aicodeman 0.2.9 → 0.3.1

package/dist/web/route-helpers.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @fileoverview Shared helper functions for route modules.
+ *
+ * Contains pure functions extracted from server.ts and a session lookup helper
+ * that replaces ~43 inline not-found checks across route handlers.
+ */
+import { Session } from '../session.js';
+import type { SessionPort } from './ports/session-port.js';
+import type { EventPort } from './ports/event-port.js';
+export declare const CASES_DIR: string;
+export declare const SETTINGS_PATH: string;
+/**
+ * Look up a session by ID or throw a structured error.
+ * Replaces the pattern: `const session = sessions.get(id); if (!session) return createErrorResponse(...)`.
+ */
+export declare function findSessionOrFail(ctx: SessionPort, sessionId: string): Session;
+/**
+ * Formats uptime in seconds to a human-readable string (e.g., "1d 2h 30m 15s").
+ */
+export declare function formatUptime(seconds: number): string;
+/**
+ * Sanitizes hook event data before broadcasting via SSE.
+ * Extracts only relevant fields and limits total size to prevent
+ * oversized payloads from being broadcast to all connected clients.
+ */
+export declare function sanitizeHookData(data: Record<string, unknown> | null | undefined): Record<string, unknown>;
+/**
+ * Auto-configure Ralph tracker for a session.
+ *
+ * Priority order:
+ * 1. .claude/ralph-loop.local.md (official Ralph Wiggum plugin state)
+ * 2. CLAUDE.md <promise> tags (fallback)
+ *
+ * The ralph-loop.local.md file has priority because it contains
+ * the exact configuration from an active Ralph loop session.
+ */
+export declare function autoConfigureRalph(session: Session, workingDir: string, ctx: EventPort): void;
+//# sourceMappingURL=route-helpers.d.ts.map

package/dist/web/route-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../src/web/route-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAIxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,eAAO,MAAM,SAAS,QAAmC,CAAC;AAC1D,eAAO,MAAM,aAAa,QAA+C,CAAC;AAK1E;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAS9E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAapD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2C1G;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,CAsC7F"}

package/dist/web/route-helpers.js

@@ -0,0 +1,144 @@
+/**
+ * @fileoverview Shared helper functions for route modules.
+ *
+ * Contains pure functions extracted from server.ts and a session lookup helper
+ * that replaces ~43 inline not-found checks across route handlers.
+ */
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { ApiErrorCode, createErrorResponse } from '../types.js';
+import { parseRalphLoopConfig, extractCompletionPhrase } from '../ralph-config.js';
+import { SseEvent } from './sse-events.js';
+// Shared path constants used across route modules
+export const CASES_DIR = join(homedir(), 'codeman-cases');
+export const SETTINGS_PATH = join(homedir(), '.codeman', 'settings.json');
+// Maximum hook data size (prevents oversized SSE broadcasts)
+const MAX_HOOK_DATA_SIZE = 8 * 1024;
+/**
+ * Look up a session by ID or throw a structured error.
+ * Replaces the pattern: `const session = sessions.get(id); if (!session) return createErrorResponse(...)`.
+ */
+export function findSessionOrFail(ctx, sessionId) {
+    const session = ctx.sessions.get(sessionId);
+    if (!session) {
+        throw Object.assign(new Error(`Session ${sessionId} not found`), {
+            statusCode: 404,
+            body: createErrorResponse(ApiErrorCode.NOT_FOUND, `Session ${sessionId} not found`),
+        });
+    }
+    return session;
+}
+/**
+ * Formats uptime in seconds to a human-readable string (e.g., "1d 2h 30m 15s").
+ */
+export function formatUptime(seconds) {
+    const days = Math.floor(seconds / 86400);
+    const hours = Math.floor((seconds % 86400) / 3600);
+    const minutes = Math.floor((seconds % 3600) / 60);
+    const secs = Math.floor(seconds % 60);
+    const parts = [];
+    if (days > 0)
+        parts.push(`${days}d`);
+    if (hours > 0)
+        parts.push(`${hours}h`);
+    if (minutes > 0)
+        parts.push(`${minutes}m`);
+    if (secs > 0 || parts.length === 0)
+        parts.push(`${secs}s`);
+    return parts.join(' ');
+}
+/**
+ * Sanitizes hook event data before broadcasting via SSE.
