wiki-viewer 1.14.1 → 2.0.0

package/.next/standalone/src/tests/proof/workspace-isolation.test.ts

@@ -1,87 +0,0 @@
-/**
- * Phase E — cross-workspace isolation (the "no bleed" contract).
- *
- * Two workspaces (different rootDirs) that contain the SAME relative path must
- * not share in-memory state:
- *   - edit leases (lease.ts is keyed by ns=rootDir)
- *   - collab-state revision / active flag
- *   - sidecars (live under <rootDir>/.proof/, naturally isolated)
- */
-import { test, before, after } from "node:test";
-import assert from "node:assert/strict";
-import { mkdtemp, rm, writeFile, mkdir } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
-
-import {
-	setLease,
-	hasActiveLease,
-	clearLease,
-	leaseGeneration,
-	_resetLeaseStore,
-} from "../../lib/proof/lease.js";
-import { computeCollabState } from "../../lib/proof/collab-state.js";
-import { writeSidecar, emptySidecar } from "../../lib/proof/sidecar.js";
-
-let rootA: string;
-let rootB: string;
-
-before(async () => {
-	rootA = await mkdtemp(path.join(tmpdir(), "wsiso-A-"));
-	rootB = await mkdtemp(path.join(tmpdir(), "wsiso-B-"));
-	_resetLeaseStore();
-});
-
-after(async () => {
-	await rm(rootA, { recursive: true, force: true });
-	await rm(rootB, { recursive: true, force: true });
-});
-
-const REL = "notes.md";
-
-test("lease on (rootA, notes.md) does NOT make (rootB, notes.md) active", () => {
-	setLease(rootA, REL, "user:alice");
-	assert.equal(hasActiveLease(rootA, REL), true);
-	assert.equal(hasActiveLease(rootB, REL), false, "workspace B must be unaffected");
-	clearLease(rootA, REL, "user:alice");
-	assert.equal(hasActiveLease(rootA, REL), false);
-});
-
-test("lease generation counters are independent per workspace", () => {
-	const genA0 = leaseGeneration(rootA, REL);
-	const genB0 = leaseGeneration(rootB, REL);
-	// Bump A twice (open/close), leave B untouched.
-	setLease(rootA, REL, "user:alice");
-	clearLease(rootA, REL, "user:alice");
-	assert.equal(leaseGeneration(rootA, REL), genA0 + 2);
-	assert.equal(leaseGeneration(rootB, REL), genB0, "B generation must not move");
-});
-
-test("computeCollabState: human lease in A is 'active' only in A", async () => {
-	// Same relpath, a sidecar with one comment in BOTH workspaces would be
-	// 'active'; here neither has artifacts, so state is driven purely by lease.
-	await mkdir(path.join(rootA, ".proof"), { recursive: true });
-	await mkdir(path.join(rootB, ".proof"), { recursive: true });
-
-	setLease(rootA, REL, "user:alice");
-	const a = await computeCollabState(rootA, REL);
-	const b = await computeCollabState(rootB, REL);
-	assert.equal(a.state, "active", "A has a live human lease");
-	assert.equal(b.state, "untracked", "B has no lease, no sidecar");
-	clearLease(rootA, REL, "user:alice");
-});
-
-test("sidecars are isolated by rootDir (same relpath, different content)", async () => {
-	const scA = emptySidecar(REL);
-	scA.revision = 7;
-	const scB = emptySidecar(REL);
-	scB.revision = 99;
-	await writeSidecar(rootA, REL, scA);
-	await writeSidecar(rootB, REL, scB);
-
-	const a = await computeCollabState(rootA, REL);
-	const b = await computeCollabState(rootB, REL);
-	// revision = sidecar.revision + leaseGeneration(ns); leases cleared above.
