spec-cat 0.1.61 → 0.1.63

package/.output/server/chunks/routes/api/chat/compare.get.mjs

@@ -1,6 +1,8 @@
 import { d as defineEventHandler, f as getQuery, c as createError, l as logger } from '../../../nitro/nitro.mjs';
 import { i as isGitRepositorySync } from '../../../_/git.mjs';
 import { e as execGitArgs } from '../../../_/gitExec.mjs';
+import { v as validateWorktreePath } from '../../../_/validateWorktree.mjs';
+import { a as assertSafeBranchName } from '../../../_/chatGit.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -24,6 +26,7 @@ import 'node:fs/promises';
 import 'node:url';
 import 'child_process';
 import 'util';
+import '../../../_/worktreePaths.mjs';
 
 const compare_get = defineEventHandler(async (event) => {
   try {
@@ -36,6 +39,8 @@ const compare_get = defineEventHandler(async (event) => {
         statusMessage: "worktreePath and baseBranch are required"
       });
     }
+    validateWorktreePath(worktreePath);
+    assertSafeBranchName(baseBranch, "base branch");
     if (!isGitRepositorySync(worktreePath)) {
       throw createError({
         statusCode: 400,

package/.output/server/chunks/routes/api/chat/compare.get.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"compare.get.mjs","sources":["../../../../../../server/api/chat/compare.get.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,oBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,IAAA;AACA,IAAA,MAAA,KAAA,GAAA,SAAA,KAAA,CAAA;AACA,IAAA,MAAA,eAAA,KAAA,CAAA,YAAA;AACA,IAAA,MAAA,aAAA,KAAA,CAAA,UAAA;AAEA,IAAA,IAAA,CAAA,YAAA,IAAA,CAAA,UAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,aAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAEA,IAAA,IAAA,CAAA,mBAAA,CAAA,YAAA,CAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,aAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAEA,IAAA,MAAA,MAAA,GAAA,YAAA,YAAA,EAAA;AAAA,MACA,UAAA;AAAA,MACA,cAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAA,UAAA,CAAA,OAAA;AAAA,KACA,CAAA;AAEA,IAAA,MAAA,CAAA,WAAA,QAAA,CAAA,GAAA,OAAA,IAAA,EAAA,CAAA,MAAA,KAAA,CAAA;AACA,IAAA,MAAA,SAAA,MAAA,CAAA,QAAA,CAAA,SAAA,IAAA,GAAA,EAAA,EAAA,CAAA,IAAA,CAAA;AACA,IAAA,MAAA,QAAA,MAAA,CAAA,QAAA,CAAA,QAAA,IAAA,GAAA,EAAA,EAAA,CAAA,IAAA,CAAA;AAEA,IAAA,OAAA,EAAA,OAAA,MAAA,EAAA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,IAAA,KAAA,IAAA,OAAA,KAAA,KAAA,QAAA,IAAA,gBAAA,KAAA,EAAA;AACA,MAAA,MAAA,KAAA;AAAA,IACA;AAEA,IAAA,MAAA,CAAA,GAAA,CAAA,KAAA,CAAA,uCAAA,EAAA,EAAA,OAAA,CAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,aAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}
+{"version":3,"file":"compare.get.mjs","sources":["../../../../../../server/api/chat/compare.get.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,oBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,IAAA;AACA,IAAA,MAAA,KAAA,GAAA,SAAA,KAAA,CAAA;AACA,IAAA,MAAA,eAAA,KAAA,CAAA,YAAA;AACA,IAAA,MAAA,aAAA,KAAA,CAAA,UAAA;AAEA,IAAA,IAAA,CAAA,YAAA,IAAA,CAAA,UAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,aAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAEA,IAAA,oBAAA,CAAA,YAAA,CAAA;AACA,IAAA,oBAAA,CAAA,YAAA,aAAA,CAAA;AAEA,IAAA,IAAA,CAAA,mBAAA,CAAA,YAAA,CAAA,EAAA;AACA,MAAA,MAAA,WAAA,CAAA;AAAA,QACA,UAAA,EAAA,GAAA;AAAA,QACA,aAAA,EAAA;AAAA,OACA,CAAA;AAAA,IACA;AAEA,IAAA,MAAA,MAAA,GAAA,YAAA,YAAA,EAAA;AAAA,MACA,UAAA;AAAA,MACA,cAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAA,UAAA,CAAA,OAAA;AAAA,KACA,CAAA;AAEA,IAAA,MAAA,CAAA,WAAA,QAAA,CAAA,GAAA,OAAA,IAAA,EAAA,CAAA,MAAA,KAAA,CAAA;AACA,IAAA,MAAA,SAAA,MAAA,CAAA,QAAA,CAAA,SAAA,IAAA,GAAA,EAAA,EAAA,CAAA,IAAA,CAAA;AACA,IAAA,MAAA,QAAA,MAAA,CAAA,QAAA,CAAA,QAAA,IAAA,GAAA,EAAA,EAAA,CAAA,IAAA,CAAA;AAEA,IAAA,OAAA,EAAA,OAAA,MAAA,EAAA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,IAAA,KAAA,IAAA,OAAA,KAAA,KAAA,QAAA,IAAA,gBAAA,KAAA,EAAA;AACA,MAAA,MAAA,KAAA;AAAA,IACA;AAEA,IAAA,MAAA,CAAA,GAAA,CAAA,KAAA,CAAA,uCAAA,EAAA,EAAA,OAAA,CAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,aAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}

package/.output/server/chunks/routes/api/chat/finalize.post.mjs

@@ -1,11 +1,14 @@
 import { d as defineEventHandler, b as readBody, c as createError, e as getProjectDir, l as logger } from '../../../nitro/nitro.mjs';
-import { execSync, exec } from 'node:child_process';
-import { promisify } from 'node:util';
+import { execSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { rm } from 'node:fs/promises';
 import { r as resolveExistingBaseBranch } from '../../../_/baseBranch.mjs';
 import { b as guardServerProviderCapability } from '../../../_/aiProviderSelection.mjs';
 import { g as getChatWorktreePath } from '../../../_/worktreePaths.mjs';
+import { v as validateWorktreePath } from '../../../_/validateWorktree.mjs';
+import { a as assertSafeBranchName, l as localBranchRef, g as git } from '../../../_/chatGit.mjs';
+import { a as autoCommitChanges } from '../../../_/claudeService.mjs';
+import { w as withLock } from '../../../_/asyncLock.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -29,18 +32,21 @@ import '../../../_/gitExec.mjs';
 import 'child_process';
 import 'util';
 import '../../../_/aiProviderRegistry.mjs';
+import '../../../_/claude.mjs';
 
