hammoc 1.0.0

package/packages/server/dist/locales/zh-CN/server.json

@@ -0,0 +1,303 @@
+{
+  "error": {
+    "notFound": "未找到资源",
+    "unauthorized": "未授权",
+    "internal": "内部服务器错误",
+    "requestFailed": "请求失败 ({{status}} {{statusText}})",
+    "rateLimit": "API请求已达上限。请稍后再试。",
+    "authRequired": "需要Claude Code CLI认证。请运行 \"claude login\"。",
+    "networkError": "网络连接异常。请检查您的网络连接。",
+    "invalidPath": "无效路径: {{path}}",
+    "serviceUnavailable": "Claude服务暂不可用。请稍后再试。",
+    "aborted": "操作已取消。"
+  },
+  "auth": {
+    "validation": {
+      "passwordRequired": "请输入密码。",
+      "passwordMinLength": "密码至少需要{{value}}个字符。",
+      "passwordConfirmRequired": "请确认密码。",
+      "invalidRequest": "无效请求。"
+    },
+    "login": {
+      "success": "登录成功",
+      "serverError": "登录时服务器错误",
+      "invalidPassword": "密码错误。",
+      "rateLimitExceeded": "登录尝试次数过多。请稍后再试。"
+    },
+    "password": {
+      "alreadySet": "密码已设置。",
+      "mismatch": "两次输入的密码不一致。",
+      "setSuccess": "密码设置成功。",
+      "setError": "设置密码时服务器错误。"
+    },
+    "logout": {
+      "success": "已成功登出",
+      "error": "登出时出错"
+    }
+  },
+  "project": {
+    "validation": {
+      "pathRequired": "请输入项目路径。",
+      "slugRequired": "请输入项目标识。",
+      "invalidPermissionMode": "无效的权限模式: {{value}}",
+      "invalidModelId": "无效的模型ID。",
+      "invalidPathFormat": "无效的路径格式。",
+      "pathIsFile": "路径为文件而非目录。",
+      "pathParameterRequired": "路径为必填项。"
+    },
+    "error": {
+      "createFailed": "创建项目时出错。",
+      "bmadVersionsFailed": "获取BMad版本列表时出错。",
+      "notFound": "未找到项目。",
+      "deleteFailed": "删除项目时出错。",
+      "bmadSetupFailed": "BMad设置过程中出错。",
+      "validatePathFailed": "路径验证时出错。",
+      "settingsLoadFailed": "加载设置时出错。",
+      "settingsSaveFailed": "保存设置时出错。",
+      "systemPromptFailed": "获取系统提示词时出错。",
+      "scanError": "扫描项目时出错。",
+      "dirNotFound": "未找到目录。",
+      "permissionDenied": "权限被拒绝。",
+      "invalidSessionIndex": "无效的会话索引。",
+      "pathNotFound": "未找到路径。",
+      "pathNotDirectory": "路径不是目录。",
+      "alreadyBmad": "已经是BMad项目。",
+      "alreadyExists": "项目已存在。"
+    }
+  },
+  "board": {
+    "error": {
+      "projectNotFound": "未找到项目: {{value}}",
+      "internal": "内部服务器错误",
+      "issueNotFound": "未找到问题: {{value}}",
+      "storyNotFound": "未找到 Story：{{value}}",
+      "statusNotFound": "未找到 Story 的状态：{{value}}"
+    },
+    "validation": {
+      "titleRequired": "标题为必填项",
+      "invalidSeverity": "无效的严重程度: {{value}}",
+      "invalidIssueType": "无效的问题类型: {{value}}",
+      "invalidStatus": "无效的状态: {{value}}",
+      "invalidIssueId": "无效的问题ID",
+      "fileRequired": "文件为必填项",
+      "invalidFileType": "不支持的文件类型",
+      "fileTooLarge": "文件大小超过 10MB 限制",
+      "maxAttachments": "已达到附件数量上限",
+      "invalidFilename": "无效的文件名"
+    },
+    "success": {
+      "issueDeleted": "问题已删除"
+    }
+  },
+  "session": {
+    "validation": {
+      "deleteIdsRequired": "需要提供要删除的会话ID列表。"
