agent-tower 0.1.0

package/dist/routes/files.js

@@ -0,0 +1,313 @@
+import { z, ZodError } from 'zod';
+import * as fs from 'node:fs/promises';
+import * as fssync from 'node:fs';
+import * as path from 'node:path';
+const IMAGE_EXTENSIONS = new Set([
+    '.png', '.jpg', '.jpeg', '.gif', '.bmp', '.webp', '.svg', '.ico', '.avif',
+]);
+const MIME_MAP = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.bmp': 'image/bmp',
+    '.webp': 'image/webp',
+    '.svg': 'image/svg+xml',
+    '.ico': 'image/x-icon',
+    '.avif': 'image/avif',
+};
+const IGNORED_DIRS = new Set([
+    'node_modules',
+    '.git',
+    'dist',
+    'build',
+    '.next',
+    'out',
+    'coverage',
+    '.turbo',
+    '.cache',
+    '.pnpm',
+    '.yarn',
+]);
+function handleError(error, reply) {
+    if (error instanceof ZodError) {
+        reply.code(400);
+        return { error: 'Validation failed', code: 'VALIDATION_ERROR', details: error.errors };
+    }
+    if (error && typeof error === 'object' && 'code' in error) {
+        const code = error.code;
+        if (code === 'ENOENT') {
+            reply.code(404);
+            return { error: 'Not found', code: 'NOT_FOUND' };
+        }
+        if (code === 'EACCES' || code === 'EPERM') {
+            reply.code(403);
+            return { error: 'Permission denied', code: 'PERMISSION_DENIED' };
+        }
+    }
+    reply.code(500);
+    return { error: 'Internal server error', code: 'INTERNAL_ERROR' };
+}
+function normalizeUserPath(input) {
+    const raw = (input ?? '').trim();
+    if (!raw || raw === '/')
+        return '';
+    const noBackslash = raw.replace(/\\/g, '/');
+    const stripped = noBackslash.startsWith('/') ? noBackslash.slice(1) : noBackslash;
+    return stripped;
+}
+function assertNoTraversalSegments(relPath) {
+    const segments = relPath.split('/').filter(Boolean);
+    if (segments.some((s) => s === '..')) {
+        throw new ZodError([
+            {
+                code: 'custom',
+                message: 'Path traversal (..) is not allowed',
+                path: ['path'],
+            },
+        ]);
+    }
+}
+async function resolveInWorkingDir(workingDir, userPath) {
+    const baseReal = await fs.realpath(workingDir);
+    const rel = normalizeUserPath(userPath);
+    assertNoTraversalSegments(rel);
+    const abs = path.resolve(baseReal, rel);
+    const relative = path.relative(baseReal, abs);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        const err = new Error('Resolved path is outside workingDir');
+        err.code = 'OUTSIDE_WORKING_DIR';
+        throw err;
+    }
+    return { baseReal, rel, abs };
+}
+function inferLanguage(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    switch (ext) {
+        case '.ts':
+        case '.tsx':
+            return 'typescript';
+        case '.js':
+        case '.jsx':
+        case '.mjs':
+        case '.cjs':
+            return 'javascript';
+        case '.json':
+            return 'json';
+        case '.md':
+        case '.mdx':
+            return 'markdown';
+        case '.css':
+            return 'css';
+        case '.scss':
+            return 'scss';
+        case '.html':
+            return 'html';
+        case '.yml':
+        case '.yaml':
+            return 'yaml';
+        case '.sh':
+            return 'shell';
+        case '.py':
+            return 'python';
+        case '.go':
+            return 'go';
+        case '.rs':
+            return 'rust';
+        default:
+            return 'plaintext';
+    }
+}
+const treeQuerySchema = z.object({
+    path: z.string().optional(),
+    workingDir: z
+        .string()
+        .min(1, 'workingDir is required')
+        .refine((v) => path.isAbsolute(v), { message: 'workingDir must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+});
+const readQuerySchema = z.object({
+    path: z.string().min(1, 'path is required'),
+    workingDir: z
+        .string()
+        .min(1, 'workingDir is required')
+        .refine((v) => path.isAbsolute(v), { message: 'workingDir must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+});
+const writeBodySchema = z.object({
+    path: z.string().min(1, 'path is required'),
+    workingDir: z
+        .string()
+        .min(1, 'workingDir is required')
+        .refine((v) => path.isAbsolute(v), { message: 'workingDir must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+    content: z.string(),
+});
+export async function filesRoutes(app) {
+    /**
+     * GET /tree?path=/&workingDir=/abs/path
+     * 列出指定目录下一层文件/文件夹（不递归）
+     */
+    app.get('/tree', async (request, reply) => {
+        try {
+            const { path: userPath, workingDir } = treeQuerySchema.parse(request.query);
+            if (!fssync.existsSync(workingDir)) {
+                reply.code(400);