-const execAsync = promisify(exec);
-async function git(cwd, cmd) {
-  const { stdout } = await execAsync(`git ${cmd}`, { cwd });
-  return stdout.trim();
-}
-async function autoCommitChanges(worktreePath) {
-  const status = await git(worktreePath, "status --porcelain");
-  if (!status) return false;
-  await git(worktreePath, "add -A");
-  execSync("git commit -F -", { cwd: worktreePath, input: "auto-commit uncommitted changes", encoding: "utf-8" });
-  return true;
+async function collectConflictFiles(worktreePath) {
+  try {
+    const diffOutput = await git(worktreePath, ["diff", "--name-only", "--diff-filter=U"]);
+    const files = diffOutput.split("\n").filter(Boolean);
+    if (files.length > 0) return files;
+  } catch {
+  }
+  try {
+    const statusOutput = await git(worktreePath, ["status", "--porcelain"]);
+    return statusOutput.split("\n").filter((line) => /^(UU|AA|DU|UD|UA|AU|DD)\s/.test(line)).map((line) => line.substring(3).trim());
+  } catch {
+    return [];
+  }
 }
 const finalize_post = defineEventHandler(async (event) => {
   const body = await readBody(event);
@@ -59,8 +65,12 @@ const finalize_post = defineEventHandler(async (event) => {
     return providerGuard.failure;
   }
   const projectDir = getProjectDir();
-  const branchName = body.worktreeBranch || `sc/${conversationId}`;
+  const branchName = assertSafeBranchName(body.worktreeBranch || `sc/${conversationId}`, "branch");
   const worktreePath = body.worktreePath || getChatWorktreePath(conversationId);
+  const previewBranch = body.previewBranch ? assertSafeBranchName(body.previewBranch, "preview branch") : void 0;
+  if (existsSync(worktreePath)) {
+    validateWorktreePath(worktreePath);
+  }
   logger.chat.info("Finalizing conversation", { conversationId, branchName });
   const baseBranch = await resolveExistingBaseBranch({
     cwd: projectDir,
@@ -70,98 +80,89 @@ const finalize_post = defineEventHandler(async (event) => {
   if (!baseBranch) {
     return { success: false, error: "Unable to resolve a valid base branch for this worktree." };
   }
-  try {
-    if (!existsSync(worktreePath)) {
-      return { success: false, error: "Worktree directory not found. It may have been cleaned up." };
-    }
-    await autoCommitChanges(worktreePath);
-    let commitCount;
-    try {
-      const countStr = await git(worktreePath, `rev-list --count ${baseBranch}..HEAD`);
-      commitCount = parseInt(countStr, 10);
-    } catch {
-      return { success: false, error: `Cannot compare with base branch "${baseBranch}". It may not exist.` };
-    }
-    if (commitCount === 0) {
-      return { success: false, error: "No commits to finalize." };
-    }
-    const mergeBase = await git(worktreePath, `merge-base ${baseBranch} HEAD`);
-    await git(worktreePath, `reset --soft ${mergeBase}`);
-    execSync("git commit -F -", { cwd: worktreePath, input: commitMessage, encoding: "utf-8" });
+  const baseBranchRef = localBranchRef(baseBranch, "base branch");
+  return withLock(projectDir, async () => {
     try {
-      await git(worktreePath, `rebase ${baseBranch}`);
-    } catch (rebaseError) {
-      logger.chat.warn("Rebase conflict during finalize", { conversationId });
-      let conflictFiles = [];
+      if (!existsSync(worktreePath)) {
+        return { success: false, error: "Worktree directory not found. It may have been cleaned up." };
+      }
+      await autoCommitChanges(worktreePath);
+      let commitCount;
       try {
-        const diffOutput = await git(worktreePath, "diff --name-only --diff-filter=U");
-        conflictFiles = diffOutput.split("\n").filter(Boolean);
+        const countStr = await git(worktreePath, ["rev-list", "--count", `${baseBranchRef}..HEAD`]);
+        commitCount = parseInt(countStr, 10);
       } catch {
-        try {
-          const statusOutput = await git(worktreePath, "status --porcelain");
-          conflictFiles = statusOutput.split("\n").filter((line) => /^(UU|AA|DU|UD|UA|AU|DD)\s/.test(line)).map((line) => line.substring(3).trim());
-        } catch {
-        }
+        return { success: false, error: `Cannot compare with base branch "${baseBranch}". It may not exist.` };
       }
-      return {
-        success: false,
-        error: `Rebase conflict with "${baseBranch}". Resolve conflicts to continue.`,
-        conflictFiles,
-        rebaseInProgress: true
-      };
-    }
-    const previewBranch = body.previewBranch;
-    try {
-      const currentBranch = await git(projectDir, "rev-parse --abbrev-ref HEAD");
-      if (currentBranch !== baseBranch) {
-        await git(projectDir, `checkout "${baseBranch}"`);
+      if (commitCount === 0) {
+        return { success: false, error: "No commits to finalize." };
       }
-    } catch {
-    }
-    const newHead = await git(worktreePath, "rev-parse HEAD");
-    await git(projectDir, `update-ref refs/heads/${baseBranch} ${newHead}`);
-    try {
-      const mainBranch = await git(projectDir, "rev-parse --abbrev-ref HEAD");
-      if (mainBranch === baseBranch) {
-        await git(projectDir, "reset --hard HEAD");
+      try {
+        await git(worktreePath, ["rebase", baseBranchRef]);
+      } catch {
+        logger.chat.warn("Rebase conflict during finalize", { conversationId });
+        const conflictFiles = await collectConflictFiles(worktreePath);
+        return {
+          success: false,
+          error: `Rebase conflict with "${baseBranch}". Resolve conflicts to continue.`,
+          conflictFiles,
+          rebaseInProgress: true
+        };
       }
-    } catch {
-    }
-    logger.chat.info("Base branch updated", { baseBranch, newHead });
-    try {
-      await execAsync(`git worktree remove "${worktreePath}" --force`, { cwd: projectDir });
-    } catch {
+      await git(worktreePath, ["reset", "--soft", baseBranchRef]);
+      execSync("git commit -F -", { cwd: worktreePath, input: commitMessage, encoding: "utf-8" });
       try {
-        await rm(worktreePath, { recursive: true, force: true });
+        const currentBranch = await git(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+        if (currentBranch !== baseBranch) {
+          await git(projectDir, ["switch", baseBranch]);
+        }
       } catch {
       }
-    }
-    await execAsync("git worktree prune", { cwd: projectDir }).catch(() => {
-    });
-    try {
-      await git(projectDir, `branch -D "${branchName}"`);
-    } catch {
-      logger.chat.warn("Failed to delete temp branch", { branchName });
-    }
-    if (previewBranch) {
+      const newHead = await git(worktreePath, ["rev-parse", "HEAD"]);
+      await git(projectDir, ["update-ref", `refs/heads/${baseBranch}`, newHead]);
+      try {
+        const mainBranch = await git(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+        if (mainBranch === baseBranch) {
+          await git(projectDir, ["reset", "--hard", "HEAD"]);
+        }
+      } catch {
+      }
+      logger.chat.info("Base branch updated", { baseBranch, newHead });
+      try {
+        await git(projectDir, ["worktree", "remove", worktreePath, "--force"]);
+      } catch {
+        try {
+          await rm(worktreePath, { recursive: true, force: true });
+        } catch {
+        }
+      }
+      await git(projectDir, ["worktree", "prune"]).catch(() => {
+      });
       try {
-        await git(projectDir, `branch -D "${previewBranch}"`);
+        await git(projectDir, ["branch", "-D", branchName]);
       } catch {
+        logger.chat.warn("Failed to delete temp branch", { branchName });
       }
+      if (previewBranch) {
+        try {
+          await git(projectDir, ["branch", "-D", previewBranch]);
+        } catch {
+        }
+      }
+      logger.chat.info("Conversation finalized", { conversationId, newCommit: newHead });
+      return {
+        success: true,
+        newCommit: newHead
+      };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      logger.chat.error("Finalize failed", { conversationId, error: errorMessage });
+      return {
+        success: false,
+        error: errorMessage
+      };
     }
-    logger.chat.info("Conversation finalized", { conversationId, newCommit: newHead });
-    return {
-      success: true,
-      newCommit: newHead
-    };
-  } catch (error) {
-    const errorMessage = error instanceof Error ? error.message : String(error);
-    logger.chat.error("Finalize failed", { conversationId, error: errorMessage });
-    return {
-      success: false,
-      error: errorMessage
-    };
-  }
+  });
 });
 
 export { finalize_post as default };

