wiki-viewer 1.14.1 → 2.0.0

package/.next/standalone/src/app/api/assets/[...path]/route.ts

@@ -1,75 +0,0 @@
-import { readFile, stat } from "node:fs/promises";
-import path from "node:path";
-import { NextResponse } from "next/server";
-import { resolveWorkspaceForAgent } from "@/lib/workspace-context";
-import { safeWorkspacePath } from "@/lib/workspaces";
-
-const MIME_MAP: Record<string, string> = {
-	jpg: "image/jpeg",
-	jpeg: "image/jpeg",
-	png: "image/png",
-	gif: "image/gif",
-	webp: "image/webp",
-	svg: "image/svg+xml",
-	avif: "image/avif",
-	ico: "image/x-icon",
-	bmp: "image/bmp",
-	pdf: "application/pdf",
-	txt: "text/plain; charset=utf-8",
-	md: "text/markdown; charset=utf-8",
-	mp4: "video/mp4",
-	webm: "video/webm",
-	mov: "video/quicktime",
-	m4v: "video/mp4",
-	mp3: "audio/mpeg",
-	wav: "audio/wav",
-	ogg: "audio/ogg",
-	m4a: "audio/mp4",
-	aac: "audio/aac",
-	ipynb: "application/json",
-	json: "application/json",
-	js: "text/javascript",
-	ts: "text/plain",
-	css: "text/css",
-	html: "text/html",
-	mmd: "text/plain",
-	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-	pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
-};
-
-export async function GET(
-	request: Request,
-	{ params }: { params: Promise<{ path: string[] }> },
-) {
-	const wsx = await resolveWorkspaceForAgent(request);
-	if (!wsx.ok) return NextResponse.json({ error: wsx.code }, { status: wsx.status });
-	const { rootDir } = wsx;
-
-	const segments = (await params).path;
-	const rel = segments.join("/");
-
-	// Path traversal guard
-	const resolved = safeWorkspacePath(rootDir, rel);
-	if (!resolved) {
-		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
-	}
-
-	try {
-		const info = await stat(resolved);
-		if (info.isDirectory())
-			return NextResponse.json({ error: "Not a file" }, { status: 400 });
-
-		const ext = path.extname(resolved).slice(1).toLowerCase();
-		const contentType = MIME_MAP[ext] ?? "application/octet-stream";
-		const buffer = await readFile(resolved);
-		return new Response(buffer, {
-			headers: {
-				"Content-Type": contentType,
-				"Cache-Control": "private, max-age=60",
-			},
-		});
-	} catch {
-		return NextResponse.json({ error: "File not found" }, { status: 404 });
-	}
-}

package/.next/standalone/src/app/api/auth/[...all]/route.ts

@@ -1,7 +0,0 @@
-import { auth } from "@/lib/auth/server";
-import { toNextJsHandler } from "better-auth/next-js";
-
-export const runtime = "nodejs";
-
-const handler = toNextJsHandler(auth);
-export const { GET, POST, PATCH, PUT, DELETE } = handler;

package/.next/standalone/src/app/api/owner/init/route.ts

@@ -1,14 +0,0 @@
-/**
- * GET /api/owner/init
- *
- * Legacy bootstrap endpoint. Now redirects to /signin (Better Auth).
- * Kept for back-compat — any agent or UI calling this will be redirected.
- */
-import { NextResponse } from "next/server";
-
-export const runtime = "nodejs";
-
-export function GET(req: Request): NextResponse {
-	const url = new URL("/signin", req.url);
-	return NextResponse.redirect(url, { status: 308 });
-}

