steroids-api 0.2.7

package/dist/src/runners/wakeup.js

@@ -0,0 +1,355 @@
+/**
+ * Cron wake-up command for restarting stale/dead runners
+ */
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { spawn } from 'node:child_process';
+import { checkLockStatus, removeLock } from './lock.js';
+import { openGlobalDatabase } from './global-db.js';
+import { findStaleRunners } from './heartbeat.js';
+import { getRegisteredProjects } from './projects.js';
+import { openDatabase } from '../database/connection.js';
+import { loadConfig } from '../config/loader.js';
+import { recoverStuckTasks } from '../health/stuck-task-recovery.js';
+import { cleanupInvocationLogs } from '../cleanup/invocation-logs.js';
+/**
+ * Check if a project has pending work
+ */
+async function projectHasPendingWork(projectPath) {
+    const dbPath = join(projectPath, '.steroids', 'steroids.db');
+    if (!existsSync(dbPath)) {
+        return false;
+    }
+    try {
+        // Use dynamic import for ESM compatibility
+        const { default: Database } = await import('better-sqlite3');
+        const db = new Database(dbPath, { readonly: true });
+        const result = db
+            .prepare(`SELECT COUNT(*) as count FROM tasks
+         WHERE status IN ('pending', 'in_progress', 'review')`)
+            .get();
+        db.close();
+        return result.count > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check if there's an active runner for a specific project
+ * Exported for use in daemon startup checks
+ */
+export function hasActiveRunnerForProject(projectPath) {
+    const { db, close } = openGlobalDatabase();
+    try {
+        const row = db
+            .prepare(`SELECT 1 FROM runners
+         WHERE project_path = ?
+         AND status != 'stopped'
+         AND heartbeat_at > datetime('now', '-5 minutes')`)
+            .get(projectPath);
+        return row !== undefined;
+    }
+    finally {
+        close();
+    }
+}
+/**
+ * Kill a process by PID
+ */
+function killProcess(pid) {
+    try {
+        process.kill(pid, 'SIGTERM');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Start a new runner daemon
+ * Uses 'steroids runners start --detach' so the runner registers in the global DB
+ * and updates heartbeat, allowing hasActiveRunnerForProject() to detect it
+ */
+function startRunner(projectPath) {
+    try {
+        // Use runners start --detach so the daemon registers itself in the global DB
+        // This is critical: hasActiveRunnerForProject() checks the runners table,
+        // and only the daemon (not loop directly) writes to that table
+        const args = ['runners', 'start', '--detach', '--project', projectPath];
+        const child = spawn('steroids', args, {
+            detached: true,
+            stdio: 'ignore',
+        });
+        child.unref();
+        return { pid: child.pid ?? 0 };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Main wake-up function
+ * Called by cron every minute to ensure runners are healthy
+ * Iterates over ALL registered projects and starts runners as needed
+ * Returns per-project results
+ */
+/**
+ * Record the last wakeup invocation time
+ */
+function recordWakeupTime() {
+    const { db, close } = openGlobalDatabase();
+    try {
+        db.prepare(`INSERT INTO _global_schema (key, value) VALUES ('last_wakeup_at', datetime('now'))
+       ON CONFLICT(key) DO UPDATE SET value = datetime('now')`).run();
+    }
+    finally {
+        close();
+    }
+}
+/**
+ * Get the last wakeup invocation time
+ */
+export function getLastWakeupTime() {
+    const { db, close } = openGlobalDatabase();
+    try {
+        const row = db
+            .prepare("SELECT value FROM _global_schema WHERE key = 'last_wakeup_at'")
+            .get();
+        return row?.value ?? null;
+    }
+    finally {
+        close();
+    }
+}
+export async function wakeup(options = {}) {
+    const { quiet = false, dryRun = false } = options;
+    const results = [];
+    const log = (msg) => {
+        if (!quiet)
+            console.log(msg);
+    };
+    // Record wakeup invocation time (even for dry runs)
+    if (!dryRun) {
+        recordWakeupTime();
+    }
+    // Step 1: Clean up stale runners first
+    const global = openGlobalDatabase();
+    try {
+        try {
+            const staleRunners = findStaleRunners(global.db);
+            if (staleRunners.length > 0) {
+                log(`Found ${staleRunners.length} stale runner(s), cleaning up...`);
+                if (!dryRun) {