package/.output/server/chunks/routes/api/chat/finalize.post.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"finalize.post.mjs","sources":["../../../../../../server/api/chat/finalize.post.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAA,SAAA,GAAA,UAAA,IAAA,CAAA;AAEA,eAAA,GAAA,CAAA,KAAA,GAAA,EAAA;AACA,EAAA,MAAA,EAAA,MAAA,EAAA,GAAA,MAAA,SAAA,CAAA,OAAA,GAAA,CAAA,CAAA,EAAA,EAAA,GAAA,EAAA,CAAA;AACA,EAAA,OAAA,OAAA,IAAA,EAAA;AACA;AAKA,eAAA,kBAAA,YAAA,EAAA;AACA,EAAA,MAAA,MAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,oBAAA,CAAA;AACA,EAAA,IAAA,CAAA,QAAA,OAAA,KAAA;AAEA,EAAA,MAAA,GAAA,CAAA,cAAA,QAAA,CAAA;AAEA,EAAA,QAAA,CAAA,iBAAA,EAAA,EAAA,GAAA,EAAA,YAAA,EAAA,OAAA,iCAAA,EAAA,QAAA,EAAA,SAAA,CAAA;AACA,EAAA,OAAA,IAAA;AACA;AAEA,sBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAAA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAA,cAAA,CAAA,IAAA,EAAA,6BAAA,aAAA,CAAA,EAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,cAAA,EAAA,aAAA,EAAA,GAAA,IAAA;AACA,EAAA,MAAA,gBAAA,MAAA,6BAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACA;AACA,EAAA,IAAA,aAAA,aAAA,EAAA;AACA,IAAA,OAAA,aAAA,CAAA,OAAA;AAAA,EACA;AAEA,EAAA,MAAA,aAAA,aAAA,EAAA;AACA,EAAA,MAAA,UAAA,GAAA,IAAA,CAAA,cAAA,IAAA,CAAA,GAAA,EAAA,cAAA,CAAA,CAAA;AACA,EAAA,MAAA,YAAA,GAAA,IAAA,CAAA,YAAA,IAAA,mBAAA,CAAA,cAAA,CAAA;AAEA,EAAA,MAAA,CAAA,KAAA,IAAA,CAAA,yBAAA,EAAA,EAAA,cAAA,EAAA,YAAA,CAAA;AAEA,EAAA,MAAA,UAAA,GAAA,MAAA,yBAAA,CAAA;AAAA,IACA,GAAA,EAAA,UAAA;AAAA,IACA,qBAAA,IAAA,CAAA,UAAA;AAAA,IACA,cAAA,EAAA;AAAA,GACA,CAAA;AACA,EAAA,IAAA,CAAA,UAAA,EAAA;AACA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,0DAAA,EAAA;AAAA,EACA;AAEA,EAAA,IAAA;AAEA,IAAA,IAAA,CAAA,UAAA,CAAA,YAAA,CAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,4DAAA,EAAA;AAAA,IACA;AAGA,IAAA,MAAA,kBAAA,YAAA,CAAA;AAGA,IAAA,IAAA,WAAA;AACA,IAAA,IAAA;AACA,MAAA,MAAA,WAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,iBAAA,EAAA,UAAA,CAAA,MAAA,CAAA,CAAA;AACA,MAAA,WAAA,GAAA,QAAA,CAAA,UAAA,EAAA,CAAA;AAAA,IACA,CAAA,CAAA,MAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,CAAA,iCAAA,EAAA,UAAA,CAAA,oBAAA,CAAA,EAAA;AAAA,IACA;AAEA,IAAA,IAAA,gBAAA,CAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,yBAAA,EAAA;AAAA,IACA;AAGA,IAAA,MAAA,YAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,WAAA,EAAA,UAAA,CAAA,KAAA,CAAA,CAAA;AAGA,IAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,aAAA,EAAA,SAAA,CAAA,CAAA,CAAA;AAEA,IAAA,QAAA,CAAA,iBAAA,EAAA,EAAA,GAAA,EAAA,YAAA,EAAA,OAAA,aAAA,EAAA,QAAA,EAAA,SAAA,CAAA;AAGA,IAAA,IAAA;AACA,MAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,OAAA,EAAA,UAAA,CAAA,CAAA,CAAA;AAAA,IACA,SAAA,WAAA,EAAA;AAEA,MAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,iCAAA,EAAA,EAAA,gBAAA,CAAA;AAGA,MAAA,IAAA,gBAAA,EAAA;AACA,MAAA,IAAA;AACA,QAAA,MAAA,UAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,kCAAA,CAAA;AACA,QAAA,aAAA,GAAA,UAAA,CAAA,KAAA,CAAA,IAAA,CAAA,CAAA,OAAA,OAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AAEA,QAAA,IAAA;AACA,UAAA,MAAA,YAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,oBAAA,CAAA;AACA,UAAA,aAAA,GAAA,aACA,KAAA,CAAA,IAAA,EACA,MAAA,CAAA,CAAA,IAAA,KAAA,4BAAA,IAAA,CAAA,IAAA,CAAA,CAAA,CACA,IAAA,CAAA,IAAA,KAAA,IAAA,CAAA,UAAA,CAAA,CAAA,CAAA,MAAA,CAAA;AAAA,QACA,CAAA,CAAA,MAAA;AAAA,QAAA;AAAA,MACA;AAGA,MAAA,OAAA;AAAA,QACA,OAAA,EAAA,KAAA;AAAA,QACA,KAAA,EAAA,yBAAA,UAAA,CAAA,iCAAA,CAAA;AAAA,QACA,aAAA;AAAA,QACA,gBAAA,EAAA;AAAA,OACA;AAAA,IACA;AAMA,IAAA,MAAA,gBAAA,IAAA,CAAA,aAAA;AACA,IAAA,IAAA;AACA,MAAA,MAAA,aAAA,GAAA,MAAA,GAAA,CAAA,UAAA,EAAA,6BAAA,CAAA;AACA,MAAA,IAAA,kBAAA,UAAA,EAAA;AACA,QAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,UAAA,EAAA,UAAA,CAAA,CAAA,CAAA,CAAA;AAAA,MACA;AAAA,IACA,CAAA,CAAA,MAAA;AAAA,IAAA;AAGA,IAAA,MAAA,OAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,gBAAA,CAAA;AACA,IAAA,MAAA,IAAA,UAAA,EAAA,CAAA,sBAAA,EAAA,UAAA,CAAA,CAAA,EAAA,OAAA,CAAA,CAAA,CAAA;AAKA,IAAA,IAAA;AACA,MAAA,MAAA,UAAA,GAAA,MAAA,GAAA,CAAA,UAAA,EAAA,6BAAA,CAAA;AACA,MAAA,IAAA,eAAA,UAAA,EAAA;AACA,QAAA,MAAA,GAAA,CAAA,YAAA,mBAAA,CAAA;AAAA,MACA;AAAA,IACA,CAAA,CAAA,MAAA;AAAA,IAAA;AAEA,IAAA,MAAA,CAAA,KAAA,IAAA,CAAA,qBAAA,EAAA,EAAA,UAAA,EAAA,SAAA,CAAA;AAGA,IAAA,IAAA;AACA,MAAA,MAAA,UAAA,CAAA,qBAAA,EAAA,YAAA,aAAA,EAAA,GAAA,EAAA,YAAA,CAAA;AAAA,IACA,CAAA,CAAA,MAAA;AAEA,MAAA,IAAA;AACA,QAAA,MAAA,GAAA,YAAA,EAAA,EAAA,WAAA,IAAA,EAAA,KAAA,EAAA,MAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AAAA,MAAA;AAAA,IACA;AAEA,IAAA,MAAA,SAAA,CAAA,sBAAA,EAAA,GAAA,EAAA,YAAA,CAAA,CAAA,MAAA,MAAA;AAAA,IAAA,CAAA,CAAA;AAEA,IAAA,IAAA;AACA,MAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,WAAA,EAAA,UAAA,CAAA,CAAA,CAAA,CAAA;AAAA,IACA,CAAA,CAAA,MAAA;AACA,MAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,8BAAA,EAAA,EAAA,YAAA,CAAA;AAAA,IACA;AAGA,IAAA,IAAA,aAAA,EAAA;AACA,MAAA,IAAA;AACA,QAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,WAAA,EAAA,aAAA,CAAA,CAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AAAA,MAAA;AAAA,IACA;AAEA,IAAA,MAAA,CAAA,KAAA,IAAA,CAAA,wBAAA,EAAA,EAAA,cAAA,EAAA,SAAA,EAAA,SAAA,CAAA;AAEA,IAAA,OAAA;AAAA,MACA,OAAA,EAAA,IAAA;AAAA,MACA,SAAA,EAAA;AAAA,KACA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,MAAA,eAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,IAAA,MAAA,CAAA,KAAA,KAAA,CAAA,iBAAA,EAAA,EAAA,cAAA,EAAA,KAAA,EAAA,cAAA,CAAA;AAEA,IAAA,OAAA;AAAA,MACA,OAAA,EAAA,KAAA;AAAA,MACA,KAAA,EAAA;AAAA,KACA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}
