wiki-viewer 1.14.1 → 2.0.0

package/.next/standalone/src/lib/proof/registry.ts

@@ -1,195 +0,0 @@
-/**
- * Agent registry.
- *
- * Persists to ~/.wiki-viewer/agents.json (agent records).
- * Human authentication is handled by Better Auth (see src/lib/auth/server.ts).
- */
-import { createHash, timingSafeEqual } from "node:crypto";
-import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { withFileMutex } from "./mutex";
-
-// Sentinel key for all registry write operations
-const REGISTRY_MUTEX_KEY = "__registry__";
-
-// Throttle updateLastSeen: skip if updated < 30s ago
-const lastSeenWriteAt: Map<string, number> = new Map();
-const LAST_SEEN_THROTTLE_MS = 30_000;
-
-export interface AgentScope {
-	paths: string[]; // glob patterns
-	ops: Array<"read" | "mutate" | "delete">;
-	/**
-	 * If set, this agent may only operate in this specific workspace (by id).
-	 * Undefined = wildcard: any workspace is allowed (back-compat for existing agents).
-	 */
-	workspaceId?: string;
-}
-
-export interface Agent {
-	id: string;
-	displayName: string;
-	tokenHash: string; // sha256 hex of raw token
-	scope: AgentScope;
-	createdAt: string; // ISO-8601
-	lastSeen: string; // ISO-8601
-	/** Better Auth user.id of the owner who approved this agent. Undefined for legacy entries. */
-	ownerUserId?: string;
-}
-
-export interface Registry {
-	version: 1;
-	agents: Agent[];
-}
-
-// ── Path helpers ──────────────────────────────────────────────────────────────
-
-function wikiViewerDir(): string {
-	// Prefer HOME env var so tests can override by setting process.env.HOME.
-	const home = process.env.HOME ?? os.homedir();
-	return path.join(home, ".wiki-viewer");
-}
-
-function agentsJsonPath(): string {
-	return path.join(wikiViewerDir(), "agents.json");
-}
-
-
-// ── Hashing ───────────────────────────────────────────────────────────────────
-
-export function hashToken(token: string): string {
-	return createHash("sha256").update(token, "utf8").digest("hex");
-}
-
-function timingSafeEqualHex(a: string, b: string): boolean {
-	// Pad to equal length before comparing to avoid length-based timing leak
-	const bufA = Buffer.from(a.padEnd(64, "0"), "utf8");
-	const bufB = Buffer.from(b.padEnd(64, "0"), "utf8");
-	if (bufA.length !== bufB.length) return false;
-	return timingSafeEqual(bufA, bufB) && a.length === b.length;
-}
-
-// ── Read / Write ──────────────────────────────────────────────────────────────
-
-export async function readRegistry(): Promise<Registry | null> {
-	try {
-		const raw = await readFile(agentsJsonPath(), "utf8");
-		const parsed = JSON.parse(raw) as Record<string, unknown>;
-		// Migrate: silently drop legacy `owner` field if present
-		return {
-			version: 1,
-			agents: Array.isArray(parsed.agents) ? (parsed.agents as Agent[]) : [],
-		};
-	} catch {
-		return null;
-	}
-}
-
-/** Inner write — caller must already hold REGISTRY_MUTEX_KEY or be in single-writer context. */
-async function _writeRegistryUnsafe(r: Registry): Promise<void> {
-	await mkdir(wikiViewerDir(), { recursive: true });
-	const tmp = agentsJsonPath() + ".tmp";