package/.next/standalone/src/app/api/share/[token]/route.ts

@@ -1,269 +0,0 @@
-import { NextResponse } from "next/server";
-import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { getWorkspace } from "@/lib/workspaces";
-import { safeAbsPath } from "@/lib/proof/raw-fs";
-import { checkAndConsume } from "@/lib/proof/rate-limit";
-import {
-	getShareByToken,
-	verifyPassword,
-	revokeShare,
-	isExpired,
-	incrementViewCount,
-} from "@/lib/shared-docs/db";
-
-const MAX_DISPLAY_SIZE = 1 * 1024 * 1024; // 1MB
-
-// ── Shared helper: read file content for a resolved share ────────────────────
-
-async function resolveContent(
-	token: string,
-): Promise<
-	| { ok: true; content: string; filename: string; viewCount: number }
-	| { ok: false; response: NextResponse }
-> {
-	const share = getShareByToken(token);
-	if (!share) {
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "not_found", message: "Share link not found" },
-				{ status: 404 },
-			),
-		};
-	}
-
-	if (share.isRevoked) {
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "revoked", message: "Share link has been revoked" },
-				{ status: 410 },
-			),
-		};
-	}
-
-	if (isExpired(share)) {
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "expired", message: "Share link has expired" },
-				{ status: 410 },
-			),
-		};
-	}
-
-	const ws = await getWorkspace(share.workspaceId);
-	if (!ws) {
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "workspace_gone", message: "Workspace no longer exists" },
-				{ status: 410 },
-			),
-		};
-	}
-
-	const absPath = await safeAbsPath(ws.rootDir, share.filePath);
-	if (!absPath) {
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "path_invalid", message: "Invalid file path" },
-				{ status: 400 },
-			),
-		};
-	}
-
-	const { readFile, stat } = await import("node:fs/promises");
-	try {
-		const info = await stat(absPath);
-		if (info.size > MAX_DISPLAY_SIZE) {
-			return {
-				ok: false,
-				response: NextResponse.json(
-					{ error: "too_large", message: "File too large to share (max 1MB)" },
-					{ status: 413 },
-				),
-			};
-		}
-	} catch {
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "file_gone", message: "File no longer exists" },
-				{ status: 410 },
-			),
-		};
-	}
-
-	let content: string;
-	try {
-		const buffer = await readFile(absPath);
-		content = buffer.toString("utf-8");
-	} catch (err: unknown) {
-		const detail = err instanceof Error ? err.message : String(err);
-		console.error("[share] readFile(%s) %s", absPath, detail);
-		return {
-			ok: false,
-			response: NextResponse.json(
-				{ error: "read_error", message: "Failed to read file" },
-				{ status: 500 },
-			),
-		};
-	}
-
-	incrementViewCount(token);
-	const filename = share.filePath.split("/").pop() ?? share.filePath;
-
-	return { ok: true, content, filename, viewCount: share.viewCount + 1 };
-}
-
-// ── GET: Resolve a share link (public) ───────────────────────────────────────
-
-export async function GET(
-	request: Request,
-	{ params }: { params: Promise<{ token: string }> },
-) {
-	const { token } = await params;
-
-	const rl = checkAndConsume(`share:${token}`, 1);
-	if (!rl.ok) {
-		return NextResponse.json(
-			{ error: "rate_limited", message: "Too many requests" },
-			{
-				status: 429,
-				headers: { "Retry-After": String(Math.ceil(rl.retryAfterMs / 1000)) },
-			},
-		);
-	}
-
-	const share = getShareByToken(token);
-	if (!share) {
-		return NextResponse.json(
-			{ error: "not_found", message: "Share link not found" },
-			{ status: 404 },
-		);
-	}
-
-	if (share.isRevoked) {
-		return NextResponse.json(
-			{ error: "revoked", message: "Share link has been revoked" },
-			{ status: 410 },
-		);
-	}
-
-	if (isExpired(share)) {
-		return NextResponse.json(
-			{ error: "expired", message: "Share link has expired" },
-			{ status: 410 },
-		);
-	}
-
-	// Password-protected: tell client to POST to /unlock instead
-	if (share.passwordHash) {
-		return NextResponse.json(
-			{ protected: true, message: "This document is password-protected" },
-			{ status: 401 },
-		);
-	}
-
-	const result = await resolveContent(token);
-	if (!result.ok) return result.response;
-
-	return NextResponse.json({
-		content: result.content,
-		filename: result.filename,
-		viewCount: result.viewCount,
-	});
-}
-
-// ── POST: Unlock a password-protected share ───────────────────────────────────
-
-export async function POST(
-	request: Request,
-	{ params }: { params: Promise<{ token: string }> },
-) {
-	const { token } = await params;
-
-	const share = getShareByToken(token);
-	if (!share) {
-		return NextResponse.json({ error: "not_found" }, { status: 404 });
-	}
-	if (share.isRevoked) {
-		return NextResponse.json({ error: "revoked" }, { status: 410 });
-	}
-	if (isExpired(share)) {
-		return NextResponse.json({ error: "expired" }, { status: 410 });
-	}
-	if (!share.passwordHash) {
-		return NextResponse.json({ error: "not_protected" }, { status: 400 });
-	}
-
-	// Rate limit password attempts
-	const rl = checkAndConsume(`share-pwd:${token}`, 1);
-	if (!rl.ok) {
-		return NextResponse.json(
-			{ error: "rate_limited", message: "Too many attempts. Try again later." },
-			{
-				status: 429,
-				headers: { "Retry-After": String(Math.ceil(rl.retryAfterMs / 1000)) },
-			},
-		);
-	}
-
-	const body: { password?: string } = await request.json();
-	if (!body.password || typeof body.password !== "string") {
-		return NextResponse.json({ error: "missing_password" }, { status: 400 });
-	}
-
-	if (!verifyPassword(body.password, share.passwordHash)) {
-		return NextResponse.json(
-			{ error: "wrong_password", message: "Incorrect password" },
-			{ status: 403 },
-		);
-	}
-
-	const result = await resolveContent(token);
-	if (!result.ok) return result.response;
-
-	return NextResponse.json({
-		content: result.content,
-		filename: result.filename,
-		viewCount: result.viewCount,
-	});
-}
-
-// ── DELETE: Revoke a share link (auth required) ───────────────────────────────
-
-export async function DELETE(
-	request: Request,
-	{ params }: { params: Promise<{ token: string }> },
-) {
-	const { token } = await params;
-
-	const csrf = checkOrigin(request);
-	if (csrf) return csrf;
-
-	const auth = await requireUser(request);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const share = getShareByToken(token);
-	if (!share) {
-		return NextResponse.json({ error: "not_found" }, { status: 404 });
-	}
-
-	if (share.createdBy !== auth.user.id) {
-		const { isAdmin } = await import("@/lib/auth/admin");
-		const admin = await isAdmin(auth.user.id, auth.user.email);
-		if (!admin) {
-			return NextResponse.json({ error: "FORBIDDEN" }, { status: 403 });
-		}
-	}
-
-	revokeShare(share.id);
-
-	return NextResponse.json({ ok: true });
-}

