hammoc 1.0.0

package/packages/server/dist/controllers/sessionController.js

@@ -0,0 +1,230 @@
+/**
+ * Session Controller
+ * Handles session list and history endpoints
+ * [Source: Story 3.3 - Task 3, Story 3.5 - Task 3]
+ */
+import { SESSION_ERRORS } from '@hammoc/shared';
+import { sessionService } from '../services/sessionService.js';
+import { projectService } from '../services/projectService.js';
+import { getActiveStreamSessionIds } from '../handlers/websocket.js';
+export const sessionController = {
+    /**
+     * GET /api/projects/:projectSlug/sessions
+     * List all sessions for a project
+     */
+    async list(req, res) {
+        const { projectSlug } = req.params;
+        // Security validation: prevent path traversal
+        if (!sessionService.isValidPathParam(projectSlug)) {
+            res.status(SESSION_ERRORS.INVALID_PATH.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.INVALID_PATH.code,
+                    message: req.t('session.error.invalidPath'),
+                },
+            });
+            return;
+        }
+        try {
+            const includeEmpty = req.query.includeEmpty === 'true';
+            const limit = req.query.limit ? parseInt(req.query.limit, 10) : 0;
+            const offset = req.query.offset ? Math.max(parseInt(req.query.offset, 10), 0) : 0;
+            // Story 23.1: Extract and sanitize search parameters
+            let query = typeof req.query.query === 'string' ? req.query.query.trim() : undefined;
+            if (query && query.length > 200)
+                query = query.slice(0, 200);
+            if (query === '')
+                query = undefined;
+            const searchContent = req.query.searchContent === 'true';
+            // Load session names BEFORE calling service (needed for search)
+            const sessionNames = await projectService.readSessionNamesBySlug(projectSlug);
+            const result = await sessionService.listSessionsBySlug(projectSlug, {
+                includeEmpty,
+                limit: limit > 0 ? limit : 0,
+                offset,
+                query,
+                searchContent,
+                sessionNames,
+            });
+            // AC 6: Return 404 for non-existent project
+            if (result === null) {
+                res.status(SESSION_ERRORS.PROJECT_NOT_FOUND.httpStatus).json({
+                    error: {
+                        code: SESSION_ERRORS.PROJECT_NOT_FOUND.code,
+                        message: req.t('session.error.projectNotFound'),
+                    },
+                });
+                return;
+            }
+            // Note: Empty array is a valid response (project exists but no sessions)
+            // Mark sessions that have an active background stream + merge session names
+            const activeIds = new Set(getActiveStreamSessionIds());
+            const sessions = result.sessions;
+            const total = result.total;
+            const response = {
+                sessions: sessions.map(s => ({
+                    ...s,
+                    ...(activeIds.has(s.sessionId) && { isStreaming: true }),
+                    ...(sessionNames[s.sessionId] && { name: sessionNames[s.sessionId] }),
+                })),
+                total,
+                hasMore: limit > 0 ? (offset + sessions.length) < total : false,
+            };
+            res.json(response);
+        }
+        catch {
+            res.status(SESSION_ERRORS.SESSION_LIST_ERROR.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.SESSION_LIST_ERROR.code,
+                    message: req.t('session.error.listError'),
+                },
+            });
+        }
+    },
+    /**
+     * GET /api/projects/:projectSlug/sessions/:sessionId/messages
+     * Get session history messages with pagination
+     * [Source: Story 3.5 - Task 3]
+     *
+     * Query params:
+     * - limit: number (default: 50, max: 100)
+     * - offset: number (default: 0)
+     */
+    async getMessages(req, res) {
+        const { projectSlug, sessionId } = req.params;
+        // Security validation: prevent path traversal
+        if (!sessionService.isValidPathParam(projectSlug) || !sessionService.isValidPathParam(sessionId)) {
+            res.status(SESSION_ERRORS.INVALID_PATH.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.INVALID_PATH.code,
+                    message: req.t('session.error.invalidPath'),
+                },
+            });
+            return;
+        }
+        try {
+            // Parse and validate query params
+            const limit = Math.min(Math.max(parseInt(req.query.limit) || 50, 1), 100);