-	await writeFile(tmp, JSON.stringify(r, null, 2), { encoding: "utf8", mode: 0o600 });
-	try {
-		await chmod(tmp, 0o600);
-	} catch {
-		// Non-fatal on Windows/some environments
-	}
-	await rename(tmp, agentsJsonPath());
-}
-
-export async function writeRegistry(r: Registry): Promise<void> {
-	await withFileMutex(REGISTRY_MUTEX_KEY, () => _writeRegistryUnsafe(r));
-}
-
-// ── Ensure registry (creates if missing) ─────────────────────────────────────
-
-/**
- * Public: creates registry if missing. Acquires the mutex itself.
- * Do NOT call from inside a mutex-held context.
- */
-export async function ensureRegistry(): Promise<Registry> {
-	const existing = await readRegistry();
-	if (existing) return existing;
-
-	const r: Registry = { version: 1, agents: [] };
-	await writeRegistry(r); // acquires lock
-	return r;
-}
-
-/**
- * Inner ensure — for use within a locked context.
- * Creates registry if missing using unlocked write.
- */
-async function _ensureRegistryUnsafe(): Promise<Registry> {
-	const existing = await readRegistry();
-	if (existing) return existing;
-
-	const r: Registry = { version: 1, agents: [] };
-	await _writeRegistryUnsafe(r);
-	return r;
-}
-
-// ── Agent lookups ─────────────────────────────────────────────────────────────
-
-export async function lookupAgentByToken(token: string): Promise<Agent | null> {
-	const r = await readRegistry();
-	if (!r) return null;
-	const candidate = hashToken(token);
-	for (const agent of r.agents) {
-		if (timingSafeEqualHex(agent.tokenHash, candidate)) {
-			return agent;
-		}
-	}
-	return null;
-}
-
-export async function lookupAgentById(id: string): Promise<Agent | null> {
-	const r = await readRegistry();
-	if (!r) return null;
-	return r.agents.find((a) => a.id === id) ?? null;
-}
-
-export async function addAgent(agent: Agent): Promise<void> {
-	await withFileMutex(REGISTRY_MUTEX_KEY, async () => {
-		const r = await _ensureRegistryUnsafe(); // no re-entrant lock
-		// Replace if id already present
-		const idx = r.agents.findIndex((a) => a.id === agent.id);
-		if (idx >= 0) {
-			r.agents[idx] = agent;
-		} else {
-			r.agents.push(agent);
-		}
-		await _writeRegistryUnsafe(r);
-	});
-}
-
-export async function removeAgent(id: string): Promise<boolean> {
-	return withFileMutex(REGISTRY_MUTEX_KEY, async () => {
-		const r = await readRegistry();
-		if (!r) return false;
-		const before = r.agents.length;
-		r.agents = r.agents.filter((a) => a.id !== id);
-		if (r.agents.length === before) return false;
-		await _writeRegistryUnsafe(r);
-		return true;
-	});
-}
-
-export async function updateLastSeen(id: string): Promise<void> {
-	// Throttle: skip if updated recently
-	const now = Date.now();
-	const last = lastSeenWriteAt.get(id) ?? 0;
-	if (now - last < LAST_SEEN_THROTTLE_MS) return;
-
-	await withFileMutex(REGISTRY_MUTEX_KEY, async () => {
-		const r = await readRegistry();
-		if (!r) return;
-		const agent = r.agents.find((a) => a.id === id);
-		if (!agent) return;
-		agent.lastSeen = new Date().toISOString();
-		lastSeenWriteAt.set(id, Date.now());
-		await _writeRegistryUnsafe(r);
-	});
-}