+ * Extracts only relevant fields and limits total size to prevent
+ * oversized payloads from being broadcast to all connected clients.
+ */
+export function sanitizeHookData(data) {
+    if (!data || typeof data !== 'object')
+        return {};
+    // Only forward known safe fields from Claude Code hook stdin
+    const safeFields = {};
+    const allowedKeys = [
+        'hook_event_name',
+        'tool_name',
+        'tool_input',
+        'session_id',
+        'cwd',
+        'permission_mode',
+        'stop_hook_active',
+        'transcript_path',
+    ];
+    for (const key of allowedKeys) {
+        if (key in data && data[key] !== undefined) {
+            safeFields[key] = data[key];
+        }
+    }
+    // For tool_input, extract only summary fields (not full file content)
+    if (safeFields.tool_input && typeof safeFields.tool_input === 'object') {
+        const input = safeFields.tool_input;
+        const summary = {};
+        if (input.command)
+            summary.command = String(input.command).slice(0, 500);
+        if (input.file_path)
+            summary.file_path = String(input.file_path).slice(0, 500);
+        if (input.description)
+            summary.description = String(input.description).slice(0, 200);
+        if (input.query)
+            summary.query = String(input.query).slice(0, 200);
+        if (input.url)
+            summary.url = String(input.url).slice(0, 500);
+        if (input.pattern)
+            summary.pattern = String(input.pattern).slice(0, 200);
+        if (input.prompt)
+            summary.prompt = String(input.prompt).slice(0, 200);
+        safeFields.tool_input = summary;
+    }
+    // Final size check - drop if serialized data exceeds limit
+    const serialized = JSON.stringify(safeFields);
+    if (serialized.length > MAX_HOOK_DATA_SIZE) {
+        return { tool_name: safeFields.tool_name, _truncated: true };
+    }
+    return safeFields;
+}
+/**
+ * Auto-configure Ralph tracker for a session.
+ *
+ * Priority order:
+ * 1. .claude/ralph-loop.local.md (official Ralph Wiggum plugin state)
+ * 2. CLAUDE.md <promise> tags (fallback)
+ *
+ * The ralph-loop.local.md file has priority because it contains
+ * the exact configuration from an active Ralph loop session.
+ */
+export function autoConfigureRalph(session, workingDir, ctx) {
+    // First, try to read the official Ralph Wiggum plugin state file
+    const ralphConfig = parseRalphLoopConfig(workingDir);
+    if (ralphConfig && ralphConfig.completionPromise) {
+        session.ralphTracker.enable();
+        session.ralphTracker.startLoop(ralphConfig.completionPromise, ralphConfig.maxIterations ?? undefined);
+        // Restore iteration count if available
+        if (ralphConfig.iteration > 0) {
+            // The tracker's cycleCount will be updated when we detect iteration patterns
+            // in the terminal output, but we can set maxIterations now
+            console.log(`[auto-detect] Ralph loop at iteration ${ralphConfig.iteration}/${ralphConfig.maxIterations ?? '∞'}`);
+        }
+        console.log(`[auto-detect] Configured Ralph loop for session ${session.id} from ralph-loop.local.md: ${ralphConfig.completionPromise}`);
+        ctx.broadcast(SseEvent.SessionRalphLoopUpdate, {
+            sessionId: session.id,
+            state: session.ralphTracker.loopState,
+        });
+        return;
+    }
+    // Fallback: try CLAUDE.md
+    const claudeMdPath = join(workingDir, 'CLAUDE.md');
+    const completionPhrase = extractCompletionPhrase(claudeMdPath);
+    if (completionPhrase) {
+        session.ralphTracker.enable();
+        session.ralphTracker.startLoop(completionPhrase);
