commandmate 0.1.9 → 0.1.11

package/dist/cli/utils/daemon-factory.d.ts

@@ -0,0 +1,105 @@
+/**
+ * DaemonManager Factory
+ * Issue #136: Phase 3 - Task 3.1 - DaemonManager abstraction
+ *
+ * Provides Factory pattern for creating DaemonManager instances with
+ * issue-specific configurations while maintaining backward compatibility
+ * with existing DaemonManager(pidFilePath: string) constructor.
+ *
+ * MF-CONS-002: Backward compatibility with existing constructor maintained
+ * SF-002: Factory pattern for DaemonManager creation
+ */
+import { DaemonManager } from './daemon';
+import type { DaemonStatus, StartOptions } from '../types';
+/**
+ * DaemonManager interface (abstraction)
+ * Defines the contract for daemon management operations
+ */
+export interface IDaemonManager {
+    /**
+     * Start the daemon process
+     * @param options - Start options
+     * @returns Process ID of the started daemon
+     */
+    start(options: StartOptions): Promise<number>;
+    /**
+     * Stop the daemon process
+     * @param force - Use SIGKILL instead of SIGTERM
+     * @returns true if stopped successfully
+     */
+    stop(force?: boolean): Promise<boolean>;
+    /**
+     * Get daemon status
+     * @returns Status object or null if no PID file
+     */
+    getStatus(): Promise<DaemonStatus | null>;
+    /**
+     * Check if daemon is running
+     * @returns true if running
+     */
+    isRunning(): Promise<boolean>;
+}
+/**
+ * Configuration for DaemonManagerWrapper
+ */
+export interface DaemonManagerConfig {
+    /** PID file path */
+    pidPath: string;
+    /** Environment file path */
+    envPath: string;
+    /** Database file path */
+    dbPath: string;
+    /** Issue number (undefined for main server) */
+    issueNo?: number;
+}
+/**
+ * Wrapper around existing DaemonManager to implement IDaemonManager
+ * MF-CONS-002: Uses existing DaemonManager(pidFilePath: string) internally
+ */
+export declare class DaemonManagerWrapper implements IDaemonManager {
+    private innerManager;
+    private config;
+    constructor(innerManager: DaemonManager, config: DaemonManagerConfig);
+    start(options: StartOptions): Promise<number>;
+    stop(force?: boolean): Promise<boolean>;
+    getStatus(): Promise<DaemonStatus | null>;
+    isRunning(): Promise<boolean>;
+    /**
+     * Get configuration (for testing/debugging)
+     */
+    getConfig(): DaemonManagerConfig;
+}
+/**
+ * Factory for creating DaemonManager instances
+ * SF-002: Factory pattern implementation
+ *
+ * @example
+ * ```typescript
+ * // Create manager for main server
+ * const factory = new DaemonManagerFactory();
+ * const mainManager = factory.create();
+ *
+ * // Create manager for worktree #135
+ * const worktreeManager = factory.create(135);
+ * ```
+ */
+export declare class DaemonManagerFactory {
+    private pidResolver;
+    private dbResolver;
+    constructor();
+    /**
+     * Create a DaemonManager instance
+     * @param issueNo - Optional issue number for worktree-specific manager
+     * @returns IDaemonManager instance
+     */
+    create(issueNo?: number): IDaemonManager;
+}
+/**
+ * Get singleton factory instance
+ */
+export declare function getDaemonManagerFactory(): DaemonManagerFactory;
+/**
+ * Reset singleton factory (for testing)
+ */
+export declare function resetDaemonManagerFactory(): void;
+//# sourceMappingURL=daemon-factory.d.ts.map