package/.next/standalone/src/lib/proof/sidecar.ts

@@ -1,103 +0,0 @@
-import { readFile, writeFile, mkdir, rename, unlink } from "node:fs/promises";
-import path from "node:path";
-import type { Sidecar } from "./types";
-
-export function sidecarPath(rootDir: string, mdPath: string): string {
-	return path.join(rootDir, ".proof", mdPath + ".json");
-}
-
-export async function readSidecar(
-	rootDir: string,
-	mdPath: string,
-): Promise<Sidecar | null> {
-	const filePath = sidecarPath(rootDir, mdPath);
-	try {
-		const raw = await readFile(filePath, "utf-8");
-		const parsed = JSON.parse(raw) as Sidecar;
-		if (parsed.schemaVersion !== 1) {
-			throw new Error(
-				`Sidecar schema version mismatch: expected 1, got ${parsed.schemaVersion}`,
-			);
-		}
-		return parsed;
-	} catch (err: unknown) {
-		if (
-			err instanceof Error &&
-			"code" in err &&
-			(err as NodeJS.ErrnoException).code === "ENOENT"
-		) {
-			return null;
-		}
-		throw err;
-	}
-}
-
-export async function writeSidecar(
-	rootDir: string,
-	mdPath: string,
-	sc: Sidecar,
-): Promise<void> {
-	const dest = sidecarPath(rootDir, mdPath);
-	await mkdir(path.dirname(dest), { recursive: true });
-	const tmp = dest + ".tmp";
-	await writeFile(tmp, JSON.stringify(sc, null, 2), "utf-8");
-	await rename(tmp, dest);
-}
-
-/**
- * Move a sidecar file alongside a renamed .md file.
- * No-op if the sidecar does not exist.
- */
-export async function moveSidecar(
-	rootDir: string,
-	fromMdPath: string,
-	toMdPath: string,
-): Promise<void> {
-	const src = sidecarPath(rootDir, fromMdPath);
-	const dest = sidecarPath(rootDir, toMdPath);
-	try {
-		await mkdir(path.dirname(dest), { recursive: true });
-		await rename(src, dest);
-	} catch (err) {
-		if ((err as NodeJS.ErrnoException).code === "ENOENT") return; // no sidecar — ok
-		throw err;
-	}
-}
-
-/**
- * Delete a sidecar file for a removed .md file.
- * No-op if the sidecar does not exist.
- */
-export async function deleteSidecar(
-	rootDir: string,
-	mdPath: string,
-): Promise<void> {
-	const filePath = sidecarPath(rootDir, mdPath);
-	try {
-		await unlink(filePath);
-	} catch (err) {
-		if ((err as NodeJS.ErrnoException).code === "ENOENT") return; // already gone — ok
-		throw err;
-	}
-}
-
-export function emptySidecar(mdPath: string): Sidecar {
-	const now = new Date().toISOString();
-	return {
-		schemaVersion: 1,
-		path: mdPath,
-		revision: 0,
-		createdAt: now,
-		updatedAt: now,
-		refMap: {},
-		refAliases: {},
-		comments: [],
-		suggestions: [],
-		archivedSuggestions: [],
-		events: [],
-		nextEventId: 1,
-		lastAck: {},
-		fingerprint: "",
-		blockProvenance: {},
-	};
-}

package/.next/standalone/src/lib/proof/suggest-capture.ts

@@ -1,69 +0,0 @@
-import { authHeaders } from "./client-auth";
-import type { SuggestionKind } from "./types";
-
-interface PostResult {
-	ok: boolean;
-	stale: boolean;
-	newRevision?: number;
-}
-
-async function postSuggestionOp(
-	path: string,
-	baseRevision: number,
-	op: Record<string, unknown>,
-): Promise<PostResult> {
-	const encoded = encodeURIComponent(path).replace(/%2F/g, "/");
-	const res = await fetch(`/api/agent/files/${encoded}`, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/json",
-			"Idempotency-Key": crypto.randomUUID(),
-			...authHeaders(),
-		},
-		body: JSON.stringify({ baseRevision, by: "human", ops: [op] }),
-	});
-	if (res.status === 409) {
-		const data = (await res.json()) as {
-			code?: string;
-			snapshot?: { revision?: number };
-		};
-		if (data.code === "STALE_REVISION" && data.snapshot?.revision !== undefined) {
-			return { ok: false, stale: true, newRevision: data.snapshot.revision };
-		}
-		return { ok: false, stale: false };
-	}
-	return { ok: res.ok, stale: false };
-}
-
-/**
- * Emit a human suggestion for a block, retrying once on a stale-revision 409.
- *
- * `getRevision` returns the freshest known snapshot revision, `refresh`
- * reloads the snapshot+sidecar so a retry can use the latest revision.
- */
-export async function captureSuggestion(args: {
-	path: string;
-	ref: string;
-	kind: SuggestionKind;
-	markdown?: string;
-	basisDetail?: string;
-	getRevision: () => number;
-	refresh: () => Promise<void>;
-}): Promise<boolean> {
-	const { path, ref, kind, markdown, basisDetail, getRevision, refresh } = args;
-	const op: Record<string, unknown> = {
-		type: "suggestion.add",
-		ref,
-		kind,
-		basis: "suggested",
-	};
-	if (kind !== "delete") op.markdown = markdown ?? "";
-	if (basisDetail) op.basisDetail = basisDetail;
-
-	let result = await postSuggestionOp(path, getRevision(), op);
-	if (!result.ok && result.stale && result.newRevision !== undefined) {
-		await refresh();
-		result = await postSuggestionOp(path, result.newRevision, op);
-	}
-	return result.ok;
-}

