create-walle 0.1.0

package/template/claude-task-manager/api-reviews.js

@@ -0,0 +1,275 @@
+'use strict';
+const path = require('path');
+const fs = require('fs');
+const db = require('./db');
+const gitUtils = require('./git-utils');
+
+// --- Helpers ---
+function isValidProjectPath(p) {
+  if (!p || typeof p !== 'string') return false;
+  const resolved = path.resolve(p);
+  const home = process.env.HOME || '/';
+  if (!resolved.startsWith(home + path.sep)) return false;
+  // Check for .git dir (standalone repo) or use git rev-parse (subdirectory of a repo)
+  if (fs.existsSync(path.join(resolved, '.git'))) return true;
+  try {
+    const { execFileSync } = require('child_process');
+    execFileSync('git', ['rev-parse', '--git-dir'], { cwd: resolved, stdio: 'pipe' });
+    return true;
+  } catch { return false; }
+}
+function jsonResponse(res, code, data) {
+  const body = JSON.stringify(data);
+  res.writeHead(code, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) });
+  res.end(body);
+}
+
+function readBody(req, limit = 1024 * 1024) {
+  return new Promise((resolve, reject) => {
+    let body = '';
+    req.on('data', c => {
+      body += c;
+      if (body.length > limit) { req.destroy(); reject(new Error('Body too large')); }
+    });
+    req.on('end', () => { try { resolve(JSON.parse(body || '{}')); } catch (e) { reject(e); } });
+    req.on('error', reject);
+  });
+}
+
+// --- Change Detection for Badge Polling ---
+// Track last known diff stats per project to detect changes
+const changeTracker = new Map(); // projectPath -> { files: [...], hash: string }
+
+function computeStatsHash(files) {
+  return files.map(f => `${f.path}:${f.additions}:${f.deletions}`).sort().join('|');
+}
+
+async function checkForChanges(projectPath) {
+  try {
+    const files = await gitUtils.getDiffStat(projectPath);
+    const hash = computeStatsHash(files);
+    const prev = changeTracker.get(projectPath);
+    changeTracker.set(projectPath, { files, hash });
+    const changed = !prev || prev.hash !== hash;
+    return { changed, fileCount: files.length, files };
+  } catch {
+    return { changed: false, fileCount: 0, files: [] };
+  }
+}
+
+// --- Route Handler ---
+function handleReviewApi(req, res, url) {
+  const p = url.pathname;
+  const m = req.method;
+
+  // GET /api/reviews/diff?project=...&base=...
+  if (p === '/api/reviews/diff' && m === 'GET') {
+    const project = url.searchParams.get('project');
+    const base = url.searchParams.get('base') || '';
+    if (!project) return jsonResponse(res, 400, { error: 'project required' });
+    if (!isValidProjectPath(project)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+    const diffFn = base === '--staged'
+      ? gitUtils.getStagedDiff(project)
+      : gitUtils.getFullDiff(project, base || undefined);
+    diffFn.then(files => jsonResponse(res, 200, { files }))
+      .catch(e => jsonResponse(res, 500, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews/diff-stat?project=...&base=...
+  if (p === '/api/reviews/diff-stat' && m === 'GET') {
+    const project = url.searchParams.get('project');
+    if (!project) return jsonResponse(res, 400, { error: 'project required' });
+    if (!isValidProjectPath(project)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+    const base = url.searchParams.get('base') || '';
+    gitUtils.getDiffStat(project, base || undefined)
+      .then(files => jsonResponse(res, 200, { files }))
+      .catch(e => jsonResponse(res, 500, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews/commits?project=...
+  if (p === '/api/reviews/commits' && m === 'GET') {
+    const project = url.searchParams.get('project');
+    if (!project) return jsonResponse(res, 400, { error: 'project required' });
+    if (!isValidProjectPath(project)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+    gitUtils.getCommits(project, 30)
+      .then(commits => jsonResponse(res, 200, { commits }))
+      .catch(e => jsonResponse(res, 500, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews/branch?project=...
+  if (p === '/api/reviews/branch' && m === 'GET') {
+    const project = url.searchParams.get('project');
+    if (!project) return jsonResponse(res, 400, { error: 'project required' });
+    if (!isValidProjectPath(project)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+    gitUtils.getBranch(project)
+      .then(branch => jsonResponse(res, 200, { branch }))
+      .catch(e => jsonResponse(res, 500, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews/tracked-projects - list all tracked project folders with change counts
+  if (p === '/api/reviews/tracked-projects' && m === 'GET') {
+    const getTrackedProjects = module.exports._getTrackedProjects;
+    if (!getTrackedProjects) return jsonResponse(res, 500, { error: 'tracker not initialized' });
+    getTrackedProjects()
+      .then(projects => jsonResponse(res, 200, { projects }))
+      .catch(e => jsonResponse(res, 500, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews/changes?project=... - badge polling endpoint
+  if (p === '/api/reviews/changes' && m === 'GET') {
+    const project = url.searchParams.get('project');
+    if (!project) return jsonResponse(res, 400, { error: 'project required' });
+    if (!isValidProjectPath(project)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+    checkForChanges(project)
+      .then(result => jsonResponse(res, 200, result))
+      .catch(e => jsonResponse(res, 500, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews/file?project=...&path=... - serve image files from project
