pi-deck 0.1.4 → 0.1.5

package/dist/server.js

@@ -24,8 +24,8 @@ __export(plan_service_exports, {
   writePlan: () => writePlan
 });
 import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync, readdirSync as readdirSync2 } from "fs";
-import { join as join3, basename as basename2, resolve as resolve2 } from "path";
-import { homedir as homedir2 } from "os";
+import { join as join3, basename, resolve as resolve2 } from "path";
+import { homedir as homedir3 } from "os";
 function parseFrontmatter(content) {
   const frontmatter = {};
   if (!content.startsWith("---")) {
@@ -88,7 +88,7 @@ function parseTasks(content) {
 function parsePlan(filePath, content) {
   const { frontmatter } = parseFrontmatter(content);
   const tasks = parseTasks(content);
-  const fileName = basename2(filePath, ".md");
+  const fileName = basename(filePath, ".md");
   let title = frontmatter.title;
   if (!title) {
     const h1Match = content.match(/^#\s+(.+)$/m);
@@ -161,9 +161,9 @@ ${fmBlock}
 ---${content.slice(endIndex + 4)}`;
 }
 function getPlanDirectories(workspacePath) {
-  const workspaceName = basename2(workspacePath);
+  const workspaceName = basename(workspacePath);
   const dirs = [];
-  const globalDir = join3(homedir2(), "plans", workspaceName);
+  const globalDir = join3(homedir3(), "plans", workspaceName);
   dirs.push(globalDir);
   const localDir = join3(workspacePath, ".pi", "plans");
   dirs.push(localDir);
@@ -268,8 +268,8 @@ __export(job_service_exports, {
   writeJob: () => writeJob
 });
 import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync2, readdirSync as readdirSync3, mkdirSync, renameSync } from "fs";
-import { join as join4, basename as basename3, resolve as resolve3, dirname as dirname2 } from "path";
-import { homedir as homedir3 } from "os";
+import { join as join4, basename as basename2, resolve as resolve3, dirname as dirname2 } from "path";
+import { homedir as homedir4 } from "os";
 import YAML from "yaml";
 function statusToPhase(status) {
   switch (status) {
@@ -366,7 +366,7 @@ function parseJobFrontmatter(content) {
 function parseJob(filePath, content) {
   const { frontmatter } = parseJobFrontmatter(content);
   const tasks = parseTasks(content);
-  const fileName = basename3(filePath, ".md");
+  const fileName = basename2(filePath, ".md");
   let title = frontmatter.title;
   if (!title) {
     const h1Match = content.match(/^#\s+(.+)$/m);
@@ -434,9 +434,9 @@ function updateTaskInContent2(content, lineNumber, done) {
   return lines.join("\n");
 }
 function getJobDirectories(workspacePath) {
-  const workspaceName = basename3(workspacePath);
+  const workspaceName = basename2(workspacePath);
   const dirs = [];
-  dirs.push(join4(homedir3(), ".pi", "agent", "jobs", workspaceName));
+  dirs.push(join4(homedir4(), ".pi", "agent", "jobs", workspaceName));
   dirs.push(join4(workspacePath, ".pi", "jobs"));
   return dirs;
 }
@@ -491,8 +491,8 @@ function writeJob(jobPath, content) {
   return parseJob(jobPath, content);
 }
 function createJob(workspacePath, title, description, tags) {
-  const workspaceName = basename3(workspacePath);
-  const jobsDir = join4(homedir3(), ".pi", "agent", "jobs", workspaceName);
+  const workspaceName = basename2(workspacePath);
+  const jobsDir = join4(homedir4(), ".pi", "agent", "jobs", workspaceName);
   if (!existsSync4(jobsDir)) {
     mkdirSync(jobsDir, { recursive: true });
   }
@@ -579,7 +579,7 @@ function getArchivedDir(jobDir) {
 }
 function archiveJob(jobPath) {
   const dir = dirname2(jobPath);
-  const file = basename3(jobPath);
+  const file = basename2(jobPath);
   const archivedDir = getArchivedDir(dir);
   if (!existsSync4(archivedDir)) {
     mkdirSync(archivedDir, { recursive: true });
@@ -591,7 +591,7 @@ function archiveJob(jobPath) {
 function unarchiveJob(jobPath) {
   const archivedDir = dirname2(jobPath);
   const parentDir = dirname2(archivedDir);
-  const file = basename3(jobPath);
+  const file = basename2(jobPath);
   const newPath = join4(parentDir, file);
   renameSync(jobPath, newPath);
   return newPath;
@@ -764,10 +764,10 @@ import { createServer } from "http";
 import { WebSocketServer, WebSocket } from "ws";
 import { fileURLToPath } from "url";
 import { dirname as dirname5, join as join7, resolve as resolve4, sep } from "path";
-import { existsSync as existsSync9, readFileSync as readFileSync4, writeFileSync as writeFileSync3, readdirSync as readdirSync5, statSync as statSync3 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync4, readdirSync as readdirSync5, statSync as statSync3 } from "fs";
 import { unlink } from "fs/promises";
 import { spawn } from "child_process";
-import { homedir as homedir5 } from "os";
+import { homedir as homedir6 } from "os";
 import { SessionManager as SessionManager2 } from "@mariozechner/pi-coding-agent";
 