+            const offset = Math.max(parseInt(req.query.offset) || 0, 0);
+            const result = await sessionService.getSessionMessages(projectSlug, sessionId, {
+                limit,
+                offset,
+            });
+            // Return empty messages for non-existent sessions (e.g., pre-allocated UUID with no messages yet)
+            const response = result ?? {
+                messages: [],
+                pagination: { total: 0, limit, offset, hasMore: false },
+                lastAgentCommand: null,
+            };
+            res.json(response);
+        }
+        catch {
+            res.status(SESSION_ERRORS.SESSION_PARSE_ERROR.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.SESSION_PARSE_ERROR.code,
+                    message: req.t('session.error.parseError'),
+                },
+            });
+        }
+    },
+    /**
+     * DELETE /api/projects/:projectSlug/sessions/:sessionId
+     * Delete a single session
+     */
+    async delete(req, res) {
+        const { projectSlug, sessionId } = req.params;
+        if (!sessionService.isValidPathParam(projectSlug) || !sessionService.isValidPathParam(sessionId)) {
+            res.status(SESSION_ERRORS.INVALID_PATH.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.INVALID_PATH.code,
+                    message: req.t('session.error.invalidPath'),
+                },
+            });
+            return;
+        }
+        try {
+            await sessionService.deleteSession(projectSlug, sessionId);
+            res.json({ success: true });
+        }
+        catch {
+            res.status(SESSION_ERRORS.SESSION_DELETE_ERROR.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.SESSION_DELETE_ERROR.code,
+                    message: req.t('session.error.deleteError'),
+                },
+            });
+        }
+    },
+    /**
+     * POST /api/projects/:projectSlug/sessions/delete-batch
+     * Delete multiple sessions at once
+     */
+    async deleteBatch(req, res) {
+        const { projectSlug } = req.params;
+        const { sessionIds } = req.body;
+        if (!sessionService.isValidPathParam(projectSlug)) {
+            res.status(SESSION_ERRORS.INVALID_PATH.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.INVALID_PATH.code,
+                    message: req.t('session.error.invalidPath'),
+                },
+            });
+            return;
+        }
+        if (!sessionIds || !Array.isArray(sessionIds) || sessionIds.length === 0) {
+            res.status(400).json({
+                error: {
+                    code: 'INVALID_REQUEST',
+                    message: req.t('session.validation.deleteIdsRequired'),
+                },
+            });
+            return;
+        }
+        try {
+            const result = await sessionService.deleteSessions(projectSlug, sessionIds);
+            res.json(result);
+        }
+        catch {
+            res.status(SESSION_ERRORS.SESSION_DELETE_ERROR.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.SESSION_DELETE_ERROR.code,
+                    message: req.t('session.error.deleteError'),
+                },
+            });
+        }
+    },
+    /**
+     * PATCH /api/projects/:projectSlug/sessions/:sessionId/name
+     * Update or remove a session's custom name
+     */
+    async updateName(req, res) {
+        const { projectSlug, sessionId } = req.params;
+        if (!sessionService.isValidPathParam(projectSlug) || !sessionService.isValidPathParam(sessionId)) {
+            res.status(SESSION_ERRORS.INVALID_PATH.httpStatus).json({
+                error: {
+                    code: SESSION_ERRORS.INVALID_PATH.code,
+                    message: req.t('session.error.invalidPath'),
+                },
+            });
+            return;
+        }
+        try {
+            const { name } = req.body;
+            const trimmedName = typeof name === 'string' ? name.trim() : null;
+            const updatedName = await projectService.updateSessionName(projectSlug, sessionId, trimmedName || null);
+            res.json({ sessionId, name: updatedName });
+        }
+        catch (error) {
+            const nodeError = error;
+            if (nodeError.code === 'PROJECT_NOT_FOUND') {
+                res.status(404).json({
+                    error: { code: 'PROJECT_NOT_FOUND', message: req.t('session.error.projectNotFound') },
+                });
+                return;
+            }
+            res.status(500).json({
+                error: { code: 'SESSION_NAME_UPDATE_ERROR', message: req.t('session.error.saveNameFailed') },
+            });
+        }
+    },
+};
+//# sourceMappingURL=sessionController.js.map