+        console.log(`[auto-detect] Configured Ralph loop for session ${session.id} from CLAUDE.md: ${completionPhrase}`);
+        ctx.broadcast(SseEvent.SessionRalphLoopUpdate, {
+            sessionId: session.id,
+            state: session.ralphTracker.loopState,
+        });
+    }
+}
+//# sourceMappingURL=route-helpers.js.map

package/dist/web/route-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-helpers.js","sourceRoot":"","sources":["../../src/web/route-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAI3C,kDAAkD;AAClD,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,CAAC;AAEpC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAgB,EAAE,SAAiB;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,SAAS,YAAY,CAAC,EAAE;YAC/D,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,mBAAmB,CAAC,YAAY,CAAC,SAAS,EAAE,WAAW,SAAS,YAAY,CAAC;SACpF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IAE3D,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgD;IAC/E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEjD,6DAA6D;IAC7D,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG;QAClB,iBAAiB;QACjB,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,KAAK;QACL,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB;KAClB,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3C,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,IAAI,UAAU,CAAC,UAAU,IAAI,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,UAAU,CAAC,UAAqC,CAAC;QAC/D,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,WAAW;YAAE,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,GAAG;YAAE,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,UAAU,CAAC,UAAU,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,2DAA2D;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,UAAkB,EAAE,GAAc;IACrF,iEAAiE;IACjE,MAAM,WAAW,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAErD,IAAI,WAAW,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACjD,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC;QAEtG,uCAAuC;QACvC,IAAI,WAAW,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC9B,6EAA6E;YAC7E,2DAA2D;YAC3D,OAAO,CAAC,GAAG,CAAC,yCAAyC,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC,CAAC;QACpH,CAAC;QAED,OAAO,CAAC,GAAG,CACT,mDAAmD,OAAO,CAAC,EAAE,8BAA8B,WAAW,CAAC,iBAAiB,EAAE,CAC3H,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,EAAE;YAC7C,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS;SACtC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAE/D,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,mDAAmD,OAAO,CAAC,EAAE,oBAAoB,gBAAgB,EAAE,CAAC,CAAC;QACjH,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,EAAE;YAC7C,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS;SACtC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/web/routes/case-routes.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @fileoverview Case management routes.
+ * Handles CRUD for cases (directories under ~/codeman-cases and linked folders),
+ * fix-plan reading, and ralph-wizard file serving.
+ */
+import { FastifyInstance } from 'fastify';
+import type { EventPort, ConfigPort } from '../ports/index.js';
+export declare function registerCaseRoutes(app: FastifyInstance, ctx: EventPort & ConfigPort): void;
+//# sourceMappingURL=case-routes.d.ts.map

package/dist/web/routes/case-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-routes.d.ts","sourceRoot":"","sources":["../../../src/web/routes/case-routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAY1C,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI,CAod1F"}

package/dist/web/routes/case-routes.js

@@ -0,0 +1,426 @@
+/**
+ * @fileoverview Case management routes.
+ * Handles CRUD for cases (directories under ~/codeman-cases and linked folders),
+ * fix-plan reading, and ralph-wizard file serving.
