scopes
+				})
 			});
 		} catch (error) {
 			return c.json({