package/.next/standalone/src/app/api/share/route.ts

@@ -1,127 +0,0 @@
-import { NextResponse } from "next/server";
-import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { resolveWorkspaceForUser } from "@/lib/workspace-context";
-import { safeAbsPath } from "@/lib/proof/raw-fs";
-import {
-	createShare,
-	listSharesForFile,
-} from "@/lib/shared-docs/db";
-
-// ── POST: Create a share link ─────────────────────────────────────────────────
-
-export async function POST(request: Request) {
-	const csrf = checkOrigin(request);
-	if (csrf) return csrf;
-
-	// Must be signed in
-	const auth = await requireUser(request);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const ctx = await resolveWorkspaceForUser(request);
-	if (!ctx.ok) {
-		return NextResponse.json({ error: ctx.code }, { status: ctx.status });
-	}
-
-	const body: {
-		path?: string;
-		password?: string;
-		expiresAt?: string;
-	} = await request.json();
-
-	const relPath = body.path;
-	if (!relPath || typeof relPath !== "string") {
-		return NextResponse.json({ error: "Missing path" }, { status: 400 });
-	}
-
-	// Verify the file exists and belongs to this workspace
-	const absPath = await safeAbsPath(ctx.rootDir, relPath);
-	if (!absPath) {
-		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
-	}
-
-	const { stat } = await import("node:fs/promises");
-	try {
-		await stat(absPath);
-	} catch {
-		return NextResponse.json({ error: "File not found" }, { status: 404 });
-	}
-
-	// Validate optional params
-	if (body.password !== undefined && typeof body.password !== "string") {
-		return NextResponse.json({ error: "Invalid password" }, { status: 400 });
-	}
-	if (
-		body.expiresAt !== undefined &&
-		body.expiresAt !== null &&
-		typeof body.expiresAt !== "string"
-	) {
-		return NextResponse.json({ error: "Invalid expiresAt" }, { status: 400 });
-	}
-	// Reject invalid or already-expired dates
-	if (body.expiresAt) {
-		const d = new Date(body.expiresAt);
-		if (isNaN(d.getTime())) {
-			return NextResponse.json({ error: "Invalid date" }, { status: 400 });
-		}
-		if (d.getTime() < Date.now()) {
-			return NextResponse.json({ error: "Date is in the past" }, { status: 400 });
-		}
-	}
-
-	const share = createShare({
-		workspaceId: ctx.ws.id,
-		filePath: relPath,
-		password: body.password && body.password.length > 0 ? body.password : undefined,
-		expiresAt: body.expiresAt || undefined,
-		createdBy: auth.user.id,
-	});
-
-	return NextResponse.json({
-		token: share.token,
-		url: `/s/${share.token}`,
-		hasPassword: !!share.passwordHash,
-		expiresAt: share.expiresAt,
-		createdAt: share.createdAt,
-	});
-}
-
-// ── GET: List share links for a file ──────────────────────────────────────────
-
-export async function GET(request: Request) {
-	const csrf = checkOrigin(request);
-	if (csrf) return csrf;
-
-	const auth = await requireUser(request);
-	if (!auth.ok) {
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-	}
-
-	const ctx = await resolveWorkspaceForUser(request);
-	if (!ctx.ok) {
-		return NextResponse.json({ error: ctx.code }, { status: ctx.status });
-	}
-
-	const { searchParams } = new URL(request.url);
-	const relPath = searchParams.get("path");
-	if (!relPath) {
-		return NextResponse.json({ error: "Missing path" }, { status: 400 });
-	}
-
-	const shares = listSharesForFile(ctx.ws.id, relPath);
-
-	return NextResponse.json({
-		shares: shares.map((s) => ({
-			id: s.id,
-			token: s.token,
-			url: `/s/${s.token}`,
-			hasPassword: !!s.passwordHash,
-			expiresAt: s.expiresAt,
-			createdAt: s.createdAt,
-			viewCount: s.viewCount,
-			isExpired: s.expiresAt ? new Date(s.expiresAt) < new Date() : false,
-		})),
-	});
-}

