codesynapt 0.0.0

package/server.js

@@ -0,0 +1,132 @@
+#!/usr/bin/env node
+import http from 'http'
+import fs from 'fs'
+import path from 'path'
+import { fileURLToPath } from 'url'
+import { WebSocketServer } from 'ws'
+import { Scanner } from './packages/core/scanner.js'
+
+// ─── CLI ──────────────────────────────────────────────────────
+const args = process.argv.slice(2)
+if (args.includes('-h') || args.includes('--help')) {
+  console.log(`
+codesynapt — Real-time 3D file/code dependency visualizer
+
+Usage:
+  codesynapt <directory> [--port <n>]
+
+Examples:
+  codesynapt .
+  codesynapt ~/projects/myapp --port 8080
+`)
+  process.exit(0)
+}
+
+const portIdx = args.indexOf('--port')
+const PORT = portIdx >= 0 ? parseInt(args[portIdx + 1]) : 7777
+const dirArg = args.find((a) => !a.startsWith('--') && a !== String(PORT)) || '.'
+const ROOT = path.resolve(dirArg)
+
+if (!fs.existsSync(ROOT) || !fs.statSync(ROOT).isDirectory()) {
+  console.error(`✗ Not a directory: ${ROOT}`)
+  process.exit(1)
+}
+
+// ─── Static file server ───────────────────────────────────────
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const PUBLIC = path.join(__dirname, 'public')
+
+const MIME = {
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'text/javascript; charset=utf-8',
+  '.css': 'text/css; charset=utf-8',
+  '.json': 'application/json',
+  '.svg': 'image/svg+xml',
+}
+
+// Robust containment check — `startsWith` alone leaks sibling dirs that share
+// a prefix (e.g. /a/public vs /a/public-secret). Resolve and use path.relative.
+const isInside = (base, target) => {
+  const rel = path.relative(base, target)
+  return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel))
+}
+
+const server = http.createServer((req, res) => {
+  let rel = req.url.split('?')[0]
+  try { rel = decodeURIComponent(rel) } catch {}   // normalize %2e%2e etc.
+  if (rel === '/') rel = '/index.html'
+  const filePath = path.join(PUBLIC, rel)
+  if (!isInside(PUBLIC, filePath)) {
+    res.writeHead(403); res.end(); return
+  }
+  fs.readFile(filePath, (err, data) => {
+    if (err) { res.writeHead(404); res.end('Not found'); return }
+    res.writeHead(200, { 'Content-Type': MIME[path.extname(filePath)] || 'text/plain' })
+    res.end(data)
+  })
+})
+
+// ─── WebSocket ────────────────────────────────────────────────
+const wss = new WebSocketServer({ server })
+const scanner = new Scanner(ROOT)
+
+const broadcast = (msg) => {
+  const str = JSON.stringify(msg)
+  wss.clients.forEach((c) => c.readyState === 1 && c.send(str))
+}
+
+scanner.on('snapshot', (data) => broadcast({ type: 'snapshot', ...data, root: ROOT }))
+scanner.on('stats', (s) => broadcast({ type: 'stats', ...s }))
+scanner.on('scan-progress', (p) => broadcast({ type: 'scan-progress', ...p }))
+
+wss.on('connection', (ws) => {
+  // New client gets current state
+  ws.send(JSON.stringify({ type: 'snapshot', ...scanner.snapshot(), root: ROOT }))
+
+  ws.on('message', (raw) => {
+    let msg
+    try { msg = JSON.parse(raw) } catch { return }
+
+    if (msg.type === 'read_file') {
+      try {
+        const full = path.join(ROOT, msg.id)
+        if (!isInside(ROOT, full)) return
+        const stat = fs.statSync(full)
+        if (stat.size > 500_000) {
+          ws.send(JSON.stringify({ type: 'file_content', id: msg.id,
+            content: '[file too large to preview]', truncated: true }))
+          return
+        }
+        const content = fs.readFileSync(full, 'utf8').slice(0, 100_000)
+        ws.send(JSON.stringify({ type: 'file_content', id: msg.id, content }))
+      } catch (e) {
+        ws.send(JSON.stringify({ type: 'file_content', id: msg.id,
+          content: `[error: ${e.message}]`, error: true }))
+      }
+    }
+  })
+})
+
+// ─── Start ────────────────────────────────────────────────────
+// Bind to loopback only — never expose this dev server to the LAN.
+server.listen(PORT, '127.0.0.1', () => {
+  console.log(`
+  ┌─ codesynapt ─────────────────────────────────
+  │  root: ${ROOT}
+  │  open: http://localhost:${PORT}
+  └───────────────────────────────────────────────
+`)
+})
+
+scanner.start()
+
+// A bad file / rejected promise must not kill the dev server.
+process.on('uncaughtException', (e) => console.error('[server] uncaughtException:', e && e.stack || e))
+process.on('unhandledRejection', (e) => console.error('[server] unhandledRejection:', e && e.stack || e))
+
+process.on('SIGINT', () => {
+  console.log('\nshutting down…')
+  scanner.stop()
+  wss.close()
+  server.close(() => process.exit(0))
+})