codekin 0.4.1 → 0.5.0

package/server/dist/diff-manager.js

@@ -0,0 +1,303 @@
+/**
+ * DiffManager — encapsulates stateless git-diff operations.
+ *
+ * Extracted from SessionManager to reduce its complexity. All methods operate
+ * on a working directory path and have no dependency on session state, making
+ * them independently testable.
+ *
+ * The class is instantiated once by SessionManager and delegates are called
+ * with the relevant session's workingDir.
+ */
+import { execFile } from 'child_process';
+import { promises as fs } from 'fs';
+import path from 'path';
+import { promisify } from 'util';
+import { parseDiff, createUntrackedFileDiff } from './diff-parser.js';
+const execFileAsync = promisify(execFile);
+/** Max stdout for git commands (2 MB). */
+const GIT_MAX_BUFFER = 2 * 1024 * 1024;
+/** Timeout for git commands (10 seconds). */
+const GIT_TIMEOUT_MS = 10_000;
+/** Max paths per git command to stay under ARG_MAX (~128 KB on Linux). */
+const GIT_PATH_CHUNK_SIZE = 200;
+/**
+ * Return a copy of process.env with GIT_* vars removed that can interfere
+ * with child git processes (e.g. GIT_INDEX_FILE, GIT_DIR, GIT_PREFIX).
+ * The server may inherit these from the shell that launched pm2/node.
+ */
+export function cleanGitEnv() {
+    return Object.fromEntries(Object.entries(process.env).filter(([key]) => !key.startsWith('GIT_') || key === 'GIT_EDITOR'));
+}
+/** Run a git command as a fixed argv array (no shell interpolation). */
+export async function execGit(args, cwd) {
+    const { stdout } = await execFileAsync('git', args, {
+        cwd,
+        env: cleanGitEnv(),
+        maxBuffer: GIT_MAX_BUFFER,
+        timeout: GIT_TIMEOUT_MS,
+    });
+    return stdout;
+}
+/** Run a git command with paths chunked to avoid E2BIG. Concatenates stdout. */
+export async function execGitChunked(baseArgs, paths, cwd) {
+    let result = '';
+    for (let i = 0; i < paths.length; i += GIT_PATH_CHUNK_SIZE) {
+        const chunk = paths.slice(i, i + GIT_PATH_CHUNK_SIZE);
+        result += await execGit([...baseArgs, '--', ...chunk], cwd);
+    }
+    return result;
+}
+/** Get file statuses from `git status --porcelain` for given paths (or all). */
+export async function getFileStatuses(cwd, paths) {
+    const args = ['status', '--porcelain', '-z'];
+    if (paths)
+        args.push('--', ...paths);
+    const raw = await execGit(args, cwd);
+    const result = {};
+    // git status --porcelain=v1 -z format: XY NUL path NUL
+    const parts = raw.split('\0');
+    let i = 0;
+    while (i < parts.length) {
+        const entry = parts[i];
+        if (entry.length < 3) {
+            i++;
+            continue;
+        }
+        const x = entry[0];
+        const y = entry[1];
+        const filePath = entry.slice(3);
+        if (x === 'R' || x === 'C') {
+            const newPath = parts[i + 1] ?? filePath;
+            result[newPath] = 'renamed';
+            i += 2;
+        }
+        else if (x === 'D' || y === 'D') {
+            result[filePath] = 'deleted';
+            i++;
+        }
+        else if (x === '?' && y === '?') {
+            result[filePath] = 'added';
+            i++;
+        }
+        else if (x === 'A') {
+            result[filePath] = 'added';
+            i++;
+        }
+        else {
+            result[filePath] = 'modified';
+            i++;
+        }
+    }
+    return result;
+}
+/**
+ * Encapsulates git-diff and discard operations for a working directory.
+ *
+ * Stateless — all methods take a `cwd` parameter and don't hold any mutable
+ * state, so a single instance can safely serve all sessions.
+ */
+export class DiffManager {
+    /**
+     * Run git diff in a working directory and return structured results.
+     * Includes untracked file discovery for 'unstaged' and 'all' scopes.