package/.next/standalone/src/app/api/system/admins/route.ts

@@ -1,103 +0,0 @@
-/**
- * Admin management API.
- *
- * GET  /api/system/admins  — any signed-in user (returns isAdmin flag, admin list,
- *                            and user roster if caller is admin).
- * POST   { userId }        — admin-only: promote user to admin.
- * DELETE { userId }        — admin-only: demote user; refuses to remove last admin.
- *
- * Bootstrap: first authenticated request triggers ensureBootstrapAdmin so the
- * first user to sign in becomes admin when no WIKI_ADMIN_EMAILS is set.
- */
-import { NextResponse } from "next/server";
-import Database from "better-sqlite3";
-import path from "node:path";
-import os from "node:os";
-import { mkdirSync } from "node:fs";
-import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import {
-	isAdmin,
-	listAdmins,
-	addAdmin,
-	removeAdmin,
-	requireAdmin,
-	ensureBootstrapAdmin,
-} from "@/lib/auth/admin";
-
-export const runtime = "nodejs";
-
-interface UserRow {
-	id: string;
-	email: string;
-	name: string;
-}
-
-function queryAllUsers(): UserRow[] {
-	try {
-		const dir = path.join(process.env.HOME ?? os.homedir(), ".wiki-viewer");
-		mkdirSync(dir, { recursive: true });
-		const db = new Database(path.join(dir, "auth.db"));
-		db.pragma("journal_mode = WAL");
-		return db.prepare("SELECT id, email, name FROM user").all() as UserRow[];
-	} catch {
-		return [];
-	}
-}
-
-export async function GET(request: Request) {
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-
-	// Bootstrap: first authenticated user becomes admin if no admin set yet.
-	await ensureBootstrapAdmin(auth.user.id);
-
-	const admin = await isAdmin(auth.user.id, auth.user.email);
-	const admins = await listAdmins();
-	const users = admin ? queryAllUsers() : [];
-
-	return NextResponse.json({ admins, isAdmin: admin, users });
-}
-
-export async function POST(request: Request) {
-	const csrf = checkOrigin(request);
-	if (csrf) return csrf;
-
-	const authResult = await requireAdmin(request);
-	if (!authResult.ok)
-		return NextResponse.json({ error: authResult.code }, { status: authResult.status });
-
-	const body: { userId?: string } = await request.json();
-	if (!body.userId?.trim())
-		return NextResponse.json({ error: "Missing userId" }, { status: 400 });
-
-	await addAdmin(body.userId.trim());
-	const admins = await listAdmins();
-	return NextResponse.json({ ok: true, admins });
-}
-
-export async function DELETE(request: Request) {
-	const csrf = checkOrigin(request);
-	if (csrf) return csrf;
-
-	const authResult = await requireAdmin(request);
-	if (!authResult.ok)
-		return NextResponse.json({ error: authResult.code }, { status: authResult.status });
-
-	const body: { userId?: string } = await request.json();
-	if (!body.userId?.trim())
-		return NextResponse.json({ error: "Missing userId" }, { status: 400 });
-
-	try {
-		await removeAdmin(body.userId.trim());
-	} catch (e) {
-		const msg = e instanceof Error ? e.message : String(e);
-		if (msg.startsWith("LAST_ADMIN")) {
-			return NextResponse.json({ error: "LAST_ADMIN", message: msg }, { status: 409 });
-		}
-		throw e;
-	}
-
-	const admins = await listAdmins();
-	return NextResponse.json({ ok: true, admins });
-}