+                return { error: `workingDir does not exist: ${workingDir}`, code: 'WORKING_DIR_NOT_FOUND' };
+            }
+            const { baseReal, abs } = await resolveInWorkingDir(workingDir, userPath);
+            const dirReal = await fs.realpath(abs);
+            const relative = path.relative(baseReal, dirReal);
+            if (relative.startsWith('..') || path.isAbsolute(relative)) {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            const stat = await fs.stat(dirReal);
+            if (!stat.isDirectory()) {
+                reply.code(400);
+                return { error: 'path is not a directory', code: 'NOT_A_DIRECTORY' };
+            }
+            const entries = await fs.readdir(dirReal, { withFileTypes: true });
+            const items = entries
+                .filter((e) => {
+                if (e.isDirectory())
+                    return !IGNORED_DIRS.has(e.name);
+                // ignore some noisy files
+                if (e.name === '.DS_Store')
+                    return false;
+                return true;
+            })
+                .map((e) => {
+                const type = e.isDirectory() ? 'directory' : 'file';
+                return { name: e.name, type };
+            })
+                .sort((a, b) => {
+                if (a.type !== b.type)
+                    return a.type === 'directory' ? -1 : 1;
+                return a.name.localeCompare(b.name);
+            });
+            return { items };
+        }
+        catch (error) {
+            if (error && typeof error === 'object' && 'code' in error && error.code === 'OUTSIDE_WORKING_DIR') {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            return handleError(error, reply);
+        }
+    });
+    /**
+     * GET /read?path=src/auth/Login.tsx&workingDir=/abs/path
+     * 读取文件内容
+     */
+    app.get('/read', async (request, reply) => {
+        try {
+            const { path: userFilePath, workingDir } = readQuerySchema.parse(request.query);
+            if (!fssync.existsSync(workingDir)) {
+                reply.code(400);
+                return { error: `workingDir does not exist: ${workingDir}`, code: 'WORKING_DIR_NOT_FOUND' };
+            }
+            const { baseReal, abs } = await resolveInWorkingDir(workingDir, userFilePath);
+            const fileReal = await fs.realpath(abs);
+            const relative = path.relative(baseReal, fileReal);
+            if (relative.startsWith('..') || path.isAbsolute(relative)) {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            const stat = await fs.stat(fileReal);
+            if (!stat.isFile()) {
+                reply.code(400);
+                return { error: 'path is not a file', code: 'NOT_A_FILE' };
+            }
+            const content = await fs.readFile(fileReal, 'utf8');
+            return { content, language: inferLanguage(userFilePath) };
+        }
+        catch (error) {
+            if (error && typeof error === 'object' && 'code' in error && error.code === 'OUTSIDE_WORKING_DIR') {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            return handleError(error, reply);
+        }
+    });
+    /**
+     * POST /write { path, workingDir, content }
+     * 保存文件内容
+     */
+    app.post('/write', async (request, reply) => {
+        try {
+            const { path: userFilePath, workingDir, content } = writeBodySchema.parse(request.body || {});
+            if (!fssync.existsSync(workingDir)) {
+                reply.code(400);
+                return { error: `workingDir does not exist: ${workingDir}`, code: 'WORKING_DIR_NOT_FOUND' };
+            }
+            const { baseReal, abs } = await resolveInWorkingDir(workingDir, userFilePath);
+            // Ensure parent dir exists and is within workingDir (mitigate symlink escapes)
+            const parent = path.dirname(abs);
+            const parentReal = await fs.realpath(parent);
+            const parentRel = path.relative(baseReal, parentReal);
+            if (parentRel.startsWith('..') || path.isAbsolute(parentRel)) {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            await fs.writeFile(abs, content, 'utf8');
+            return { success: true };
+        }
+        catch (error) {
+            if (error && typeof error === 'object' && 'code' in error && error.code === 'OUTSIDE_WORKING_DIR') {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            return handleError(error, reply);
+        }
+    });
+    /**
+     * GET /image?path=assets/logo.png&workingDir=/abs/path
+     * 返回图片文件的原始二进制数据
+     */
+    app.get('/image', async (request, reply) => {
+        try {
+            const { path: userFilePath, workingDir } = readQuerySchema.parse(request.query);
+            if (!fssync.existsSync(workingDir)) {
+                reply.code(400);