package/dist/cli/utils/daemon-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-factory.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/daemon-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE3D;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9C;;;;OAIG;IACH,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExC;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE1C;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,cAAc;IACzD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,MAAM,CAAsB;gBAExB,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB;IAK9D,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAW7C,IAAI,CAAC,KAAK,GAAE,OAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IAI9C,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAIzC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAInC;;OAEG;IACH,SAAS,IAAI,mBAAmB;CAGjC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,UAAU,CAAiB;;IAOnC;;;;OAIG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc;CAgBzC;AAOD;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,oBAAoB,CAK9D;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/dist/cli/utils/daemon-factory.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * DaemonManager Factory
+ * Issue #136: Phase 3 - Task 3.1 - DaemonManager abstraction
+ *
+ * Provides Factory pattern for creating DaemonManager instances with
+ * issue-specific configurations while maintaining backward compatibility
+ * with existing DaemonManager(pidFilePath: string) constructor.
+ *
+ * MF-CONS-002: Backward compatibility with existing constructor maintained
+ * SF-002: Factory pattern for DaemonManager creation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DaemonManagerFactory = exports.DaemonManagerWrapper = void 0;
+exports.getDaemonManagerFactory = getDaemonManagerFactory;
+exports.resetDaemonManagerFactory = resetDaemonManagerFactory;
+const daemon_1 = require("./daemon");
+const resource_resolvers_1 = require("./resource-resolvers");
+const env_setup_1 = require("./env-setup");
+/**
+ * Wrapper around existing DaemonManager to implement IDaemonManager
+ * MF-CONS-002: Uses existing DaemonManager(pidFilePath: string) internally
+ */
+class DaemonManagerWrapper {
+    innerManager;
+    config;
+    constructor(innerManager, config) {
+        this.innerManager = innerManager;
+        this.config = config;
+    }
+    async start(options) {
+        // Set environment variables for the daemon process
+        // This allows the daemon to use the correct DB path for worktree
+        if (this.config.issueNo !== undefined) {
+            process.env.CM_DB_PATH = this.config.dbPath;
+            process.env.CM_ISSUE_NO = String(this.config.issueNo);
+        }
+        return this.innerManager.start(options);
+    }
+    async stop(force = false) {
+        return this.innerManager.stop(force);
+    }
+    async getStatus() {
+        return this.innerManager.getStatus();
+    }
+    async isRunning() {
+        return this.innerManager.isRunning();
+    }
+    /**
+     * Get configuration (for testing/debugging)
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+exports.DaemonManagerWrapper = DaemonManagerWrapper;
+/**
+ * Factory for creating DaemonManager instances
+ * SF-002: Factory pattern implementation
+ *
+ * @example
+ * ```typescript
+ * // Create manager for main server
+ * const factory = new DaemonManagerFactory();
+ * const mainManager = factory.create();
+ *
+ * // Create manager for worktree #135
+ * const worktreeManager = factory.create(135);
+ * ```
+ */
+class DaemonManagerFactory {
+    pidResolver;
+    dbResolver;
+    constructor() {
+        this.pidResolver = new resource_resolvers_1.PidPathResolver();
+        this.dbResolver = new resource_resolvers_1.DbPathResolver();
+    }
+    /**
+     * Create a DaemonManager instance
+     * @param issueNo - Optional issue number for worktree-specific manager
+     * @returns IDaemonManager instance
+     */
+    create(issueNo) {
+        const pidPath = this.pidResolver.resolve(issueNo);
+        const envPath = (0, env_setup_1.getEnvPath)(issueNo);
+        const dbPath = this.dbResolver.resolve(issueNo);
+        // MF-CONS-002: Use existing DaemonManager constructor
+        const innerManager = new daemon_1.DaemonManager(pidPath);
+        // Wrap with additional configuration
+        return new DaemonManagerWrapper(innerManager, {
+            pidPath,
+            envPath,
+            dbPath,
+            issueNo,
+        });
+    }
+}
+exports.DaemonManagerFactory = DaemonManagerFactory;
+/**
+ * Singleton factory instance for convenience
+ */
+let _factoryInstance = null;
+/**
+ * Get singleton factory instance
+ */
+function getDaemonManagerFactory() {
+    if (!_factoryInstance) {
+        _factoryInstance = new DaemonManagerFactory();
+    }
+    return _factoryInstance;
+}
+/**
+ * Reset singleton factory (for testing)
+ */
+function resetDaemonManagerFactory() {
+    _factoryInstance = null;
+}

package/dist/cli/utils/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/daemon.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMtD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,MAAM,CAAY;gBAEd,WAAW,EAAE,MAAM;IAK/B;;;;;OAKG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IA8EnD;;;;OAIG;IACG,IAAI,CAAC,KAAK,GAAE,OAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IA8BpD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IA6B/C;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAInC;;OAEG;YACW,WAAW;CAiB1B"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/daemon.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAMtD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,MAAM,CAAY;gBAEd,WAAW,EAAE,MAAM;IAK/B;;;;;OAKG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAmFnD;;;;OAIG;IACG,IAAI,CAAC,KAAK,GAAE,OAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IA8BpD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IA6B/C;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAInC;;OAEG;YACW,WAAW;CAiB1B"}

