parasor 0.1.0

package/server/routes/drops.js

@@ -0,0 +1,126 @@
+import { DEFAULT_DROP_SIZE_HARD_MAX_BYTES, DEFAULT_DROP_SIZE_MAX_BYTES, } from "@parasor/shared";
+import { Hono } from "hono";
+import { InvalidFilenameError, saveDrops, } from "../fs/drops.js";
+import { InvalidSessionIdError, } from "../fs/upload-staging.js";
+const FIELD_NAME = "files";
+export function createDropRoutes(deps) {
+    const { projectManager, appStateStore, ptyManager, uploadStaging } = deps;
+    const routes = new Hono();
+    routes.post("/:id/drops", async (c) => {
+        /**
+         * `Content-Length` guard runs before we consume the body so an oversized
+         * upload can be rejected without buffering it. Hono's built-in
+         * `bodyLimit` would require a static number at middleware construction
+         * time, but the hard cap is admin-editable at runtime -- we read it
+         * per-request instead.
+         */
+        const hardMax = appStateStore.get().serviceConfig.dropSizeHardMaxBytes ??
+            DEFAULT_DROP_SIZE_HARD_MAX_BYTES;
+        const transferEncoding = c.req
+            .header("transfer-encoding")
+            ?.toLowerCase()
+            .split(",")
+            .map((s) => s.trim());
+        if (transferEncoding?.includes("chunked")) {
+            return c.json({ error: "too-large", limit: hardMax }, 411);
+        }
+        const contentLengthHeader = c.req.header("content-length");
+        if (contentLengthHeader === undefined) {
+            return c.json({ error: "too-large", limit: hardMax }, 411);
+        }
+        const contentLength = Number(contentLengthHeader);
+        if (!Number.isFinite(contentLength) || contentLength < 0) {
+            return c.json({ error: "too-large", limit: hardMax }, 411);
+        }
+        if (contentLength > hardMax) {
+            return c.json({ error: "too-large", limit: hardMax }, 413);
+        }
+        const projectId = c.req.param("id");
+        const project = projectManager.get(projectId);
+        if (!project) {
+            return c.json({ error: "project not found" }, 404);
+        }
+        /**
+         * sessionId is required (upload staging isolation Q2): it scopes the staging dir so
+         * L1 (`releaseSession` on PTY exit) and L2/L3 (TTL sweep) can find and
+         * remove the right tree. No fallback path -- clients without a sessionId
+         * have no PTY to attach the drop to and were never a real flow.
+         *
+         * also verify the sessionId belongs to
+         * the URL projectId. Without per-session env injection (now done by
+         * `InProcessPtyHost.buildSessionEnv`) the cross-project case would
+         * have leaked drops; the env fix is the load-bearing guard, but
+         * rejecting mismatched ids here keeps the API contract honest.
+         */
+        const sessionId = c.req.query("sessionId");
+        if (!sessionId) {
+            return c.json({ error: "sessionId is required" }, 400);
+        }
+        const session = ptyManager.get(sessionId);
+        if (!session ||
+            session.projectId !== projectId ||
+            session.state === "ended") {
+            return c.json({ error: "session not found for project" }, 404);
+        }
+        let parsed;
+        try {
+            parsed = await c.req.parseBody({ all: true });
+        }
+        catch {
+            return c.json({ error: "invalid multipart body" }, 400);
+        }
+        const rawField = parsed[FIELD_NAME];
+        const collected = [];
+        if (Array.isArray(rawField)) {
+            for (const v of rawField) {
+                if (v instanceof File)
+                    collected.push(v);
+            }
+        }
+        else if (rawField instanceof File) {
+            collected.push(rawField);
+        }
+        if (collected.length === 0) {
+            return c.json({ error: "no files in request" }, 400);
+        }
+        const softMax = appStateStore.get().serviceConfig.dropSizeMaxBytes ??
+            DEFAULT_DROP_SIZE_MAX_BYTES;
+        const inputs = [];
+        for (const file of collected) {
+            if (file.size === 0) {
+                return c.json({ error: "invalid-filename", reason: "empty" }, 400);
+            }
+            if (file.size > softMax) {
+                return c.json({ error: "too-large", limit: softMax }, 413);
+            }
+            const bytes = new Uint8Array(await file.arrayBuffer());
+            inputs.push({ filename: file.name, bytes });
+        }
+        let saved;
+        try {
+            const targetDir = await uploadStaging.acquire(sessionId);
+            saved = await saveDrops(targetDir, inputs);
+        }
+        catch (err) {
+            if (err instanceof InvalidFilenameError) {
+                return c.json({ error: "invalid-filename", reason: err.reason }, 400);
+            }
+            if (err instanceof InvalidSessionIdError) {
+                // Caller-supplied id failed sanitizer. Return 400 without
+                // echoing the raw value -- the error class deliberately keeps
+                // the value out of the message so an attacker cannot inject
+                // log noise (reviewed for correctness). `err.value` is available
+                // server-side via the structured log if forensics need it.
+                console.error("[drops] invalid sessionId rejected; reason:", err.reason);
+                return c.json({ error: "invalid sessionId" }, 400);
+            }
+            // Log full error server-side; `err.message` can contain absolute
+            // paths and filesystem details we do not want to leak to clients.
+            console.error("[drops] saveDrops failed:", err);
+            return c.json({ error: "io-error" }, 500);
+        }
+        return c.json({ paths: saved });
+    });
+    return routes;
+}
+//# sourceMappingURL=drops.js.map

