wiki-viewer 1.14.1 → 2.0.0

package/.next/standalone/src/lib/markdown/to-markdown.ts

@@ -1,252 +0,0 @@
-import TurndownService from "turndown";
-// @ts-expect-error — no types available for this package
-import { gfm } from "turndown-plugin-gfm";
-import { detectEmbed } from "@/lib/embeds/detect";
-
-const turndown = new TurndownService({
-	headingStyle: "atx",
-	hr: "---",
-	bulletListMarker: "-",
-	codeBlockStyle: "fenced",
-	fence: "```",
-	emDelimiter: "*",
-	strongDelimiter: "**",
-});
-
-// Add GFM support (tables, strikethrough, task lists)
-turndown.use(gfm);
-
-// Preserve line breaks in code blocks
-turndown.addRule("codeBlock", {
-	filter: (node) => {
-		return (
-			node.nodeName === "PRE" &&
-			node.firstChild !== null &&
-			node.firstChild.nodeName === "CODE"
-		);
-	},
-	replacement: (_content, node) => {
-		const code = node.firstChild as HTMLElement;
-		const lang = code.getAttribute("class")?.replace("language-", "") || "";
-		const text = code.textContent || "";
-		return `\n\`\`\`${lang}\n${text}\n\`\`\`\n`;
-	},
-});
-
-// Serialize wiki-links back to llm-wiki-pm syntax.
-// Round-trip is lossless: slug/alias/anchor attrs map 1-to-1 to each form.
-turndown.addRule("wikiLink", {
-	filter: (node) =>
-		node.nodeName === "A" && node.getAttribute("data-wiki-link") === "true",
-	replacement: (_content, node) => {
-		const el = node as HTMLElement;
-		const slug = el.getAttribute("data-slug") ?? "";
-		const alias = el.getAttribute("data-alias");
-		const anchor = el.getAttribute("data-anchor");
-		if (alias) return `[[${slug}|${alias}]]`;
-		if (anchor) return `[[${slug}#${anchor}]]`;
-		return `[[${slug}]]`;
-	},
-});
-
-// Preserve <proof-span> provenance marks — must run before styledSpan so the
-// custom tag is matched first. DOM uppercases custom tag names, so check PROOF-SPAN.
-turndown.addRule("proofSpan", {
-	filter: (node) => node.nodeName === "PROOF-SPAN",
-	replacement: (content, node) => {
-		const el = node as HTMLElement;
-		const attrs: string[] = [];
-		for (const a of Array.from(el.attributes)) {
-			attrs.push(`${a.name}="${a.value.replace(/"/g, "&quot;")}"`);
-		}
-		return `<proof-span${attrs.length ? " " + attrs.join(" ") : ""}>${content}</proof-span>`;
-	},
-});
-
-// Preserve inline styled spans (text color, background color, font weight, etc.)
-// so colors and highlights survive markdown roundtrip.
-turndown.addRule("styledSpan", {
-	filter: (node) =>
-		node.nodeName === "SPAN" && !!(node as HTMLElement).getAttribute("style"),
-	replacement: (content, node) => {
-		const style = (node as HTMLElement).getAttribute("style") ?? "";
-		return `<span style="${style}">${content}</span>`;
-	},
-});
-
-// Lucide icon node — serialize as a clean `<span data-lucide="…" data-color="…">`
-// stub. The editor's IconExtension rebuilds the colored SVG on load.
-turndown.addRule("lucideIcon", {
-	filter: (node) =>
-		node.nodeName === "SPAN" &&
-		(node as HTMLElement).hasAttribute("data-lucide"),
-	replacement: (_content, node) => {
-		const el = node as HTMLElement;
-		const name = el.getAttribute("data-lucide") ?? "file";
-		const color = el.getAttribute("data-color") ?? "gray";
-		return `<span data-lucide="${name}" data-color="${color}">&nbsp;</span>`;
-	},
-});
-
-// Preserve <mark> with any attributes (highlight extension writes data-color + style).
-turndown.addRule("mark", {
-	filter: "mark" as never,
-	replacement: (content, node) => {
-		const el = node as HTMLElement;
-		const attrs: string[] = [];
-		for (const attr of Array.from(el.attributes)) {
-			attrs.push(`${attr.name}="${attr.value.replace(/"/g, "&quot;")}"`);
-		}
-		return `<mark${attrs.length ? ` ${attrs.join(" ")}` : ""}>${content}</mark>`;
-	},
-});
-
-// Preserve <u>, <sub>, <sup> (underline, subscript, superscript).
-for (const tag of ["u", "sub", "sup"] as const) {
-	turndown.addRule(tag, {
-		filter: tag as never,
-		replacement: (content) => `<${tag}>${content}</${tag}>`,
-	});
-}
-
-// Preserve <video> tags with all attrs (file-uploaded videos).
-// If the src points at a known embed provider (YouTube, Vimeo, Loom, …),
-// upgrade it to a proper embed block instead of preserving a tag that
-// browsers can't render.
-turndown.addRule("video", {
-	filter: "video" as never,
-	replacement: (_content, node) => {
-		const el = node as HTMLElement;
-		const src = el.getAttribute("src") ?? "";
-		const detected = src ? detectEmbed(src) : null;
-		if (detected && detected.provider !== "video") {
-			const aspect = detected.aspectRatio
-				? ` data-aspect-ratio="${detected.aspectRatio}"`
-				: "";
-			return (
-				`\n<div data-embed="true" data-provider="${detected.provider}"` +