 // packages/server/dist/config.js
@@ -801,9 +801,7 @@ function findProjectRoot(startDir) {
 var projectRoot = findProjectRoot(process.cwd());
 var DEFAULT_CONFIG = {
   port: 9741,
-  host: "0.0.0.0",
-  // Default to detected project root, then home as fallback
-  allowedDirectories: [projectRoot, homedir()]
+  host: "0.0.0.0"
 };
 var CONFIG_PATHS = [
   resolve(process.cwd(), "pi-deck.config.json"),
@@ -833,9 +831,6 @@ function loadConfigFromEnv() {
   if (process.env.HOST) {
     config2.host = process.env.HOST;
   }
-  if (process.env.PI_ALLOWED_DIRS) {
-    config2.allowedDirectories = process.env.PI_ALLOWED_DIRS.split(":").map((d) => resolve(d.replace(/^~/, homedir())));
-  }
   return config2;
 }
 var TILDE_PREFIX = /^~(?=\/|$)/;
@@ -847,57 +842,36 @@ function canonicalizePath(input) {
     return normalized;
   }
 }
-function normalizeDirectories(dirs) {
-  return dirs.map((d) => canonicalizePath(d));
-}
 function loadConfig() {
   const fileConfig = loadConfigFromFile();
   const envConfig = loadConfigFromEnv();
   const config2 = {
     port: envConfig.port ?? fileConfig.port ?? DEFAULT_CONFIG.port,
-    host: envConfig.host ?? fileConfig.host ?? DEFAULT_CONFIG.host,
-    allowedDirectories: normalizeDirectories(envConfig.allowedDirectories ?? fileConfig.allowedDirectories ?? DEFAULT_CONFIG.allowedDirectories)
+    host: envConfig.host ?? fileConfig.host ?? DEFAULT_CONFIG.host
   };
-  console.log("[Config] Allowed directories:", config2.allowedDirectories);
   return config2;
 }
-function isPathAllowed(path, allowedDirectories) {
-  const normalizedPath = canonicalizePath(path);
-  return allowedDirectories.some((allowed) => {
-    const normalizedAllowed = canonicalizePath(allowed);
-    if (normalizedAllowed === "/") {
-      return true;
-    }
-    return normalizedPath === normalizedAllowed || normalizedPath.startsWith(normalizedAllowed + "/");
-  });
-}
 
 // packages/server/dist/directory-browser.js
 import { readdirSync, statSync, existsSync as existsSync2 } from "fs";
-import { basename, join as join2 } from "path";
+import { join as join2 } from "path";
+import { homedir as homedir2 } from "os";
 var DirectoryBrowser = class {
-  allowedDirectories;
-  constructor(allowedDirectories) {
-    this.allowedDirectories = allowedDirectories;
-  }
   /**
    * List the allowed root directories
    */
   listRoots() {
-    return this.allowedDirectories.map((dir) => ({
-      name: basename(dir) || dir,
-      path: dir,
-      hasPiSessions: this.checkForPiSessions(dir)
-    }));
+    return [{
+      name: "Home",
+      path: homedir2(),
+      hasPiSessions: this.checkForPiSessions(homedir2())
+    }];
   }
   /**
    * Browse a directory and return its subdirectories
    */
   browse(path) {
     const normalizedPath = canonicalizePath(path);
-    if (!isPathAllowed(normalizedPath, this.allowedDirectories)) {
-      throw new Error(`Access denied: ${path} is not within allowed directories`);
-    }
     if (!existsSync2(normalizedPath)) {
       throw new Error(`Directory not found: ${path}`);
     }
@@ -942,13 +916,13 @@ var DirectoryBrowser = class {
    * Get the allowed directories
    */
   getAllowedDirectories() {
-    return [...this.allowedDirectories];
+    return [homedir2()];
   }
 };
 