package/server/routes/drops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drops.js","sourceRoot":"","sources":["../../src/routes/drops.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,2BAA2B,GAG5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAEL,oBAAoB,EACpB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AAYjC,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAE1B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC;;;;;;WAMG;QACH,MAAM,OAAO,GACX,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,oBAAoB;YACtD,gCAAgC,CAAC;QACnC,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG;aAC3B,MAAM,CAAC,mBAAmB,CAAC;YAC5B,EAAE,WAAW,EAAE;aACd,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,IAAI,gBAAgB,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,GAAG,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED;;;;;;;;;;;WAWG;QACH,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IACE,CAAC,OAAO;YACR,OAAO,CAAC,SAAS,KAAK,SAAS;YAC/B,OAAO,CAAC,KAAK,KAAK,OAAO,EACzB,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,SAAS,GAAW,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,CAAC,YAAY,IAAI;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,YAAY,IAAI,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,OAAO,GACX,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB;YAClD,2BAA2B,CAAC;QAE9B,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,EAC9C,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EACjD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,0DAA0D;gBAC1D,8DAA8D;gBAC9D,4DAA4D;gBAC5D,iEAAiE;gBACjE,2DAA2D;gBAC3D,OAAO,CAAC,KAAK,CACX,6CAA6C,EAC7C,GAAG,CAAC,MAAM,CACX,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YACD,iEAAiE;YACjE,kEAAkE;YAClE,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/server/routes/file-uploads.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { AppStateStore } from "../state/app-state.js";
+import type { ProjectManager } from "../state/project-manager.js";
+export interface FileUploadRoutesDeps {
+    projectManager: ProjectManager;
+    appStateStore: AppStateStore;
+}
+export declare function createFileUploadRoutes(deps: FileUploadRoutesDeps): Hono;
+//# sourceMappingURL=file-uploads.d.ts.map

package/server/routes/file-uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-uploads.d.ts","sourceRoot":"","sources":["../../src/routes/file-uploads.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;CAC9B;AAsBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAmIvE"}