+ */
+import { existsSync, mkdirSync, writeFileSync, readdirSync } from 'node:fs';
+import fs from 'node:fs/promises';
+import { join, resolve, relative, isAbsolute } from 'node:path';
+import { homedir } from 'node:os';
+import { ApiErrorCode, createErrorResponse, getErrorMessage } from '../../types.js';
+import { CreateCaseSchema, LinkCaseSchema } from '../schemas.js';
+import { generateClaudeMd } from '../../templates/claude-md.js';
+import { writeHooksConfig } from '../../hooks-config.js';
+import { CASES_DIR } from '../route-helpers.js';
+import { SseEvent } from '../sse-events.js';
+export function registerCaseRoutes(app, ctx) {
+    // ═══════════════════════════════════════════════════════════════
+    // Case CRUD (list, create, link, detail, fix-plan)
+    // ═══════════════════════════════════════════════════════════════
+    // ========== List Cases ==========
+    app.get('/api/cases', async () => {
+        const cases = [];
+        // Get cases from CASES_DIR
+        try {
+            const entries = await fs.readdir(CASES_DIR, { withFileTypes: true });
+            for (const e of entries) {
+                if (e.isDirectory()) {
+                    cases.push({
+                        name: e.name,
+                        path: join(CASES_DIR, e.name),
+                        hasClaudeMd: existsSync(join(CASES_DIR, e.name, 'CLAUDE.md')),
+                    });
+                }
+            }
+        }
+        catch {
+            // CASES_DIR may not exist yet
+        }
+        // Get linked cases
+        const linkedCasesFile = join(homedir(), '.codeman', 'linked-cases.json');
+        try {
+            const linkedCases = JSON.parse(await fs.readFile(linkedCasesFile, 'utf-8'));
+            for (const [name, path] of Object.entries(linkedCases)) {
+                // Only add if not already in cases (avoid duplicates) and path exists
+                if (!cases.some((c) => c.name === name) && existsSync(path)) {
+                    cases.push({
+                        name,
+                        path,
+                        hasClaudeMd: existsSync(join(path, 'CLAUDE.md')),
+                    });
+                }
+            }
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT') {
+                console.warn('[Server] Failed to read linked cases:', err);
+            }
+        }
+        return cases;
+    });
+    app.post('/api/cases', async (req) => {
+        const result = CreateCaseSchema.safeParse(req.body);
+        if (!result.success) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, result.error.issues[0]?.message ?? 'Validation failed');
+        }
+        const { name, description } = result.data;
+        const casePath = join(CASES_DIR, name);
+        // Security: Path traversal protection - use relative path check
+        const resolvedPath = resolve(casePath);
+        const resolvedBase = resolve(CASES_DIR);
+        const relPath = relative(resolvedBase, resolvedPath);
+        if (relPath.startsWith('..') || isAbsolute(relPath)) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid case path');
+        }
+        if (existsSync(casePath)) {
+            return createErrorResponse(ApiErrorCode.ALREADY_EXISTS, 'Case already exists');
+        }
+        try {
+            mkdirSync(casePath, { recursive: true });
+            mkdirSync(join(casePath, 'src'), { recursive: true });
+            // Read settings to get custom template path
+            const templatePath = await ctx.getDefaultClaudeMdPath();
+            const claudeMd = generateClaudeMd(name, description || '', templatePath);
+            writeFileSync(join(casePath, 'CLAUDE.md'), claudeMd);
+            // Write .claude/settings.local.json with hooks for desktop notifications
+            await writeHooksConfig(casePath);
+            ctx.broadcast(SseEvent.CaseCreated, { name, path: casePath });
+            return { success: true, data: { case: { name, path: casePath } } };
+        }
+        catch (err) {
+            return createErrorResponse(ApiErrorCode.OPERATION_FAILED, getErrorMessage(err));
+        }
+    });
+    // Link an existing folder as a case
+    app.post('/api/cases/link', async (req) => {
+        const lcResult = LinkCaseSchema.safeParse(req.body);
+        if (!lcResult.success) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid request body');
+        }
+        const { name, path: folderPath } = lcResult.data;
+        // Expand ~ to home directory
+        const expandedPath = folderPath.startsWith('~') ? join(homedir(), folderPath.slice(1)) : folderPath;
+        // Validate the folder exists
+        if (!existsSync(expandedPath)) {