+                return { error: `workingDir does not exist: ${workingDir}`, code: 'WORKING_DIR_NOT_FOUND' };
+            }
+            const { baseReal, abs } = await resolveInWorkingDir(workingDir, userFilePath);
+            const fileReal = await fs.realpath(abs);
+            const relative = path.relative(baseReal, fileReal);
+            if (relative.startsWith('..') || path.isAbsolute(relative)) {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            const stat = await fs.stat(fileReal);
+            if (!stat.isFile()) {
+                reply.code(400);
+                return { error: 'path is not a file', code: 'NOT_A_FILE' };
+            }
+            const ext = path.extname(fileReal).toLowerCase();
+            if (!IMAGE_EXTENSIONS.has(ext)) {
+                reply.code(400);
+                return { error: 'Not an image file', code: 'NOT_IMAGE' };
+            }
+            const mime = MIME_MAP[ext] || 'application/octet-stream';
+            const buffer = await fs.readFile(fileReal);
+            reply.header('Content-Type', mime);
+            reply.header('Cache-Control', 'no-cache');
+            return reply.send(buffer);
+        }
+        catch (error) {
+            if (error && typeof error === 'object' && 'code' in error && error.code === 'OUTSIDE_WORKING_DIR') {
+                reply.code(400);
+                return { error: 'Path is outside workingDir', code: 'OUTSIDE_WORKING_DIR' };
+            }
+            return handleError(error, reply);
+        }
+    });
+}
+//# sourceMappingURL=files.js.map

package/dist/routes/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;CAC1E,CAAC,CAAC;AAEH,MAAM,QAAQ,GAA2B;IACvC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,KAAK;IACL,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,KAAc,EAAE,KAAU;IAC7C,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAI,KAAa,CAAC,IAAc,CAAC;QAC3C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAClF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CAAC;YACjB;gBACE,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,oCAAoC;gBAC7C,IAAI,EAAE,CAAC,MAAM,CAAC;aACR;SACT,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,QAA4B;IACjF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxC,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAQ,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,GAAG,qBAAqB,CAAC;QACjC,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,YAAY,CAAC;QACtB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,YAAY,CAAC;QACtB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,KAAK;YACR,OAAO,OAAO,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;SAC7E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAChD,OAAO,EAAE,oCAAoC;KAC9C,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAC3C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;SAC7E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAChD,OAAO,EAAE,oCAAoC;KAC9C,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAC3C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;SAC7E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAChD,OAAO,EAAE,oCAAoC;KAC9C,CAAC;IACJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB;IACpD;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,8BAA8B,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAC9F,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YACvE,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAe,OAAO;iBAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtD,0BAA0B;gBAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO,KAAK,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,IAAI,GAAqB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YAChC,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACb,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;oBAAE,OAAO,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YAEL,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAK,KAAa,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC3G,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,8BAA8B,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAC9F,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC7D,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAK,KAAa,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC3G,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,8BAA8B,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAC9F,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAE9E,+EAA+E;YAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACtD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAK,KAAa,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC3G,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,8BAA8B,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAC9F,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC7D,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAC3D,CAAC;YAED,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAK,KAAa,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC3G,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YAC9E,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/filesystem.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from 'fastify';
