tower-studio 0.1.3 → 0.1.6

package/src/actions/agent-config-actions.ts

@@ -1,44 +0,0 @@
-"use server";
-
-import { db } from "@/lib/db";
-import { revalidatePath } from "next/cache";
-
-export async function getAgentConfigs() {
-  return db.agentConfig.findMany({ orderBy: { agent: "asc" } });
-}
-
-export async function getDefaultAgentConfig() {
-  return db.agentConfig.findFirst({ where: { isDefault: true } });
-}
-
-export async function updateAgentConfig(
-  id: string,
-  data: {
-    appendPrompt?: string;
-    settings?: string;
-    isDefault?: boolean;
-  }
-) {
-  const config = await db.agentConfig.update({
-    where: { id },
-    data,
-  });
-  revalidatePath("/settings");
-  return config;
-}
-
-export async function createAgentConfig(data: {
-  agent: string;
-  configName: string;
-  appendPrompt?: string;
-  settings?: string;
-}) {
-  const config = await db.agentConfig.create({ data });
-  revalidatePath("/settings");
-  return config;
-}
-
-export async function deleteAgentConfig(id: string) {
-  await db.agentConfig.delete({ where: { id } });
-  revalidatePath("/settings");
-}

package/src/actions/ai-config-actions.ts

@@ -1,51 +0,0 @@
-"use server";
-
-import { db } from "@/lib/db";
-import { revalidatePath } from "next/cache";
-import { providerRegistry } from "@/lib/ai/providers";
-import type { AiSlot } from "@/lib/ai/types";
-
-const VALID_SLOTS: AiSlot[] = ["terminal", "summary", "dreaming", "analysis", "assistant"];
-
-export async function getAiCapabilityConfigs() {
-  return db.aiCapabilityConfig.findMany({ orderBy: { slot: "asc" } });
-}
-
-export async function updateAiCapabilityConfig(
-  slot: string,
-  data: { provider: string; mode: string; model?: string | null }
-) {
-  if (!VALID_SLOTS.includes(slot as AiSlot)) {
-    throw new Error(`无效的插槽: ${slot}`);
-  }
-
-  const providerDef = providerRegistry.get(data.provider);
-  if (!providerDef) {
-    throw new Error(`未知的 Provider: ${data.provider}`);
-  }
-
-  if (slot === "terminal" && data.mode !== "cli") {
-    throw new Error("终端执行只支持 CLI 模式");
-  }
-
-  await db.aiCapabilityConfig.upsert({
-    where: { slot },
-    create: {
-      slot,
-      provider: data.provider,
-      mode: data.mode,
-      model: data.model ?? null,
-    },
-    update: {
-      provider: data.provider,
-      mode: data.mode,
-      model: data.model ?? null,
-    },
-  });
-
-  revalidatePath("/settings");
-}
-
-export async function getAvailableProviders() {
-  return providerRegistry.getAvailableProviders();
-}