+                    for (const runner of staleRunners) {
+                        if (runner.pid) {
+                            killProcess(runner.pid);
+                        }
+                        global.db.prepare('DELETE FROM runners WHERE id = ?').run(runner.id);
+                    }
+                }
+                results.push({
+                    action: 'cleaned',
+                    reason: `Cleaned ${staleRunners.length} stale runner(s)`,
+                    staleRunners: staleRunners.length,
+                });
+            }
+        }
+        catch {
+            // ignore global DB issues; wakeup will still attempt per-project checks
+        }
+        // Step 2: Clean zombie lock if present
+        const lockStatus = checkLockStatus();
+        if (lockStatus.isZombie && lockStatus.pid) {
+            log(`Found zombie lock (PID: ${lockStatus.pid}), cleaning...`);
+            if (!dryRun) {
+                removeLock();
+            }
+        }
+        // Step 3: Get all registered projects from global registry
+        const registeredProjects = getRegisteredProjects(false); // enabled only
+        if (registeredProjects.length === 0) {
+            log('No registered projects found');
+            log('Run "steroids projects add <path>" to register a project');
+            results.push({
+                action: 'none',
+                reason: 'No registered projects',
+                pendingTasks: 0,
+            });
+            return results;
+        }
+        log(`Checking ${registeredProjects.length} registered project(s)...`);
+        // Step 4: Check each project and start runners as needed
+        for (const project of registeredProjects) {
+            // Skip if project directory doesn't exist
+            if (!existsSync(project.path)) {
+                log(`Skipping ${project.path}: directory not found`);
+                results.push({
+                    action: 'none',
+                    reason: 'Directory not found',
+                    projectPath: project.path,
+                });
+                continue;
+            }
+            // Phase 6 (live monitoring): best-effort retention cleanup of invocation activity logs.
+            // This is safe to run even if the project has no pending tasks.
+            let deletedInvocationLogs = 0;
+            try {
+                const cleanup = cleanupInvocationLogs(project.path, { retentionDays: 7, dryRun });
+                deletedInvocationLogs = cleanup.deletedFiles;
+                if (cleanup.deletedFiles > 0 && !quiet) {
+                    log(`Cleaned ${cleanup.deletedFiles} old invocation log(s) in ${project.path}`);
+                }
+            }
+            catch {
+                // Ignore cleanup errors; wakeup must remain robust.
+            }
+            // Skip if project already has an active runner
+            // Check for pending work
+            const hasWork = await projectHasPendingWork(project.path);
+            if (!hasWork) {
+                log(`Skipping ${project.path}: no pending tasks`);
+                results.push({
+                    action: 'none',
+                    reason: 'No pending tasks',
+                    projectPath: project.path,
+                    deletedInvocationLogs,
+                });
+                continue;
+            }
+            // Step 4a: Recover stuck tasks (best-effort) before deciding whether to (re)start a runner.
+            // This is what unblocks orphaned/infinite-hang scenarios without manual intervention.
+            let recoveredActions = 0;
+            let skippedRecoveryDueToSafetyLimit = false;
+            try {
+                const { db: projectDb, close: closeProjectDb } = openDatabase(project.path);
+                try {
+                    const config = loadConfig(project.path);
+                    const recovery = await recoverStuckTasks({
+                        projectPath: project.path,
+                        projectDb,
+                        globalDb: global.db,
+                        config,
+                        dryRun,
+                    });
+                    recoveredActions = recovery.actions.length;
+                    skippedRecoveryDueToSafetyLimit = recovery.skippedDueToSafetyLimit;
+                    if (recoveredActions > 0 && !quiet) {
+                        log(`Recovered ${recoveredActions} stuck item(s) in ${project.path}`);
+                    }