package/dist/cli/utils/daemon.js

@@ -56,6 +56,10 @@ class DaemonManager {
         if (options.port) {
             env.CM_PORT = String(options.port);
         }
+        // Issue #136: Set DB path for worktree servers
+        if (options.dbPath) {
+            env.CM_DB_PATH = options.dbPath;
+        }
         // Issue #125: Security warnings for external access (Stage 4 review: MF-2)
         const bindAddress = env.CM_BIND || '127.0.0.1';
         const authToken = env.CM_AUTH_TOKEN;

package/dist/cli/utils/env-setup.d.ts

@@ -1,17 +1,21 @@
 /**
  * Environment Setup Utility
  * Issue #96: npm install CLI support
+ * Issue #136: DRY refactoring - isGlobalInstall and getConfigDir extracted to install-context.ts
  * Migrated from scripts/setup-env.sh
  */
 import { EnvConfig, EnvSetupOptions, ValidationResult } from '../types';
+export { isGlobalInstall, getConfigDir } from './install-context';
 /**
  * Default environment configuration values
  * SF-4: DRY - Centralized defaults
+ *
+ * Issue #135: CM_DB_PATH removed - use getDefaultDbPath() instead
+ * for dynamic path resolution based on install type
  */
 export declare const ENV_DEFAULTS: {
     readonly CM_PORT: 3000;
     readonly CM_BIND: "127.0.0.1";
-    readonly CM_DB_PATH: "./data/cm.db";
     readonly CM_LOG_LEVEL: "info";
     readonly CM_LOG_FORMAT: "text";
 };
@@ -20,19 +24,26 @@ export declare const ENV_DEFAULTS: {
  */
 export declare const DEFAULT_ROOT_DIR: string;
 /**
- * Check if running as global npm package
- * Issue #119: Determine .env location based on install type
+ * Get the default database path based on install type
+ * Issue #135: Dynamic DB path resolution
+ * Issue #136: Uses isGlobalInstall from install-context.ts
+ *
+ * For global installs: ~/.commandmate/data/cm.db
+ * For local installs: <cwd>/data/cm.db (as absolute path)
  *
- * @returns true if running as global npm package
+ * @returns Absolute path to the default database file
  */
-export declare function isGlobalInstall(): boolean;
+export declare function getDefaultDbPath(): string;
 /**
  * Get the path to .env file based on install type
  * Issue #119: Global install uses ~/.commandmate/, local uses cwd
+ * Issue #136: Uses isGlobalInstall from install-context.ts
+ * Issue #136: Added issueNo parameter for worktree-specific .env files
  *
+ * @param issueNo - Optional issue number for worktree-specific .env
  * @returns Path to .env file
  */
-export declare function getEnvPath(): string;
+export declare function getEnvPath(issueNo?: number): string;
 /**
  * Resolve path securely by resolving symlinks and verifying within allowed directory
  * Issue #125: Path traversal protection (OWASP A01:2021 - Broken Access Control)
@@ -44,20 +55,21 @@ export declare function getEnvPath(): string;
  */
 export declare function resolveSecurePath(targetPath: string, allowedBaseDir: string): string;
 /**
- * Get the config directory path
- * Issue #119: Returns ~/.commandmate for global, cwd for local
- * Issue #125: Added symlink resolution for security (path traversal protection)
+ * Get the PIDs directory path
+ * Issue #136: Centralized pids directory path resolution
  *
- * @returns Path to config directory (absolute, with symlinks resolved)
+ * @returns Path to pids directory
  */
-export declare function getConfigDir(): string;
+export declare function getPidsDir(): string;
 /**
  * Get the PID file path based on install type
  * Issue #125: DRY principle - centralized PID file path resolution
+ * Issue #136: Uses getConfigDir from install-context.ts
  *
+ * @param issueNo - Optional issue number for worktree-specific PID file
  * @returns Path to PID file (uses getConfigDir for consistency)
  */
-export declare function getPidFilePath(): string;
+export declare function getPidFilePath(issueNo?: number): string;
 /**
  * Sanitize input by removing control characters
  * SF-SEC-3: Input sanitization