 // packages/server/dist/workspace-manager.js
 import { EventEmitter as EventEmitter3 } from "events";
-import { basename as basename4 } from "path";
+import { basename as basename3 } from "path";
 
 // packages/server/dist/session-orchestrator.js
 import { EventEmitter as EventEmitter2 } from "events";
@@ -2975,14 +2949,12 @@ var SessionOrchestrator = class extends EventEmitter2 {
 
 // packages/server/dist/workspace-manager.js
 var WorkspaceManager = class extends EventEmitter3 {
-  allowedDirectories;
   workspaces = /* @__PURE__ */ new Map();
   nextWorkspaceId = 1;
   syncIntegration = null;
   openingPaths = /* @__PURE__ */ new Set();
-  constructor(allowedDirectories) {
+  constructor() {
     super();
-    this.allowedDirectories = allowedDirectories;
   }
   /**
    * Set the sync integration for state tracking
@@ -2997,9 +2969,6 @@ var WorkspaceManager = class extends EventEmitter3 {
    */
   async openWorkspace(path) {
     const normalizedPath = canonicalizePath(path);
-    if (!isPathAllowed(normalizedPath, this.allowedDirectories)) {
-      throw new Error(`Access denied: ${normalizedPath} is not within allowed directories`);
-    }
     while (this.openingPaths.has(normalizedPath)) {
       await new Promise((resolve5) => setTimeout(resolve5, 10));
     }
@@ -3044,7 +3013,7 @@ var WorkspaceManager = class extends EventEmitter3 {
       const workspace = {
         id,
         path: normalizedPath,
-        name: basename4(normalizedPath) || normalizedPath,
+        name: basename3(normalizedPath) || normalizedPath,
         orchestrator,
         unsubscribe,
         clientCount: 1,
@@ -3258,9 +3227,9 @@ var WorkspaceManager = class extends EventEmitter3 {
   }
 };
 var workspaceManager = null;
-function getWorkspaceManager(allowedDirectories) {
+function getWorkspaceManager() {
   if (!workspaceManager) {
-    workspaceManager = new WorkspaceManager(allowedDirectories);
+    workspaceManager = new WorkspaceManager();
   }
   return workspaceManager;
 }
@@ -3268,7 +3237,7 @@ function getWorkspaceManager(allowedDirectories) {
 // packages/server/dist/ui-state.js
 import Database from "better-sqlite3";
 import { existsSync as existsSync6, mkdirSync as mkdirSync2 } from "fs";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "os";
 import { dirname as dirname3, join as join5 } from "path";
 var DEFAULT_STATE = {
   openWorkspaces: [],
@@ -3287,7 +3256,7 @@ var DEFAULT_STATE = {
 var UIStateStore = class {
   db;
   constructor(dbPath) {
-    const path = dbPath || join5(homedir4(), ".config", "pi-deck", "ui-state.db");
+    const path = dbPath || join5(homedir5(), ".config", "pi-deck", "ui-state.db");
     const dir = dirname3(path);
     if (!existsSync6(dir)) {
       mkdirSync2(dir, { recursive: true });
@@ -5179,7 +5148,7 @@ var SyncIntegration = class extends EventEmitter8 {
 