package/server/routes/file-uploads.js

@@ -0,0 +1,119 @@
+import { DEFAULT_DROP_SIZE_HARD_MAX_BYTES, DEFAULT_DROP_SIZE_MAX_BYTES, } from "@parasor/shared";
+import { Hono } from "hono";
+import { InvalidUploadFilenameError, InvalidUploadTargetError, resolveTargetDir, saveUploads, UploadConflictError, } from "../fs/file-uploads.js";
+const FIELD_NAME = "files";
+const VALID_DISPOSITIONS = new Set([
+    "replace",
+    "keep-both",
+    "skip",
+]);
+function parseDisposition(raw) {
+    if (raw && VALID_DISPOSITIONS.has(raw)) {
+        return raw;
+    }
+    // Default policy: silent collisions are unacceptable; the client always
+    // surfaces a "Replace / Keep both / Skip" modal before retrying. The first
+    // request with no `disposition` is therefore an exploratory probe whose
+    // job is to discover whether any conflict exists -- "skip" gives that
+    // answer without mutating disk.
+    return "skip";
+}
+export function createFileUploadRoutes(deps) {
+    const { projectManager, appStateStore } = deps;
+    const routes = new Hono();
+    routes.post("/:id/files/upload", async (c) => {
+        const hardMax = appStateStore.get().serviceConfig.dropSizeHardMaxBytes ??
+            DEFAULT_DROP_SIZE_HARD_MAX_BYTES;
+        const transferEncoding = c.req
+            .header("transfer-encoding")
+            ?.toLowerCase()
+            .split(",")
+            .map((s) => s.trim());
+        if (transferEncoding?.includes("chunked")) {
+            return c.json({ error: "too-large", limit: hardMax }, 411);
+        }
+        const contentLengthHeader = c.req.header("content-length");
+        if (contentLengthHeader === undefined) {
+            return c.json({ error: "too-large", limit: hardMax }, 411);
+        }
+        const contentLength = Number(contentLengthHeader);
+        if (!Number.isFinite(contentLength) || contentLength < 0) {
+            return c.json({ error: "too-large", limit: hardMax }, 411);
+        }
+        if (contentLength > hardMax) {
+            return c.json({ error: "too-large", limit: hardMax }, 413);
+        }
+        const projectId = c.req.param("id");
+        const project = projectManager.get(projectId);
+        if (!project) {
+            return c.json({ error: "project not found" }, 404);
+        }
+        if (project.readOnly) {
+            return c.json({ error: "read-only" }, 403);
+        }
+        const targetParam = c.req.query("path") ?? "";
+        const disposition = parseDisposition(c.req.query("disposition"));
+        let targetDir;
+        try {
+            targetDir = await resolveTargetDir(project.path, targetParam);
+        }
+        catch (err) {
+            if (err instanceof InvalidUploadTargetError) {
+                return c.json({ error: "invalid-target", reason: err.reason }, 400);
+            }
+            console.error("[file-uploads] resolveTargetDir failed:", err);
+            return c.json({ error: "io-error" }, 500);
+        }
+        let parsed;
+        try {
+            parsed = await c.req.parseBody({ all: true });
+        }
+        catch {
+            return c.json({ error: "invalid multipart body" }, 400);
+        }
+        const rawField = parsed[FIELD_NAME];
+        const collected = [];
+        if (Array.isArray(rawField)) {
+            for (const v of rawField)
+                if (v instanceof File)
+                    collected.push(v);
+        }
+        else if (rawField instanceof File) {
+            collected.push(rawField);
+        }
+        if (collected.length === 0) {
+            return c.json({ error: "no files in request" }, 400);
+        }
+        const softMax = appStateStore.get().serviceConfig.dropSizeMaxBytes ??
+            DEFAULT_DROP_SIZE_MAX_BYTES;
+        const inputs = [];
+        for (const file of collected) {
+            if (file.size === 0) {
+                return c.json({ error: "invalid-filename", reason: "empty" }, 400);
+            }
+            if (file.size > softMax) {
+                return c.json({ error: "too-large", limit: softMax }, 413);
+            }
+            inputs.push({
+                filename: file.name,
+                bytes: new Uint8Array(await file.arrayBuffer()),
+            });
+        }
+        try {
+            const results = await saveUploads(targetDir, inputs, disposition);
+            return c.json({ files: results });
+        }
+        catch (err) {
+            if (err instanceof UploadConflictError) {
+                return c.json({ error: "conflict", conflicts: err.conflicts }, 409);
+            }
+            if (err instanceof InvalidUploadFilenameError) {
+                return c.json({ error: "invalid-filename", reason: err.reason }, 400);
+            }
+            console.error("[file-uploads] saveUploads failed:", err);
+            return c.json({ error: "io-error" }, 500);
+        }
+    });
+    return routes;
+}
+//# sourceMappingURL=file-uploads.js.map

package/server/routes/file-uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-uploads.js","sourceRoot":"","sources":["../../src/routes/file-uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,EAChC,2BAA2B,GAI5B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAS/B,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAwB;IACxD,SAAS;IACT,WAAW;IACX,MAAM;CACP,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,IAAI,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAA4B,CAAC,EAAE,CAAC;QAChE,OAAO,GAA4B,CAAC;IACtC,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,wEAAwE;IACxE,sEAAsE;IACtE,gCAAgC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAE1B,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,OAAO,GACX,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,oBAAoB;YACtD,gCAAgC,CAAC;QAEnC,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG;aAC3B,MAAM,CAAC,mBAAmB,CAAC;YAC5B,EAAE,WAAW,EAAE;aACd,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,IAAI,gBAAgB,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,GAAG,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,IAAI,CAA0B,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAEjE,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAC/C,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAA0B,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,SAAS,GAAW,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,IAAI,CAAC,YAAY,IAAI;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,QAAQ,YAAY,IAAI,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,OAAO,GACX,aAAa,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB;YAClD,2BAA2B,CAAC;QAE9B,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,EAC9C,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EACtC,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,IAAI,CAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACvC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAC/C,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EACjD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAA0B,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/server/routes/files.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { FilesystemService } from "../fs/service.js";
+import type { ProjectManager } from "../state/project-manager.js";
+interface FileRoutesOptions {
+    isWritable?: (projectId: string) => boolean;
+}
+export declare function createFileRoutes(projectManager: ProjectManager, getService: (projectId: string, worktreePath?: string) => FilesystemService | null, options?: FileRoutesOptions): Hono;
+export {};
+//# sourceMappingURL=files.d.ts.map

package/server/routes/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAe5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAyFlE,UAAU,iBAAiB;IACzB,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;CAC7C;AAED,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,CACV,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,KAClB,iBAAiB,GAAG,IAAI,EAC7B,OAAO,GAAE,iBAAsB,GAC9B,IAAI,CAuaN"}