+{"version":3,"file":"finalize.post.mjs","sources":["../../../../../../server/api/chat/finalize.post.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,eAAA,qBAAA,YAAA,EAAA;AACA,EAAA,IAAA;AACA,IAAA,MAAA,UAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,MAAA,EAAA,aAAA,EAAA,iBAAA,CAAA,CAAA;AACA,IAAA,MAAA,QAAA,UAAA,CAAA,KAAA,CAAA,IAAA,CAAA,CAAA,OAAA,OAAA,CAAA;AACA,IAAA,IAAA,KAAA,CAAA,MAAA,GAAA,CAAA,EAAA,OAAA,KAAA;AAAA,EACA,CAAA,CAAA,MAAA;AAAA,EAAA;AACA,EAAA,IAAA;AACA,IAAA,MAAA,eAAA,MAAA,GAAA,CAAA,cAAA,CAAA,QAAA,EAAA,aAAA,CAAA,CAAA;AACA,IAAA,OAAA,aACA,KAAA,CAAA,IAAA,EACA,MAAA,CAAA,CAAA,IAAA,KAAA,4BAAA,IAAA,CAAA,IAAA,CAAA,CAAA,CACA,IAAA,CAAA,IAAA,KAAA,IAAA,CAAA,UAAA,CAAA,CAAA,CAAA,MAAA,CAAA;AAAA,EACA,CAAA,CAAA,MAAA;AACA,IAAA,OAAA,EAAA;AAAA,EACA;AACA;AAEA,sBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAAA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAA,cAAA,CAAA,IAAA,EAAA,6BAAA,aAAA,CAAA,EAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,cAAA,EAAA,aAAA,EAAA,GAAA,IAAA;AACA,EAAA,MAAA,gBAAA,MAAA,6BAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACA;AACA,EAAA,IAAA,aAAA,aAAA,EAAA;AACA,IAAA,OAAA,aAAA,CAAA,OAAA;AAAA,EACA;AAEA,EAAA,MAAA,aAAA,aAAA,EAAA;AACA,EAAA,MAAA,aAAA,oBAAA,CAAA,IAAA,CAAA,kBAAA,CAAA,GAAA,EAAA,cAAA,IAAA,QAAA,CAAA;AACA,EAAA,MAAA,YAAA,GAAA,IAAA,CAAA,YAAA,IAAA,mBAAA,CAAA,cAAA,CAAA;AACA,EAAA,MAAA,gBAAA,IAAA,CAAA,aAAA,GAAA,qBAAA,IAAA,CAAA,aAAA,EAAA,gBAAA,CAAA,GAAA,MAAA;AAEA,EAAA,IAAA,UAAA,CAAA,YAAA,CAAA,EAAA;AACA,IAAA,oBAAA,CAAA,YAAA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,CAAA,KAAA,IAAA,CAAA,yBAAA,EAAA,EAAA,cAAA,EAAA,YAAA,CAAA;AAEA,EAAA,MAAA,UAAA,GAAA,MAAA,yBAAA,CAAA;AAAA,IACA,GAAA,EAAA,UAAA;AAAA,IACA,qBAAA,IAAA,CAAA,UAAA;AAAA,IACA,cAAA,EAAA;AAAA,GACA,CAAA;AACA,EAAA,IAAA,CAAA,UAAA,EAAA;AACA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,0DAAA,EAAA;AAAA,EACA;AACA,EAAA,MAAA,aAAA,GAAA,cAAA,CAAA,UAAA,EAAA,aAAA,CAAA;AAEA,EAAA,OAAA,QAAA,CAAA,YAAA,YAAA;AACA,IAAA,IAAA;AAEA,MAAA,IAAA,CAAA,UAAA,CAAA,YAAA,CAAA,EAAA;AACA,QAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,4DAAA,EAAA;AAAA,MACA;AAGA,MAAA,MAAA,kBAAA,YAAA,CAAA;AAGA,MAAA,IAAA,WAAA;AACA,MAAA,IAAA;AACA,QAAA,MAAA,QAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,YAAA,SAAA,EAAA,CAAA,EAAA,aAAA,CAAA,MAAA,CAAA,CAAA,CAAA;AACA,QAAA,WAAA,GAAA,QAAA,CAAA,UAAA,EAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,CAAA,iCAAA,EAAA,UAAA,CAAA,oBAAA,CAAA,EAAA;AAAA,MACA;AAEA,MAAA,IAAA,gBAAA,CAAA,EAAA;AACA,QAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,yBAAA,EAAA;AAAA,MACA;AAKA,MAAA,IAAA;AACA,QAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,QAAA,EAAA,aAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,iCAAA,EAAA,EAAA,gBAAA,CAAA;AACA,QAAA,MAAA,aAAA,GAAA,MAAA,oBAAA,CAAA,YAAA,CAAA;AACA,QAAA,OAAA;AAAA,UACA,OAAA,EAAA,KAAA;AAAA,UACA,KAAA,EAAA,yBAAA,UAAA,CAAA,iCAAA,CAAA;AAAA,UACA,aAAA;AAAA,UACA,gBAAA,EAAA;AAAA,SACA;AAAA,MACA;AAIA,MAAA,MAAA,IAAA,YAAA,EAAA,CAAA,OAAA,EAAA,QAAA,EAAA,aAAA,CAAA,CAAA;AAEA,MAAA,QAAA,CAAA,iBAAA,EAAA,EAAA,GAAA,EAAA,YAAA,EAAA,OAAA,aAAA,EAAA,QAAA,EAAA,SAAA,CAAA;AAMA,MAAA,IAAA;AACA,QAAA,MAAA,aAAA,GAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,WAAA,EAAA,cAAA,EAAA,MAAA,CAAA,CAAA;AACA,QAAA,IAAA,kBAAA,UAAA,EAAA;AACA,UAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,QAAA,EAAA,UAAA,CAAA,CAAA;AAAA,QACA;AAAA,MACA,CAAA,CAAA,MAAA;AAAA,MAAA;AAGA,MAAA,MAAA,UAAA,MAAA,GAAA,CAAA,cAAA,CAAA,WAAA,EAAA,MAAA,CAAA,CAAA;AACA,MAAA,MAAA,GAAA,CAAA,YAAA,CAAA,YAAA,EAAA,cAAA,UAAA,CAAA,CAAA,EAAA,OAAA,CAAA,CAAA;AAGA,MAAA,IAAA;AACA,QAAA,MAAA,UAAA,GAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,WAAA,EAAA,cAAA,EAAA,MAAA,CAAA,CAAA;AACA,QAAA,IAAA,eAAA,UAAA,EAAA;AACA,UAAA,MAAA,IAAA,UAAA,EAAA,CAAA,OAAA,EAAA,QAAA,EAAA,MAAA,CAAA,CAAA;AAAA,QACA;AAAA,MACA,CAAA,CAAA,MAAA;AAAA,MAAA;AAEA,MAAA,MAAA,CAAA,KAAA,IAAA,CAAA,qBAAA,EAAA,EAAA,UAAA,EAAA,SAAA,CAAA;AAGA,MAAA,IAAA;AACA,QAAA,MAAA,IAAA,UAAA,EAAA,CAAA,YAAA,QAAA,EAAA,YAAA,EAAA,SAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,IAAA;AACA,UAAA,MAAA,GAAA,YAAA,EAAA,EAAA,WAAA,IAAA,EAAA,KAAA,EAAA,MAAA,CAAA;AAAA,QACA,CAAA,CAAA,MAAA;AAAA,QAAA;AAAA,MACA;AAEA,MAAA,MAAA,GAAA,CAAA,YAAA,CAAA,UAAA,EAAA,OAAA,CAAA,CAAA,CAAA,MAAA,MAAA;AAAA,MAAA,CAAA,CAAA;AAEA,MAAA,IAAA;AACA,QAAA,MAAA,IAAA,UAAA,EAAA,CAAA,QAAA,EAAA,IAAA,EAAA,UAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,8BAAA,EAAA,EAAA,YAAA,CAAA;AAAA,MACA;AAEA,MAAA,IAAA,aAAA,EAAA;AACA,QAAA,IAAA;AACA,UAAA,MAAA,IAAA,UAAA,EAAA,CAAA,QAAA,EAAA,IAAA,EAAA,aAAA,CAAA,CAAA;AAAA,QACA,CAAA,CAAA,MAAA;AAAA,QAAA;AAAA,MACA;AAEA,MAAA,MAAA,CAAA,KAAA,IAAA,CAAA,wBAAA,EAAA,EAAA,cAAA,EAAA,SAAA,EAAA,SAAA,CAAA;AAEA,MAAA,OAAA;AAAA,QACA,OAAA,EAAA,IAAA;AAAA,QACA,SAAA,EAAA;AAAA,OACA;AAAA,IACA,SAAA,KAAA,EAAA;AACA,MAAA,MAAA,eAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,MAAA,MAAA,CAAA,KAAA,KAAA,CAAA,iBAAA,EAAA,EAAA,cAAA,EAAA,KAAA,EAAA,cAAA,CAAA;AAEA,MAAA,OAAA;AAAA,QACA,OAAA,EAAA,KAAA;AAAA,QACA,KAAA,EAAA;AAAA,OACA;AAAA,IACA;AAAA,EACA,CAAA,CAAA;AACA,CAAA,CAAA;;;;"}

