wiki-viewer 1.7.1 → 1.8.0

package/.next/standalone/src/app/api/wiki/file/route.ts

@@ -1,7 +1,8 @@
 import { readFile, stat } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
-import { safeRootPath } from "@/lib/root-dir";
+import { resolveWorkspaceForAgent } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 
 const MIME_MAP: Record<string, string> = {
 	jpg: "image/jpeg",
@@ -28,9 +29,13 @@ const MIME_MAP: Record<string, string> = {
 };
 
 export async function GET(request: Request) {
+	const wsx = await resolveWorkspaceForAgent(request);
+	if (!wsx.ok) return NextResponse.json({ error: wsx.code }, { status: wsx.status });
+	const { rootDir } = wsx;
+
 	const { searchParams } = new URL(request.url);
 	const rel = searchParams.get("path") ?? "";
-	const filePath = safeRootPath(rel);
+	const filePath = safeWorkspacePath(rootDir, rel);
 	if (!filePath)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 	try {

package/.next/standalone/src/app/api/wiki/folder/route.ts

@@ -1,14 +1,15 @@
 import { mkdir } from "node:fs/promises";
 import { NextResponse } from "next/server";
 import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { safeRootPath } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 
 export async function POST(request: Request) {
 	const csrf = checkOrigin(request);
 	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	const body: { path?: string } = await request.json();
 	const rel = body.path;
@@ -17,7 +18,7 @@ export async function POST(request: Request) {
 		return NextResponse.json({ error: "Invalid folder path" }, { status: 400 });
 	}
 
-	const folderPath = safeRootPath(rel);
+	const folderPath = safeWorkspacePath(rootDir, rel);
 	if (!folderPath)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 

package/.next/standalone/src/app/api/wiki/move/route.ts

@@ -2,15 +2,16 @@ import { rename, stat } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
 import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { safeRootPath, getRootDir } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 import { moveSidecar } from "@/lib/proof/sidecar";
 
 export async function POST(request: Request) {
 	const csrf = checkOrigin(request);
 	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	const body: { from?: string; to?: string } = await request.json();
 	if (
@@ -25,8 +26,8 @@ export async function POST(request: Request) {
 		);
 	}
 
-	const fromPath = safeRootPath(body.from);
-	const toPath = safeRootPath(body.to);
+	const fromPath = safeWorkspacePath(rootDir, body.from);
+	const toPath = safeWorkspacePath(rootDir, body.to);
 
 	if (!fromPath || !toPath)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
@@ -50,7 +51,6 @@ export async function POST(request: Request) {
 		// Fix latent bug: sidecar was orphaned on .md renames (R3)
 		const fromExt = path.extname(body.from).toLowerCase();
 		if (fromExt === ".md" || fromExt === ".markdown") {
-			const rootDir = getRootDir();
 			await moveSidecar(rootDir, body.from, body.to);
 		}
 

package/.next/standalone/src/app/api/wiki/new-file/route.ts

@@ -2,15 +2,16 @@ import { mkdir, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
 import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { safeRootPath } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 
 export async function POST(request: Request) {
 	const csrf = checkOrigin(request);
 	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok)
-		return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok)
+		return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	const body: { path?: string } = await request.json();
 	const rel = body.path;
@@ -22,7 +23,7 @@ export async function POST(request: Request) {
 		return NextResponse.json({ error: "Invalid file path" }, { status: 400 });
 	}
 
-	const filePath = safeRootPath(rel);
+	const filePath = safeWorkspacePath(rootDir, rel);
 	if (!filePath)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 

package/.next/standalone/src/app/api/wiki/page/route.ts

@@ -2,8 +2,8 @@ import { mkdir, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
 import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { safeRootPath } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 
 const VALID_DIRS = new Set(["entities", "concepts", "comparisons"]);
 const SLUG_RE = /^[a-z0-9-]+$/;
@@ -37,8 +37,9 @@ function singularType(
 export async function POST(request: Request) {
 	const csrf = checkOrigin(request);
 	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	const body: PageBody = await request.json();
 	const { dir, slug } = body;
@@ -51,7 +52,7 @@ export async function POST(request: Request) {
 	}
 
 	const relPath = `${dir}/${slug}.md`;
-	const filePath = safeRootPath(relPath);
+	const filePath = safeWorkspacePath(rootDir, relPath);
 	if (!filePath)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 

package/.next/standalone/src/app/api/wiki/presence/route.ts

@@ -12,17 +12,18 @@
 export const runtime = "nodejs";
 