package/.next/standalone/src/app/api/system/auth-config/route.ts

@@ -1,22 +0,0 @@
-/**
- * GET /api/system/auth-config — public, unauthenticated.
- *
- * The sign-in page renders before any session exists, so it needs a public way
- * to learn which auth methods are available: whether email/password is enabled
- * and whether a social provider (Google) is configured. No secrets are exposed,
- * only booleans describing which UI to show.
- */
-import { NextResponse } from "next/server";
-import { passwordAuthEnabled } from "@/lib/auth/server";
-
-export const runtime = "nodejs";
-
-export function GET() {
-	const google = Boolean(
-		process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET,
-	);
-	return NextResponse.json({
-		passwordAuth: passwordAuthEnabled,
-		google,
-	});
-}

package/.next/standalone/src/app/api/system/auth-settings/route.ts

@@ -1,86 +0,0 @@
-/**
- * GET  /api/system/auth-settings — read the effective signup allowlist.
- * PUT  /api/system/auth-settings — update the allowlist in config.json.
- *
- * Single-tenant local app: any authenticated user may read/edit. The effective
- * list resolves config first, env as fallback (see getAllowlist). `source`
- * tells the UI where the active values came from so it can warn that editing
- * here overrides the env vars.
- */
-import { NextResponse } from "next/server";
-import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { getAllowlist } from "@/lib/auth/allowlist";
-import { readConfig, writeConfig } from "@/lib/config";
-
-export const runtime = "nodejs";
-
-export async function GET(request: Request) {
-	const auth = await requireUser(request);
-	if (!auth.ok)
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-
-	const config = await readConfig();
-	const effective = await getAllowlist();
-	const usingConfig =
-		(config.allowedEmails?.length ?? 0) > 0 ||
-		(config.allowedDomains?.length ?? 0) > 0;
-
-	return NextResponse.json({
-		allowedEmails: effective.emails,
-		allowedDomains: effective.domains,
-		source: usingConfig ? "config" : "env",
-		envFallbackActive: !usingConfig,
-		rateLimit: Number(process.env.AGENT_RATE_LIMIT) || 60,
-	});
-}
-
-function normalizeList(value: unknown): string[] {
-	if (!Array.isArray(value)) return [];
-	return value
-		.filter((v): v is string => typeof v === "string")
-		.map((s) => s.trim().toLowerCase())
-		.filter(Boolean);
-}
-
-export async function PUT(request: Request) {
-	const csrf = checkOrigin(request);
-	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok)
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
-
-	let body: { allowedEmails?: unknown; allowedDomains?: unknown };
-	try {
-		body = await request.json();
-	} catch {
-		return NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
-	}
-
-	const allowedEmails = normalizeList(body.allowedEmails);
-	const allowedDomains = normalizeList(body.allowedDomains);
-
-	// Reject obviously malformed email entries (must contain a single @ with text
-	// on both sides). Domains are looser but must not contain @ or spaces.
-	const badEmail = allowedEmails.find((e) => !/^[^@\s]+@[^@\s]+$/.test(e));
-	if (badEmail)
-		return NextResponse.json(
-			{ error: `Invalid email entry: ${badEmail}` },
-			{ status: 400 },
-		);
-	const badDomain = allowedDomains.find((d) => /[@\s]/.test(d));
-	if (badDomain)
-		return NextResponse.json(
-			{ error: `Invalid domain entry: ${badDomain}` },
-			{ status: 400 },
-		);
-
-	await writeConfig({ allowedEmails, allowedDomains });
-
-	return NextResponse.json({
-		ok: true,
-		allowedEmails,
-		allowedDomains,
-		source: allowedEmails.length || allowedDomains.length ? "config" : "env",
-	});
-}