package/.output/server/chunks/routes/api/chat/generate-commit-message.post.mjs

@@ -6,6 +6,7 @@ import { s as sendMessage } from '../../../_/claudeService.mjs';
 import { b as guardServerProviderCapability } from '../../../_/aiProviderSelection.mjs';
 import { r as resolveExistingBaseBranch } from '../../../_/baseBranch.mjs';
 import { g as getChatWorktreePath } from '../../../_/worktreePaths.mjs';
+import { v as validateWorktreePath } from '../../../_/validateWorktree.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -53,6 +54,7 @@ const generateCommitMessage_post = defineEventHandler(async (event) => {
     if (!existsSync(worktreePath)) {
       throw createError({ statusCode: 404, message: "Worktree not found" });
     }
+    validateWorktreePath(worktreePath);
     const providerGuard = await guardServerProviderCapability(
       "autoCommit",
       "Switch to a provider with auto-commit support or disable AI-generated commit messages."

package/.output/server/chunks/routes/api/chat/generate-commit-message.post.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"generate-commit-message.post.mjs","sources":["../../../../../../server/api/chat/generate-commit-message.post.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAA,aAAA,GAAA,UAAA,QAAA,CAAA;AAEA,eAAA,GAAA,CAAA,KAAA,IAAA,EAAA;AACA,EAAA,MAAA,EAAA,QAAA,GAAA,MAAA,cAAA,KAAA,EAAA,IAAA,EAAA,EAAA,GAAA,EAAA,CAAA;AACA,EAAA,OAAA,OAAA,IAAA,EAAA;AACA;AAEA,mCAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAKA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,6BAAA,cAAA,CAAA,EAAA;AACA,IAAA,MAAA,YAAA,EAAA,UAAA,EAAA,GAAA,EAAA,OAAA,EAAA,8BAAA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,gBAAA,GAAA,IAAA;AACA,EAAA,MAAA,YAAA,GAAA,IAAA,CAAA,YAAA,IAAA,mBAAA,CAAA,cAAA,CAAA;AACA,EAAA,MAAA,aAAA,aAAA,EAAA;AACA,EAAA,MAAA,eAAA,GAAA,IAAA,eAAA,EAAA;AACA,EAAA,MAAA,YAAA,GAAA,MAAA,eAAA,CAAA,KAAA,EAAA;AACA,EAAA,KAAA,CAAA,IAAA,CAAA,GAAA,CAAA,IAAA,CAAA,OAAA,EAAA,YAAA,CAAA;AAEA,EAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,CAAA,YAAA,CAAA,EAAA;AACA,MAAA,MAAA,YAAA,EAAA,UAAA,EAAA,GAAA,EAAA,OAAA,EAAA,sBAAA,CAAA;AAAA,IACA;AAEA,IAAA,MAAA,gBAAA,MAAA,6BAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,KACA;AACA,IAAA,IAAA,aAAA,aAAA,EAAA;AACA,MAAA,OAAA,aAAA,CAAA,OAAA;AAAA,IACA;AACA,IAAA,MAAA,EAAA,WAAA,GAAA,aAAA;AAEA,IAAA,IAAA,cAAA,GAAA,CAAA,CAAA,EAAA,GAAA,IAAA,CAAA,cAAA,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,EAAA,KAAA,EAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA;AACA,MAAA,IAAA;AACA,QAAA,cAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,WAAA,EAAA,cAAA,EAAA,MAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,cAAA,GAAA,EAAA;AAAA,MACA;AAAA,IACA;AAEA,IAAA,MAAA,UAAA,GAAA,MAAA,yBAAA,CAAA;AAAA,MACA,GAAA,EAAA,UAAA;AAAA,MACA,qBAAA,IAAA,CAAA,UAAA;AAAA,MACA;AAAA,KACA,CAAA;AACA,IAAA,IAAA,CAAA,UAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,0DAAA,EAAA;AAAA,IACA;AAKA,IAAA,MAAA,SAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,YAAA,EAAA,UAAA,EAAA,MAAA,CAAA,CAAA;AACA,IAAA,MAAA,KAAA,GAAA,GAAA,SAAA,CAAA,MAAA,CAAA;AAEA,IAAA,MAAA,GAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,KAAA,EAAA,WAAA,EAAA,KAAA,CAAA,CAAA;AACA,IAAA,IAAA,CAAA,GAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,yBAAA,EAAA;AAAA,IACA;AAEA,IAAA,MAAA,QAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,MAAA,EAAA,QAAA,EAAA,KAAA,CAAA,CAAA;AAEA,IAAA,MAAA,MAAA,GAAA,CAAA;;AAAA,aAAA,EAEA,UAAA;AAAA,iBAAA,EACA,kBAAA,WAAA;;AAAA;AAAA,EAGA,GAAA;;AAAA;AAAA,EAGA,QAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,6CAAA,CAAA;AAWA,IAAA,MAAA,MAAA,GAAA,MAAA,WAAA,CAAA,MAAA,EAAA,cAAA,SAAA,CAAA,QAAA,EAAA,gBAAA,MAAA,CAAA;AAEA,IAAA,IAAA,MAAA,CAAA,OAAA,IAAA,MAAA,CAAA,IAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,IAAA,EAAA,SAAA,MAAA,CAAA,IAAA,CAAA,MAAA,EAAA;AAAA,IACA;AAEA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,MAAA,CAAA,SAAA,4BAAA,EAAA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,MAAA,MAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,IAAA,MAAA,CAAA,KAAA,KAAA,CAAA,gCAAA,EAAA,EAAA,cAAA,EAAA,KAAA,EAAA,KAAA,CAAA;AACA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,GAAA,EAAA;AAAA,EACA,CAAA,SAAA;AACA,IAAA,KAAA,CAAA,IAAA,CAAA,GAAA,CAAA,GAAA,CAAA,OAAA,EAAA,YAAA,CAAA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}
+{"version":3,"file":"generate-commit-message.post.mjs","sources":["../../../../../../server/api/chat/generate-commit-message.post.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,MAAA,aAAA,GAAA,UAAA,QAAA,CAAA;AAEA,eAAA,GAAA,CAAA,KAAA,IAAA,EAAA;AACA,EAAA,MAAA,EAAA,QAAA,GAAA,MAAA,cAAA,KAAA,EAAA,IAAA,EAAA,EAAA,GAAA,EAAA,CAAA;AACA,EAAA,OAAA,OAAA,IAAA,EAAA;AACA;AAEA,mCAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAKA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,6BAAA,cAAA,CAAA,EAAA;AACA,IAAA,MAAA,YAAA,EAAA,UAAA,EAAA,GAAA,EAAA,OAAA,EAAA,8BAAA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,gBAAA,GAAA,IAAA;AACA,EAAA,MAAA,YAAA,GAAA,IAAA,CAAA,YAAA,IAAA,mBAAA,CAAA,cAAA,CAAA;AACA,EAAA,MAAA,aAAA,aAAA,EAAA;AACA,EAAA,MAAA,eAAA,GAAA,IAAA,eAAA,EAAA;AACA,EAAA,MAAA,YAAA,GAAA,MAAA,eAAA,CAAA,KAAA,EAAA;AACA,EAAA,KAAA,CAAA,IAAA,CAAA,GAAA,CAAA,IAAA,CAAA,OAAA,EAAA,YAAA,CAAA;AAEA,EAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,CAAA,YAAA,CAAA,EAAA;AACA,MAAA,MAAA,YAAA,EAAA,UAAA,EAAA,GAAA,EAAA,OAAA,EAAA,sBAAA,CAAA;AAAA,IACA;AACA,IAAA,oBAAA,CAAA,YAAA,CAAA;AAEA,IAAA,MAAA,gBAAA,MAAA,6BAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,KACA;AACA,IAAA,IAAA,aAAA,aAAA,EAAA;AACA,MAAA,OAAA,aAAA,CAAA,OAAA;AAAA,IACA;AACA,IAAA,MAAA,EAAA,WAAA,GAAA,aAAA;AAEA,IAAA,IAAA,cAAA,GAAA,CAAA,CAAA,EAAA,GAAA,IAAA,CAAA,cAAA,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAA,IAAA,EAAA,KAAA,EAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA;AACA,MAAA,IAAA;AACA,QAAA,cAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,WAAA,EAAA,cAAA,EAAA,MAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,cAAA,GAAA,EAAA;AAAA,MACA;AAAA,IACA;AAEA,IAAA,MAAA,UAAA,GAAA,MAAA,yBAAA,CAAA;AAAA,MACA,GAAA,EAAA,UAAA;AAAA,MACA,qBAAA,IAAA,CAAA,UAAA;AAAA,MACA;AAAA,KACA,CAAA;AACA,IAAA,IAAA,CAAA,UAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,0DAAA,EAAA;AAAA,IACA;AAKA,IAAA,MAAA,SAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,YAAA,EAAA,UAAA,EAAA,MAAA,CAAA,CAAA;AACA,IAAA,MAAA,KAAA,GAAA,GAAA,SAAA,CAAA,MAAA,CAAA;AAEA,IAAA,MAAA,GAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,KAAA,EAAA,WAAA,EAAA,KAAA,CAAA,CAAA;AACA,IAAA,IAAA,CAAA,GAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,yBAAA,EAAA;AAAA,IACA;AAEA,IAAA,MAAA,QAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,CAAA,MAAA,EAAA,QAAA,EAAA,KAAA,CAAA,CAAA;AAEA,IAAA,MAAA,MAAA,GAAA,CAAA;;AAAA,aAAA,EAEA,UAAA;AAAA,iBAAA,EACA,kBAAA,WAAA;;AAAA;AAAA,EAGA,GAAA;;AAAA;AAAA,EAGA,QAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,6CAAA,CAAA;AAWA,IAAA,MAAA,MAAA,GAAA,MAAA,WAAA,CAAA,MAAA,EAAA,cAAA,SAAA,CAAA,QAAA,EAAA,gBAAA,MAAA,CAAA;AAEA,IAAA,IAAA,MAAA,CAAA,OAAA,IAAA,MAAA,CAAA,IAAA,EAAA;AACA,MAAA,OAAA,EAAA,OAAA,EAAA,IAAA,EAAA,SAAA,MAAA,CAAA,IAAA,CAAA,MAAA,EAAA;AAAA,IACA;AAEA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,MAAA,CAAA,SAAA,4BAAA,EAAA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,MAAA,MAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,IAAA,MAAA,CAAA,KAAA,KAAA,CAAA,gCAAA,EAAA,EAAA,cAAA,EAAA,KAAA,EAAA,KAAA,CAAA;AACA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,GAAA,EAAA;AAAA,EACA,CAAA,SAAA;AACA,IAAA,KAAA,CAAA,IAAA,CAAA,GAAA,CAAA,GAAA,CAAA,OAAA,EAAA,YAAA,CAAA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}