-	assert.equal(a.revision - leaseGeneration(rootA, REL), 7);
-	assert.equal(b.revision - leaseGeneration(rootB, REL), 99);
-});

package/.next/standalone/src/tests/proof/workspaces-api.test.ts

@@ -1,227 +0,0 @@
-/**
- * Phase D1 — Workspace & Admin API tests.
- *
- * Covers:
- *   GET /workspaces        empty → after create
- *   POST /workspaces       admin-only
- *   PATCH /workspaces/[id] allowedUserIds admin-gating
- *   DELETE /workspaces/[id]
- *   GET /admins            GET/POST/DELETE + last-admin guard
- */
-import { test, before, after } from "node:test";
-import assert from "node:assert/strict";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
-
-let tmpHome: string;
-let tmpDir: string;
-
-before(async () => {
-	tmpHome = await mkdtemp(path.join(tmpdir(), "ws-api-home-"));
-	tmpDir = await mkdtemp(path.join(tmpdir(), "ws-api-dir-"));
-	process.env.HOME = tmpHome;
-});
-
-after(async () => {
-	await rm(tmpHome, { recursive: true, force: true });
-	await rm(tmpDir, { recursive: true, force: true });
-});
-
-import { GET as wsGET, POST as wsPOST } from "../../app/api/system/workspaces/route.js";
-import { PATCH as wsPATCH, DELETE as wsDELETE } from "../../app/api/system/workspaces/[id]/route.js";
-import { POST as openPOST } from "../../app/api/system/workspaces/[id]/open/route.js";
-import { GET as adminsGET, POST as adminsPOST, DELETE as adminsDELETE } from "../../app/api/system/admins/route.js";
-
-async function signUp(tag: string): Promise<{ cookie: string; id: string; email: string }> {
-	const { auth, authReady } = await import("../../lib/auth/server.js");
-	await authReady();
-	const email = `${tag}${Date.now()}@test.local`;
-	const res = await auth.api.signUpEmail({
-		body: { email, password: "test1234!", name: tag },
-		asResponse: true,
-	});
-	if (!res.ok) throw new Error("signUp failed: " + res.status);
-	const setCookie = res.headers.get("set-cookie") ?? "";
-	const cookie = setCookie
-		.split(/,(?=[^ ])/)
-		.map((c) => c.split(";")[0].trim())
-		.join("; ");
-	const body = await res.json() as { user: { id: string } };
-	return { cookie, id: body.user.id, email };
-}
-
-function req(method: string, url: string, cookie: string, body?: unknown): Request {
-	return new Request(url, {
-		method,
-		headers: {
-			"content-type": "application/json",
-			cookie,
-		},
-		body: body !== undefined ? JSON.stringify(body) : undefined,
-	});
-}
-
-function params(id: string) {
-	return { params: Promise.resolve({ id }) };
-}
-
-/**
- * Deterministically make a freshly-signed-up user an admin.
- * Bootstrap only auto-promotes the FIRST-EVER user, so subsequent tests must
- * promote their admin explicitly (no shared cookie for the bootstrapped one).