package/.next/standalone/src/lib/proof/types.ts

@@ -1,182 +0,0 @@
-export type BlockType =
-	| "heading"
-	| "paragraph"
-	| "bulletList"
-	| "orderedList"
-	| "taskList"
-	| "blockquote"
-	| "codeBlock"
-	| "table"
-	| "hr"
-	| "html";
-
-export interface Block {
-	ref: string; // "b" + 6-hex
-	type: BlockType;
-	level?: number; // headings only
-	lang?: string; // codeBlock only
-	markdown: string; // canonical markdown for this block, trailing \n stripped
-}
-
-export interface ProvenanceMeta {
-	origin: "human" | "ai";
-	basis?: "described" | "inferred" | "suggested";
-	basisDetail?: string;
-	by?: string; // "ai:claude" or "human"
-	at?: string; // ISO 8601
-	spanId: string; // "p" + 4-hex
-	inResponseTo?: string; // comment id
-}
-
-export interface CommentTurn {
-	by: string; // "human" | "ai:claude"
-	text: string;
-	at: string;
-}
-
-export interface Comment {
-	id: string; // "c" + 4-hex
-	ref: string; // block ref it's attached to
-	resolved: boolean;
-	createdAt: string;
-	turns: CommentTurn[];
-	/** Set true when a raw .md overwrite orphans the anchor ref (R2 collab-anchor safety). */
-	stale?: boolean;
-}
-
-export type SuggestionKind =
-	| "replace"
-	| "insertAfter"
-	| "insertBefore"
-	| "delete";
-export type SuggestionStatus = "pending" | "accepted" | "rejected";
-
-export interface Suggestion {
-	id: string; // "s" + 4-hex
-	ref: string;
-	kind: SuggestionKind;
-	status: SuggestionStatus;
-	by: string;
-	markdown?: string; // omitted for kind=delete
-	basis?: ProvenanceMeta["basis"];
-	basisDetail?: string;
-	createdAt: string;
-	resolvedAt?: string; // when accepted/rejected
-	resolvedBy?: string;
-	/** Set true when a raw .md overwrite orphans the anchor ref (R2 collab-anchor safety). */
-	stale?: boolean;
-}
-
-export interface ProofEvent {
-	id: number;
-	/**
-	 * Known event types:
-	 *   block.replaced | block.inserted | block.deleted
-	 *   comment.added | comment.replied | comment.resolved | comment.reopened
-	 *   suggestion.added | suggestion.accepted | suggestion.rejected
-	 *   file.externallyEdited  — writer unknown (chokidar / external tool)
-	 *   file.rawWritten        — writer known (by: "ai:<id>"), emitted by Tier-1 raw-fs write
-	 */
-	type: string;
-	at: string;
-	by: string;
-	[k: string]: unknown;
-}
-
-export interface SpanAttrs {
-	spanId: string;
-	origin: "ai" | "human";
-	basis?: string;
-	basisDetail?: string;
-	by: string;
-	at: string;
-	inResponseTo?: string;
-}
-
-export interface Sidecar {
-	schemaVersion: 1;
-	path: string;
-	revision: number;
-	createdAt: string;
-	updatedAt: string;
-	// Map of block.ref -> current text fingerprint (sha256 of block markdown, first 12 hex).
-	refMap: Record<string, { textHash: string; lastSeenAt: string }>;
-	// History of ref renames. Old ref -> new ref, kept for ONE generation.
-	refAliases: Record<string, string>;
-	comments: Comment[];
-	suggestions: Suggestion[];
-	archivedSuggestions: Suggestion[];
-	events: ProofEvent[];
-	nextEventId: number;
-	lastAck: Record<string, number>; // by -> eventId
-	fingerprint: string; // last-known sha256 of the .md file
-	blockProvenance?: Record<string, SpanAttrs>; // for blocks we can't wrap inline
-}
-
-export type Op =
-	| {
-			type: "block.replace";
-			ref: string;
-			markdown: string;
-			basis?: string;
-			basisDetail?: string;
-			inResponseTo?: string;
-	  }
-	| {
-			type: "block.insertAfter";
-			ref: string;
-			markdown: string;
-			basis?: string;
-			basisDetail?: string;
-			inResponseTo?: string;
-	  }
-	| {
-			type: "block.insertBefore";
-			ref: string;
-			markdown: string;
-			basis?: string;
-			basisDetail?: string;
-			inResponseTo?: string;
-	  }
-	| { type: "block.delete"; ref: string }
-	| {
-			type: "block.append";
-			markdown: string;
-			basis?: string;
-			basisDetail?: string;
-			inResponseTo?: string;
-	  }
-	| {
-			type: "block.prepend";
-			markdown: string;
-			basis?: string;
-			basisDetail?: string;
-			inResponseTo?: string;
-	  }
-	| { type: "comment.add"; ref: string; text: string }
-	| { type: "comment.reply"; commentId: string; text: string }
-	| { type: "comment.resolve"; commentId: string }
-	| { type: "comment.reopen"; commentId: string }
-	| {
-			type: "suggestion.add";
-			ref: string;
-			kind: SuggestionKind;
-			markdown?: string;
-			basis?: string;
-			basisDetail?: string;
-			status?: SuggestionStatus;
-	  }
-	| { type: "suggestion.accept"; suggestionId: string }
-	| { type: "suggestion.reject"; suggestionId: string };
-
-export interface Snapshot {
-	path: string;
-	revision: number;
-	createdAt: string;
-	updatedAt: string;
-	fingerprint: string;
-	blocks: Block[];
-	comments: Comment[]; // unresolved + resolved (separately by client)
-	suggestions: Suggestion[]; // pending only by default
-	lastEventId: number;
-}