+                    if (skippedRecoveryDueToSafetyLimit && !quiet) {
+                        log(`Skipping auto-recovery in ${project.path}: safety limit hit (maxIncidentsPerHour)`);
+                    }
+                }
+                finally {
+                    closeProjectDb();
+                }
+            }
+            catch {
+                // If recovery can't run (DB missing/corrupt), we still proceed with runner checks.
+            }
+            // Skip if project already has an active runner (after recovery, which may have killed/removed it).
+            if (hasActiveRunnerForProject(project.path)) {
+                log(`Skipping ${project.path}: runner already active`);
+                results.push({
+                    action: 'none',
+                    reason: recoveredActions > 0
+                        ? `Runner already active (recovered ${recoveredActions} stuck item(s))`
+                        : 'Runner already active',
+                    projectPath: project.path,
+                    recoveredActions,
+                    skippedRecoveryDueToSafetyLimit,
+                    deletedInvocationLogs,
+                });
+                continue;
+            }
+            // Start runner for this project
+            log(`Starting runner for: ${project.path}`);
+            if (dryRun) {
+                results.push({
+                    action: 'would_start',
+                    reason: recoveredActions > 0 ? `Recovered ${recoveredActions} stuck item(s); would start runner (dry-run)` : `Would start runner (dry-run)`,
+                    projectPath: project.path,
+                    recoveredActions,
+                    skippedRecoveryDueToSafetyLimit,
+                    deletedInvocationLogs,
+                });
+                continue;
+            }
+            const startResult = startRunner(project.path);
+            if (startResult) {
+                results.push({
+                    action: 'started',
+                    reason: recoveredActions > 0 ? `Recovered ${recoveredActions} stuck item(s); started runner` : `Started runner`,
+                    pid: startResult.pid,
+                    projectPath: project.path,
+                    recoveredActions,
+                    skippedRecoveryDueToSafetyLimit,
+                    deletedInvocationLogs,
+                });
+            }
+            else {
+                results.push({
+                    action: 'none',
+                    reason: recoveredActions > 0 ? `Recovered ${recoveredActions} stuck item(s); failed to start runner` : 'Failed to start runner',
+                    projectPath: project.path,
+                    recoveredActions,
+                    skippedRecoveryDueToSafetyLimit,
+                    deletedInvocationLogs,
+                });
+            }
+        }
+        // If no specific results, add a summary
+        if (results.length === 0) {
+            results.push({
+                action: 'none',
+                reason: 'No action needed',
+            });
+        }
+        return results;
+    }
+    finally {
+        global.close();
+    }
+}
+/**
+ * Check if wake-up is needed without taking action
+ */
+export async function checkWakeupNeeded() {
+    const lockStatus = checkLockStatus();
+    if (lockStatus.locked && lockStatus.pid) {
+        const { db, close } = openGlobalDatabase();
+        try {
+            const staleRunners = findStaleRunners(db);
+            if (staleRunners.length > 0) {
+                return {
+                    needed: true,
+                    reason: `${staleRunners.length} stale runner(s) need cleanup`,
+                };
+            }
+            return { needed: false, reason: 'Runner is healthy' };
+        }
+        finally {
+            close();
+        }
+    }
+    if (lockStatus.isZombie) {
+        return { needed: true, reason: 'Zombie lock needs cleanup' };
+    }
+    // Check registered projects
+    const registeredProjects = getRegisteredProjects(false);
+    let projectsWithWork = 0;
+    for (const project of registeredProjects) {
+        if (existsSync(project.path) && (await projectHasPendingWork(project.path))) {
+            projectsWithWork++;
+        }
+    }
+    if (projectsWithWork > 0) {
+        return {
+            needed: true,
+            reason: `${projectsWithWork} project(s) have pending tasks`,
+        };
+    }
+    return { needed: false, reason: 'No pending tasks' };
+}
+//# sourceMappingURL=wakeup.js.map