package/packages/server/dist/controllers/sessionController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionController.js","sourceRoot":"","sources":["../../src/controllers/sessionController.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,cAAc,EAAsG,MAAM,gBAAgB,CAAC;AACpJ,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,GAAa;QACpC,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAEnC,8CAA8C;QAC9C,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACtD,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,YAAY,CAAC,IAAI;oBACtC,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC;YACvD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE5F,qDAAqD;YACrD,IAAI,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACrF,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7D,IAAI,KAAK,KAAK,EAAE;gBAAE,KAAK,GAAG,SAAS,CAAC;YACpC,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC;YAEzD,gEAAgE;YAChE,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAE9E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE;gBAClE,YAAY;gBACZ,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5B,MAAM;gBACN,KAAK;gBACL,aAAa;gBACb,YAAY;aACb,CAAC,CAAC;YAEH,4CAA4C;YAC5C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;oBAC3D,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc,CAAC,iBAAiB,CAAC,IAAI;wBAC3C,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,+BAA+B,CAAC;qBACjD;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,yEAAyE;YACzE,4EAA4E;YAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM,QAAQ,GAAwB;gBACpC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC3B,GAAG,CAAC;oBACJ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;oBACxD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;iBACtE,CAAC,CAAC;gBACH,KAAK;gBACL,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK;aAChE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAC5D,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,kBAAkB,CAAC,IAAI;oBAC5C,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,yBAAyB,CAAC;iBAC3C;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa;QAC3C,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE9C,8CAA8C;QAC9C,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACtD,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,YAAY,CAAC,IAAI;oBACtC,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAEtE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,SAAS,EAAE;gBAC7E,KAAK;gBACL,MAAM;aACP,CAAC,CAAC;YAEH,kGAAkG;YAClG,MAAM,QAAQ,GAA4B,MAAM,IAAI;gBAClD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;gBACvD,gBAAgB,EAAE,IAAI;aACvB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAC7D,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,mBAAmB,CAAC,IAAI;oBAC7C,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,0BAA0B,CAAC;iBAC5C;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAa;QACtC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE9C,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACtD,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,YAAY,CAAC,IAAI;oBACtC,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAC9D,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,oBAAoB,CAAC,IAAI;oBAC9C,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa;QAC3C,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAkC,CAAC;QAE9D,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACtD,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,YAAY,CAAC,IAAI;oBACtC,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,sCAAsC,CAAC;iBACxD;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAC9D,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,oBAAoB,CAAC,IAAI;oBAC9C,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,GAAY,EAAE,GAAa;QAC1C,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE9C,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBACtD,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,CAAC,YAAY,CAAC,IAAI;oBACtC,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,2BAA2B,CAAC;iBAC7C;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAgC,CAAC;YACtD,MAAM,WAAW,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,iBAAiB,CACxD,WAAW,EACX,SAAS,EACT,WAAW,IAAI,IAAI,CACpB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAA8B,CAAC;YACjD,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,+BAA+B,CAAC,EAAE;iBACvF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,CAAC,CAAE,CAAC,8BAA8B,CAAC,EAAE;aAC9F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAC"}

package/packages/server/dist/dev.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dev.d.ts.map

package/packages/server/dist/dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../src/dev.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC"}

package/packages/server/dist/dev.js

@@ -0,0 +1,8 @@
+// Dev entry point - sets environment before importing main server
+// Must use dynamic import because ES module static imports are hoisted
+// and would run before env vars are set
+process.env.NODE_ENV = 'development';
+process.env.PORT = '3001';
+await import('./index.js');
+export {};
+//# sourceMappingURL=dev.js.map

package/packages/server/dist/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../src/dev.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,uEAAuE;AACvE,wCAAwC;AACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAC;AACrC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;AAE1B,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC"}

package/packages/server/dist/handlers/__tests__/websocket.auth.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * WebSocket Authentication Tests
+ * Separate test file for testing authenticated and unauthenticated scenarios
+ * [Source: Story 2.5 - QA Recommendation]
+ */
+export {};
+//# sourceMappingURL=websocket.auth.test.d.ts.map

package/packages/server/dist/handlers/__tests__/websocket.auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.auth.test.d.ts","sourceRoot":"","sources":["../../../src/handlers/__tests__/websocket.auth.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/packages/server/dist/handlers/__tests__/websocket.auth.test.js