-				` data-src="${detected.embedUrl}"` +
-				` data-original-url="${detected.originalUrl}"${aspect}>` +
-				`<iframe src="${detected.embedUrl}"` +
-				` data-embed-provider="${detected.provider}"` +
-				` allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share; fullscreen"` +
-				` allowfullscreen loading="lazy" frameborder="0"></iframe>` +
-				`</div>\n`
-			);
-		}
-
-		const attrs: string[] = [];
-		for (const attr of Array.from(el.attributes)) {
-			attrs.push(`${attr.name}="${attr.value.replace(/"/g, "&quot;")}"`);
-		}
-		return `<video${attrs.length ? ` ${attrs.join(" ")}` : ""}></video>`;
-	},
-});
-
-// Preserve embed blocks (YouTube/Vimeo/Loom/X/Facebook/Instagram/etc.) as HTML.
-turndown.addRule("embedBlock", {
-	filter: (node) =>
-		node.nodeName === "DIV" &&
-		(node as HTMLElement).getAttribute("data-embed") === "true",
-	replacement: (_content, node) => {
-		const el = node as HTMLElement;
-		const provider = el.getAttribute("data-provider") ?? "iframe";
-		const src = el.getAttribute("data-src") ?? "";
-		const originalUrl = el.getAttribute("data-original-url") ?? "";
-		const aspect = el.getAttribute("data-aspect-ratio") ?? "";
-
-		if (provider === "video") {
-			return `\n<video src="${src}" controls></video>\n`;
-		}
-
-		const attrs = [
-			`data-embed="true"`,
-			`data-provider="${provider}"`,
-			`data-src="${src}"`,
-			originalUrl ? `data-original-url="${originalUrl}"` : "",
-			aspect ? `data-aspect-ratio="${aspect}"` : "",
-		]
-			.filter(Boolean)
-			.join(" ");
-
-		return `\n<div ${attrs}><iframe src="${src}" data-embed-provider="${provider}" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share; fullscreen" allowfullscreen loading="lazy" frameborder="0"></iframe></div>\n`;
-	},
-});
-
-// Preserve Twitter/X embeds as <blockquote class="twitter-tweet">…
-turndown.addRule("twitterEmbed", {
-	filter: (node) =>
-		node.nodeName === "BLOCKQUOTE" &&
-		(node as HTMLElement).classList.contains("twitter-tweet"),
-	replacement: (_content, node) => {
-		const el = node as HTMLElement;
-		const a = el.querySelector("a");
-		const href = a?.getAttribute("href") ?? "";
-		return `\n<blockquote class="twitter-tweet" data-theme="auto"><a href="${href}">${href}</a></blockquote>\n`;
-	},
-});
-
-// Preserve images that have inline width/align data. Turndown's default image
-// rule emits `![]()`, losing size info — so when the <img> has width, align, or
-// wraps in a resizable-image div we emit the raw HTML instead.
-turndown.addRule("sizedImage", {
-	filter: (node) => {
-		if (node.nodeName !== "IMG") return false;
-		const el = node as HTMLElement;
-		const width = el.getAttribute("width") ?? el.style.width;
-		const align = el.getAttribute("data-align");
-		return !!(width || align);
-	},
-	replacement: (_content, node) => {
-		const el = node as HTMLElement;
-		const attrs: string[] = [];
-		for (const attr of Array.from(el.attributes)) {
-			attrs.push(`${attr.name}="${attr.value.replace(/"/g, "&quot;")}"`);
-		}
-		return `<img ${attrs.join(" ")} />`;
-	},
-});
-
-// Preserve the resizable-image wrapper so align info survives.
-turndown.addRule("resizableImageWrapper", {
-	filter: (node) =>
-		node.nodeName === "DIV" &&
-		(node as HTMLElement).classList.contains("resizable-image"),
-	replacement: (content) => content,
-});
-
-// Math extension renders <span data-type="inlineMath" data-latex="..."> etc.
-turndown.addRule("inlineMath", {
-	filter: (node) => {
-		const el = node as HTMLElement;
-		if (el.nodeName !== "SPAN") return false;
-		const dataType = el.getAttribute("data-type");
-		return dataType === "inline-math" || dataType === "inlineMath";
-	},
-	replacement: (_content, node) => {
-		const latex = (node as HTMLElement).getAttribute("data-latex") ?? "";
-		return `$${latex}$`;
-	},
-});
-
-// Preserve aligned blocks (paragraphs/headings with inline text-align style).
-// Default turndown serializers lose the style attr; we emit raw HTML when a
-// block has non-default alignment.
-turndown.addRule("alignedBlock", {
-	filter: (node) => {
-		if (!["P", "H1", "H2", "H3", "H4", "H5", "H6"].includes(node.nodeName))
-			return false;
-		const style = (node as HTMLElement).getAttribute("style") ?? "";
-		return /text-align:\s*(center|right|justify)/.test(style);
-	},
-	replacement: (content, node) => {
-		const el = node as HTMLElement;
-		const tag = el.nodeName.toLowerCase();
-		const style = el.getAttribute("style") ?? "";
-		return `\n<${tag} style="${style}">${content}</${tag}>\n`;
-	},
-});
-
-export function htmlToMarkdown(html: string): string {
-	return turndown.turndown(html);
-}