package/dist/src/runners/wakeup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wakeup.js","sourceRoot":"","sources":["../../../../src/runners/wakeup.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAoBtE;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,WAAmB;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,2CAA2C;QAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CACN;8DACsD,CACvD;aACA,GAAG,EAAuB,CAAC;QAE9B,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,WAAmB;IAC3D,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN;;;0DAGkD,CACnD;aACA,GAAG,CAAC,WAAW,CAA8B,CAAC;QAEjD,OAAO,GAAG,KAAK,SAAS,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,CAAC;IACV,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,WAAmB;IACtC,IAAI,CAAC;QACH,6EAA6E;QAC7E,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE;YACpC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH;;GAEG;AACH,SAAS,gBAAgB;IACvB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;8DACwD,CACzD,CAAC,GAAG,EAAE,CAAC;IACV,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,CAAC;IACV,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,EAAmC,CAAC;QAC1C,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAyB,EAAE;IACtD,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAClD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAQ,EAAE;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,oDAAoD;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,gBAAgB,EAAE,CAAC;IACrB,CAAC;IAED,uCAAuC;IACvC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,YAAY,CAAC,MAAM,kCAAkC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;wBAClC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;4BACf,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAC1B,CAAC;wBACD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,WAAW,YAAY,CAAC,MAAM,kBAAkB;oBACxD,YAAY,EAAE,YAAY,CAAC,MAAM;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QAEH,uCAAuC;QACvC,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;YAC1C,GAAG,CAAC,2BAA2B,UAAU,CAAC,GAAG,gBAAgB,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe;QAExE,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YACpC,GAAG,CAAC,0DAA0D,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,wBAAwB;gBAChC,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,GAAG,CAAC,YAAY,kBAAkB,CAAC,MAAM,2BAA2B,CAAC,CAAC;QAEtE,yDAAyD;QACzD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,0CAA0C;YAC1C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,uBAAuB,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,qBAAqB;oBAC7B,WAAW,EAAE,OAAO,CAAC,IAAI;iBAC1B,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,wFAAwF;YACxF,gEAAgE;YAChE,IAAI,qBAAqB,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClF,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC;gBAC7C,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACvC,GAAG,CAAC,WAAW,OAAO,CAAC,YAAY,6BAA6B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;YAED,+CAA+C;YAC/C,yBAAyB;YACzB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,oBAAoB,CAAC,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,kBAAkB;oBAC1B,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,qBAAqB;iBACtB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,4FAA4F;YAC5F,sFAAsF;YACtF,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,IAAI,+BAA+B,GAAG,KAAK,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5E,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACxC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;wBACvC,WAAW,EAAE,OAAO,CAAC,IAAI;wBACzB,SAAS;wBACT,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,MAAM;wBACN,MAAM;qBACP,CAAC,CAAC;oBACH,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC3C,+BAA+B,GAAG,QAAQ,CAAC,uBAAuB,CAAC;oBACnE,IAAI,gBAAgB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;wBACnC,GAAG,CAAC,aAAa,gBAAgB,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBACxE,CAAC;oBACD,IAAI,+BAA+B,IAAI,CAAC,KAAK,EAAE,CAAC;wBAC9C,GAAG,CAAC,6BAA6B,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;oBAC3F,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,cAAc,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mFAAmF;YACrF,CAAC;YAED,mGAAmG;YACnG,IAAI,yBAAyB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EACJ,gBAAgB,GAAG,CAAC;wBAClB,CAAC,CAAC,oCAAoC,gBAAgB,iBAAiB;wBACvE,CAAC,CAAC,uBAAuB;oBAC7B,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,gBAAgB;oBAChB,+BAA+B;oBAC/B,qBAAqB;iBACtB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,gCAAgC;YAChC,GAAG,CAAC,wBAAwB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAE5C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,gBAAgB,8CAA8C,CAAC,CAAC,CAAC,8BAA8B;oBAC3I,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,gBAAgB;oBAChB,+BAA+B;oBAC/B,qBAAqB;iBACtB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,gBAAgB,gCAAgC,CAAC,CAAC,CAAC,gBAAgB;oBAC/G,GAAG,EAAE,WAAW,CAAC,GAAG;oBACpB,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,gBAAgB;oBAChB,+BAA+B;oBAC/B,qBAAqB;iBACtB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,gBAAgB,wCAAwC,CAAC,CAAC,CAAC,wBAAwB;oBAC/H,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,gBAAgB;oBAChB,+BAA+B;oBAC/B,qBAAqB;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;QACL,CAAC;QAEC,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IAIrC,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;IAErC,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,+BAA+B;iBAC9D,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC/D,CAAC;IAED,4BAA4B;IAC5B,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5E,gBAAgB,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,GAAG,gBAAgB,gCAAgC;SAC5D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;AACvD,CAAC"}