+  if (p === '/api/reviews/file' && m === 'GET') {
+    const project = url.searchParams.get('project');
+    const filePath = url.searchParams.get('path');
+    if (!project || !filePath) return jsonResponse(res, 400, { error: 'project and path required' });
+    if (!isValidProjectPath(project)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+    // Only allow image extensions
+    const ext = path.extname(filePath).toLowerCase();
+    const imageExts = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.gif': 'image/gif', '.svg': 'image/svg+xml', '.webp': 'image/webp', '.ico': 'image/x-icon', '.bmp': 'image/bmp' };
+    if (!imageExts[ext]) return jsonResponse(res, 400, { error: 'Only image files are supported' });
+    // Prevent path traversal
+    const resolved = path.resolve(project, filePath);
+    if (!resolved.startsWith(path.resolve(project) + path.sep)) return jsonResponse(res, 403, { error: 'Invalid file path' });
+    try {
+      const data = fs.readFileSync(resolved);
+      res.writeHead(200, { 'Content-Type': imageExts[ext], 'Content-Length': data.length, 'Cache-Control': 'no-cache' });
+      res.end(data);
+    } catch (e) {
+      res.writeHead(404, { 'Content-Type': 'text/plain' });
+      res.end('File not found');
+    }
+    return true;
+  }
+
+  // --- Review CRUD ---
+
+  // POST /api/reviews - create a new review
+  if (p === '/api/reviews' && m === 'POST') {
+    readBody(req).then(body => {
+      const { session_id, project_path, base_ref } = body;
+      if (!project_path) return jsonResponse(res, 400, { error: 'project_path required' });
+      if (!isValidProjectPath(project_path)) return jsonResponse(res, 403, { error: 'Invalid project path' });
+      const id = db.createReview({ session_id, project_path, base_ref });
+      jsonResponse(res, 201, { id });
+    }).catch(e => jsonResponse(res, 400, { error: e.message }));
+    return true;
+  }
+
+  // GET /api/reviews - list reviews
+  if (p === '/api/reviews' && m === 'GET') {
+    const project_path = url.searchParams.get('project');
+    const session_id = url.searchParams.get('session');
+    const reviews = db.listReviews({ project_path, session_id });
+    return jsonResponse(res, 200, reviews);
+  }
+
+  // GET /api/reviews/:id
+  const reviewMatch = p.match(/^\/api\/reviews\/(\d+)$/);
+  if (reviewMatch && m === 'GET') {
+    const review = db.getReview(parseInt(reviewMatch[1]));
+    if (!review) return jsonResponse(res, 404, { error: 'Review not found' });
+    return jsonResponse(res, 200, review);
+  }
+
+  // PUT /api/reviews/:id
+  if (reviewMatch && m === 'PUT') {
+    readBody(req).then(body => {
+      db.updateReview(parseInt(reviewMatch[1]), body);
+      jsonResponse(res, 200, { ok: true });
+    }).catch(e => jsonResponse(res, 400, { error: e.message }));
+    return true;
+  }
+
+  // DELETE /api/reviews/:id
+  if (reviewMatch && m === 'DELETE') {
+    db.deleteReview(parseInt(reviewMatch[1]));
+    return jsonResponse(res, 200, { ok: true });
+  }
+
+  // --- Review Comments ---
+
+  // POST /api/reviews/:id/comments
+  const commentsMatch = p.match(/^\/api\/reviews\/(\d+)\/comments$/);
+  if (commentsMatch && m === 'POST') {
+    readBody(req).then(body => {
+      body.review_id = parseInt(commentsMatch[1]);
+      const id = db.addReviewComment(body);
+      jsonResponse(res, 201, { id });
+    }).catch(e => jsonResponse(res, 400, { error: e.message }));
+    return true;
+  }
+
+  // PUT /api/review-comments/:id
+  const commentMatch = p.match(/^\/api\/review-comments\/(\d+)$/);
+  if (commentMatch && m === 'PUT') {
+    readBody(req).then(body => {
+      db.updateReviewComment(parseInt(commentMatch[1]), body);
+      jsonResponse(res, 200, { ok: true });
+    }).catch(e => jsonResponse(res, 400, { error: e.message }));
+    return true;
+  }
+
+  // DELETE /api/review-comments/:id
+  if (commentMatch && m === 'DELETE') {
+    db.deleteReviewComment(parseInt(commentMatch[1]));
+    return jsonResponse(res, 200, { ok: true });
+  }
+
+  // --- Compose review prompt for sending to Claude ---
+  const composeMatch = p.match(/^\/api\/reviews\/(\d+)\/compose$/);
+  if (composeMatch && m === 'GET') {
+    const review = db.getReview(parseInt(composeMatch[1]));
+    if (!review) return jsonResponse(res, 404, { error: 'Review not found' });
+    const prompt = composeReviewPrompt(review);
+    return jsonResponse(res, 200, { prompt });
+  }
+
+  return false; // Not handled
+}
+
+// Compose structured review prompt from comments
+function composeReviewPrompt(review) {
+  const comments = review.comments.filter(c => c.status === 'open');
+  if (comments.length === 0) return 'No review comments to address.';
+
+  const byFile = {};
+  for (const c of comments) {
+    if (!byFile[c.file_path]) byFile[c.file_path] = [];
+    byFile[c.file_path].push(c);
+  }
+
+  const lines = ['Please address these code review comments:\n'];
+
+  for (const [filePath, fileComments] of Object.entries(byFile)) {
+    lines.push(`## ${filePath}\n`);
+    for (const c of fileComments) {
+      const lineRef = c.line_end && c.line_end !== c.line_start
+        ? `Lines ${c.line_start}-${c.line_end}`
+        : `Line ${c.line_start}`;
+      const severity = c.severity !== 'comment' ? ` [${c.severity}]` : '';
+      lines.push(`**${lineRef}**${severity}: ${c.body}\n`);
+    }
+  }
+
+  if (review.summary) {
+    lines.push(`\n## Overall\n\n${review.summary}`);
+  }
+
+  return lines.join('\n');
+}
+
+module.exports = { handleReviewApi, checkForChanges };