+     */
+    async getDiff(cwd, scope = 'all') {
+        try {
+            // Get branch name
+            let branch;
+            try {
+                const branchResult = await execGit(['rev-parse', '--abbrev-ref', 'HEAD'], cwd);
+                branch = branchResult.trim();
+                if (branch === 'HEAD') {
+                    const shaResult = await execGit(['rev-parse', '--short', 'HEAD'], cwd);
+                    branch = `detached at ${shaResult.trim()}`;
+                }
+            }
+            catch {
+                branch = 'unknown';
+            }
+            // Build diff command based on scope
+            const diffArgs = ['diff', '--find-renames', '--no-color', '--unified=3'];
+            if (scope === 'staged') {
+                diffArgs.push('--cached');
+            }
+            else if (scope === 'all') {
+                diffArgs.push('HEAD');
+            }
+            let rawDiff;
+            try {
+                rawDiff = await execGit(diffArgs, cwd);
+            }
+            catch {
+                if (scope === 'all') {
+                    const [staged, unstaged] = await Promise.all([
+                        execGit(['diff', '--cached', '--find-renames', '--no-color', '--unified=3'], cwd).catch(() => ''),
+                        execGit(['diff', '--find-renames', '--no-color', '--unified=3'], cwd).catch(() => ''),
+                    ]);
+                    rawDiff = staged + unstaged;
+                }
+                else {
+                    rawDiff = '';
+                }
+            }
+            const { files, truncated, truncationReason } = parseDiff(rawDiff);
+            // Discover untracked files for 'unstaged' and 'all' scopes
+            if (scope !== 'staged') {
+                try {
+                    const untrackedRaw = await execGit(['ls-files', '--others', '--exclude-standard'], cwd);
+                    const untrackedPaths = untrackedRaw.trim().split('\n').filter(Boolean);
+                    const MAX_UNTRACKED_FILE_SIZE = 1024 * 1024; // 1 MB
+                    for (const relPath of untrackedPaths) {
+                        try {
+                            const fullPath = path.join(cwd, relPath);
+                            const stat = await fs.stat(fullPath);
+                            if (stat.size > MAX_UNTRACKED_FILE_SIZE) {
+                                console.log(`[diff] skipping large untracked file: ${relPath} (${(stat.size / 1024 / 1024).toFixed(1)} MB, limit ${MAX_UNTRACKED_FILE_SIZE / 1024 / 1024} MB)`);
+                                files.push({
+                                    path: relPath,
+                                    status: 'added',
+                                    isBinary: true,
+                                    additions: 0,
+                                    deletions: 0,
+                                    hunks: [],
+                                });
+                                continue;
+                            }
+                            const content = await fs.readFile(fullPath, 'utf-8');
+                            files.push(createUntrackedFileDiff(relPath, content));
+                        }
+                        catch {
+                            files.push({
+                                path: relPath,
+                                status: 'added',
+                                isBinary: true,
+                                additions: 0,
+                                deletions: 0,
+                                hunks: [],
+                            });
+                        }
+                    }
+                }
+                catch {
+                    // ls-files failed — skip untracked
+                }
+            }
+            const summary = {
+                filesChanged: files.length,
+                insertions: files.reduce((sum, f) => sum + f.additions, 0),
+                deletions: files.reduce((sum, f) => sum + f.deletions, 0),
+                truncated,
+                truncationReason,
+            };
+            return { type: 'diff_result', files, summary, branch, scope };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Failed to get diff';
+            return { type: 'diff_error', message };
+        }
+    }
+    /**
+     * Discard changes in a working directory per the given scope and paths.
+     * Returns a fresh diff_result after discarding.