package/dist/src/utils/validation.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Path validation utilities for API security
+ */
+/**
+ * Validate that a path is safe and points to a valid Steroids project
+ *
+ * @param path - Path to validate
+ * @returns True if path is valid and safe
+ */
+export declare function isValidProjectPath(path: string): boolean;
+/**
+ * Validate request body for path-based operations
+ *
+ * @param body - Request body
+ * @returns Validation result with error message if invalid
+ */
+export declare function validatePathRequest(body: unknown): {
+    valid: boolean;
+    error?: string;
+    path?: string;
+};
+//# sourceMappingURL=validation.d.ts.map

package/dist/src/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAoBxD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAgBpG"}

package/dist/src/utils/validation.js

@@ -0,0 +1,50 @@
+/**
+ * Path validation utilities for API security
+ */
+import { existsSync, realpathSync } from 'node:fs';
+import { join } from 'node:path';
+/**
+ * Validate that a path is safe and points to a valid Steroids project
+ *
+ * @param path - Path to validate
+ * @returns True if path is valid and safe
+ */
+export function isValidProjectPath(path) {
+    try {
+        const realPath = realpathSync(path);
+        // Must contain .steroids directory with database
+        const steroidsDb = join(realPath, '.steroids', 'steroids.db');
+        if (!existsSync(steroidsDb)) {
+            return false;
+        }
+        // Must not be system directories
+        const forbidden = ['/etc', '/var', '/usr', '/bin', '/sbin', '/System'];
+        if (forbidden.some((f) => realPath.startsWith(f))) {
+            return false;
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Validate request body for path-based operations
+ *
+ * @param body - Request body
+ * @returns Validation result with error message if invalid
+ */
+export function validatePathRequest(body) {
+    if (!body || typeof body !== 'object') {
+        return { valid: false, error: 'Request body must be an object' };
+    }
+    const { path } = body;
+    if (!path || typeof path !== 'string') {
+        return { valid: false, error: 'Request body must contain a "path" string field' };
+    }
+    if (path.trim().length === 0) {
+        return { valid: false, error: 'Path cannot be empty' };
+    }
+    return { valid: true, path };
+}
+//# sourceMappingURL=validation.js.map

package/dist/src/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEpC,iDAAiD;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iCAAiC;QACjC,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAA0B,CAAC;IAE5C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/utils/sqlite.d.ts

@@ -0,0 +1,17 @@
+import Database from 'better-sqlite3';
+export type SqliteOpenOptions = {
+    timeoutMs?: number;
+};
+/**
+ * Open a connection suitable for reading a WAL-enabled database that may be
+ * concurrently written by another process.
+ *
+ * IMPORTANT:
+ * - In WAL mode, SQLite readers participate in coordination via the `-shm` file.
+ * - Opening the main database as SQLITE_OPEN_READONLY can break that coordination
+ *   and lead to transient IO errors (e.g. SHORT_READ) if the writer checkpoints/truncates.
+ *
+ * So we open read-write, then enforce read-only at the SQL layer via `PRAGMA query_only=ON`.
+ */
+export declare function openSqliteForRead(dbPath: string, opts?: SqliteOpenOptions): Database.Database;
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/utils/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/utils/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,iBAAsB,GAAG,QAAQ,CAAC,QAAQ,CAiBjG"}