+    },
+    "error": {
+      "saveNameFailed": "保存会话名称时出错。",
+      "projectNotFound": "未找到项目。",
+      "listError": "获取会话列表时出错。",
+      "invalidPath": "检测到无效路径。",
+      "parseError": "解析会话数据时出错。",
+      "deleteError": "删除会话时出错。",
+      "nameError": "更新会话名称时出错。"
+    }
+  },
+  "fs": {
+    "validation": {
+      "slugRequired": "请输入项目标识。",
+      "pathRequired": "path查询参数为必填项",
+      "contentRequired": "请求体中content必须为字符串",
+      "typeRequired": "type必须为\"file\"或\"directory\"",
+      "newPathRequired": "newPath查询参数为必填项",
+      "queryRequired": "query参数为必填项"
+    },
+    "error": {
+      "pathTraversal": "检测到路径遍历攻击。",
+      "fileNotFound": "未找到文件。",
+      "directoryNotFound": "未找到目录。",
+      "notADirectory": "不是目录。",
+      "readError": "文件读取错误。",
+      "writeError": "文件写入错误。",
+      "fileAlreadyExists": "文件已存在。",
+      "protectedPath": "受保护的路径。",
+      "renameTargetExists": "重命名目标已存在。",
+      "parentNotFound": "未找到父目录。"
+    }
+  },
+  "git": {
+    "validation": {
+      "slugRequired": "projectSlug为必填项",
+      "fileRequired": "file查询参数为必填项",
+      "filesRequired": "files数组为必填项且不能为空",
+      "commitMessageRequired": "提交信息为必填项且不能为空",
+      "commitMessageTooLong": "提交信息超过10,000字符的最大长度",
+      "branchRequired": "分支名称为必填项",
+      "invalidBranchName": "无效的分支名称: 包含无效字符",
+      "invalidStartPoint": "无效的startPoint: 包含无效字符",
+      "startPointFormat": "startPoint（如提供）必须为非空字符串"
+    },
+    "success": {
+      "initialized": "Git仓库已初始化",
+      "staged": "文件暂存成功",
+      "unstaged": "文件取消暂存成功",
+      "committed": "更改提交成功",
+      "pushed": "推送到远程仓库成功",
+      "pulled": "拉取远程仓库成功",
+      "switchedBranch": "已切换到分支 {{value}}",
+      "branchCreated": "分支 {{value}} 创建成功"
+    },
+    "error": {
+      "operationFailed": "Git操作失败。",
+      "notInitialized": "Git仓库未初始化。",
+      "conflict": "检测到Git冲突。",
+      "nothingToCommit": "没有可提交的更改。",
+      "branchExists": "分支已存在。"
+    }
+  },
+  "queue": {
+    "validation": {
+      "slugRequired": "projectSlug为必填项",
+      "itemsRequired": "items数组不能为空",
+      "invalidInput": "无效的队列输入：{{value}}"
+    },
+    "error": {
+      "alreadyRunning": "该项目的队列已在运行中",
+      "noRunningQueue": "该项目没有正在运行的队列",
+      "sdkError": "SDK错误: {{value}}",
+      "queueStopDetected": "响应中检测到QUEUE_STOP",
+      "sessionNotFound": "未找到会话名称 \"{{value}}\"",
+      "sessionBusy": "会话正在流式传输中——队列已暂停以避免冲突"
+    },
+    "pause": {
+      "userPaused": "用户已暂停",
+      "waitingForPermission": "等待{{value}}: {{toolName}}",
+      "userAnswer": "用户回答",
+      "permissionApproval": "权限"
+    }
+  },
+  "queueTemplate": {
+    "error": {
+      "listFailed": "获取模板列表失败",
+      "createFailed": "创建模板失败",
+      "updateFailed": "更新模板失败",
+      "deleteFailed": "删除模板失败",
+      "notFound": "未找到模板",
+      "projectPathFailed": "解析项目路径失败",
+      "bmadConfigNotFound": "该项目未找到BMad配置",
+      "prdNotFound": "未找到PRD文件"
+    },