+            return createErrorResponse(ApiErrorCode.NOT_FOUND, `Folder not found: ${expandedPath}`);
+        }
+        // Check if case name already exists in CASES_DIR
+        const casePath = join(CASES_DIR, name);
+        if (existsSync(casePath)) {
+            return createErrorResponse(ApiErrorCode.ALREADY_EXISTS, 'A case with this name already exists in codeman-cases.');
+        }
+        // Load existing linked cases
+        const linkedCasesFile = join(homedir(), '.codeman', 'linked-cases.json');
+        let linkedCases = {};
+        try {
+            linkedCases = JSON.parse(await fs.readFile(linkedCasesFile, 'utf-8'));
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT') {
+                console.warn('[Server] Failed to read linked cases:', err);
+            }
+        }
+        // Check if name is already linked
+        if (linkedCases[name]) {
+            return createErrorResponse(ApiErrorCode.ALREADY_EXISTS, `Case "${name}" is already linked to ${linkedCases[name]}`);
+        }
+        // Save the linked case
+        linkedCases[name] = expandedPath;
+        try {
+            const codemanDir = join(homedir(), '.codeman');
+            if (!existsSync(codemanDir)) {
+                mkdirSync(codemanDir, { recursive: true });
+            }
+            await fs.writeFile(linkedCasesFile, JSON.stringify(linkedCases, null, 2));
+            ctx.broadcast(SseEvent.CaseLinked, { name, path: expandedPath });
+            return { success: true, data: { case: { name, path: expandedPath } } };
+        }
+        catch (err) {
+            return createErrorResponse(ApiErrorCode.OPERATION_FAILED, getErrorMessage(err));
+        }
+    });
+    app.get('/api/cases/:name', async (req) => {
+        const { name } = req.params;
+        // Security: Path traversal protection
+        const resolvedPath = resolve(join(CASES_DIR, name));
+        const resolvedBase = resolve(CASES_DIR);
+        const relPath = relative(resolvedBase, resolvedPath);
+        if (relPath.startsWith('..') || isAbsolute(relPath)) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid case name');
+        }
+        // First check linked cases
+        const linkedCasesFile = join(homedir(), '.codeman', 'linked-cases.json');
+        try {
+            const linkedCases = JSON.parse(await fs.readFile(linkedCasesFile, 'utf-8'));
+            if (linkedCases[name]) {
+                const linkedPath = linkedCases[name];
+                return {
+                    name,
+                    path: linkedPath,
+                    hasClaudeMd: existsSync(join(linkedPath, 'CLAUDE.md')),
+                    linked: true,
+                };
+            }
+        }
+        catch {
+            // ENOENT or parse errors - fall through to CASES_DIR check
+        }
+        // Then check CASES_DIR
+        const casePath = join(CASES_DIR, name);
+        if (!existsSync(casePath)) {
+            return createErrorResponse(ApiErrorCode.NOT_FOUND, 'Case not found');
+        }
+        return {
+            name,
+            path: casePath,
+            hasClaudeMd: existsSync(join(casePath, 'CLAUDE.md')),
+        };
+    });
+    // Read @fix_plan.md from a case directory (for wizard to detect existing plans)
+    app.get('/api/cases/:name/fix-plan', async (req) => {
+        const { name } = req.params;
+        // Security: Path traversal protection
+        const resolvedPath = resolve(join(CASES_DIR, name));
+        const resolvedBase = resolve(CASES_DIR);
+        const relPath = relative(resolvedBase, resolvedPath);
+        if (relPath.startsWith('..') || isAbsolute(relPath)) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid case name');
+        }
+        // Get case path (check linked cases first, then CASES_DIR)
+        let casePath = null;
+        const linkedCasesFile = join(homedir(), '.codeman', 'linked-cases.json');
+        try {
+            const linkedCases = JSON.parse(await fs.readFile(linkedCasesFile, 'utf-8'));
+            if (linkedCases[name]) {
+                casePath = linkedCases[name];
+            }
+        }
+        catch {
+            // ENOENT or parse errors - fall through to CASES_DIR
+        }
+        if (!casePath) {
+            casePath = join(CASES_DIR, name);
+        }
+        const fixPlanPath = join(casePath, '@fix_plan.md');
+        if (!existsSync(fixPlanPath)) {
+            return { success: true, exists: false, content: null, todos: [] };
+        }
+        try {
+            const content = await fs.readFile(fixPlanPath, 'utf-8');
+            // Parse todos from the content (similar to ralph-tracker's importFixPlanMarkdown)
+            const todos = [];