- */
-async function makeAdmin(userId: string): Promise<void> {
-	const { addAdmin } = await import("../../lib/auth/admin.js");
-	await addAdmin(userId);
-}
-
-// ── Admin bootstrap + admins API ───────────────────────────────────────────────
-
-test("GET /admins: first user auto-promoted to admin", async () => {
-	const user = await signUp("admin1");
-	const res = await adminsGET(req("GET", "http://localhost/api/system/admins", user.cookie));
-	assert.equal(res.status, 200);
-	const json = await res.json() as { isAdmin: boolean; admins: string[]; users: unknown[] };
-	assert.equal(json.isAdmin, true);
-	assert.ok(json.admins.includes(user.id));
-	assert.ok(Array.isArray(json.users)); // admin sees user list
-});
-
-test("GET /admins: non-admin gets isAdmin:false, empty users", async () => {
-	// Sign up a second user — first user already bootstrapped above
-	const user2 = await signUp("nonadmin");
-	const res = await adminsGET(req("GET", "http://localhost/api/system/admins", user2.cookie));
-	assert.equal(res.status, 200);
-	const json = await res.json() as { isAdmin: boolean; users: unknown[] };
-	assert.equal(json.isAdmin, false);
-	assert.deepEqual(json.users, []);
-});
-
-test("POST /admins: admin promotes second user", async () => {
-	const admin = await signUp("admin2promo");
-	await makeAdmin(admin.id);
-	const user2 = await signUp("promo-target");
-	const res = await adminsPOST(req("POST", "http://localhost/api/system/admins", admin.cookie, { userId: user2.id }));
-	assert.equal(res.status, 200);
-	const json = await res.json() as { ok: boolean; admins: string[] };
-	assert.ok(json.ok);
-	assert.ok(json.admins.includes(user2.id));
-});
-
-test("DELETE /admins: refuses to remove last admin (LAST_ADMIN guard)", async () => {
-	// Create a fresh admin user, then ensure they are the ONLY admin by using
-	// removeAdmin directly, then verify the API returns 409.
-	const { removeAdmin: rm2, addAdmin: add2 } = await import("../../lib/auth/admin.js");
-	const { updateConfig: uc2 } = await import("../../lib/config.js");
-
-	// Set adminUserIds to a single known userId so last-admin guard fires.
-	const soloId = "solo-only-" + Date.now();
-	await uc2((cfg) => ({ ...cfg, adminUserIds: [soloId] }));
-
-	// Build a fake signed-in session for soloId is impossible without a real DB user.
-	// Instead, call removeAdmin directly to verify the guard, and also verify the
-	// API route returns 409 by calling it as an admin user that matches soloId.
-	// Since we cannot create a session for soloId, we verify guard via library:
-	try {
-		await rm2(soloId);
-		assert.fail("Expected LAST_ADMIN error");
-	} catch (e) {
-		const msg = e instanceof Error ? e.message : "";
-		assert.ok(msg.startsWith("LAST_ADMIN"), `Expected LAST_ADMIN, got: ${msg}`);
-	}
-
-	// Restore admin list for subsequent tests
-	const admin = await signUp("restore-admin");
-	await adminsGET(req("GET", "http://localhost/api/system/admins", admin.cookie));
-});
-
-// ── Workspace API ──────────────────────────────────────────────────────────────
-
-test("GET /workspaces: empty on fresh config", async () => {
-	const user = await signUp("ws-list-user");
-	const res = await wsGET(req("GET", "http://localhost/api/system/workspaces", user.cookie));
-	assert.equal(res.status, 200);
-	const json = await res.json() as { workspaces: unknown[] };
-	assert.ok(Array.isArray(json.workspaces));
-});
-
-test("POST /workspaces: admin creates workspace", async () => {