+     */
+    async discardChanges(cwd, scope, paths, statuses) {
+        try {
+            // Validate paths
+            if (paths) {
+                const root = path.join(path.resolve(cwd), path.sep);
+                for (const p of paths) {
+                    if (p.includes('..') || path.isAbsolute(p)) {
+                        return { type: 'diff_error', message: `Invalid path: ${p}` };
+                    }
+                    const resolved = path.resolve(cwd, p);
+                    if (resolved !== path.resolve(cwd) && !resolved.startsWith(root)) {
+                        return { type: 'diff_error', message: `Path escapes working directory: ${p}` };
+                    }
+                }
+            }
+            // Determine file statuses if not provided
+            let fileStatuses = statuses ?? {};
+            if (!statuses && paths) {
+                fileStatuses = await getFileStatuses(cwd, paths);
+            }
+            else if (!statuses && !paths) {
+                fileStatuses = await getFileStatuses(cwd);
+            }
+            const targetPaths = paths ?? Object.keys(fileStatuses);
+            // Separate files by status for different handling
+            const trackedPaths = [];
+            const untrackedPaths = [];
+            const stagedNewPaths = [];
+            for (const p of targetPaths) {
+                const status = fileStatuses[p];
+                if (status === 'added') {
+                    try {
+                        const indexEntry = (await execGit(['ls-files', '--stage', '--', p], cwd)).trim();
+                        if (indexEntry) {
+                            stagedNewPaths.push(p);
+                        }
+                        else {
+                            untrackedPaths.push(p);
+                        }
+                    }
+                    catch {
+                        untrackedPaths.push(p);
+                    }
+                }
+                else {
+                    trackedPaths.push(p);
+                }
+            }
+            // Handle tracked files (modified, deleted, renamed) with git restore
+            if (trackedPaths.length > 0) {
+                const restoreArgs = ['restore'];
+                if (scope === 'staged') {
+                    restoreArgs.push('--staged');
+                }
+                else if (scope === 'all') {
+                    restoreArgs.push('--staged', '--worktree');
+                }
+                else {
+                    restoreArgs.push('--worktree');
+                }
+                try {
+                    await execGitChunked(restoreArgs, trackedPaths, cwd);
+                }
+                catch (err) {
+                    console.warn('[discard] git restore failed, trying fallback:', err);
+                    if (scope === 'staged' || scope === 'all') {
+                        await execGitChunked(['reset', 'HEAD'], trackedPaths, cwd);
+                    }
+                    if (scope === 'unstaged' || scope === 'all') {
+                        await execGitChunked(['checkout'], trackedPaths, cwd);
+                    }
+                }
+            }
+            // Handle staged new files
+            if (stagedNewPaths.length > 0) {
+                if (scope === 'staged') {
+                    await execGitChunked(['rm', '--cached'], stagedNewPaths, cwd);
+                }
+                else if (scope === 'all') {
+                    await execGitChunked(['rm', '--cached'], stagedNewPaths, cwd);
+                    for (const p of stagedNewPaths) {
+                        await fs.unlink(path.join(cwd, p)).catch(() => { });
+                    }
+                }
+            }
+            // Handle untracked files (delete from disk)
+            if (untrackedPaths.length > 0 && scope !== 'staged') {
+                for (const p of untrackedPaths) {
+                    await fs.unlink(path.join(cwd, p)).catch(() => { });
+                }
+            }
+            // Return fresh diff
+            return await this.getDiff(cwd, scope);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Failed to discard changes';
+            return { type: 'diff_error', message };
+        }
+    }
+}
+//# sourceMappingURL=diff-manager.js.map

package/server/dist/diff-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-manager.js","sourceRoot":"","sources":["../diff-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAA;AACnC,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAErE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAEzC,0CAA0C;AAC1C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACtC,6CAA6C;AAC7C,MAAM,cAAc,GAAG,MAAM,CAAA;AAC7B,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAE/B;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,YAAY,CAC3D,CACF,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,GAAW;IACvD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE;QAClD,GAAG;QACH,GAAG,EAAE,WAAW,EAAE;QAClB,SAAS,EAAE,cAAc;QACzB,OAAO,EAAE,cAAc;KACxB,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,KAAe,EAAE,GAAW;IACnF,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAA;QACrD,MAAM,IAAI,MAAM,OAAO,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,KAAgB;IACjE,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,CAAA;IAC5C,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACpC,MAAM,MAAM,GAAmC,EAAE,CAAA;IACjD,uDAAuD;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAQ;QAAC,CAAC;QACvC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAClB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAA;YACxC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAA;YAC3B,CAAC,IAAI,CAAC,CAAA;QACR,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;YAC5B,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;YAC1B,