package/src/actions/asset-actions.ts

@@ -1,131 +0,0 @@
-"use server";
-
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { z } from "zod";
-import { db } from "@/lib/db";
-import { revalidatePath } from "next/cache";
-import { ensureAssetsDir } from "@/lib/file-utils";
-import { getConfigValue } from "@/actions/config-actions";
-
-const createAssetSchema = z.object({
-  filename: z.string().min(1).max(255),
-  path: z.string().min(1),
-  mimeType: z.string().max(100).optional(),
-  size: z.number().int().nonnegative().optional(),
-  projectId: z.string().min(1),
-  description: z.string().max(500).optional(),
-  taskId: z.string().optional(),
-});
-
-export async function createAsset(data: {
-  filename: string;
-  path: string;
-  mimeType?: string;
-  size?: number;
-  projectId: string;
-  description?: string;
-  taskId?: string;
-}) {
-  const parsed = createAssetSchema.parse(data);
-  ensureAssetsDir(parsed.projectId);
-  const asset = await db.projectAsset.create({ data: { ...parsed, taskId: parsed.taskId ?? null } });
-  revalidatePath(`/workspaces`);
-  return asset;
-}
-
-export async function deleteAsset(assetId: string) {
-  const asset = await db.projectAsset.findUnique({ where: { id: assetId } });
-  if (asset?.path) {
-    await fs.promises.unlink(asset.path).catch(() => {});
-  }
-  await db.projectAsset.delete({ where: { id: assetId } });
-  revalidatePath(`/workspaces`);
-}
-
-export async function getProjectAssets(projectId: string) {
-  return db.projectAsset.findMany({
-    where: { projectId },
-    orderBy: { createdAt: "desc" },
-    include: {
-      task: {
-        select: {
-          id: true,
-          title: true,
-          status: true,
-          priority: true,
-          description: true,
-          createdAt: true,
-          labels: { include: { label: true } },
-          executions: {
-            orderBy: { createdAt: "desc" },
-            take: 1,
-            select: { summary: true, status: true, endedAt: true },
-          },
-          _count: { select: { assets: true } },
-        },
-      },
-    },
-  });
-}
-
-export type ProjectAssetWithTask = Awaited<ReturnType<typeof getProjectAssets>>[number];
-
-export async function getTaskAssets(taskId: string) {
-  return db.projectAsset.findMany({
-    where: { taskId },
-    orderBy: { createdAt: "desc" },
-  });
-}
-
-export async function getAssetById(assetId: string) {
-  return db.projectAsset.findUnique({ where: { id: assetId } });
-}
-
-export async function uploadAsset(formData: FormData) {
-  const file = formData.get("file") as File;
-  const projectId = formData.get("projectId") as string;
-  const taskId = (formData.get("taskId") as string | null) || undefined;
-  if (!file || !projectId) throw new Error("Missing file or projectId");
-  const maxBytes = await getConfigValue<number>("system.maxUploadBytes", 52428800);
-  if (file.size > maxBytes) throw new Error(`File too large (max ${Math.round(maxBytes / 1024 / 1024)} MB)`);
-  const description = (formData.get("description") as string | null) ?? "";
-
-  // Validate projectId exists in DB before any filesystem operation
-  const project = await db.project.findUnique({ where: { id: projectId } });
-  if (!project) throw new Error("Invalid projectId");
-
-  const buffer = Buffer.from(await file.arrayBuffer());
-  const dir = ensureAssetsDir(projectId);
-
-  // Sanitize filename: strip directory components to prevent path traversal
-  let filename = path.basename(file.name);
-  if (!filename || filename === "." || filename === "..") {
-    filename = `upload-${Date.now()}`;
-  }
-
-  // Avoid overwriting: append timestamp if file exists
-  const destCheck = path.join(dir, filename);
-  if (fs.existsSync(destCheck)) {
-    const ext = path.extname(filename);
-    const base = path.basename(filename, ext);
-    filename = `${base}-${Date.now()}${ext}`;
-  }
-
-  const dest = path.join(dir, filename);
-  // Containment check: ensure resolved path stays within assets directory
-  if (!dest.startsWith(dir)) throw new Error("Invalid filename");
-  await fs.promises.writeFile(dest, buffer);
-
-  const asset = await createAsset({
-    filename,
-    path: dest,
-    mimeType: file.type || undefined,
-    size: file.size,
-    projectId,
-    description: description || undefined,
-    taskId,
-  });
-  revalidatePath(`/workspaces`);
-  return asset;
-}