package/.next/standalone/src/lib/proof/activity-shared.ts

@@ -1,31 +0,0 @@
-import type { ProofEvent } from "./types";
-
-export interface ActivityEvent extends ProofEvent {
-	path: string;
-}
-
-export const ACTIVITY_DEFAULT_LIMIT = 50;
-export const ACTIVITY_MAX_LIMIT = 200;
-
-/** Derive active connections from recent events (last 5 minutes). */
-export function deriveConnections(
-	events: ActivityEvent[],
-): { by: string; opCount: number; lastSeen: string }[] {
-	const cutoff = new Date(Date.now() - 5 * 60 * 1000).toISOString();
-	const map = new Map<string, { opCount: number; lastSeen: string }>();
-	for (const ev of events) {
-		if (ev.at < cutoff) continue;
-		const existing = map.get(ev.by);
-		if (!existing) {
-			map.set(ev.by, { opCount: 1, lastSeen: ev.at });
-		} else {
-			map.set(ev.by, {
-				opCount: existing.opCount + 1,
-				lastSeen: ev.at > existing.lastSeen ? ev.at : existing.lastSeen,
-			});
-		}
-	}
-	return Array.from(map.entries())
-		.map(([by, v]) => ({ by, ...v }))
-		.sort((a, b) => (a.lastSeen < b.lastSeen ? 1 : -1));
-}

package/.next/standalone/src/lib/proof/activity.ts

@@ -1,74 +0,0 @@
-import { readdir, readFile } from "node:fs/promises";
-import path from "node:path";
-import type { Sidecar } from "./types";
-import type { ActivityEvent } from "./activity-shared";
-import {
-	ACTIVITY_DEFAULT_LIMIT,
-	ACTIVITY_MAX_LIMIT,
-	deriveConnections,
-} from "./activity-shared";
-
-export type { ActivityEvent } from "./activity-shared";
-export {
-	ACTIVITY_DEFAULT_LIMIT,
-	ACTIVITY_MAX_LIMIT,
-	deriveConnections,
-};
-
-/** Walk rootDir/.proof/, merge events from all sidecars, sort newest first. */
-export async function aggregateActivity(
-	rootDir: string,
-	options?: { limit?: number; file?: string },
-): Promise<ActivityEvent[]> {
-	const limit = Math.min(
-		options?.limit ?? ACTIVITY_DEFAULT_LIMIT,
-		ACTIVITY_MAX_LIMIT,
-	);
-	const fileFilter = options?.file ?? null;
-
-	const proofDir = path.join(rootDir, ".proof");
-
-	let allEvents: ActivityEvent[] = [];
-
-	async function walk(dir: string): Promise<void> {
-		let entries;
-		try {
-			entries = await readdir(dir, { withFileTypes: true });
-		} catch {
-			return;
-		}
-		for (const entry of entries) {
-			const fullPath = path.join(dir, entry.name);
-			if (entry.isDirectory()) {
-				await walk(fullPath);
-			} else if (entry.isFile() && entry.name.endsWith(".json")) {
-				let sc: Sidecar;
-				try {
-					const raw = await readFile(fullPath, "utf-8");
-					sc = JSON.parse(raw) as Sidecar;
-					if (sc.schemaVersion !== 1) continue;
-				} catch {
-					continue;
-				}
-				if (fileFilter && sc.path !== fileFilter) continue;
-				const events: ActivityEvent[] = (sc.events ?? []).map((ev) => ({
-					...ev,
-					path: sc.path,
-				}));
-				allEvents = allEvents.concat(events);
-			}
-		}
-	}
-
-	await walk(proofDir);
-
-	allEvents.sort((a, b) => {
-		if (a.at < b.at) return 1;
-		if (a.at > b.at) return -1;
-		return 0;
-	});
-
-	return allEvents.slice(0, limit);
-}
-
-