+    "validation": {
+      "nameTemplateRequired": "name和template为必填的非空字符串"
+    }
+  },
+  "notification": {
+    "permission": {
+      "title": "需要权限"
+    },
+    "question": {
+      "title": "提问"
+    },
+    "complete": {
+      "title": "完成",
+      "lastMessage": "最后回复:",
+      "queueProgress": "队列: {{current}}/{{total}} ({{pct}}%)"
+    },
+    "error": {
+      "title": "错误",
+      "configRequired": "Bot Token和Chat ID必须同时配置。"
+    },
+    "queueStart": {
+      "title": "队列已启动",
+      "body": "共{{value}}个项目待执行"
+    },
+    "queueComplete": {
+      "title": "队列完成",
+      "body": "所有项目已处理完毕"
+    },
+    "queuePaused": {
+      "title": "队列已暂停"
+    },
+    "inputRequired": {
+      "title": "需要输入",
+      "body": "等待用户响应"
+    },
+    "test": {
+      "message": "这是一条测试通知。Telegram通知功能正常运行！"
+    }
+  },
+  "ws": {
+    "error": {
+      "queueSessionLocked": "无法向正在运行队列的会话发送消息。",
+      "queueAlreadyRunning": "该项目的队列已在运行中",
+      "maxImages": "最多可附加{{value}}张图片。",
+      "unsupportedImageFormat": "不支持的图片格式: {{value}}",
+      "imageSizeExceeded": "图片大小超过10MB: {{value}}",
+      "projectPathNotFound": "指定的项目路径不存在。",
+      "sessionNotFound": "未找到会话。请启动新会话。",
+      "timeout": "响应超时。请重试。",
+      "sessionListFailed": "获取会话列表失败。",
+      "terminalDisabled": "终端功能已禁用",
+      "terminalProjectNotFound": "未找到终端对应的项目路径",
+      "terminalAccessDenied": "出于安全考虑，不支持从本地网络外部访问终端",
+      "terminalNotFound": "未找到终端",
+      "ptySpawnError": "终端进程启动失败"
+    }
+  },
+  "pathGuard": {
+    "nullByte": "无效路径: 检测到空字节",
+    "absolutePath": "无效路径: 不允许使用绝对路径",
+    "traversal": "无效路径: 检测到路径遍历"
+  },
+  "dashboard": {
+    "error": {
+      "statusFailed": "获取仪表盘状态失败"
+    }
+  },
+  "cli": {
+    "error": {
+      "executionFailed": "运行CLI时发生错误。"
+    }
+  },
+  "command": {
+    "error": {
+      "listFailed": "获取命令列表失败"
+    }
+  },
+  "server": {
+    "error": {
+      "rebuildDevOnly": "重新构建仅在开发模式下可用。",
+      "buildInProgress": "构建已在进行中。",
+      "updateCheckDevOnly": "更新检查在开发模式下不可用。",
+      "npmCheckFailed": "检查npm注册表失败。",
+      "useRebuildInDev": "在开发模式下请使用重新构建并重启。",
+      "operationInProgress": "操作已在进行中。"
+    },
+    "info": {
+      "buildStarted": "构建已启动。请轮询 /api/server/build-status 获取进度。",
+      "updateStarted": "更新已启动。请轮询 /api/server/build-status 获取进度。"
+    }
+  },
+  "bmadStatus": {
+    "error": {
+      "notBmadProject": "这不是BMad项目。",
+      "configParseError": "解析core-config.yaml时出错。",
+      "scanError": "扫描项目状态时出错。"
+    }
+  },
+  "preferences": {
+    "readError": "读取偏好设置时出错。",
+    "writeError": "保存偏好设置失败。",
+    "telegram": {
+      "readError": "加载Telegram设置时出错。",
+      "invalidBotToken": "无效的Bot Token。",
+      "invalidChatId": "无效的Chat ID。",
+      "writeError": "保存Telegram设置失败。",
+      "testError": "发送测试通知时服务器出错。"
+    },
+    "rateLimit": {
+      "projectCreate": "项目创建请求过多。请稍后再试。",
+      "pathValidation": "路径验证请求过多。请稍后再试。"
+    }
+  }
+}