package/dist/cli/utils/env-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/env-setup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,OAAO,EACL,SAAS,EACT,eAAe,EACf,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAElB;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;CAMf,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAYzC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAcnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CASpF;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAqBrC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE,MAAM;IAI5B;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAiChB;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY9C;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB;CAoCpD"}
+{"version":3,"file":"env-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/env-setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,EACL,SAAS,EACT,eAAe,EACf,gBAAgB,EACjB,MAAM,UAAU,CAAC;AASlB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;CAMf,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAOzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CASpF;AAKD;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE,MAAM;IAI5B;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAiChB;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY9C;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB;CAoCpD"}

package/dist/cli/utils/env-setup.js

@@ -2,14 +2,15 @@
 /**
  * Environment Setup Utility
  * Issue #96: npm install CLI support
+ * Issue #136: DRY refactoring - isGlobalInstall and getConfigDir extracted to install-context.ts
  * Migrated from scripts/setup-env.sh
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnvSetup = exports.DEFAULT_ROOT_DIR = exports.ENV_DEFAULTS = void 0;
-exports.isGlobalInstall = isGlobalInstall;
+exports.EnvSetup = exports.DEFAULT_ROOT_DIR = exports.ENV_DEFAULTS = exports.getConfigDir = exports.isGlobalInstall = void 0;
+exports.getDefaultDbPath = getDefaultDbPath;
 exports.getEnvPath = getEnvPath;
 exports.resolveSecurePath = resolveSecurePath;
-exports.getConfigDir = getConfigDir;
+exports.getPidsDir = getPidsDir;
 exports.getPidFilePath = getPidFilePath;
 exports.sanitizeInput = sanitizeInput;
 exports.sanitizePath = sanitizePath;
@@ -19,14 +20,23 @@ const fs_1 = require("fs");
 const path_1 = require("path");
 const crypto_1 = require("crypto");
 const os_1 = require("os");
+// Issue #136: Import from install-context.ts to avoid circular imports
+// Re-export for backward compatibility
+const install_context_1 = require("./install-context");
+var install_context_2 = require("./install-context");
+Object.defineProperty(exports, "isGlobalInstall", { enumerable: true, get: function () { return install_context_2.isGlobalInstall; } });
+Object.defineProperty(exports, "getConfigDir", { enumerable: true, get: function () { return install_context_2.getConfigDir; } });
 /**
  * Default environment configuration values
  * SF-4: DRY - Centralized defaults
+ *
+ * Issue #135: CM_DB_PATH removed - use getDefaultDbPath() instead
+ * for dynamic path resolution based on install type
  */
 exports.ENV_DEFAULTS = {
     CM_PORT: 3000,
     CM_BIND: '127.0.0.1',
-    CM_DB_PATH: './data/cm.db',
+    // CM_DB_PATH removed - Issue #135: use getDefaultDbPath() instead
     CM_LOG_LEVEL: 'info',
     CM_LOG_FORMAT: 'text',
 };
@@ -35,38 +45,51 @@ exports.ENV_DEFAULTS = {
  */
 exports.DEFAULT_ROOT_DIR = (0, path_1.join)((0, os_1.homedir)(), 'repos');
 /**
- * Check if running as global npm package
- * Issue #119: Determine .env location based on install type
+ * Get the default database path based on install type
+ * Issue #135: Dynamic DB path resolution
+ * Issue #136: Uses isGlobalInstall from install-context.ts
+ *
+ * For global installs: ~/.commandmate/data/cm.db
+ * For local installs: <cwd>/data/cm.db (as absolute path)
  *
- * @returns true if running as global npm package
+ * @returns Absolute path to the default database file
  */
-function isGlobalInstall() {
-    // Check if running from global node_modules
-    // Global installs typically have paths like:
-    // - /usr/local/lib/node_modules/
-    // - /Users/xxx/.npm-global/lib/node_modules/
-    // - C:\Users\xxx\AppData\Roaming\npm\node_modules\
-    const currentPath = (0, path_1.dirname)(__dirname);
-    return (currentPath.includes('/lib/node_modules/') ||
-        currentPath.includes('\\node_modules\\') ||