+            const todoPattern = /^-\s*\[([ xX-])\]\s*(.+)$/;
+            const p0HeaderPattern = /^##\s*(High Priority|Critical|P0|Critical Path)/i;
+            const p1HeaderPattern = /^##\s*(Standard|P1|Medium Priority)/i;
+            const p2HeaderPattern = /^##\s*(Nice to Have|P2|Low Priority)/i;
+            const completedHeaderPattern = /^##\s*Completed/i;
+            let currentPriority = null;
+            let inCompletedSection = false;
+            for (const line of content.split('\n')) {
+                const trimmed = line.trim();
+                if (p0HeaderPattern.test(trimmed)) {
+                    currentPriority = 'P0';
+                    inCompletedSection = false;
+                    continue;
+                }
+                if (p1HeaderPattern.test(trimmed)) {
+                    currentPriority = 'P1';
+                    inCompletedSection = false;
+                    continue;
+                }
+                if (p2HeaderPattern.test(trimmed)) {
+                    currentPriority = 'P2';
+                    inCompletedSection = false;
+                    continue;
+                }
+                if (completedHeaderPattern.test(trimmed)) {
+                    inCompletedSection = true;
+                    continue;
+                }
+                const match = trimmed.match(todoPattern);
+                if (match) {
+                    const [, checkboxState, taskContent] = match;
+                    let status;
+                    if (inCompletedSection || checkboxState === 'x' || checkboxState === 'X') {
+                        status = 'completed';
+                    }
+                    else if (checkboxState === '-') {
+                        status = 'in_progress';
+                    }
+                    else {
+                        status = 'pending';
+                    }
+                    todos.push({
+                        content: taskContent.trim(),
+                        status,
+                        priority: inCompletedSection ? null : currentPriority,
+                    });
+                }
+            }
+            // Calculate stats in a single pass for better performance
+            let pending = 0, inProgress = 0, completed = 0;
+            for (const t of todos) {
+                if (t.status === 'pending')
+                    pending++;
+                else if (t.status === 'in_progress')
+                    inProgress++;
+                else if (t.status === 'completed')
+                    completed++;
+            }
+            const stats = { total: todos.length, pending, inProgress, completed };
+            return {
+                success: true,
+                exists: true,
+                content,
+                todos,
+                stats,
+            };
+        }
+        catch (err) {
+            return createErrorResponse(ApiErrorCode.OPERATION_FAILED, `Failed to read @fix_plan.md: ${err}`);
+        }
+    });
+    // ═══════════════════════════════════════════════════════════════
+    // Ralph Wizard Files (per-case prompt/result serving)
+    // ═══════════════════════════════════════════════════════════════
+    // ========== List Wizard Files ==========
+    app.get('/api/cases/:caseName/ralph-wizard/files', async (req) => {
+        const { caseName } = req.params;
+        let casePath = join(CASES_DIR, caseName);
+        // Security: Path traversal protection - use relative path check
+        const resolvedCase = resolve(casePath);
+        const resolvedBase = resolve(CASES_DIR);
+        const relPath = relative(resolvedBase, resolvedCase);
+        if (relPath.startsWith('..') || isAbsolute(relPath)) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid case name');
+        }
+        // Check linked cases if path doesn't exist
+        if (!existsSync(casePath)) {
+            const linkedCasesFile = join(homedir(), '.codeman', 'linked-cases.json');
+            try {
+                const linkedCases = JSON.parse(await fs.readFile(linkedCasesFile, 'utf-8'));
+                if (linkedCases[caseName]) {
+                    casePath = linkedCases[caseName];
+                }
+            }
+            catch {
+                // No linked cases file
+            }
+        }
+        const wizardDir = join(casePath, 'ralph-wizard');
+        if (!existsSync(wizardDir)) {
+            return createErrorResponse(ApiErrorCode.NOT_FOUND, 'Ralph wizard directory not found');
+        }
+        // List all subdirectories and their files
+        const files = [];
+        const entries = readdirSync(wizardDir, { withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.isDirectory()) {