package/packages/server/dist/middleware/__tests__/auth.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Authentication Middleware Tests
+ * [Source: Story 2.5 - Task 6]
+ */
+export {};
+//# sourceMappingURL=auth.test.d.ts.map

package/packages/server/dist/middleware/__tests__/auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/packages/server/dist/middleware/__tests__/auth.test.js

@@ -0,0 +1,146 @@
+/**
+ * Authentication Middleware Tests
+ * [Source: Story 2.5 - Task 6]
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { authMiddleware, authMiddlewareWithExclusions } from '../auth.js';
+import { AUTH_ERROR_CODES, AUTH_ERROR_MESSAGES } from '@bmad-studio/shared';
+// Mock request factory
+function mockReq(session, path, method = 'GET') {
+    return {
+        session,
+        path,
+        method,
+    };
+}
+// Mock response factory
+function mockRes() {
+    const res = {};
+    res.status = vi.fn().mockReturnThis();
+    res.json = vi.fn().mockReturnThis();
+    return res;
+}
+describe('authMiddleware', () => {
+    let next;
+    beforeEach(() => {
+        next = vi.fn();
+    });
+    it('calls next() for authenticated session', () => {
+        const req = mockReq({ authenticated: true }, '/api/projects');
+        const res = mockRes();
+        authMiddleware(req, res, next);
+        expect(next).toHaveBeenCalled();
+        expect(res.status).not.toHaveBeenCalled();
+    });
+    it('returns 401 for unauthenticated session (null)', () => {
+        const req = mockReq(null, '/api/projects');
+        const res = mockRes();
+        authMiddleware(req, res, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(res.status).toHaveBeenCalledWith(401);
+        expect(res.json).toHaveBeenCalledWith({
+            error: {
+                code: AUTH_ERROR_CODES.UNAUTHORIZED,
+                message: AUTH_ERROR_MESSAGES.UNAUTHORIZED,
+            },
+        });
+    });
+    it('returns 401 for unauthenticated session (authenticated: false)', () => {
+        const req = mockReq({ authenticated: false }, '/api/projects');
+        const res = mockRes();
+        authMiddleware(req, res, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(res.status).toHaveBeenCalledWith(401);
+    });
+    it('returns 401 for undefined session', () => {
+        const req = mockReq(undefined, '/api/projects');
+        const res = mockRes();
+        authMiddleware(req, res, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(res.status).toHaveBeenCalledWith(401);
+    });
+});
+describe('authMiddlewareWithExclusions', () => {
+    let next;
+    beforeEach(() => {
+        next = vi.fn();
+    });
+    describe('public routes (AC4)', () => {
+        it('skips authentication for /api/auth/login', () => {
+            const req = mockReq(null, '/api/auth/login');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+        it('skips authentication for /api/auth/status', () => {
+            const req = mockReq(null, '/api/auth/status');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+        it('skips authentication for /api/health', () => {
+            const req = mockReq(null, '/api/health');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+    });
+    describe('static files (AC5)', () => {
+        it('skips authentication for static file paths', () => {
+            const req = mockReq(null, '/index.html');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+        it('skips authentication for root path', () => {
+            const req = mockReq(null, '/');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+        it('skips authentication for assets path', () => {
+            const req = mockReq(null, '/assets/main.js');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+    });
+    describe('protected routes (AC1)', () => {
+        it('requires authentication for /api/projects', () => {
+            const req = mockReq(null, '/api/projects');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(res.status).toHaveBeenCalledWith(401);
+            expect(next).not.toHaveBeenCalled();
+        });
+        it('allows authenticated access to /api/projects', () => {
+            const req = mockReq({ authenticated: true }, '/api/projects');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+        it('requires authentication for /api/sessions', () => {
+            const req = mockReq(null, '/api/sessions');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(res.status).toHaveBeenCalledWith(401);
+        });
+    });
+    describe('CORS preflight (OPTIONS)', () => {
+        it('skips authentication for OPTIONS requests', () => {
+            const req = mockReq(null, '/api/projects', 'OPTIONS');
+            const res = mockRes();
+            authMiddlewareWithExclusions(req, res, next);
+            expect(next).toHaveBeenCalled();
+            expect(res.status).not.toHaveBeenCalled();
+        });
+    });
+});
+//# sourceMappingURL=auth.test.js.map

package/packages/server/dist/middleware/__tests__/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../../src/middleware/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,uBAAuB;AACvB,SAAS,OAAO,CACd,OAAuD,EACvD,IAAY,EACZ,SAAiB,KAAK;IAEtB,OAAO;QACL,OAAO;QACP,IAAI;QACJ,MAAM;KACe,CAAC;AAC1B,CAAC;AAED,wBAAwB;AACxB,SAAS,OAAO;IACd,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC;IACtC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC;IACpC,OAAO,GAAe,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,IAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QAEtB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QAEtB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACpC,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB,CAAC,YAAY;gBACnC,OAAO,EAAE,mBAAmB,CAAC,YAAY;aAC1C;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QAEtB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QAEtB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAI,IAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YAEtB,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/packages/server/dist/middleware/__tests__/i18n.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Server i18n Middleware Tests (Story 22.1 - Task 10.4)
+ */
+export {};
+//# sourceMappingURL=i18n.test.d.ts.map

package/packages/server/dist/middleware/__tests__/i18n.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/__tests__/i18n.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/packages/server/dist/middleware/__tests__/i18n.test.js