package/.output/server/chunks/routes/api/chat/preview-sync.post.mjs

@@ -1,6 +1,8 @@
 import { d as defineEventHandler, b as readBody, c as createError, e as getProjectDir, l as logger } from '../../../nitro/nitro.mjs';
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
+import { existsSync } from 'node:fs';
+import { v as validateWorktreePath } from '../../../_/validateWorktree.mjs';
+import { a as assertSafeBranchName, g as git } from '../../../_/chatGit.mjs';
+import { w as withLock } from '../../../_/asyncLock.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -16,18 +18,16 @@ import 'tls';
 import 'url';
 import 'node:events';
 import 'node:buffer';
-import 'node:fs';
 import 'node:path';
 import 'node:os';
 import 'node:module';
 import 'node:fs/promises';
 import 'node:url';
+import '../../../_/worktreePaths.mjs';
+import '../../../_/gitExec.mjs';
+import 'child_process';
+import 'util';
 
-const execAsync = promisify(exec);
-async function git(cwd, cmd) {
-  const { stdout } = await execAsync(`git ${cmd}`, { cwd });
-  return stdout.trim();
-}
 const previewSync_post = defineEventHandler(async (event) => {
   const body = await readBody(event);
   if (!(body == null ? void 0 : body.previewBranch) || !(body == null ? void 0 : body.worktreePath)) {
@@ -36,22 +36,28 @@ const previewSync_post = defineEventHandler(async (event) => {
       message: "previewBranch and worktreePath are required"
     });
   }
-  const { previewBranch, worktreePath } = body;
+  const { worktreePath } = body;
+  const previewBranch = assertSafeBranchName(body.previewBranch, "preview branch");
   const projectDir = getProjectDir();
-  try {
-    const worktreeHead = await git(worktreePath, "rev-parse HEAD");
-    await git(projectDir, `update-ref refs/heads/${previewBranch} ${worktreeHead}`);
-    const currentBranch = await git(projectDir, "rev-parse --abbrev-ref HEAD");
-    if (currentBranch === previewBranch) {
-      await git(projectDir, `reset --hard ${worktreeHead}`);
-    }
-    logger.chat.info("Preview synced", { previewBranch, commit: worktreeHead });
-    return { success: true, commit: worktreeHead };
-  } catch (error) {
-    const errorMessage = error instanceof Error ? error.message : String(error);
-    logger.chat.error("Preview sync failed", { previewBranch, error: errorMessage });
-    return { success: false, error: errorMessage };
+  if (existsSync(worktreePath)) {
+    validateWorktreePath(worktreePath);
   }
+  return withLock(projectDir, async () => {
+    try {
+      const worktreeHead = await git(worktreePath, ["rev-parse", "HEAD"]);
+      await git(projectDir, ["update-ref", `refs/heads/${previewBranch}`, worktreeHead]);
+      const currentBranch = await git(projectDir, ["rev-parse", "--abbrev-ref", "HEAD"]);
+      if (currentBranch === previewBranch) {
+        await git(projectDir, ["reset", "--hard", worktreeHead]);
+      }
+      logger.chat.info("Preview synced", { previewBranch, commit: worktreeHead });
+      return { success: true, commit: worktreeHead };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      logger.chat.error("Preview sync failed", { previewBranch, error: errorMessage });
+      return { success: false, error: errorMessage };
+    }
+  });
 });
 
 export { previewSync_post as default };

