patchwork-os 0.2.0-alpha.0 → 0.2.0-alpha.11

package/dist/server.js

@@ -1,5 +1,7 @@
 import { EventEmitter } from "node:events";
 import http from "node:http";
+import os from "node:os";
+import path from "node:path";
 import { WebSocket, WebSocketServer as WsServer } from "ws";
 import { routeApprovalRequest } from "./approvalHttp.js";
 import { getApprovalQueue } from "./approvalQueue.js";
@@ -353,6 +355,80 @@ export class Server extends EventEmitter {
                 res.end(JSON.stringify({ ok: true, v: PACKAGE_VERSION }));
                 return;
             }
+            // ── Connector OAuth callbacks (unauthenticated — browser redirect from vendor) ──
+            if (parsedUrl.pathname === "/connections/github/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGithubCallback } = await import("./connectors/github.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleGithubCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleLinearCallback } = await import("./connectors/linear.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleLinearCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSentryCallback } = await import("./connectors/sentry.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleSentryCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleCalendarCallback } = await import("./connectors/googleCalendar.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleCalendarCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/slack/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSlackCallback } = await import("./connectors/slack.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleSlackCallback(code, state, error);
+                    res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                    res.end(result.body);
+                })();
+                return;
+            }
             // ── Bearer token authentication ───────────────────────────────────────
             // All other HTTP endpoints require a valid Bearer token.
             // Accepts either:
@@ -643,6 +719,411 @@ export class Server extends EventEmitter {
                 });
                 return;
             }
+            // ── Gmail / Connections endpoints ───────────────────────────────────────
+            if (parsedUrl.pathname === "/connections" && req.method === "GET") {
+                void (async () => {
+                    const { handleConnectionsList } = await import("./connectors/gmail.js");
+                    const result = await handleConnectionsList();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGmailAuthRedirect } = await import("./connectors/gmail.js");
+                    const result = handleGmailAuthRedirect();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGmailCallback } = await import("./connectors/gmail.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleGmailCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "text/html",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleGmailDisconnect } = await import("./connectors/gmail.js");
+                    const result = await handleGmailDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleGmailTest } = await import("./connectors/gmail.js");
+                    const result = await handleGmailTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── GitHub MCP connector routes ─────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/github/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGithubAuthorize } = await import("./connectors/github.js");
+                    const result = await handleGithubAuthorize();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/github/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleGithubTest } = await import("./connectors/github.js");
+                    const result = await handleGithubTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/github" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleGithubDisconnect } = await import("./connectors/github.js");
+                    const result = await handleGithubDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Sentry MCP connector routes ─────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/sentry/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSentryAuthorize } = await import("./connectors/sentry.js");
+                    const result = await handleSentryAuthorize();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSentryCallback } = await import("./connectors/sentry.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleSentryCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleSentryTest } = await import("./connectors/sentry.js");
+                    const result = await handleSentryTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleSentryDisconnect } = await import("./connectors/sentry.js");
+                    const result = await handleSentryDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Linear MCP connector routes ─────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/linear/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleLinearAuthorize } = await import("./connectors/linear.js");
+                    const result = await handleLinearAuthorize();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleLinearCallback } = await import("./connectors/linear.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleLinearCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleLinearTest } = await import("./connectors/linear.js");
+                    const result = await handleLinearTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleLinearDisconnect } = await import("./connectors/linear.js");
+                    const result = await handleLinearDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Slack connector routes ──────────────────────────────────────
+            if ((parsedUrl.pathname === "/connections/slack/auth" || parsedUrl.pathname === "/connections/slack/authorize") &&
+                req.method === "GET") {
+                const { handleSlackAuthorize } = await import("./connectors/slack.js");
+                const result = handleSlackAuthorize();
+                if (result.redirect) {
+                    res.writeHead(302, { Location: result.redirect });
+                    res.end();
+                }
+                else {
+                    res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                    res.end(result.body);
+                }
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/slack/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleSlackTest } = await import("./connectors/slack.js");
+                    const result = await handleSlackTest();
+                    res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/slack" &&
+                req.method === "DELETE") {
+                const { handleSlackDisconnect } = await import("./connectors/slack.js");
+                const result = handleSlackDisconnect();
+                res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                res.end(result.body);
+                return;
+            }
+            // ── Google Calendar routes ──────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/google-calendar/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleCalendarAuthRedirect } = await import("./connectors/googleCalendar.js");