package/.next/standalone/src/lib/proof/audit.ts

@@ -1,88 +0,0 @@
-/**
- * Minimal durable audit log for raw-fs mutations (Tier 1).
- *
- * Uses the same ~/.wiki-viewer/auth.db already opened by better-auth.
- * Table: agent_fs_audit
- *
- * For .md files the sidecar event covers provenance; this covers ALL types.
- */
-import Database from "better-sqlite3";
-import path from "node:path";
-import os from "node:os";
-import { mkdirSync } from "node:fs";
-
-function dataDir(): string {
-	return path.join(process.env.HOME ?? os.homedir(), ".wiki-viewer");
-}
-
-// Lazily initialised so tests can set HOME before first import.
-let _db: InstanceType<typeof Database> | null = null;
-
-function getDb(): InstanceType<typeof Database> {
-	if (_db) return _db;
-	const dir = dataDir();
-	mkdirSync(dir, { recursive: true });
-	const dbPath = path.join(dir, "auth.db");
-	_db = new Database(dbPath);
-	_db.pragma("journal_mode = WAL");
-	_db.exec(`
-		CREATE TABLE IF NOT EXISTS agent_fs_audit (
-			id           INTEGER PRIMARY KEY AUTOINCREMENT,
-			agent_id     TEXT NOT NULL,
-			op           TEXT NOT NULL,
-			path         TEXT NOT NULL,
-			old_sha      TEXT,
-			new_sha      TEXT,
-			forced       INTEGER NOT NULL DEFAULT 0,
-			at           TEXT NOT NULL,
-			workspace_id TEXT
-		)
-	`);
-	// Tolerant migration for existing DBs that lack the workspace_id column.
-	try {
-		_db.exec(`ALTER TABLE agent_fs_audit ADD COLUMN workspace_id TEXT`);
-	} catch {
-		// Column already exists — ignore.
-	}
-	return _db;
-}
-
-export interface AuditRow {
-	agentId: string;
-	op: string;
-	path: string;
-	oldSha?: string;
-	newSha?: string;
-	forced?: boolean;
-	workspaceId?: string;
-}
-
-/**
- * Write one audit row synchronously (SQLite sync is fine here — it's a WAL journal append).
- * Fire-and-forget: never throws; logs to stderr on error.
- */
-export function writeAuditRow(row: AuditRow): void {
-	try {
-		const db = getDb();
-		db.prepare(
-			`INSERT INTO agent_fs_audit (agent_id, op, path, old_sha, new_sha, forced, at, workspace_id)
-			 VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
-		).run(
-			row.agentId,
-			row.op,
-			row.path,
-			row.oldSha ?? null,
-			row.newSha ?? null,
-			row.forced ? 1 : 0,
-			new Date().toISOString(),
-			row.workspaceId ?? null,
-		);
-	} catch (e) {
-		console.error("[agent-fs audit] write failed:", e);
-	}
-}
-
-/** Reset cached DB handle (used by tests to pick up new HOME). */
-export function _resetAuditDb(): void {
-	_db = null;
-}