package/dist/utils/sqlite.js

@@ -0,0 +1,27 @@
+import Database from 'better-sqlite3';
+/**
+ * Open a connection suitable for reading a WAL-enabled database that may be
+ * concurrently written by another process.
+ *
+ * IMPORTANT:
+ * - In WAL mode, SQLite readers participate in coordination via the `-shm` file.
+ * - Opening the main database as SQLITE_OPEN_READONLY can break that coordination
+ *   and lead to transient IO errors (e.g. SHORT_READ) if the writer checkpoints/truncates.
+ *
+ * So we open read-write, then enforce read-only at the SQL layer via `PRAGMA query_only=ON`.
+ */
+export function openSqliteForRead(dbPath, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? 5000;
+    const db = new Database(dbPath, {
+        // Must exist; callers use existence checks only for UX, not correctness.
+        fileMustExist: true,
+        timeout: timeoutMs,
+    });
+    // Ensure the connection will wait for locks instead of failing immediately.
+    // (The `timeout` option also sets this, but being explicit makes intent clear.)
+    db.pragma(`busy_timeout = ${timeoutMs}`);
+    // Enforce read-only at the SQL layer while still allowing WAL shared-memory coordination.
+    db.pragma('query_only = ON');
+    return db;
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/utils/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/utils/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAMtC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAA0B,EAAE;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAEzC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC9B,yEAAyE;QACzE,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,4EAA4E;IAC5E,gFAAgF;IAChF,EAAE,CAAC,MAAM,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IAEzC,0FAA0F;IAC1F,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAE7B,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/utils/storage-cache.d.ts

@@ -0,0 +1,33 @@
+import { type StorageBreakdown } from '../../../dist/cleanup/directory-size.js';
+export interface ListStorageInfo {
+    storage_bytes: number;
+    storage_human: string;
+    storage_warning: 'orange' | 'red' | null;
+}
+/**
+ * Validate that a query path is a registered project.
+ * Uses fs.promises.realpath() to resolve symlinks, then checks the global DB.
+ */
+export declare function validateProjectPath(path: string | undefined): Promise<{
+    valid: true;
+    realPath: string;
+} | {
+    valid: false;
+    error: string;
+    status: number;
+}>;
+/**
+ * Get detailed storage breakdown with 60s cache.
+ */
+export declare function getCachedStorageBreakdown(projectPath: string, retentionDays?: number, backupRetentionDays?: number): Promise<StorageBreakdown>;
+/**
+ * Get lightweight storage info for project list with 5-minute cache.
+ * Returns null if not yet computed (triggers background computation).
+ */
+export declare function getCachedListStorage(projectPath: string): ListStorageInfo | null;
+/**
+ * Bust all caches for a given project path.
+ * Called after POST /clear-logs to ensure fresh data.
+ */
+export declare function bustStorageCache(projectPath: string): void;
+//# sourceMappingURL=storage-cache.d.ts.map

package/dist/utils/storage-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-cache.d.ts","sourceRoot":"","sources":["../../src/utils/storage-cache.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,yCAAyC,CAAC;AAcjD,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAAC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAe9F;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,MAAM,EACnB,aAAa,GAAE,MAAU,EACzB,mBAAmB,GAAE,MAAW,GAC/B,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAOhF;AAkBD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAG1D"}