package/.next/standalone/src/lib/proof-config.ts

@@ -1,14 +0,0 @@
-// Rate limiting: token bucket per "by" agent identity.
-// Bucket size = OPS_PER_MINUTE, refill 1 op/sec.
-export const OPS_PER_MINUTE = (() => {
-	const v = parseInt(process.env.AGENT_RATE_LIMIT ?? "", 10);
-	return Number.isFinite(v) && v > 0 ? v : 60;
-})();
-
-// Max events to return from a single poll.
-export const EVENTS_MAX_LIMIT = 1000;
-export const EVENTS_DEFAULT_LIMIT = 100;
-
-// Sidecar event trimming: keep last N events (but never below oldest ack cursor).
-export const SIDECAR_EVENT_TRIM_SIZE = 1000;
-export const SIDECAR_TRIM_EVERY_N_MUTATIONS = 100;

package/.next/standalone/src/lib/root-dir.ts

@@ -1,35 +0,0 @@
-import path from "node:path";
-
-// Use globalThis so the value persists across Next.js hot-reloads in dev.
-const g = globalThis as typeof globalThis & { __wikiRootDir?: string };
-
-// Initialise once from env on first import.
-if (!g.__wikiRootDir && process.env.ROOT_DIR) {
-	g.__wikiRootDir = path.resolve(process.env.ROOT_DIR);
-}
-
-export function getRootDir(): string {
-	return g.__wikiRootDir ?? "";
-}
-
-export function isRootDirSet(): boolean {
-	return !!g.__wikiRootDir;
-}
-
-export function setRootDir(dir: string): void {
-	g.__wikiRootDir = path.resolve(dir);
-}
-
-export function clearRootDir(): void {
-	g.__wikiRootDir = undefined;
-}
-
-/** Returns the absolute path for `rel`, or null on traversal / root not set. */
-export function safeRootPath(rel: string): string | null {
-	const root = getRootDir();
-	if (!root) return null;
-	if (!rel || rel === ".") return root;
-	const resolved = path.resolve(root, rel);
-	if (resolved !== root && !resolved.startsWith(root + path.sep)) return null;
-	return resolved;
-}

package/.next/standalone/src/lib/search/indexable-exts.ts

@@ -1,25 +0,0 @@
-/**
- * Shared extension sets for text-indexable files.
- * Copied from src/app/api/wiki/content/route.ts so the indexer and
- * the route share a single definition without importing a route module from lib.
- */
-
-export const TEXT_EXTS = new Set([
-	"txt", "md", "markdown", "json", "yaml", "yml", "toml", "csv", "tsv",
-	"xml", "html", "css", "js", "ts", "tsx", "jsx", "sh", "bash",
-	"zsh", "rb", "py", "go", "rs", "java", "c", "cpp", "h", "php",
-	"swift", "kt", "lua", "sql", "scss", "mmd", "mermaid", "ini",
-	"env", "log", "conf",
-]);
-
-export const MARKDOWN_EXTS = new Set(["md", "markdown"]);
-
-export function isIndexableExt(filename: string): boolean {
-	const ext = filename.split(".").pop()?.toLowerCase() ?? "";
-	return TEXT_EXTS.has(ext);
-}
-
-export function isMarkdownExt(filename: string): boolean {
-	const ext = filename.split(".").pop()?.toLowerCase() ?? "";
-	return MARKDOWN_EXTS.has(ext);
-}