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;YAC1B,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAA;YAC7B,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACtB;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,QAAmB,KAAK;QACjD,IAAI,CAAC;YACH,kBAAkB;YAClB,IAAI,MAAc,CAAA;YAClB,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;gBAC9E,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAA;gBAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;oBACtE,MAAM,GAAG,eAAe,SAAS,CAAC,IAAI,EAAE,EAAE,CAAA;gBAC5C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,SAAS,CAAA;YACpB,CAAC;YAED,oCAAoC;YACpC,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,CAAC,CAAA;YACxE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC3B,CAAC;iBAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,CAAC;YAED,IAAI,OAAe,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBACpB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBAC3C,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;wBACjG,OAAO,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;qBACtF,CAAC,CAAA;oBACF,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;gBAC7B,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,EAAE,CAAA;gBACd,CAAC;YACH,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;YAEjE,2DAA2D;YAC3D,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAChC,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAC9C,GAAG,CACJ,CAAA;oBACD,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;oBACtE,MAAM,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,OAAO;oBACnD,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;wBACrC,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;4BACxC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;4BACpC,IAAI,IAAI,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;gCACxC,OAAO,CAAC,GAAG,CAAC,yCAAyC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,uBAAuB,GAAG,IAAI,GAAG,IAAI,MAAM,CAAC,CAAA;gCAC/J,KAAK,CAAC,IAAI,CAAC;oCACT,IAAI,EAAE,OAAO;oCACb,MAAM,EAAE,OAAO;oCACf,QAAQ,EAAE,IAAI;oCACd,SAAS,EAAE,CAAC;oCACZ,SAAS,EAAE,CAAC;oCACZ,KAAK,EAAE,EAAE;iCACV,CAAC,CAAA;gCACF,SAAQ;4BACV,CAAC;4BACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;4BACpD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;wBACvD,CAAC;wBAAC,MAAM,CAAC;4BACP,KAAK,CAAC,IAAI,CAAC;gCACT,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE,OAAO;gCACf,QAAQ,EAAE,IAAI;gCACd,SAAS,EAAE,CAAC;gCACZ,SAAS,EAAE,CAAC;gCACZ,KAAK,EAAE,EAAE;6BACV,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAgB;gBAC3B,YAAY,EAAE,KAAK,CAAC,MAAM;gBAC1B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC1D,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACzD,SAAS;gBACT,gBAAgB;aACjB,CAAA;YAED,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAA;YACzE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;QACxC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAClB,GAAW,EACX,KAAgB,EAChB,KAAgB,EAChB,QAAyC;QAEzC,IAAI,CAAC;YACH,iBAAiB;YACjB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;gBACnD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAA;oBAC9D,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;oBACrC,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACjE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,mCAAmC,CAAC,EAAE,EAAE,CAAA;oBAChF,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0CAA0C;YAC1C,IAAI,YAAY,GAAG,QAAQ,IAAI,EAAE,CAAA;YACjC,IAAI,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC;gBACvB,YAAY,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAClD,CAAC;iBAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,YAAY,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAA;YAC3C,CAAC;YAED,MAAM,WAAW,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAEtD,kDAAkD;YAClD,MAAM,YAAY,GAAa,EAAE,CAAA;YACjC,MAAM,cAAc,GAAa,EAAE,CAAA;YACnC,MAAM,cAAc,GAAa,EAAE,CAAA;YAEnC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;gBAC9B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACH,MAAM,UAAU,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;wBAChF,IAAI,UAAU,EAAE,CAAC;4BACf,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;wBACxB,CAAC;6BAAM,CAAC;4BACN,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;wBACxB,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACxB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACtB,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,CAAA;gBAC/B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvB,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAC9B,CAAC;qBAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC3B,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;gBAC5C,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBAChC,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,cAAc,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;gBACtD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAA;oBACnE,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;wBAC1C,MAAM,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;oBAC5D,CAAC;oBACD,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;wBAC5C,MAAM,cAAc,CAAC,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvB,MAAM,cAAc,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;gBAC/D,CAAC;qBAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC3B,MAAM,cAAc,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;oBAC7D,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;wBAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,4CAA4C;YAC5C,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;oBAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACpD,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAA;YAChF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;QACxC,CAAC;IACH,CAAC;CACF"}

package/server/dist/error-page.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Generates a styled 404 error page matching the Codekin design theme.