+export declare function filesystemRoutes(app: FastifyInstance): Promise<void>;
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/routes/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/routes/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAgD/C,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,eAAe,iBAuF1D"}

package/dist/routes/filesystem.js

@@ -0,0 +1,126 @@
+import { z, ZodError } from 'zod';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+/**
+ * 查询参数校验：path 必须是绝对路径且不含 ".." 片段
+ */
+const browseQuerySchema = z.object({
+    path: z
+        .string()
+        .optional()
+        .default('')
+        .transform((v) => v || os.homedir())
+        .refine((v) => path.isAbsolute(v), { message: 'path must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+});
+const validateQuerySchema = z.object({
+    path: z
+        .string()
+        .min(1, 'path is required')
+        .refine((v) => path.isAbsolute(v), { message: 'path must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+});
+/**
+ * 统一错误处理
+ */
+function handleError(error, reply) {
+    if (error instanceof ZodError) {
+        const fieldErrors = error.errors.map((e) => ({
+            field: e.path.join('.'),
+            message: e.message,
+        }));
+        reply.code(400);
+        return { error: 'Validation failed', code: 'VALIDATION_ERROR', details: fieldErrors };
+    }
+    reply.code(500);
+    return { error: 'Internal server error', code: 'INTERNAL_ERROR' };
+}
+export async function filesystemRoutes(app) {
+    /**
+     * GET /browse?path=<dir>
+     * 列出指定目录下的子目录（不列文件），返回每个目录的 isGitRepo 标记
+     */
+    app.get('/browse', async (request, reply) => {
+        try {
+            const { path: dirPath } = browseQuerySchema.parse(request.query);
+            // 检查目录是否存在
+            if (!fs.existsSync(dirPath)) {
+                reply.code(400);
+                return { error: `Directory does not exist: ${dirPath}`, code: 'DIR_NOT_FOUND' };
+            }
+            const stat = fs.statSync(dirPath);
+            if (!stat.isDirectory()) {
+                reply.code(400);
+                return { error: `Path is not a directory: ${dirPath}`, code: 'NOT_A_DIRECTORY' };
+            }
+            // 读取子条目，仅保留目录
+            let entries;
+            try {
+                entries = fs.readdirSync(dirPath, { withFileTypes: true });
+            }
+            catch {
+                reply.code(403);
+                return { error: `Permission denied: ${dirPath}`, code: 'PERMISSION_DENIED' };
+            }
+            const dirs = entries
+                .filter((entry) => {
+                try {
+                    return entry.isDirectory() && !entry.name.startsWith('.');
+                }
+                catch {
+                    return false;
+                }
+            })
+                .map((entry) => {
+                const fullPath = path.join(dirPath, entry.name);
+                const gitPath = path.join(fullPath, '.git');
+                let isGitRepo = false;
+                try {
+                    isGitRepo = fs.existsSync(gitPath);
+                }
+                catch {
+                    // ignore permission errors
+                }
+                return { name: entry.name, path: fullPath, isGitRepo };
+            })
+                .sort((a, b) => a.name.localeCompare(b.name));
+            return { current: dirPath, parent: path.dirname(dirPath), dirs };
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+    /**
+     * GET /validate?path=<dir>
+     * 验证路径是否为有效 Git 仓库
+     */
+    app.get('/validate', async (request, reply) => {
+        try {
+            const { path: dirPath } = validateQuerySchema.parse(request.query);
+            // 检查路径是否存在
+            if (!fs.existsSync(dirPath)) {
+                return { valid: false, path: dirPath, error: 'Path does not exist' };
+            }
+            // 检查是否是目录
+            const stat = fs.statSync(dirPath);
+            if (!stat.isDirectory()) {
+                return { valid: false, path: dirPath, error: 'Path is not a directory' };
+            }
+            // 检查是否是 Git 仓库
+            const gitPath = path.join(dirPath, '.git');
+            if (!fs.existsSync(gitPath)) {
+                return { valid: false, path: dirPath, error: 'Not a Git repository (no .git found)' };
+            }
+            return { valid: true, path: dirPath };