package/src/actions/assistant-actions.ts

@@ -1,107 +0,0 @@
-"use server";
-
-import { randomUUID } from "crypto";
-import {
-  createSession,
-  destroySession,
-  getSession,
-} from "@/lib/pty/session-store";
-import { readConfigValue } from "@/lib/config-reader";
-import { db } from "@/lib/db";
-import { ASSISTANT_SESSION_KEY } from "@/lib/assistant-constants";
-
-/**
- * Spawn a fresh Claude CLI PTY session for the global assistant (BE-01).
- * Destroys any existing assistant session first (UX-01).
- * Uses --allowedTools mcp__tower__* (BE-03) and --append-system-prompt (BE-02).
- * Does NOT inject AI_MANAGER_TASK_ID — assistant has no associated task.
- *
- * @param sessionId - When provided, resumes an existing Claude CLI session via --resume.
- *                    When omitted, starts a new session with a generated --session-id.
- */
-export async function startAssistantSession(sessionId?: string): Promise<void> {
-  // UX-01: Ensure a clean slate — destroy any existing assistant session
-  destroySession(ASSISTANT_SESSION_KEY);
-
-  // Fetch the default CLI profile
-  const profile = await db.cliProfile.findFirst({ where: { isDefault: true } });
-  if (!profile) {
-    throw new Error(
-      "No default CLI profile — configure one in Settings"
-    );
-  }
-
-  // Parse profile JSON fields
-  let profileBaseArgs: string[];
-  try {
-    profileBaseArgs = JSON.parse(profile.baseArgs) as string[];
-  } catch {
-    throw new Error("CLI Profile baseArgs is malformed — fix in Settings");
-  }
-
-  let profileEnvVars: Record<string, string>;
-  try {
-    profileEnvVars = JSON.parse(profile.envVars) as Record<string, string>;
-  } catch {
-    throw new Error("CLI Profile envVars is malformed — fix in Settings");
-  }
-
-  // BE-02: Read the configured system prompt (default defined in config-defaults.ts)
-  const systemPrompt = await readConfigValue<string>(
-    "assistant.systemPrompt",
-    "You are Tower Assistant, an AI operator for the Tower task management platform."
-  );
-
-  // Tower project root is the cwd for the assistant session
-  const cwd = process.cwd();
-
-  // Build CLI arguments
-  const claudeArgs: string[] = [
-    ...profileBaseArgs,
-    // BE-03: Restrict to Tower MCP tools only
-    "--allowedTools",
-    "mcp__tower__*",
-    // BE-02: Inject operator identity prompt
-    "--append-system-prompt",
-    systemPrompt,
-  ];
-
-  // Session management: resume existing or start new with a generated ID
-  if (sessionId) {
-    claudeArgs.push("--resume", sessionId);
-  } else {
-    claudeArgs.push("--session-id", randomUUID());
-  }
-
-  // Build env overrides — only profile vars, no AI_MANAGER_TASK_ID (assistant has no task)
-  const envOverrides: Record<string, string> = { ...profileEnvVars };
-
-  // BE-01: Spawn the PTY session keyed by __assistant__
-  createSession(
-    ASSISTANT_SESSION_KEY,
-    profile.command,
-    claudeArgs,
-    cwd,
-    () => {},
-    () => {},
-    envOverrides
-  );
-}
-
-/**
- * Destroy the active assistant PTY session (BE-05).
- */
-export async function stopAssistantSession(): Promise<void> {
-  destroySession(ASSISTANT_SESSION_KEY);
-}
-
-/**
- * Returns "running" if an active assistant session exists, "idle" otherwise (BE-06).
- */
-export async function getAssistantSessionStatus(): Promise<"running" | "idle"> {
-  const session = getSession(ASSISTANT_SESSION_KEY);
-  if (!session || session.killed) {
-    return "idle";
-  }
-  return "running";
-}

package/src/actions/cli-profile-actions.ts

@@ -1,98 +0,0 @@
-"use server";
-
-import path from "node:path";
-import { db } from "@/lib/db";
-import { revalidatePath } from "next/cache";
-import { providerRegistry } from "@/lib/ai/providers";
-
-function getAllowedCommands(): string[] {
-  const fromRegistry = providerRegistry.getAllowedCommands();
-  return [...new Set([...fromRegistry, "claude-code"])];
-}
-
-const BLOCKED_ENV_KEYS = new Set([
-  "PATH", "LD_PRELOAD", "DYLD_INSERT_LIBRARIES",
-  "LD_LIBRARY_PATH", "HOME", "SHELL", "USER",
-  "DYLD_LIBRARY_PATH", "NODE_OPTIONS",
-]);
-
-export async function getDefaultCliProfile() {
-  const profile = await db.cliProfile.findFirst({ where: { isDefault: true } });
-  if (!profile) return null;
-  return {
-    id: profile.id,
-    name: profile.name,
-    command: profile.command,
-    baseArgs: profile.baseArgs,
-    envVars: profile.envVars,
-  };
-}
-
-export async function updateCliProfile(
-  id: string,
-  data: { command?: string; baseArgs?: string; envVars?: string }
-) {
-  // Validate command against allowlist
-  if (data.command !== undefined) {
-    const basename = path.basename(data.command);
-    const allowed = getAllowedCommands();
-    if (!allowed.includes(basename)) {
-      throw new Error(
-        `command must be one of: ${allowed.join(", ")} (got: ${basename})`
-      );
-    }
-  }
-
-  // Validate baseArgs — must be JSON array of strings, no shell metacharacters
-  if (data.baseArgs !== undefined) {
-    let parsed: unknown;
-    try {
-      parsed = JSON.parse(data.baseArgs);
-    } catch {
-      throw new Error("baseArgs 格式无效，必须是 JSON 数组");
-    }
-    if (!Array.isArray(parsed)) {
-      throw new Error("baseArgs 格式无效，必须是 JSON 数组");
-    }
-    for (const arg of parsed) {
-      if (typeof arg !== "string") {
-        throw new Error("baseArgs 中每个元素必须是字符串");
-      }
-      if (/[;&|`$()]/.test(arg)) {
-        throw new Error(`baseArgs 包含不允许的字符: ${arg}`);
-      }
-    }
-  }
-
-  // Validate envVars — must be JSON object, block dangerous keys
-  if (data.envVars !== undefined) {
-    let parsed: unknown;
-    try {
-      parsed = JSON.parse(data.envVars);
-    } catch {
-      throw new Error("envVars 格式无效，必须是 JSON 对象");
-    }
-    if (typeof parsed !== "object" || Array.isArray(parsed) || parsed === null) {
-      throw new Error("envVars 格式无效，必须是 JSON 对象");
-    }
-    for (const key of Object.keys(parsed as Record<string, unknown>)) {
-      if (BLOCKED_ENV_KEYS.has(key.toUpperCase())) {
-        throw new Error(`envVars 不允许设置系统关键变量: ${key}`);
-      }
-    }
-  }
-
-  try {
-    const updated = await db.cliProfile.update({
-      where: { id },
-      data,
-    });
-    revalidatePath("/settings");
-    return updated;
-  } catch (err: unknown) {
-    if (err && typeof err === "object" && "code" in err && err.code === "P2025") {
-      throw new Error("CLI Profile 不存在，请检查配置");
-    }
-    throw err;
-  }
-}