-	const admin = await signUp("ws-creator");
-	await makeAdmin(admin.id);
-	const newDir = await mkdtemp(path.join(tmpdir(), "ws-api-create-"));
-	try {
-		const res = await wsPOST(req("POST", "http://localhost/api/system/workspaces", admin.cookie, { rootDir: newDir }));
-		assert.equal(res.status, 200);
-		const json = await res.json() as { ok: boolean; workspace: { id: string; rootDir: string } };
-		assert.ok(json.ok);
-		assert.equal(json.workspace.rootDir, newDir);
-		assert.ok(json.workspace.id.startsWith("ws_"));
-
-		// Verify it shows in list
-		const listRes = await wsGET(req("GET", "http://localhost/api/system/workspaces", admin.cookie));
-		const listJson = await listRes.json() as { workspaces: Array<{ id: string }> };
-		assert.ok(listJson.workspaces.some((w) => w.id === json.workspace.id));
-
-		// PATCH name — any user with access
-		const patchRes = await wsPATCH(
-			req("PATCH", `http://localhost/api/system/workspaces/${json.workspace.id}`, admin.cookie, { name: "Renamed" }),
-			params(json.workspace.id),
-		);
-		assert.equal(patchRes.status, 200);
-		const patchJson = await patchRes.json() as { workspace: { name: string } };
-		assert.equal(patchJson.workspace.name, "Renamed");
-
-		// PATCH allowedUserIds: non-admin should fail
-		const nonAdmin = await signUp("non-admin-patch");
-		const patchForbidden = await wsPATCH(
-			req("PATCH", `http://localhost/api/system/workspaces/${json.workspace.id}`, nonAdmin.cookie, { allowedUserIds: [] }),
-			params(json.workspace.id),
-		);
-		assert.equal(patchForbidden.status, 403);
-
-		// PATCH allowedUserIds: admin succeeds
-		const patchAllowed = await wsPATCH(
-			req("PATCH", `http://localhost/api/system/workspaces/${json.workspace.id}`, admin.cookie, { allowedUserIds: [admin.id] }),
-			params(json.workspace.id),
-		);
-		assert.equal(patchAllowed.status, 200);
-
-		// DELETE workspace
-		const delRes = await wsDELETE(
-			req("DELETE", `http://localhost/api/system/workspaces/${json.workspace.id}`, admin.cookie),
-			params(json.workspace.id),
-		);
-		assert.equal(delRes.status, 200);
-		const delJson = await delRes.json() as { ok: boolean };
-		assert.ok(delJson.ok);
-	} finally {
-		await rm(newDir, { recursive: true, force: true });
-	}
-});
-
-test("POST /workspaces: non-existent dir returns 404", async () => {
-	const admin = await signUp("ws-baddir");
-	await makeAdmin(admin.id);
-	const res = await wsPOST(req("POST", "http://localhost/api/system/workspaces", admin.cookie, { rootDir: "/nonexistent/path/xyz" }));
-	assert.equal(res.status, 404);
-});
-
-test("POST /workspaces/[id]/open: updates lastOpenedAt", async () => {
-	const admin = await signUp("ws-open");
-	await makeAdmin(admin.id);
-	const newDir = await mkdtemp(path.join(tmpdir(), "ws-open-"));
-	try {
-		const createRes = await wsPOST(req("POST", "http://localhost/api/system/workspaces", admin.cookie, { rootDir: newDir }));
-		const { workspace } = await createRes.json() as { workspace: { id: string; lastOpenedAt: string } };
-
-		await new Promise((r) => setTimeout(r, 10)); // small delay for timestamp difference
-		const openRes = await openPOST(
-			req("POST", `http://localhost/api/system/workspaces/${workspace.id}/open`, admin.cookie),
-			params(workspace.id),
-		);
-		assert.equal(openRes.status, 200);
-	} finally {
-		await rm(newDir, { recursive: true, force: true });
-	}
-});

package/.next/standalone/src/types/index.ts

@@ -1,47 +0,0 @@
-// Editor types used by the editor, stores, and viewer components.