+ */
+export declare function generate404Page(): string;
+export declare function generate500Page(): string;

package/server/dist/error-page.js

@@ -0,0 +1,144 @@
+/**
+ * Generates a styled 404 error page matching the Codekin design theme.
+ */
+export function generate404Page() {
+    return `<!DOCTYPE html>
+<html lang="en" class="dark">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+  <title>404 — Codekin</title>
+  <link href="https://fonts.googleapis.com/css2?family=Inconsolata:wght@400;600&family=Lato:wght@400;700&display=swap" rel="stylesheet" />
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      background: #090e0f;
+      color: #c6d4d5;
+      font-family: 'Lato', sans-serif;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+    }
+    .container {
+      text-align: center;
+      max-width: 480px;
+      padding: 2rem;
+    }
+    .code {
+      font-family: 'Inconsolata', monospace;
+      font-size: 6rem;
+      font-weight: 600;
+      color: #e4ae42;
+      line-height: 1;
+      margin-bottom: 0.5rem;
+    }
+    h1 {
+      font-family: 'Lato', sans-serif;
+      font-size: 1.5rem;
+      font-weight: 700;
+      color: #dce4e5;
+      margin-bottom: 1rem;
+    }
+    p {
+      color: #94aeb1;
+      font-size: 1rem;
+      line-height: 1.6;
+      margin-bottom: 2rem;
+    }
+    a {
+      display: inline-block;
+      padding: 0.65rem 1.75rem;
+      background: #e4ae42;
+      color: #1e170a;
+      font-weight: 700;
+      font-size: 0.9rem;
+      border-radius: 6px;
+      text-decoration: none;
+      transition: background 0.15s;
+    }
+    a:hover { background: #cf9a2d; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="code">404</div>
+    <h1>Page not found</h1>
+    <p>The page you're looking for doesn't exist or the session may have been removed.</p>
+    <a href="/">Go to Home</a>
+  </div>
+</body>
+</html>`;
+}
+export function generate500Page() {
+    return `<!DOCTYPE html>
+<html lang="en" class="dark">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+  <title>Error — Codekin</title>
+  <link href="https://fonts.googleapis.com/css2?family=Inconsolata:wght@400;600&family=Lato:wght@400;700&display=swap" rel="stylesheet" />
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      background: #090e0f;
+      color: #c6d4d5;
+      font-family: 'Lato', sans-serif;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+    }
+    .container {
+      text-align: center;
+      max-width: 480px;
+      padding: 2rem;
+    }
+    .code {
+      font-family: 'Inconsolata', monospace;
+      font-size: 6rem;
+      font-weight: 600;
+      color: #d94444;
+      line-height: 1;
+      margin-bottom: 0.5rem;
+    }
+    h1 {
+      font-family: 'Lato', sans-serif;
+      font-size: 1.5rem;
+      font-weight: 700;
+      color: #dce4e5;
+      margin-bottom: 1rem;
+    }
+    p {
+      color: #94aeb1;
+      font-size: 1rem;
+      line-height: 1.6;
+      margin-bottom: 2rem;
+    }
+    a {
+      display: inline-block;
+      padding: 0.65rem 1.75rem;
+      background: #e4ae42;
+      color: #1e170a;
+      font-weight: 700;
+      font-size: 0.9rem;
+      border-radius: 6px;
+      text-decoration: none;
+      transition: background 0.15s;
+    }
+    a:hover { background: #cf9a2d; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="code">500</div>
+    <h1>Something went wrong</h1>
+    <p>An unexpected error occurred. Please try again or return to the home page.</p>
+    <a href="/">Go to Home</a>
+  </div>
+</body>
+</html>`;
+}
+//# sourceMappingURL=error-page.js.map

package/server/dist/error-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-page.js","sourceRoot":"","sources":["../error-page.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmED,CAAA;AACR,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmED,CAAA;AACR,CAAC"}

package/server/dist/native-permissions.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Native permissions utility for Codekin.
+ *
+ * Reads/writes `.claude/settings.local.json` in the project directory so that
+ * Claude Code's native permission system remembers approvals across sessions
+ * without re-prompting.