-        currentPath.includes('/node_modules/commandmate'));
+function getDefaultDbPath() {
+    if ((0, install_context_1.isGlobalInstall)()) {
+        return (0, path_1.join)((0, os_1.homedir)(), '.commandmate', 'data', 'cm.db');
+    }
+    // Use path module for absolute path resolution
+    const cwd = process.cwd();
+    return (0, path_1.join)(cwd, 'data', 'cm.db');
 }
 /**
  * Get the path to .env file based on install type
  * Issue #119: Global install uses ~/.commandmate/, local uses cwd
+ * Issue #136: Uses isGlobalInstall from install-context.ts
+ * Issue #136: Added issueNo parameter for worktree-specific .env files
  *
+ * @param issueNo - Optional issue number for worktree-specific .env
  * @returns Path to .env file
  */
-function getEnvPath() {
-    if (isGlobalInstall()) {
+function getEnvPath(issueNo) {
+    if ((0, install_context_1.isGlobalInstall)()) {
         const configDir = (0, path_1.join)((0, os_1.homedir)(), '.commandmate');
         // Create config directory if it doesn't exist
         if (!(0, fs_1.existsSync)(configDir)) {
             (0, fs_1.mkdirSync)(configDir, { recursive: true, mode: 0o700 });
         }
+        // Issue #136: Worktree-specific .env file
+        if (issueNo !== undefined) {
+            const envsDir = (0, path_1.join)(configDir, 'envs');
+            if (!(0, fs_1.existsSync)(envsDir)) {
+                (0, fs_1.mkdirSync)(envsDir, { recursive: true, mode: 0o700 });
+            }
+            return (0, path_1.join)(envsDir, `${issueNo}.env`);
+        }
         return (0, path_1.join)(configDir, '.env');
     }
     // Local install - use current working directory
+    // Note: Worktree-specific .env not supported in local install mode
     return (0, path_1.join)(process.cwd(), '.env');
 }
 /**
@@ -86,40 +109,38 @@ function resolveSecurePath(targetPath, allowedBaseDir) {
     }
     return realPath;
 }
+// Note: getConfigDir is now exported from install-context.ts
+// The re-export above provides backward compatibility
 /**
- * Get the config directory path
- * Issue #119: Returns ~/.commandmate for global, cwd for local
- * Issue #125: Added symlink resolution for security (path traversal protection)
+ * Get the PIDs directory path
+ * Issue #136: Centralized pids directory path resolution
  *
- * @returns Path to config directory (absolute, with symlinks resolved)
+ * @returns Path to pids directory
  */
-function getConfigDir() {
-    if (isGlobalInstall()) {
-        const configDir = (0, path_1.join)((0, os_1.homedir)(), '.commandmate');
-        // Verify config directory is within home directory (security check)
-        // Only validate if the directory exists (it may not exist yet during init)
-        if ((0, fs_1.existsSync)(configDir)) {
-            const realPath = (0, fs_1.realpathSync)(configDir);
-            const realHome = (0, fs_1.realpathSync)((0, os_1.homedir)());
-            if (!realPath.startsWith(realHome)) {
-                throw new Error(`Security error: Config directory ${configDir} is outside home directory`);
-            }
-            return realPath;
-        }
-        return configDir;
-    }
-    // Local install - resolve symlinks in cwd
-    const cwd = process.cwd();
-    return (0, fs_1.realpathSync)(cwd);
+function getPidsDir() {
+    const configDir = (0, install_context_1.getConfigDir)();
+    return (0, path_1.join)(configDir, 'pids');
 }
 /**
  * Get the PID file path based on install type
  * Issue #125: DRY principle - centralized PID file path resolution
+ * Issue #136: Uses getConfigDir from install-context.ts
  *
+ * @param issueNo - Optional issue number for worktree-specific PID file
  * @returns Path to PID file (uses getConfigDir for consistency)
  */
-function getPidFilePath() {
-    return (0, path_1.join)(getConfigDir(), '.commandmate.pid');
+function getPidFilePath(issueNo) {
+    const configDir = (0, install_context_1.getConfigDir)();
+    if (issueNo !== undefined) {
+        // Issue #136: Worktree-specific PID file in pids/ directory
+        const pidsDir = getPidsDir();
+        if (!(0, fs_1.existsSync)(pidsDir)) {
+            (0, fs_1.mkdirSync)(pidsDir, { recursive: true, mode: 0o700 });
+        }
+        return (0, path_1.join)(pidsDir, `${issueNo}.pid`);
+    }
+    // Default: main PID file for backward compatibility
+    return (0, path_1.join)(configDir, '.commandmate.pid');
 }
 /**
  * Sanitize input by removing control characters