+                const agentDir = join(wizardDir, entry.name);
+                const agentFiles = {
+                    agentType: entry.name,
+                };
+                if (existsSync(join(agentDir, 'prompt.md'))) {
+                    agentFiles.promptFile = `${entry.name}/prompt.md`;
+                }
+                if (existsSync(join(agentDir, 'result.json'))) {
+                    agentFiles.resultFile = `${entry.name}/result.json`;
+                }
+                if (agentFiles.promptFile || agentFiles.resultFile) {
+                    files.push(agentFiles);
+                }
+            }
+        }
+        return { success: true, data: { files, caseName } };
+    });
+    // Read a specific ralph-wizard file
+    // Cache disabled to ensure fresh prompts when starting new plan generations
+    app.get('/api/cases/:caseName/ralph-wizard/file/:filePath', async (req, reply) => {
+        const { caseName, filePath } = req.params;
+        let casePath = join(CASES_DIR, caseName);
+        // Prevent browser caching - prompts change between plan generations
+        reply.header('Cache-Control', 'no-store, no-cache, must-revalidate');
+        reply.header('Pragma', 'no-cache');
+        reply.header('Expires', '0');
+        // Security: Path traversal protection for case name - use relative path check
+        const resolvedCase = resolve(casePath);
+        const resolvedBase = resolve(CASES_DIR);
+        const relPath = relative(resolvedBase, resolvedCase);
+        if (relPath.startsWith('..') || isAbsolute(relPath)) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid case name');
+        }
+        // Check linked cases if path doesn't exist
+        if (!existsSync(casePath)) {
+            const linkedCasesFile = join(homedir(), '.codeman', 'linked-cases.json');
+            try {
+                const linkedCases = JSON.parse(await fs.readFile(linkedCasesFile, 'utf-8'));
+                if (linkedCases[caseName]) {
+                    casePath = linkedCases[caseName];
+                }
+            }
+            catch {
+                // No linked cases file
+            }
+        }
+        const wizardDir = join(casePath, 'ralph-wizard');
+        // Decode the file path (it may be URL encoded)
+        const decodedPath = decodeURIComponent(filePath);
+        const fullPath = join(wizardDir, decodedPath);
+        // Security: ensure path is within wizard directory
+        const resolvedPath = resolve(fullPath);
+        const resolvedWizard = resolve(wizardDir);
+        if (!resolvedPath.startsWith(resolvedWizard)) {
+            return createErrorResponse(ApiErrorCode.INVALID_INPUT, 'Invalid file path');
+        }
+        let content;
+        try {
+            content = await fs.readFile(fullPath, 'utf-8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT') {
+                return createErrorResponse(ApiErrorCode.NOT_FOUND, 'File not found');
+            }
+            throw err;
+        }
+        const isJson = filePath.endsWith('.json');
+        // Parse JSON content safely (may contain invalid JSON or unescaped control characters)
+        let parsed = null;
+        if (isJson) {
+            try {
+                parsed = JSON.parse(content);
+            }
+            catch {
+                // Try repairing common JSON issues (unescaped control characters, trailing commas)
+                try {
+                    let repaired = content;
+                    // Fix trailing commas before closing brackets
+                    repaired = repaired.replace(/,(\s*[\]}])/g, '$1');
+                    // Fix unescaped control characters within JSON strings
+                    repaired = repaired.replace(/"([^"\\]|\\.)*"/g, (match) => {
+                        return match
+                            .replace(/\n/g, '\\n')
+                            .replace(/\r/g, '\\r')
+                            .replace(/\t/g, '\\t')
+                            .replace(
+                        // eslint-disable-next-line no-control-regex
+                        /[\x00-\x1f]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
+                    });
+                    parsed = JSON.parse(repaired);
+                }
+                catch {
+                    // Still invalid - return null for parsed, content available as raw string
+                }
+            }
+        }
+        return {
+            success: true,
+            data: {
+                content,
+                filePath: decodedPath,
+                isJson,
+                parsed,
+            },
+        };
+    });
+}
+//# sourceMappingURL=case-routes.js.map