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/routes/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../src/routes/filesystem.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;SACvE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAChD,OAAO,EAAE,oCAAoC;KAC9C,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;SACvE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAChD,OAAO,EAAE,oCAAoC;KAC9C,CAAC;CACL,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,KAAU;IAC7C,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB;IACzD;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAEjE,WAAW;YACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,6BAA6B,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YAClF,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,4BAA4B,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YACnF,CAAC;YAED,cAAc;YACd,IAAI,OAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,sBAAsB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;YAC/E,CAAC;YAED,MAAM,IAAI,GAAG,OAAO;iBACjB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChB,IAAI,CAAC;oBACH,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC5C,IAAI,SAAS,GAAG,KAAK,CAAC;gBACtB,IAAI,CAAC;oBACH,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACzD,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAEhD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAEnE,WAAW;YACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YACvE,CAAC;YAED,UAAU;YACV,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC3E,CAAC;YAED,eAAe;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;YACxF,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/git.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from 'fastify';
+export declare function gitRoutes(app: FastifyInstance): Promise<void>;
+//# sourceMappingURL=git.d.ts.map

package/dist/routes/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/routes/git.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAgF/C,wBAAsB,SAAS,CAAC,GAAG,EAAE,eAAe,iBAmGnD"}

package/dist/routes/git.js

@@ -0,0 +1,170 @@
+import { z, ZodError } from 'zod';
+import { execFile } from 'node:child_process';
+import * as path from 'node:path';
+function handleError(error, reply) {
+    if (error instanceof ZodError) {
+        reply.code(400);
+        return { error: 'Validation failed', code: 'VALIDATION_ERROR', details: error.errors };
+    }
+    reply.code(500);
+    return { error: 'Internal server error', code: 'INTERNAL_ERROR' };
+}
+/** execFile promisified with timeout */
+function execGit(cwd, args) {
+    return new Promise((resolve, reject) => {
+        execFile('git', args, { cwd, timeout: 10_000, maxBuffer: 10 * 1024 * 1024 }, (err, stdout) => {
+            if (err) {
+                // git diff returns exit code 1 when there are differences — that's fine
+                if (stdout !== undefined && stdout !== '') {
+                    resolve(stdout);
+                    return;
+                }
+                reject(err);
+                return;
+            }
+            resolve(stdout);
+        });
+    });
+}
+function parseNameStatus(output) {
+    if (!output.trim())
+        return [];
+    return output
+        .trim()
+        .split('\n')
+        .map((line) => {
+        // Format: "M\tpath" or "R100\told\tnew"
+        const parts = line.split('\t');
+        if (parts.length < 2)
+            return null;
+        const rawStatus = parts[0];
+        // Normalize rename status (R100 -> R)
+        const status = rawStatus.startsWith('R') ? 'R' : rawStatus;
+        const filePath = parts.length >= 3 ? parts[2] : parts[1];
+        return { status, path: filePath };
+    })
+        .filter((entry) => entry !== null);
+}
+const changesQuerySchema = z.object({
+    workingDir: z
+        .string()
+        .min(1, 'workingDir is required')
+        .refine((v) => path.isAbsolute(v), { message: 'workingDir must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+});
+const diffQuerySchema = z.object({
+    workingDir: z
+        .string()
+        .min(1, 'workingDir is required')
+        .refine((v) => path.isAbsolute(v), { message: 'workingDir must be absolute' })
+        .refine((v) => !v.split(path.sep).includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+    path: z
+        .string()
+        .min(1, 'path is required')
+        .refine((v) => !v.split('/').includes('..'), {
+        message: 'Path traversal (..) is not allowed',
+    }),
+    type: z.enum(['uncommitted', 'committed']),
+});
+export async function gitRoutes(app) {
+    app.setErrorHandler((error, _request, reply) => {
+        return handleError(error, reply);
+    });
+    /**
+     * GET /changes?workingDir=/path/to/worktree
+     * Returns uncommitted and committed changes relative to main.