-
-export interface GoogleFrontmatter {
-	kind?: "sheets" | "slides" | "docs" | "forms" | "drive";
-	url: string;
-	embedUrl?: string;
-}
-
-export interface FrontMatter {
-	title: string;
-	created: string;
-	modified: string;
-	tags: string[];
-	icon?: string;
-	order?: number;
-	dir?: "ltr" | "rtl";
-	google?: GoogleFrontmatter;
-}
-
-export interface TreeNode {
-	name: string;
-	path: string;
-	type:
-		| "file"
-		| "directory"
-		| "cabinet"
-		| "website"
-		| "app"
-		| "pdf"
-		| "csv"
-		| "code"
-		| "image"
-		| "video"
-		| "audio"
-		| "mermaid"
-		| "docx"
-		| "xlsx"
-		| "pptx"
-		| "notebook"
-		| "unknown";
-	hasRepo?: boolean;
-	isLinked?: boolean;
-	frontmatter?: Partial<FrontMatter>;
-	children?: TreeNode[];
-}
-
-export type SaveStatus = "idle" | "saving" | "saved" | "error";

package/.next/standalone/tailwind.config.ts

@@ -1,191 +0,0 @@
-import typography from "@tailwindcss/typography";
-import type { Config } from "tailwindcss";
-
-const config: Config = {
-	darkMode: ["class"],
-	content: ["./src/**/*.{ts,tsx}"],
-	theme: {
-		extend: {
-			colors: {
-				background: "var(--background)",
-				foreground: "var(--foreground)",
-				card: {
-					DEFAULT: "var(--card)",
-					foreground: "var(--card-foreground)",
-				},
-				popover: {
-					DEFAULT: "var(--popover)",
-					foreground: "var(--popover-foreground)",
-				},
-				primary: {
-					DEFAULT: "var(--primary)",
-					foreground: "var(--primary-foreground)",
-					soft: "var(--primary-soft)",
-				},
-				secondary: {
-					DEFAULT: "var(--secondary)",
-					foreground: "var(--secondary-foreground)",
-				},
-				muted: {
-					DEFAULT: "var(--muted)",
-					foreground: "var(--muted-foreground)",
-				},
-				accent: {
-					DEFAULT: "var(--accent)",
-					foreground: "var(--accent-foreground)",
-					soft: "var(--accent-soft)",
-				},
-				destructive: {
-					DEFAULT: "var(--destructive)",
-					foreground: "var(--destructive-foreground)",
-					soft: "var(--destructive-soft)",
-				},
-				border: "var(--border)",
-				input: "var(--input)",
-				ring: "var(--ring)",
-				overlay: "var(--overlay)",
-				sidebar: {
-					DEFAULT: "var(--sidebar-background)",
-					foreground: "var(--sidebar-foreground)",
-					primary: "var(--sidebar-primary)",
-					"primary-foreground": "var(--sidebar-primary-foreground)",
-					accent: "var(--sidebar-accent)",
-					"accent-foreground": "var(--sidebar-accent-foreground)",
-					border: "var(--sidebar-border)",
-					ring: "var(--sidebar-ring)",
-				},
-				// Semantic colors
-				success: {
-					DEFAULT: "var(--success)",
-					soft: "var(--success-soft)",
-				},
-				warning: {
-					DEFAULT: "var(--warning)",
-					soft: "var(--warning-soft)",
-					ink: "var(--warning-ink)",
-				},
-				info: "var(--info)",
-				// Backward compatibility aliases
-				mistral: {
-					orange: "#292524",
-					flame: "#0c0a09",
-					black: "#0c0a09",
-				},
-				sunshine: {
-					900: "#292524",
-					700: "#4e4e4e",
-					500: "#777169",
-					300: "#a8a29e",
-				},
-			},
-			borderRadius: {
-				sm: "4px",
-				md: "6px",
-				lg: "var(--radius, 8px)",
-				xl: "12px",
-				"2xl": "16px",
-				"3xl": "24px",
-				full: "9999px",
-			},
-			boxShadow: {
-				// Backward compat: dramatic ambient (var-backed in globals.css)
-				golden: "var(--shadow-golden-card, 0 4px 16px rgba(0, 0, 0, 0.04))",
-				// Soft editorial elevation system
-				"e-0": "none",