 // packages/server/dist/index.js
 var config = loadConfig();
-var syncDbPath = join7(homedir5(), ".pi", "pi-deck-sync.db");
+var syncDbPath = join7(homedir6(), ".pi", "pi-deck-sync.db");
 var syncIntegration = new SyncIntegration(syncDbPath);
 console.log(`[Sync] Initialized sync database at ${syncDbPath}`);
 var PORT = config.port;
@@ -5219,9 +5188,9 @@ if (existsSync9(clientDistPath)) {
 }
 var server = createServer(app);
 var wss = new WebSocketServer({ server, path: "/ws" });
-var directoryBrowser = new DirectoryBrowser(config.allowedDirectories);
+var directoryBrowser = new DirectoryBrowser();
 var uiStateStore = getUIStateStore();
-var workspaceManager2 = getWorkspaceManager(config.allowedDirectories);
+var workspaceManager2 = getWorkspaceManager();
 workspaceManager2.setSyncIntegration(syncIntegration);
 var clientWorkspaces = /* @__PURE__ */ new Map();
 var pendingQuestionnaireRoutes = /* @__PURE__ */ new Map();
@@ -5360,7 +5329,6 @@ Please read the job file and execute the review steps.`;
 app.get("/health", (_req, res) => {
   res.json({
     status: "ok",
-    allowedDirectories: config.allowedDirectories,
     activeWorkspaces: workspaceManager2.listWorkspaces().length
   });
 });
@@ -5372,8 +5340,7 @@ wss.on("connection", async (ws) => {
   send(ws, {
     type: "connected",
     workspaces: existingWorkspaces,
-    allowedRoots: config.allowedDirectories,
-    homeDirectory: homedir5(),
+    homeDirectory: homedir6(),
     uiState,
     ...updateAvailable ? { updateAvailable } : {}
   });
@@ -5520,8 +5487,7 @@ async function handleMessage(ws, message) {
         send(ws, {
           type: "directoryList",
           path: "/",
-          entries: directoryBrowser.listRoots(),
-          allowedRoots: directoryBrowser.getAllowedDirectories()
+          entries: directoryBrowser.listRoots()
         });
       }
       break;
@@ -6183,26 +6149,6 @@ ${planNote}` : planNote;
       });
       break;
     }
-    case "updateAllowedRoots": {
-      const { roots } = message;
-      console.log("[Config] Updating allowed roots:", roots);
-      const configPath = join7(homedir5(), ".pi-deck.json");
-      let fileConfig = {};
-      try {
-        if (existsSync9(configPath)) {
-          fileConfig = JSON.parse(readFileSync4(configPath, "utf-8"));
-        }
-      } catch {
-      }
-      fileConfig.allowedDirectories = roots;
-      writeFileSync3(configPath, JSON.stringify(fileConfig, null, 2));
-      console.log("[Config] Saved config to", configPath);
-      send(ws, {
-        type: "allowedRootsUpdated",
-        roots
-      });
-      break;
-    }
     // ========================================================================
     // Session Tree Navigation
     // ========================================================================
@@ -6433,26 +6379,13 @@ ${planNote}` : planNote;
       }
       const rootPath = resolve4(workspace.path);
       const rawPath = message.path || "";
-      const expandedPath = rawPath.startsWith("~/") ? join7(homedir5(), rawPath.slice(2)) : rawPath;
+      const expandedPath = rawPath.startsWith("~/") ? join7(homedir6(), rawPath.slice(2)) : rawPath;
       const isAbsolute = expandedPath.startsWith("/");
       let targetPath;
       let displayPath;
       if (isAbsolute) {
         targetPath = resolve4(expandedPath);
         displayPath = rawPath;
-        const inWorkspace = targetPath.startsWith(rootPath + sep) || targetPath === rootPath;
-        const inAllowed = config.allowedDirectories.some((dir) => targetPath.startsWith(resolve4(dir) + sep) || targetPath === resolve4(dir));
-        if (!inWorkspace && !inAllowed) {
-          send(ws, {
-            type: "workspaceFile",
-            workspaceId: message.workspaceId,
-            path: displayPath,
-            content: "",
-            truncated: false,
-            requestId: message.requestId
-          });
-          break;
-        }
       } else {
         const relativePath = rawPath.replace(/^\/+/, "");
         targetPath = resolve4(rootPath, relativePath);
@@ -7319,7 +7252,6 @@ if (existsSync9(clientDistPath)) {
 }
 server.listen(PORT, config.host, () => {
   console.log(`[Server] Pi-Deck server running on http://${config.host}:${PORT}`);
-  console.log(`[Server] Allowed directories: ${config.allowedDirectories.join(", ")}`);
   console.log(`[Server] WebSocket endpoint: ws://${config.host}:${PORT}/ws`);
 });
 //# sourceMappingURL=server.js.map