@@ -0,0 +1,125 @@
+/**
+ * WebSocket Authentication Tests
+ * Separate test file for testing authenticated and unauthenticated scenarios
+ * [Source: Story 2.5 - QA Recommendation]
+ */
+import { describe, it, expect, vi, beforeAll, afterAll, afterEach } from 'vitest';
+import { createServer } from 'http';
+import { io as ioc } from 'socket.io-client';
+// Hoisted mock control variable
+const mockSessionState = vi.hoisted(() => ({
+    authenticated: true,
+}));
+// Mock dashboardService (Story 20.1 — required by websocket.ts import)
+vi.mock('../../services/dashboardService.js', () => ({
+    dashboardService: {
+        getProjectStatus: vi.fn().mockResolvedValue({
+            projectSlug: 'test',
+            activeSessionCount: 0,
+            totalSessionCount: 0,
+            queueStatus: 'idle',
+            terminalCount: 0,
+        }),
+    },
+}));
+// Mock session middleware with controllable auth state
+vi.mock('../../middleware/session.js', () => ({
+    createSessionMiddleware: vi.fn().mockResolvedValue(
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    (req, _res, next) => {
+        req.session = { authenticated: mockSessionState.authenticated };
+        next();
+    }),
+}));
+import { initializeWebSocket } from '../websocket.js';
+describe('WebSocket Authentication', () => {
+    let httpServer;
+    let ioServer;
+    let clientSocket;
+    const TEST_PORT = 3002; // Different port to avoid conflicts
+    beforeAll(async () => {
+        httpServer = createServer();
+        ioServer = await initializeWebSocket(httpServer);
+        await new Promise((resolve) => {
+            httpServer.listen(TEST_PORT, () => resolve());
+        });
+    });
+    afterAll(async () => {
+        await new Promise((resolve) => {
+            ioServer.close(() => {
+                httpServer.close(() => resolve());
+            });
+        });
+    });
+    afterEach(() => {
+        if (clientSocket?.connected) {
+            clientSocket.disconnect();
+        }
+        // Reset to authenticated state for next test
+        mockSessionState.authenticated = true;
+    });
+    describe('Authenticated Session (AC2)', () => {
+        it('[HIGH] should accept connection with authenticated session', async () => {
+            mockSessionState.authenticated = true;
+            clientSocket = ioc(`http://localhost:${TEST_PORT}`, {
+                transports: ['websocket'],
+                forceNew: true,
+            });
+            await new Promise((resolve, reject) => {
+                const timeout = setTimeout(() => reject(new Error('Connection timeout')), 5000);
+                clientSocket.on('connect', () => {
+                    clearTimeout(timeout);
+                    expect(clientSocket.connected).toBe(true);
+                    resolve();
+                });
+                clientSocket.on('connect_error', (err) => {
+                    clearTimeout(timeout);
+                    reject(err);
+                });
+            });
+        });
+    });
+    describe('Unauthenticated Session (AC2, AC3)', () => {
+        it('[HIGH] should reject connection with unauthenticated session', async () => {
+            mockSessionState.authenticated = false;
+            clientSocket = ioc(`http://localhost:${TEST_PORT}`, {
+                transports: ['websocket'],
+                forceNew: true,
+            });
+            await new Promise((resolve, reject) => {
+                const timeout = setTimeout(() => reject(new Error('Expected connect_error but got timeout')), 5000);
+                clientSocket.on('connect', () => {
+                    clearTimeout(timeout);
+                    reject(new Error('Connection should have been rejected'));
+                });
+                clientSocket.on('connect_error', (err) => {
+                    clearTimeout(timeout);
+                    expect(err.message).toBe('Unauthorized');
+                    expect(clientSocket.connected).toBe(false);
+                    resolve();
+                });
+            });
+        });
+        it('[HIGH] should reject connection with null session', async () => {
+            // Simulate null session by setting authenticated to false
+            mockSessionState.authenticated = false;
+            clientSocket = ioc(`http://localhost:${TEST_PORT}`, {
+                transports: ['websocket'],
+                forceNew: true,
+            });
+            await new Promise((resolve, reject) => {
+                const timeout = setTimeout(() => reject(new Error('Expected connect_error but got timeout')), 5000);
+                clientSocket.on('connect', () => {
+                    clearTimeout(timeout);
+                    reject(new Error('Connection should have been rejected'));
+                });
+                clientSocket.on('connect_error', (err) => {
+                    clearTimeout(timeout);
+                    expect(err.message).toBe('Unauthorized');
+                    resolve();
+                });
+            });
+        });
+    });
+});
+//# sourceMappingURL=websocket.auth.test.js.map