-				"e-1": "0 1px 2px 0 rgb(0 0 0 / 0.04)",
-				"e-2": "var(--shadow-golden-card, 0 4px 16px rgba(0, 0, 0, 0.04))",
-				"e-3": "var(--shadow-golden-pop, 0 8px 24px rgba(0, 0, 0, 0.06))",
-				"e-4": "var(--shadow-golden-dialog, 0 16px 48px rgba(0, 0, 0, 0.08))",
-				"e-5": "var(--shadow-golden-toast, 0 24px 64px rgba(0, 0, 0, 0.10))",
-			},
-			fontFamily: {
-				sans: [
-					"Inter",
-					"ui-sans-serif",
-					"system-ui",
-					"-apple-system",
-					"sans-serif",
-				],
-				serif: ["Waldenburg", "EB Garamond", "Times New Roman", "serif"],
-				// Editorial skin font families (scoped to [data-skin="editorial"])
-				display: ["var(--font-fraunces)", "Georgia", "serif"],
-				reading: ["var(--font-newsreader)", "Georgia", "serif"],
-				mono: [
-					"var(--font-plex-mono)",
-					"ui-monospace",
-					"SFMono-Regular",
-					"Menlo",
-					"monospace",
-				],
-			},
-			fontSize: {
-				"display-mega": [
-					"64px",
-					{ lineHeight: "1.05", fontWeight: "300", letterSpacing: "-1.92px" },
-				],
-				"display-xl": [
-					"48px",
-					{ lineHeight: "1.08", fontWeight: "300", letterSpacing: "-0.96px" },
-				],
-				"display-lg": [
-					"36px",
-					{ lineHeight: "1.17", fontWeight: "300", letterSpacing: "-0.36px" },
-				],
-				"display-md": [
-					"32px",
-					{ lineHeight: "1.13", fontWeight: "300", letterSpacing: "-0.32px" },
-				],
-				"display-sm": [
-					"24px",
-					{ lineHeight: "1.2", fontWeight: "300", letterSpacing: "0" },
-				],
-				"title-md": [
-					"20px",
-					{ lineHeight: "1.35", fontWeight: "500", letterSpacing: "0" },
-				],
-				"title-sm": [
-					"18px",
-					{ lineHeight: "1.44", fontWeight: "500", letterSpacing: "0.18px" },
-				],
-				"body-md": [
-					"16px",
-					{ lineHeight: "1.5", fontWeight: "400", letterSpacing: "0.16px" },
-				],
-				"body-sm": [
-					"15px",
-					{ lineHeight: "1.47", fontWeight: "400", letterSpacing: "0.15px" },
-				],
-				caption: [
-					"14px",
-					{ lineHeight: "1.5", fontWeight: "400", letterSpacing: "0" },
-				],
-				"caption-uppercase": [
-					"12px",
-					{ lineHeight: "1.4", fontWeight: "600", letterSpacing: "0.96px" },
-				],
-				button: [
-					"15px",
-					{ lineHeight: "1", fontWeight: "500", letterSpacing: "0" },
-				],
-				"nav-link": [
-					"15px",
-					{ lineHeight: "1.4", fontWeight: "500", letterSpacing: "0" },
-				],
-			},
-			transitionDuration: {
-				fast: "var(--motion-fast)",
-				base: "var(--motion-base)",
-				slow: "var(--motion-slow)",
-			},
-			zIndex: {
-				sticky: "var(--z-sticky)",
-				sidebar: "var(--z-sidebar)",
-				overlay: "var(--z-overlay)",
-				float: "var(--z-float)",
-			},
-		},
-	},
-	plugins: [typography],
-};
-
-export default config;

package/.next/standalone/tsconfig.json

@@ -1,41 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2017",
-    "lib": [
-      "dom",
-      "dom.iterable",
-      "esnext"
-    ],
-    "allowJs": true,
-    "skipLibCheck": true,
-    "strict": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "jsx": "react-jsx",
-    "incremental": true,
-    "plugins": [
-      {
-        "name": "next"
-      }
-    ],
-    "paths": {
-      "@/*": [
-        "./src/*"
-      ]
-    }
-  },
-  "include": [
-    "next-env.d.ts",
-    "src/**/*.ts",
-    "src/**/*.tsx",
-    ".next/types/**/*.ts",
-    ".next/dev/types/**/*.ts"
-  ],
-  "exclude": [
-    "node_modules"
-  ]
-}