+ *
+ * Also converts Codekin's approval registry into `--allowedTools` patterns
+ * for passing at spawn time.
+ */
+/** Read existing native permissions from `.claude/settings.local.json`. */
+export declare function readNativePermissions(repoDir: string): string[];
+/** Add a native permission to `.claude/settings.local.json` (append-only, atomic write). */
+export declare function addNativePermission(repoDir: string, permission: string): Promise<void>;
+/** Remove a native permission from `.claude/settings.local.json`. */
+export declare function removeNativePermission(repoDir: string, permission: string): Promise<void>;
+/**
+ * Convert a tool invocation to Claude Code's native permission format.
+ *
+ * Examples:
+ * - Bash + `{ command: "npm run build" }` → `"Bash(npm run build)"`
+ * - WebFetch (any input) → `"WebFetch"`
+ * - Read (file tool, pre-approved) → `null`
+ */
+export declare function toNativePermission(toolName: string, toolInput: Record<string, unknown>): string | null;
+/**
+ * Convert Codekin's approval registry into `--allowedTools` patterns.
+ *
+ * Only includes tool names and wildcard patterns — NOT exact commands.
+ * Exact commands accumulate over time (hundreds of multi-line scripts)
+ * and when included in `--allowedTools` they create an argument so large
+ * and complex that it breaks the CLI's parser (manifests as "A.split is
+ * not a function" errors on unrelated tools like Agent and TodoWrite).
+ * Exact commands are still auto-approved at runtime via the approval hook.
+ *
+ * Translations:
+ * - Pattern `"git diff *"` → `"Bash(git diff:*)"`
+ * - Tool `"WebFetch"` → `"WebFetch"`
+ */
+export declare function toAllowedToolsPatterns(approvals: {
+    tools: string[];
+    commands: string[];
+    patterns: string[];
+}): string[];

package/server/dist/native-permissions.js

@@ -0,0 +1,163 @@
+/**
+ * Native permissions utility for Codekin.
+ *
+ * Reads/writes `.claude/settings.local.json` in the project directory so that
+ * Claude Code's native permission system remembers approvals across sessions
+ * without re-prompting.
+ *
+ * Also converts Codekin's approval registry into `--allowedTools` patterns
+ * for passing at spawn time.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'fs';
+import { join } from 'path';
+/** In-process mutex map keyed by repo path to prevent concurrent write races. */
+const writeLocks = new Map();
+/** Acquire a per-repo write lock. All sessions share one Node process. */
+function withLock(repoDir, fn) {
+    const prev = writeLocks.get(repoDir) ?? Promise.resolve();
+    const next = prev.then(fn, fn);
+    writeLocks.set(repoDir, next);
+    // Clean up the reference once done so we don't leak memory
+    void next.then(() => {
+        if (writeLocks.get(repoDir) === next)
+            writeLocks.delete(repoDir);
+    });
+    return next;
+}
+function settingsPath(repoDir) {
+    return join(repoDir, '.claude', 'settings.local.json');
+}
+/** Read existing native permissions from `.claude/settings.local.json`. */
+export function readNativePermissions(repoDir) {
+    const filePath = settingsPath(repoDir);
+    if (!existsSync(filePath))
+        return [];
+    try {
+        const data = JSON.parse(readFileSync(filePath, 'utf-8'));
+        return data.permissions?.allow ?? [];
+    }
+    catch {
+        return [];
+    }
+}
+/** Add a native permission to `.claude/settings.local.json` (append-only, atomic write). */
+export async function addNativePermission(repoDir, permission) {
+    await withLock(repoDir, async () => {
+        const filePath = settingsPath(repoDir);
+        const dir = join(repoDir, '.claude');
+        let settings = {};
+        if (existsSync(filePath)) {
+            try {
+                settings = JSON.parse(readFileSync(filePath, 'utf-8'));
+            }
+            catch {
+                // Corrupted file — start fresh but preserve structure
+            }
+        }
+        if (!settings.permissions)
+            settings.permissions = {};
+        if (!settings.permissions.allow)
+            settings.permissions.allow = [];