package/packages/server/dist/handlers/__tests__/websocket.auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.auth.test.js","sourceRoot":"","sources":["../../../src/handlers/__tests__/websocket.auth.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClF,OAAO,EAAE,YAAY,EAAwB,MAAM,MAAM,CAAC;AAE1D,OAAO,EAAE,EAAE,IAAI,GAAG,EAA0B,MAAM,kBAAkB,CAAC;AAErE,gCAAgC;AAChC,MAAM,gBAAgB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC,CAAC;AAEJ,uEAAuE;AACvE,EAAE,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,gBAAgB,EAAE;QAChB,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,WAAW,EAAE,MAAM;YACnB,kBAAkB,EAAE,CAAC;YACrB,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,MAAM;YACnB,aAAa,EAAE,CAAC;SACjB,CAAC;KACH;CACF,CAAC,CAAC,CAAC;AAEJ,uDAAuD;AACvD,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB;IAChD,8DAA8D;IAC9D,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;QACjC,GAAG,CAAC,OAAO,GAAG,EAAE,aAAa,EAAE,gBAAgB,CAAC,aAAa,EAAE,CAAC;QAChE,IAAI,EAAE,CAAC;IACT,CAAC,CACF;CACF,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,UAAsB,CAAC;IAC3B,IAAI,QAAwB,CAAC;IAC7B,IAAI,YAA0B,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,oCAAoC;IAE5D,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,UAAU,GAAG,YAAY,EAAE,CAAC;QAC5B,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClB,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,YAAY,EAAE,SAAS,EAAE,CAAC;YAC5B,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5B,CAAC;QACD,6CAA6C;QAC7C,gBAAgB,CAAC,aAAa,GAAG,IAAI,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,gBAAgB,CAAC,aAAa,GAAG,IAAI,CAAC;YAEtC,YAAY,GAAG,GAAG,CAAC,oBAAoB,SAAS,EAAE,EAAE;gBAClD,UAAU,EAAE,CAAC,WAAW,CAAC;gBACzB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAEhF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;gBAEH,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,gBAAgB,CAAC,aAAa,GAAG,KAAK,CAAC;YAEvC,YAAY,GAAG,GAAG,CAAC,oBAAoB,SAAS,EAAE,EAAE;gBAClD,UAAU,EAAE,CAAC,WAAW,CAAC;gBACzB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAEpG,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;gBAC5D,CAAC,CAAC,CAAC;gBAEH,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC3C,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,0DAA0D;YAC1D,gBAAgB,CAAC,aAAa,GAAG,KAAK,CAAC;YAEvC,YAAY,GAAG,GAAG,CAAC,oBAAoB,SAAS,EAAE,EAAE;gBAClD,UAAU,EAAE,CAAC,WAAW,CAAC;gBACzB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAEpG,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;gBAC5D,CAAC,CAAC,CAAC;gBAEH,YAAY,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/packages/server/dist/handlers/__tests__/websocket.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=websocket.test.d.ts.map

package/packages/server/dist/handlers/__tests__/websocket.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.test.d.ts","sourceRoot":"","sources":["../../../src/handlers/__tests__/websocket.test.ts"],"names":[],"mappings":""}