package/dist/cli/utils/input-validators.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Input Validators
+ * Issue #136: Phase 1 - Foundation
+ *
+ * Provides input validation functions for worktree-related operations.
+ * These validators are critical for security (command injection prevention).
+ *
+ * @module input-validators
+ */
+/**
+ * Maximum allowed issue number (2^31 - 1)
+ * NTH-SEC-002: Prevent integer overflow
+ */
+export declare const MAX_ISSUE_NO = 2147483647;
+/**
+ * Branch name whitelist pattern
+ * MF-SEC-001: Only allow safe characters to prevent command injection
+ * Allowed: a-z, A-Z, 0-9, underscore, hyphen, forward slash
+ */
+export declare const BRANCH_NAME_PATTERN: RegExp;
+/**
+ * Maximum branch name length
+ * Prevents DoS via overly long input
+ */
+export declare const MAX_BRANCH_NAME_LENGTH = 255;
+/**
+ * Validate issue number
+ * SEC-001: Strict positive integer validation
+ *
+ * @param issueNo - The issue number to validate
+ * @throws Error with code 'INVALID_ISSUE_NO' if not a valid integer
+ * @throws Error with code 'ISSUE_NO_OUT_OF_RANGE' if out of range
+ *
+ * @example
+ * ```typescript
+ * validateIssueNo(135); // OK
+ * validateIssueNo('135'); // throws INVALID_ISSUE_NO
+ * validateIssueNo(-1); // throws ISSUE_NO_OUT_OF_RANGE
+ * ```
+ */
+export declare function validateIssueNo(issueNo: unknown): asserts issueNo is number;
+/**
+ * Validate branch name
+ * MF-SEC-001: Whitelist validation to prevent command injection
+ *
+ * @param branchName - The branch name to validate
+ * @throws Error with code 'INVALID_BRANCH_NAME' if contains invalid characters
+ * @throws Error with code 'BRANCH_NAME_TOO_LONG' if exceeds max length
+ *
+ * @example
+ * ```typescript
+ * validateBranchName('feature/136-worktree'); // OK
+ * validateBranchName('feature`rm -rf /`'); // throws INVALID_BRANCH_NAME
+ * ```
+ */
+export declare function validateBranchName(branchName: string): void;
+/**
+ * Validate port number
+ * SEC-003: Port validation for worktree servers
+ *
+ * @param port - The port number to validate
+ * @param minPort - Minimum allowed port (default: 1024, non-privileged)
+ * @param maxPort - Maximum allowed port (default: 65535)
+ * @throws Error with code 'INVALID_PORT' if not a valid port number
+ *
+ * @example
+ * ```typescript
+ * validatePortNumber(3001); // OK
+ * validatePortNumber(80); // throws INVALID_PORT (privileged)
+ * ```
+ */
+export declare function validatePortNumber(port: unknown, minPort?: number, maxPort?: number): asserts port is number;
+/**
+ * Validation result interface for CLI commands
+ * Issue #136: Used by CLI commands for user-friendly error messages
+ */
+export interface IssueValidationResult {
+    valid: boolean;
+    error?: string;
+}
+/**
+ * Type guard for checking if a value is a valid issue number
+ *
+ * @param value - Value to check
+ * @returns true if value is a valid issue number
+ */
+export declare function isValidIssueNo(value: unknown): value is number;
+/**
+ * Validate issue number and return result (for CLI commands)
+ * Issue #136: CLI-friendly validation that returns result instead of throwing
+ *
+ * @param issueNo - The issue number to validate
+ * @returns Validation result with error message if invalid
+ */
+export declare function validateIssueNoResult(issueNo: unknown): IssueValidationResult;
+/**
+ * Type guard for checking if a value is a valid branch name
+ *
+ * @param value - Value to check
+ * @returns true if value is a valid branch name
+ */
+export declare function isValidBranchName(value: unknown): value is string;
+//# sourceMappingURL=input-validators.d.ts.map

package/dist/cli/utils/input-validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validators.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/input-validators.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAY3E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAQ3D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,MAAa,EACtB,OAAO,GAAE,MAAc,GACtB,OAAO,CAAC,IAAI,IAAI,MAAM,CAYxB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAO9D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,qBAAqB,CAe7E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAUjE"}