+        // Don't add duplicates
+        if (settings.permissions.allow.includes(permission))
+            return;
+        settings.permissions.allow.push(permission);
+        mkdirSync(dir, { recursive: true });
+        const tmp = filePath + '.tmp';
+        writeFileSync(tmp, JSON.stringify(settings, null, 2) + '\n', { mode: 0o600 });
+        renameSync(tmp, filePath);
+        console.log(`[native-permissions] added "${permission}" to ${filePath}`);
+    });
+}
+/** Remove a native permission from `.claude/settings.local.json`. */
+export async function removeNativePermission(repoDir, permission) {
+    await withLock(repoDir, async () => {
+        const filePath = settingsPath(repoDir);
+        if (!existsSync(filePath))
+            return;
+        let settings = {};
+        try {
+            settings = JSON.parse(readFileSync(filePath, 'utf-8'));
+        }
+        catch {
+            return;
+        }
+        const allow = settings.permissions?.allow;
+        if (!allow)
+            return;
+        const idx = allow.indexOf(permission);
+        if (idx === -1)
+            return;
+        allow.splice(idx, 1);
+        const tmp = filePath + '.tmp';
+        writeFileSync(tmp, JSON.stringify(settings, null, 2) + '\n', { mode: 0o600 });
+        renameSync(tmp, filePath);
+        console.log(`[native-permissions] removed "${permission}" from ${filePath}`);
+    });
+}
+/**
+ * Convert a tool invocation to Claude Code's native permission format.
+ *
+ * Examples:
+ * - Bash + `{ command: "npm run build" }` → `"Bash(npm run build)"`
+ * - WebFetch (any input) → `"WebFetch"`
+ * - Read (file tool, pre-approved) → `null`
+ */
+export function toNativePermission(toolName, toolInput) {
+    // File tools are pre-approved by permission mode — no need to persist
+    const preApproved = new Set(['Read', 'Write', 'Edit', 'Glob', 'Grep', 'NotebookEdit']);
+    if (preApproved.has(toolName))
+        return null;
+    if (toolName === 'Bash') {
+        const cmd = (typeof toolInput.command === 'string' ? toolInput.command : '').trim();
+        if (!cmd)
+            return null;
+        return `Bash(${cmd})`;
+    }
+    return toolName;
+}
+/**
+ * Escape parentheses and backslashes in a string for use inside a
+ * `Bash(...)` allowedTools pattern.  The Claude CLI's `--allowedTools`
+ * parser splits on commas/spaces but tracks a single level of `(…)`.
+ * Unescaped `)` inside the command prematurely closes the pattern,
+ * corrupting the entire allowedTools list and breaking tool resolution
+ * (manifests as "A.split is not a function" errors on unrelated tools).
+ */
+function escapeForAllowedTools(s) {
+    return s.replace(/\\/g, '\\\\').replace(/\(/g, '\\(').replace(/\)/g, '\\)');
+}
+/**
+ * Convert Codekin's approval registry into `--allowedTools` patterns.
+ *
+ * Only includes tool names and wildcard patterns — NOT exact commands.
+ * Exact commands accumulate over time (hundreds of multi-line scripts)
+ * and when included in `--allowedTools` they create an argument so large
+ * and complex that it breaks the CLI's parser (manifests as "A.split is
+ * not a function" errors on unrelated tools like Agent and TodoWrite).
+ * Exact commands are still auto-approved at runtime via the approval hook.
+ *
+ * Translations:
+ * - Pattern `"git diff *"` → `"Bash(git diff:*)"`
+ * - Tool `"WebFetch"` → `"WebFetch"`
+ */
+export function toAllowedToolsPatterns(approvals) {
+    const result = [];
+    for (const tool of approvals.tools) {
+        result.push(tool);
+    }
+    // Exact commands are intentionally excluded from --allowedTools.
+    // They are handled by the auto-approval hook at prompt time instead.
+    for (const pattern of approvals.patterns) {
+        // Convert "prefix *" → "Bash(prefix:*)"
+        if (pattern.endsWith(' *')) {
+            const prefix = pattern.slice(0, -2);
+            result.push(`Bash(${escapeForAllowedTools(prefix)}:*)`);
+        }
+        else {
+            result.push(`Bash(${escapeForAllowedTools(pattern)})`);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=native-permissions.js.map