package/.next/standalone/src/lib/proof/auth.ts

@@ -1,143 +0,0 @@
-/**
- * Agent authentication.
- *
- * Accepts one of:
- *  1. Better Auth session cookie (browser UI) — treated as a synthetic user agent
- *  2. Bearer token + X-Agent-Id header (registered external agents)
- *
- * AGENT_BEARER_TOKEN env var is not used.
- */
-import type { Agent } from "./registry";
-import { lookupAgentByToken, updateLastSeen } from "./registry";
-import { matchGlob } from "./glob";
-import { getSessionFromRequest } from "@/lib/auth/server";
-
-// One-time warning if legacy env var is set
-if (process.env.AGENT_BEARER_TOKEN) {
-	console.warn(
-		"[wiki-viewer] AGENT_BEARER_TOKEN is no longer used; manage agents via the AI Panel.",
-	);
-}
-
-export type CheckAuthResult =
-	| { ok: true; agent: Agent }
-	| { ok: false; code: string; message?: string };
-
-export async function checkAuth(req: Request): Promise<CheckAuthResult> {
-	// 1. Try Better Auth session (browser same-origin requests)
-	const session = await getSessionFromRequest(req);
-	if (session?.user) {
-		const u = session.user;
-		return {
-			ok: true,
-			agent: {
-				id: `user:${u.id}`,
-				displayName: u.name,
-				tokenHash: "",
-				scope: { paths: ["**/*"], ops: ["read", "mutate", "delete"] },
-				createdAt: "",
-				lastSeen: "",
-			},
-		};
-	}
-
-	// 2. Try Bearer token (external agents)
-	const authHeader = req.headers.get("authorization") ?? "";
-	const token = authHeader.startsWith("Bearer ") ? authHeader.slice(7).trim() : "";
-	if (!token) {
-		return { ok: false, code: "UNAUTHORIZED", message: "No credentials" };
-	}
-
-	const agent = await lookupAgentByToken(token);
-	if (!agent) {
-		return { ok: false, code: "UNAUTHORIZED", message: "Unknown or invalid token" };
-	}
-
-	// X-Agent-Id MUST be present and MUST equal the agent id bound to this token.
-	const presentedId = req.headers.get("x-agent-id") ?? "";
-	if (!presentedId) {
-		return { ok: false, code: "UNAUTHORIZED", message: "X-Agent-Id header required" };
-	}
-	if (presentedId !== agent.id) {
-		return { ok: false, code: "UNAUTHORIZED", message: "X-Agent-Id does not match token owner" };
-	}
-
-	void updateLastSeen(agent.id);
-
-	return { ok: true, agent };
-}
-
-// ── Scope enforcement ─────────────────────────────────────────────────────────
-
-export interface ScopeParams {
-	filePath?: string;
-	op: "read" | "mutate" | "delete";
-	/** Id of the workspace this request resolved to. If the agent has a workspaceId grant and it differs, 403 is returned. */
-	workspaceId?: string;
-}
-
-export function enforceScope(
-	agent: Agent,
-	params: ScopeParams,
-): { ok: true } | { ok: false; code: "FORBIDDEN"; message: string } {
-	const { scope } = agent;
-
-	// Workspace grant check: if agent is restricted to a workspace, enforce it.
-	if (scope.workspaceId !== undefined && params.workspaceId !== undefined && scope.workspaceId !== params.workspaceId) {
-		return {
-			ok: false,
-			code: "FORBIDDEN",
-			message: `Agent scope does not cover workspace "${params.workspaceId}" (granted: "${scope.workspaceId}")`,
-		};
-	}
-
-	if (!scope.ops.includes(params.op)) {
-		return { ok: false, code: "FORBIDDEN", message: `Agent scope does not allow "${params.op}"` };
-	}
-
-	if (params.filePath) {
-		const matched = scope.paths.some((pattern) => matchGlob(pattern, params.filePath!));
-		if (!matched) {
-			return {
-				ok: false,
-				code: "FORBIDDEN",
-				message: `Agent scope does not cover path "${params.filePath}"`,
-			};
-		}
-	}
-
-	return { ok: true };
-}
-
-/** Verify the `by` field on a mutation matches the authenticated agent id. */
-export function verifyBy(
-	agent: Agent,
-	by: string | undefined | null,
-): { ok: true } | { ok: false; code: "FORBIDDEN"; message: string } {
-	// Browser/session users: accept user:*, "human", "owner" (back-compat)
-	if (agent.id.startsWith("user:")) {
-		if (!by || by === "owner" || by === "human" || by.startsWith("human:") || by === agent.id) {
-			return { ok: true };
-		}
-		return {
-			ok: false,
-			code: "FORBIDDEN",
-			message: `User agent must use "human", "owner", or own id in "by" field`,
-		};
-	}
-
-	// AI agents must match their registered id exactly
-	if (by !== agent.id) {
-		return {
-			ok: false,
-			code: "FORBIDDEN",
-			message: `"by" field must equal agent id "${agent.id}"`,
-		};
-	}
-	return { ok: true };
-}
-
-/** @deprecated No longer relevant — always returns false */
-export function hasTokenConfigured(): boolean {
-	return false;
-}