package/dist/utils/storage-cache.js

@@ -0,0 +1,81 @@
+/**
+ * In-memory cache for project storage computations.
+ * Keyed by project path with configurable TTL.
+ */
+import { promises as fs } from 'node:fs';
+import { join } from 'node:path';
+import { getStorageBreakdown, } from '../../../dist/cleanup/directory-size.js';
+import { getRegisteredProject } from '../../../dist/runners/projects.js';
+const detailCache = new Map();
+const listCache = new Map();
+const DETAIL_TTL_MS = 60_000; // 60 seconds
+const LIST_TTL_MS = 300_000; // 5 minutes
+/**
+ * Validate that a query path is a registered project.
+ * Uses fs.promises.realpath() to resolve symlinks, then checks the global DB.
+ */
+export async function validateProjectPath(path) {
+    if (!path || typeof path !== 'string' || path.trim().length === 0) {
+        return { valid: false, error: 'Query parameter "path" is required', status: 400 };
+    }
+    let realPath;
+    try {
+        realPath = await fs.realpath(path);
+    }
+    catch {
+        return { valid: false, error: 'Path does not exist or is inaccessible', status: 404 };
+    }
+    const project = getRegisteredProject(realPath);
+    if (!project) {
+        return { valid: false, error: 'Path is not a registered project', status: 403 };
+    }
+    return { valid: true, realPath };
+}
+/**
+ * Get detailed storage breakdown with 60s cache.
+ */
+export async function getCachedStorageBreakdown(projectPath, retentionDays = 7, backupRetentionDays = 30) {
+    const entry = detailCache.get(projectPath);
+    if (entry && Date.now() < entry.expiresAt)
+        return entry.data;
+    const steroidsDir = join(projectPath, '.steroids');
+    const data = await getStorageBreakdown(steroidsDir, retentionDays, backupRetentionDays);
+    detailCache.set(projectPath, { data, expiresAt: Date.now() + DETAIL_TTL_MS });
+    return data;
+}
+/**
+ * Get lightweight storage info for project list with 5-minute cache.
+ * Returns null if not yet computed (triggers background computation).
+ */
+export function getCachedListStorage(projectPath) {
+    const entry = listCache.get(projectPath);
+    if (entry && Date.now() < entry.expiresAt)
+        return entry.data;
+    // Trigger background computation (don't block the list response)
+    computeListStorageInBackground(projectPath);
+    return entry?.data ?? null; // Return stale data if available, null otherwise
+}
+function computeListStorageInBackground(projectPath) {
+    const steroidsDir = join(projectPath, '.steroids');
+    getStorageBreakdown(steroidsDir)
+        .then((breakdown) => {
+        listCache.set(projectPath, {
+            data: {
+                storage_bytes: breakdown.total_bytes,
+                storage_human: breakdown.total_human,
+                storage_warning: breakdown.threshold_warning,
+            },
+            expiresAt: Date.now() + LIST_TTL_MS,
+        });
+    })
+        .catch(() => { });
+}
+/**
+ * Bust all caches for a given project path.
+ * Called after POST /clear-logs to ensure fresh data.
+ */
+export function bustStorageCache(projectPath) {
+    detailCache.delete(projectPath);
+    listCache.delete(projectPath);
+}
+//# sourceMappingURL=storage-cache.js.map

package/dist/utils/storage-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-cache.js","sourceRoot":"","sources":["../../src/utils/storage-cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,mBAAmB,GAGpB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAOzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwC,CAAC;AACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEjE,MAAM,aAAa,GAAG,MAAM,CAAC,CAAI,aAAa;AAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,CAAK,YAAY;AAQ7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAwB;IAExB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,gBAAwB,CAAC,EACzB,sBAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAE7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACxF,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAE7D,iEAAiE;IACjE,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAE,iDAAiD;AAChF,CAAC;AAED,SAAS,8BAA8B,CAAC,WAAmB;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACnD,mBAAmB,CAAC,WAAW,CAAC;SAC7B,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAClB,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE;YACzB,IAAI,EAAE;gBACJ,aAAa,EAAE,SAAS,CAAC,WAAW;gBACpC,aAAa,EAAE,SAAS,CAAC,WAAW;gBACpC,eAAe,EAAE,SAAS,CAAC,iBAAiB;aAC7C;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;SACpC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,GAAsC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC"}

package/dist/utils/validation.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Path validation utilities for API security
+ */
+/**
+ * Validate that a path is safe and points to a valid Steroids project
+ *
+ * @param path - Path to validate
+ * @returns True if path is valid and safe
+ */
+export declare function isValidProjectPath(path: string): boolean;
+/**
+ * Validate request body for path-based operations
+ *
+ * @param body - Request body
+ * @returns Validation result with error message if invalid
+ */
+export declare function validatePathRequest(body: unknown): {
+    valid: boolean;
+    error?: string;
+    path?: string;
+};
+//# sourceMappingURL=validation.d.ts.map

package/dist/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuBxD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAgBpG"}