package/.output/server/chunks/routes/api/chat/preview-sync.post.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"preview-sync.post.mjs","sources":["../../../../../../server/api/chat/preview-sync.post.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAA,SAAA,GAAA,UAAA,IAAA,CAAA;AAEA,eAAA,GAAA,CAAA,KAAA,GAAA,EAAA;AACA,EAAA,MAAA,EAAA,MAAA,EAAA,GAAA,MAAA,SAAA,CAAA,OAAA,GAAA,CAAA,CAAA,EAAA,EAAA,GAAA,EAAA,CAAA;AACA,EAAA,OAAA,OAAA,IAAA,EAAA;AACA;AAEA,yBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAGA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAA,aAAA,CAAA,IAAA,EAAA,6BAAA,YAAA,CAAA,EAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,aAAA,EAAA,YAAA,EAAA,GAAA,IAAA;AACA,EAAA,MAAA,aAAA,aAAA,EAAA;AAEA,EAAA,IAAA;AAEA,IAAA,MAAA,YAAA,GAAA,MAAA,GAAA,CAAA,YAAA,EAAA,gBAAA,CAAA;AAGA,IAAA,MAAA,IAAA,UAAA,EAAA,CAAA,sBAAA,EAAA,aAAA,CAAA,CAAA,EAAA,YAAA,CAAA,CAAA,CAAA;AAGA,IAAA,MAAA,aAAA,GAAA,MAAA,GAAA,CAAA,UAAA,EAAA,6BAAA,CAAA;AACA,IAAA,IAAA,kBAAA,aAAA,EAAA;AACA,MAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,aAAA,EAAA,YAAA,CAAA,CAAA,CAAA;AAAA,IACA;AAEA,IAAA,MAAA,CAAA,KAAA,IAAA,CAAA,gBAAA,EAAA,EAAA,aAAA,EAAA,MAAA,EAAA,cAAA,CAAA;AAEA,IAAA,OAAA,EAAA,OAAA,EAAA,IAAA,EAAA,MAAA,EAAA,YAAA,EAAA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,MAAA,eAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,IAAA,MAAA,CAAA,KAAA,KAAA,CAAA,qBAAA,EAAA,EAAA,aAAA,EAAA,KAAA,EAAA,cAAA,CAAA;AAEA,IAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,YAAA,EAAA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}
+{"version":3,"file":"preview-sync.post.mjs","sources":["../../../../../../server/api/chat/preview-sync.post.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,yBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAGA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAA,aAAA,CAAA,IAAA,EAAA,6BAAA,YAAA,CAAA,EAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,cAAA,GAAA,IAAA;AACA,EAAA,MAAA,aAAA,GAAA,oBAAA,CAAA,IAAA,CAAA,aAAA,EAAA,gBAAA,CAAA;AACA,EAAA,MAAA,aAAA,aAAA,EAAA;AAEA,EAAA,IAAA,UAAA,CAAA,YAAA,CAAA,EAAA;AACA,IAAA,oBAAA,CAAA,YAAA,CAAA;AAAA,EACA;AAEA,EAAA,OAAA,QAAA,CAAA,YAAA,YAAA;AACA,IAAA,IAAA;AAEA,MAAA,MAAA,eAAA,MAAA,GAAA,CAAA,cAAA,CAAA,WAAA,EAAA,MAAA,CAAA,CAAA;AAGA,MAAA,MAAA,GAAA,CAAA,YAAA,CAAA,YAAA,EAAA,cAAA,aAAA,CAAA,CAAA,EAAA,YAAA,CAAA,CAAA;AAGA,MAAA,MAAA,aAAA,GAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,WAAA,EAAA,cAAA,EAAA,MAAA,CAAA,CAAA;AACA,MAAA,IAAA,kBAAA,aAAA,EAAA;AACA,QAAA,MAAA,IAAA,UAAA,EAAA,CAAA,OAAA,EAAA,QAAA,EAAA,YAAA,CAAA,CAAA;AAAA,MACA;AAEA,MAAA,MAAA,CAAA,KAAA,IAAA,CAAA,gBAAA,EAAA,EAAA,aAAA,EAAA,MAAA,EAAA,cAAA,CAAA;AAEA,MAAA,OAAA,EAAA,OAAA,EAAA,IAAA,EAAA,MAAA,EAAA,YAAA,EAAA;AAAA,IACA,SAAA,KAAA,EAAA;AACA,MAAA,MAAA,eAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,MAAA,MAAA,CAAA,KAAA,KAAA,CAAA,qBAAA,EAAA,EAAA,aAAA,EAAA,KAAA,EAAA,cAAA,CAAA;AAEA,MAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,YAAA,EAAA;AAAA,IACA;AAAA,EACA,CAAA,CAAA;AACA,CAAA,CAAA;;;;"}

package/.output/server/chunks/routes/api/chat/preview.delete.mjs

@@ -1,6 +1,6 @@
 import { d as defineEventHandler, b as readBody, c as createError, e as getProjectDir, l as logger } from '../../../nitro/nitro.mjs';
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
+import { a as assertSafeBranchName, g as git } from '../../../_/chatGit.mjs';
+import { w as withLock } from '../../../_/asyncLock.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -22,12 +22,10 @@ import 'node:os';
 import 'node:module';
 import 'node:fs/promises';
 import 'node:url';
+import '../../../_/gitExec.mjs';
+import 'child_process';
+import 'util';
 
-const execAsync = promisify(exec);
-async function git(cwd, cmd) {
-  const { stdout } = await execAsync(`git ${cmd}`, { cwd });
-  return stdout.trim();
-}
 const preview_delete = defineEventHandler(async (event) => {
   const body = await readBody(event);
   if (!(body == null ? void 0 : body.previewBranch) || !(body == null ? void 0 : body.baseBranch)) {
@@ -36,26 +34,29 @@ const preview_delete = defineEventHandler(async (event) => {
       message: "previewBranch and baseBranch are required"
     });
   }
-  const { previewBranch, baseBranch } = body;
+  const previewBranch = assertSafeBranchName(body.previewBranch, "preview branch");
+  const baseBranch = assertSafeBranchName(body.baseBranch, "base branch");
   const projectDir = getProjectDir();
   logger.chat.info("Ending preview", { previewBranch, baseBranch });
-  try {
-    await git(projectDir, `checkout "${baseBranch}"`);
+  return withLock(projectDir, async () => {
     try {
-      await git(projectDir, `branch -D "${previewBranch}"`);
-    } catch {
-      logger.chat.warn("Failed to delete preview branch", { previewBranch });
+      await git(projectDir, ["checkout", baseBranch]);
+      try {
+        await git(projectDir, ["branch", "-D", previewBranch]);
+      } catch {
+        logger.chat.warn("Failed to delete preview branch", { previewBranch });
+      }
+      logger.chat.info("Preview ended", { previewBranch });
+      return { success: true };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      logger.chat.error("Failed to end preview", { error: errorMessage });
+      return {
+        success: false,
+        error: errorMessage
+      };
     }
-    logger.chat.info("Preview ended", { previewBranch });
-    return { success: true };
-  } catch (error) {
-    const errorMessage = error instanceof Error ? error.message : String(error);
-    logger.chat.error("Failed to end preview", { error: errorMessage });
-    return {
-      success: false,
-      error: errorMessage
-    };
-  }
+  });
 });
 
 export { preview_delete as default };