+                    const result = handleCalendarAuthRedirect();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleCalendarCallback } = await import("./connectors/googleCalendar.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleCalendarCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleCalendarTest } = await import("./connectors/googleCalendar.js");
+                    const result = await handleCalendarTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleCalendarDisconnect } = await import("./connectors/googleCalendar.js");
+                    const result = await handleCalendarDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Inbox routes ────────────────────────────────────────────────────
+            if (parsedUrl.pathname === "/inbox" && req.method === "GET") {
+                void (async () => {
+                    try {
+                        const { readdir, readFile, stat } = await import("node:fs/promises");
+                        const { existsSync } = await import("node:fs");
+                        const inboxDir = path.join(os.homedir(), ".patchwork", "inbox");
+                        if (!existsSync(inboxDir)) {
+                            res.writeHead(200, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ items: [] }));
+                            return;
+                        }
+                        const files = (await readdir(inboxDir)).filter((f) => f.endsWith(".md"));
+                        const items = await Promise.all(files.map(async (name) => {
+                            const filePath = path.join(inboxDir, name);
+                            const [content, stats] = await Promise.all([
+                                readFile(filePath, "utf8"),
+                                stat(filePath),
+                            ]);
+                            const stripped = content
+                                .split("\n")
+                                .filter((l) => !l.startsWith("#"))
+                                .join("\n")
+                                .trim();
+                            return {
+                                name,
+                                path: filePath,
+                                modifiedAt: stats.mtime.toISOString(),
+                                preview: stripped.slice(0, 200),
+                            };
+                        }));
+                        items.sort((a, b) => new Date(b.modifiedAt).getTime() -
+                            new Date(a.modifiedAt).getTime());
+                        res.writeHead(200, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({ items }));
+                    }
+                    catch (err) {
+                        res.writeHead(500, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({
+                            error: err instanceof Error ? err.message : String(err),
+                        }));
+                    }
+                })();
+                return;
+            }
+            const inboxFileMatch = parsedUrl.pathname?.match(/^\/inbox\/([^/]+\.md)$/);
+            if (inboxFileMatch && req.method === "GET") {
+                void (async () => {
+                    try {
+                        const { readFile, stat } = await import("node:fs/promises");
+                        const filename = decodeURIComponent(inboxFileMatch[1] ?? "");
+                        // Prevent path traversal — filename must not contain directory separators
+                        if (filename.includes("/") || filename.includes("\\")) {
+                            res.writeHead(400, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ error: "Invalid filename" }));
+                            return;
+                        }
+                        const filePath = path.join(os.homedir(), ".patchwork", "inbox", filename);
+                        const [content, stats] = await Promise.all([
+                            readFile(filePath, "utf8"),
+                            stat(filePath),
+                        ]);
+                        res.writeHead(200, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({
+                            name: filename,
+                            content,
+                            modifiedAt: stats.mtime.toISOString(),
+                        }));
+                    }
+                    catch (err) {
+                        const code = err.code;
+                        if (code === "ENOENT") {
+                            res.writeHead(404, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ error: "Not found" }));
+                        }
+                        else {
+                            res.writeHead(500, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({
+                                error: err instanceof Error ? err.message : String(err),
+                            }));
+                        }
+                    }
+                })();
+                return;
+            }
+            // ── End inbox routes ─────────────────────────────────────────────────
             if (parsedUrl.pathname === "/recipes/run" && req.method === "POST") {
                 const chunks = [];
                 req.on("data", (c) => chunks.push(c));
@@ -652,6 +1133,11 @@ export class Server extends EventEmitter {
                             const body = Buffer.concat(chunks).toString("utf-8");
                             const parsed = JSON.parse(body || "{}");
                             const name = parsed.name;
+                            const vars = parsed.vars &&
+                                typeof parsed.vars === "object" &&
+                                !Array.isArray(parsed.vars)
+                                ? parsed.vars
+                                : undefined;
                             if (typeof name !== "string" || !name) {
                                 res.writeHead(400, { "Content-Type": "application/json" });
                                 res.end(JSON.stringify({ ok: false, error: "name required" }));
@@ -665,7 +1151,7 @@ export class Server extends EventEmitter {
                                 }));
                                 return;
                             }
-                            const result = await this.runRecipeFn(name);
+                            const result = await this.runRecipeFn(name, vars);
                             res.writeHead(result.ok ? 200 : 400, {
                                 "Content-Type": "application/json",
                             });
@@ -759,7 +1245,7 @@ export class Server extends EventEmitter {
                 const id = sessionDetailMatch[1];
                 try {
                     const data = this.sessionDetailFn?.(id);
-                    if (!data || !data.summary) {
+                    if (!data?.summary) {
                         res.writeHead(404, { "Content-Type": "application/json" });
                         res.end(JSON.stringify({ error: "unknown sessionId" }));
                         return;
@@ -1126,6 +1612,8 @@ export class Server extends EventEmitter {
             ws.on("error", (err) => {
                 this.logger.error(`WebSocket client error: ${err.message}`);
             });
+            ws.remoteAddr =
+                req.socket.remoteAddress;
             this.emit("connection", ws);
         });
     }