+     */
+    app.get('/changes', async (request, reply) => {
+        try {
+            const { workingDir } = changesQuerySchema.parse(request.query);
+            // Uncommitted changes (staged + unstaged vs HEAD)
+            let uncommitted = [];
+            try {
+                const output = await execGit(workingDir, ['diff', '--name-status', 'HEAD']);
+                uncommitted = parseNameStatus(output);
+            }
+            catch {
+                // If HEAD doesn't exist (initial commit), try against empty tree
+                try {
+                    const output = await execGit(workingDir, ['diff', '--name-status']);
+                    uncommitted = parseNameStatus(output);
+                }
+                catch {
+                    // ignore
+                }
+            }
+            // Also include untracked files
+            try {
+                const untrackedOutput = await execGit(workingDir, [
+                    'ls-files', '--others', '--exclude-standard',
+                ]);
+                if (untrackedOutput.trim()) {
+                    const untrackedFiles = untrackedOutput.trim().split('\n');
+                    for (const f of untrackedFiles) {
+                        uncommitted.push({ status: 'A', path: f });
+                    }
+                }
+            }
+            catch {
+                // ignore
+            }
+            // Committed changes (main...HEAD)
+            let committed = [];
+            try {
+                const output = await execGit(workingDir, ['diff', '--name-status', 'main...HEAD']);
+                committed = parseNameStatus(output);
+            }
+            catch {
+                // main branch might not exist — try origin/main
+                try {
+                    const output = await execGit(workingDir, ['diff', '--name-status', 'origin/main...HEAD']);
+                    committed = parseNameStatus(output);
+                }
+                catch {
+                    // ignore — no main branch to compare against
+                }
+            }
+            return { uncommitted, committed };
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+    /**
+     * GET /diff?workingDir=/path&path=src/index.ts&type=uncommitted|committed
+     * Returns the diff content for a single file.
+     */
+    app.get('/diff', async (request, reply) => {
+        try {
+            const { workingDir, path: filePath, type } = diffQuerySchema.parse(request.query);
+            let diff = '';
+            try {
+                if (type === 'uncommitted') {
+                    diff = await execGit(workingDir, ['diff', '--', filePath]);
+                    // If no staged/unstaged diff, the file might be untracked — show full content as addition
+                    if (!diff.trim()) {
+                        diff = await execGit(workingDir, ['diff', '--no-index', '/dev/null', filePath]).catch(() => '');
+                    }
+                }
+                else {
+                    diff = await execGit(workingDir, ['diff', 'main...HEAD', '--', filePath]);
+                    if (!diff.trim()) {
+                        diff = await execGit(workingDir, ['diff', 'origin/main...HEAD', '--', filePath]).catch(() => '');
+                    }
+                }
+            }
+            catch {
+                // ignore — return empty diff
+            }
+            return { diff };
+        }
+        catch (error) {
+            return handleError(error, reply);
+        }
+    });
+}
+//# sourceMappingURL=git.js.map