package/src/actions/config-actions.ts

@@ -1,84 +0,0 @@
-"use server";
-
-import { db } from "@/lib/db";
-import { CONFIG_DEFAULTS } from "@/lib/config-defaults";
-import { matchGitPathRule, gitUrlToLocalPath, type GitPathRule } from "@/lib/git-url";
-import { detectShells, detectTerminalApps, type DetectedShell, type DetectedTerminalApp } from "@/lib/platform";
-import { getActiveWsPort } from "@/lib/pty/ws-server";
-
-export async function getConfigValue<T>(key: string, defaultValue: T): Promise<T> {
-  const row = await db.systemConfig.findUnique({ where: { key } });
-  if (!row) return defaultValue;
-  try {
-    return JSON.parse(row.value) as T;
-  } catch {
-    return defaultValue;
-  }
-}
-
-export async function setConfigValue(key: string, value: unknown): Promise<void> {
-  await db.systemConfig.upsert({
-    where: { key },
-    create: { key, value: JSON.stringify(value) },
-    update: { value: JSON.stringify(value) },
-  });
-  // Note: revalidatePath("/settings") omitted — settings page is a client component,
-  // revalidatePath has no effect. Real reactivity is Phase 14 (CFG-02).
-}
-
-export async function resolveGitLocalPath(url: string): Promise<string> {
-  const trimmed = url.trim();
-  if (!trimmed) return "";
-  try {
-    const rules = await getConfigValue<GitPathRule[]>("git.pathMappingRules", []);
-    const matched = matchGitPathRule(trimmed, rules);
-    if (matched) return matched;
-    return gitUrlToLocalPath(trimmed);
-  } catch {
-    return gitUrlToLocalPath(trimmed);
-  }
-}
-
-export async function getConfigValues(keys: string[]): Promise<Record<string, unknown>> {
-  const rows = await db.systemConfig.findMany({
-    where: { key: { in: keys } },
-  });
-  const stored = Object.fromEntries(
-    rows.map((r) => {
-      try {
-        return [r.key, JSON.parse(r.value)];
-      } catch {
-        return [r.key, null];
-      }
-    })
-  );
-  const result: Record<string, unknown> = {};
-  for (const key of keys) {
-    result[key] = key in stored ? stored[key] : (CONFIG_DEFAULTS[key]?.defaultValue ?? null);
-  }
-  return result;
-}
-
-export async function getAvailableShells(): Promise<DetectedShell[]> {
-  return detectShells();
-}
-
-export async function getAvailableTerminalApps(): Promise<DetectedTerminalApp[]> {
-  return detectTerminalApps();
-}
-
-export async function getPlatformInfo(): Promise<{ platform: NodeJS.Platform }> {
-  return { platform: process.platform };
-}
-
-/**
- * Get the actual WebSocket port the server is listening on.
- * May differ from config if the preferred port was occupied.
- */
-export async function getActualWsPort(): Promise<number> {
-  const active = getActiveWsPort();
-  if (active !== null) return active;
-  // Fallback to configured value if server hasn't started yet
-  const httpPort = parseInt(process.env.PORT || "3000", 10);
-  return getConfigValue<number>("terminal.wsPort", httpPort + 1);
-}