@@ -0,0 +1,96 @@
+/**
+ * Server i18n Middleware Tests (Story 22.1 - Task 10.4)
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+// Mock preferencesService so the async middleware doesn't read from disk
+vi.mock('../../services/preferencesService.js', () => ({
+    preferencesService: {
+        readPreferences: vi.fn().mockResolvedValue({ language: null }),
+    },
+}));
+import { i18nMiddleware, invalidateI18nCache } from '../i18n.js';
+function mockReq(acceptLanguage) {
+    const headers = {};
+    if (acceptLanguage) {
+        headers['accept-language'] = acceptLanguage;
+    }
+    return {
+        headers,
+        acceptsLanguages: vi.fn((langs) => {
+            if (!acceptLanguage)
+                return false;
+            // Simple matching: check if any supported lang matches the header
+            for (const lang of langs) {
+                if (acceptLanguage.includes(lang))
+                    return lang;
+            }
+            return false;
+        }),
+    };
+}
+function mockRes() {
+    return {};
+}
+describe('i18nMiddleware', () => {
+    let next;
+    beforeEach(() => {
+        next = vi.fn();
+        // Reset cache between tests so each test gets fresh preference data
+        invalidateI18nCache();
+    });
+    it('sets req.language from Accept-Language header', async () => {
+        const req = mockReq('ko');
+        await i18nMiddleware(req, mockRes(), next);
+        expect(req.language).toBe('ko');
+        expect(next).toHaveBeenCalled();
+    });
+    it('falls back to en when no Accept-Language header', async () => {
+        const req = mockReq();
+        await i18nMiddleware(req, mockRes(), next);
+        expect(req.language).toBe('en');
+        expect(next).toHaveBeenCalled();
+    });
+    it('falls back to en for unsupported language', async () => {
+        const req = mockReq('fr');
+        await i18nMiddleware(req, mockRes(), next);
+        expect(req.language).toBe('en');
+        expect(next).toHaveBeenCalled();
+    });
+    it('attaches req.t as a translation function', async () => {
+        const req = mockReq('en');
+        await i18nMiddleware(req, mockRes(), next);
+        expect(typeof req.t).toBe('function');
+        expect(req.t('error.notFound')).toBe('Resource not found');
+    });
+    it('detects zh-CN from Accept-Language', async () => {
+        const req = mockReq('zh-CN');
+        await i18nMiddleware(req, mockRes(), next);
+        expect(req.language).toBe('zh-CN');
+    });
+    it('uses language preference over Accept-Language header when set', async () => {
+        const { preferencesService } = await import('../../services/preferencesService.js');
+        vi.mocked(preferencesService.readPreferences).mockResolvedValueOnce({ language: 'ko' });
+        const req = mockReq('en'); // header says 'en' but preference is 'ko'
+        await i18nMiddleware(req, mockRes(), next);
+        expect(req.language).toBe('ko');
+        expect(next).toHaveBeenCalled();
+    });
+    it('falls back to Accept-Language when preferencesService throws', async () => {
+        const { preferencesService } = await import('../../services/preferencesService.js');
+        vi.mocked(preferencesService.readPreferences).mockRejectedValueOnce(new Error('disk error'));
+        const req = mockReq('ko');
+        await i18nMiddleware(req, mockRes(), next);
+        // Should use Accept-Language in catch block instead of hard-coding 'en'
+        expect(req.language).toBe('ko');
+        expect(next).toHaveBeenCalled();
+    });
+    it('falls back to en when preferencesService throws and no Accept-Language', async () => {
+        const { preferencesService } = await import('../../services/preferencesService.js');
+        vi.mocked(preferencesService.readPreferences).mockRejectedValueOnce(new Error('disk error'));
+        const req = mockReq(); // no Accept-Language header
+        await i18nMiddleware(req, mockRes(), next);
+        expect(req.language).toBe('en');
+        expect(next).toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=i18n.test.js.map

package/packages/server/dist/middleware/__tests__/i18n.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.test.js","sourceRoot":"","sources":["../../../src/middleware/__tests__/i18n.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG9D,yEAAyE;AACzE,EAAE,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,kBAAkB,EAAE;QAClB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAC/D;CACF,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjE,SAAS,OAAO,CAAC,cAAuB;IACtC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,OAAO;QACP,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAe,EAAE,EAAE;YAC1C,IAAI,CAAC,cAAc;gBAAE,OAAO,KAAK,CAAC;YAClC,kEAAkE;YAClE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YACjD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;KACmB,CAAC;AAC1B,CAAC;AAED,SAAS,OAAO;IACd,OAAO,EAAc,CAAC;AACxB,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,IAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACf,oEAAoE;QACpE,mBAAmB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACpF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAW,CAAC,CAAC;QAEjG,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C;QACrE,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACpF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,wEAAwE;QACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACpF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,CAAC,4BAA4B;QACnD,MAAM,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/packages/server/dist/middleware/__tests__/pathGuard.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Path Guard Middleware Tests
+ * [Source: Story 11.1 - Task 7.1]
+ */
+export {};
+//# sourceMappingURL=pathGuard.test.d.ts.map

package/packages/server/dist/middleware/__tests__/pathGuard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathGuard.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/__tests__/pathGuard.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}