package/.output/server/chunks/routes/api/chat/preview.delete.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"preview.delete.mjs","sources":["../../../../../../server/api/chat/preview.delete.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAUA,MAAA,SAAA,GAAA,UAAA,IAAA,CAAA;AAEA,eAAA,GAAA,CAAA,KAAA,GAAA,EAAA;AACA,EAAA,MAAA,EAAA,MAAA,EAAA,GAAA,MAAA,SAAA,CAAA,OAAA,GAAA,CAAA,CAAA,EAAA,EAAA,GAAA,EAAA,CAAA;AACA,EAAA,OAAA,OAAA,IAAA,EAAA;AACA;AAEA,uBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAGA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAA,aAAA,CAAA,IAAA,EAAA,6BAAA,UAAA,CAAA,EAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,EAAA,aAAA,EAAA,UAAA,EAAA,GAAA,IAAA;AACA,EAAA,MAAA,aAAA,aAAA,EAAA;AAEA,EAAA,MAAA,CAAA,KAAA,IAAA,CAAA,gBAAA,EAAA,EAAA,aAAA,EAAA,YAAA,CAAA;AAEA,EAAA,IAAA;AAEA,IAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,UAAA,EAAA,UAAA,CAAA,CAAA,CAAA,CAAA;AAGA,IAAA,IAAA;AACA,MAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,WAAA,EAAA,aAAA,CAAA,CAAA,CAAA,CAAA;AAAA,IACA,CAAA,CAAA,MAAA;AACA,MAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,iCAAA,EAAA,EAAA,eAAA,CAAA;AAAA,IACA;AAEA,IAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,eAAA,EAAA,EAAA,eAAA,CAAA;AAEA,IAAA,OAAA,EAAA,SAAA,IAAA,EAAA;AAAA,EACA,SAAA,KAAA,EAAA;AACA,IAAA,MAAA,eAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,IAAA,MAAA,CAAA,KAAA,KAAA,CAAA,uBAAA,EAAA,EAAA,KAAA,EAAA,cAAA,CAAA;AAEA,IAAA,OAAA;AAAA,MACA,OAAA,EAAA,KAAA;AAAA,MACA,KAAA,EAAA;AAAA,KACA;AAAA,EACA;AACA,CAAA,CAAA;;;;"}
+{"version":3,"file":"preview.delete.mjs","sources":["../../../../../../server/api/chat/preview.delete.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,uBAAA,kBAAA,CAAA,OAAA,KAAA,KAAA;AACA,EAAA,MAAA,IAAA,GAAA,MAAA,QAAA,CAGA,KAAA,CAAA;AAEA,EAAA,IAAA,EAAA,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAA,aAAA,CAAA,IAAA,EAAA,6BAAA,UAAA,CAAA,EAAA;AACA,IAAA,MAAA,WAAA,CAAA;AAAA,MACA,UAAA,EAAA,GAAA;AAAA,MACA,OAAA,EAAA;AAAA,KACA,CAAA;AAAA,EACA;AAEA,EAAA,MAAA,aAAA,GAAA,oBAAA,CAAA,IAAA,CAAA,aAAA,EAAA,gBAAA,CAAA;AACA,EAAA,MAAA,UAAA,GAAA,oBAAA,CAAA,IAAA,CAAA,UAAA,EAAA,aAAA,CAAA;AACA,EAAA,MAAA,aAAA,aAAA,EAAA;AAEA,EAAA,MAAA,CAAA,KAAA,IAAA,CAAA,gBAAA,EAAA,EAAA,aAAA,EAAA,YAAA,CAAA;AAEA,EAAA,OAAA,QAAA,CAAA,YAAA,YAAA;AACA,IAAA,IAAA;AAEA,MAAA,MAAA,GAAA,CAAA,UAAA,EAAA,CAAA,UAAA,EAAA,UAAA,CAAA,CAAA;AAGA,MAAA,IAAA;AACA,QAAA,MAAA,IAAA,UAAA,EAAA,CAAA,QAAA,EAAA,IAAA,EAAA,aAAA,CAAA,CAAA;AAAA,MACA,CAAA,CAAA,MAAA;AACA,QAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,iCAAA,EAAA,EAAA,eAAA,CAAA;AAAA,MACA;AAEA,MAAA,MAAA,CAAA,IAAA,CAAA,IAAA,CAAA,eAAA,EAAA,EAAA,eAAA,CAAA;AAEA,MAAA,OAAA,EAAA,SAAA,IAAA,EAAA;AAAA,IACA,SAAA,KAAA,EAAA;AACA,MAAA,MAAA,eAAA,KAAA,YAAA,KAAA,GAAA,KAAA,CAAA,OAAA,GAAA,OAAA,KAAA,CAAA;AACA,MAAA,MAAA,CAAA,KAAA,KAAA,CAAA,uBAAA,EAAA,EAAA,KAAA,EAAA,cAAA,CAAA;AAEA,MAAA,OAAA;AAAA,QACA,OAAA,EAAA,KAAA;AAAA,QACA,KAAA,EAAA;AAAA,OACA;AAAA,IACA;AAAA,EACA,CAAA,CAAA;AACA,CAAA,CAAA;;;;"}

package/.output/server/chunks/routes/api/chat/preview.post.mjs

@@ -1,7 +1,9 @@
 import { d as defineEventHandler, b as readBody, c as createError, e as getProjectDir, l as logger } from '../../../nitro/nitro.mjs';
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
 import { existsSync } from 'node:fs';
+import { v as validateWorktreePath } from '../../../_/validateWorktree.mjs';
+import { a as assertSafeBranchName, g as git } from '../../../_/chatGit.mjs';
+import { a as autoCommitChanges } from '../../../_/claudeService.mjs';
+import { w as withLock } from '../../../_/asyncLock.mjs';
 import 'node:http';
 import 'node:https';
 import 'node:crypto';
@@ -22,12 +24,13 @@ import 'node:os';
 import 'node:module';
 import 'node:fs/promises';
 import 'node:url';
+import '../../../_/worktreePaths.mjs';
+import '../../../_/gitExec.mjs';
+import 'child_process';
+import 'util';
+import 'node:child_process';
+import '../../../_/claude.mjs';
 
-const execAsync = promisify(exec);
-async function git(cwd, cmd) {
-  const { stdout } = await execAsync(`git ${cmd}`, { cwd });
-  return stdout.trim();
-}
 const preview_post = defineEventHandler(async (event) => {
   const body = await readBody(event);
   if (!(body == null ? void 0 : body.conversationId) || !(body == null ? void 0 : body.worktreePath) || !(body == null ? void 0 : body.baseBranch)) {
@@ -36,54 +39,56 @@ const preview_post = defineEventHandler(async (event) => {
       message: "conversationId, worktreePath, and baseBranch are required"
     });
   }
-  const { conversationId, worktreePath, baseBranch } = body;
+  const { conversationId, worktreePath } = body;
+  assertSafeBranchName(body.baseBranch, "base branch");
   const projectDir = getProjectDir();
   const previewBranch = "sc/preview";
+  if (existsSync(worktreePath)) {
+    validateWorktreePath(worktreePath);
+  }
   logger.chat.info("Creating preview branch", { conversationId, previewBranch });
-  try {
-    if (!existsSync(worktreePath)) {
-      return { success: false, error: "Worktree directory not found." };
-    }
-    const status = await git(worktreePath, "status --porcelain");
-    if (status) {
-      await git(worktreePath, "add -A");
-      await git(worktreePath, 'commit -m "auto-commit for preview"');
-    }
-    const worktreeHead = await git(worktreePath, "rev-parse HEAD");
-    const mainStatus = await git(projectDir, "status --porcelain");
-    if (mainStatus) {
+  return withLock(projectDir, async () => {
+    try {
+      if (!existsSync(worktreePath)) {
+        return { success: false, error: "Worktree directory not found." };
+      }
+      await autoCommitChanges(worktreePath);
+      const worktreeHead = await git(worktreePath, ["rev-parse", "HEAD"]);
+      const mainStatus = await git(projectDir, ["status", "--porcelain"]);
+      if (mainStatus) {
+        return {
+          success: false,
+          error: "Main worktree has uncommitted changes. Please commit or stash them first."
+        };
+      }
+      let branchExists = false;
+      try {
+        await git(projectDir, ["rev-parse", "--verify", `refs/heads/${previewBranch}`]);
+        branchExists = true;
+      } catch {
+      }
+      if (branchExists) {
+        await git(projectDir, ["checkout", previewBranch]);
+        await git(projectDir, ["reset", "--hard", worktreeHead]);
+      } else {
+        await git(projectDir, ["branch", previewBranch, worktreeHead]);
+        await git(projectDir, ["checkout", previewBranch]);
+      }
+      logger.chat.info("Preview branch active", { previewBranch, worktreeHead });
+      return {
+        success: true,
+        previewBranch,
+        commit: worktreeHead
+      };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      logger.chat.error("Failed to create preview", { conversationId, error: errorMessage });
       return {
         success: false,
-        error: "Main worktree has uncommitted changes. Please commit or stash them first."
+        error: errorMessage
       };
     }
-    let branchExists = false;
-    try {
-      await git(projectDir, `rev-parse --verify "refs/heads/${previewBranch}"`);
-      branchExists = true;
-    } catch {
-    }
-    if (branchExists) {
-      await git(projectDir, `checkout "${previewBranch}"`);
-      await git(projectDir, `reset --hard ${worktreeHead}`);
-    } else {
-      await git(projectDir, `branch "${previewBranch}" ${worktreeHead}`);
-      await git(projectDir, `checkout "${previewBranch}"`);
-    }
-    logger.chat.info("Preview branch active", { previewBranch, worktreeHead });
-    return {
-      success: true,
-      previewBranch,
-      commit: worktreeHead
-    };
-  } catch (error) {
-    const errorMessage = error instanceof Error ? error.message : String(error);
-    logger.chat.error("Failed to create preview", { conversationId, error: errorMessage });
-    return {
-      success: false,
-      error: errorMessage
-    };
-  }
+  });
 });
 
 export { preview_post as default };