 import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 import { setLease, clearLease } from "@/lib/proof/lease";
-import { safeRootPath } from "@/lib/root-dir";
 
 function errJson(code: string, message: string, status: number): NextResponse {
 	return NextResponse.json({ error: code, message }, { status });
 }
 
 export async function POST(req: Request): Promise<NextResponse> {
-	const auth = await requireUser(req);
-	if (!auth.ok) return errJson("UNAUTHORIZED", "Not authenticated", 401);
+	const ctx = await resolveWorkspaceForUser(req);
+	if (!ctx.ok) return errJson(ctx.code, "Not authenticated", ctx.status);
+	const { rootDir } = ctx;
 
 	let body: { path?: unknown; action?: unknown };
 	try {
@@ -40,15 +41,15 @@ export async function POST(req: Request): Promise<NextResponse> {
 	}
 
 	// Basic traversal guard
-	if (!safeRootPath(relPath)) {
+	if (!safeWorkspacePath(rootDir, relPath)) {
 		return errJson("INVALID_PATH", "Path traversal rejected", 400);
 	}
 
 	if (action === "open" || action === "heartbeat") {
-		setLease(relPath, auth.user.id);
+		setLease(rootDir, relPath, ctx.userId);
 	} else {
 		// close
-		clearLease(relPath, auth.user.id);
+		clearLease(rootDir, relPath, ctx.userId);
 	}
 
 	return NextResponse.json({ ok: true });

package/.next/standalone/src/app/api/wiki/route.ts

@@ -2,18 +2,19 @@ import { readdir, rmdir, stat, unlink } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
 import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { getRootDir, safeRootPath } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 import { isAppFolder, isNodeApp } from "@/lib/wiki-helpers";
 
 export async function GET(request: Request) {
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	const { searchParams } = new URL(request.url);
 	const dir = searchParams.get("dir") ?? "";
 
-	const targetDir = safeRootPath(dir);
+	const targetDir = safeWorkspacePath(rootDir, dir);
 	if (!targetDir)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 
@@ -31,7 +32,7 @@ export async function GET(request: Request) {
 				const info = await stat(filePath);
 				if (info.isDirectory()) {
 					const relPath = dir ? `${dir}/${name}` : name;
-					const nodeApp = await isNodeApp(getRootDir(), relPath);
+					const nodeApp = await isNodeApp(rootDir, relPath);
 					if (nodeApp) {
 						return {
 							name,
@@ -39,7 +40,7 @@ export async function GET(request: Request) {
 							modifiedAt: info.mtime.toISOString(),
 						};
 					}
-					const isApp = await isAppFolder(getRootDir(), relPath);
+					const isApp = await isAppFolder(rootDir, relPath);
 					return {
 						name,
 						type: (isApp ? "app" : "dir") as "app" | "dir",
@@ -74,16 +75,17 @@ export async function GET(request: Request) {
 export async function DELETE(request: Request) {
 	const csrf = checkOrigin(request);
 	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	const body: { path?: string } = await request.json();
 	const rel = body.path;
 	if (!rel || typeof rel !== "string")
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 
-	const filePath = safeRootPath(rel);
-	if (!filePath || filePath === getRootDir())
+	const filePath = safeWorkspacePath(rootDir, rel);
+	if (!filePath || filePath === rootDir)
 		return NextResponse.json({ error: "Invalid path" }, { status: 400 });
 
 	try {

package/.next/standalone/src/app/api/wiki/search/route.ts

@@ -0,0 +1,44 @@
+export const runtime = "nodejs";
+
+import { NextResponse } from "next/server";
+import { checkOrigin } from "@/lib/auth/csrf";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { ensureIndexer, ftsSearch } from "@/lib/search/indexer";
+
+const HARD_LIMIT = 200;
+
+export async function POST(request: Request) {
+	const csrf = checkOrigin(request);
+	if (csrf) return csrf;
+
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+
+	let body: { query?: unknown; limit?: unknown };
+	try {
+		body = (await request.json()) as typeof body;
+	} catch {
+		return NextResponse.json({ error: "INVALID_PAYLOAD" }, { status: 400 });
+	}
+
+	const query = typeof body.query === "string" ? body.query : "";
+	const limit = Math.min(
+		typeof body.limit === "number" ? body.limit : 30,
+		HARD_LIMIT,
+	);
+
+	// Lazy init: fire-and-forget. Returns results from whatever is already indexed;
+	// index warms up in background on first call per workspace.
+	ensureIndexer(ctx.ws.id, ctx.rootDir).catch((e) =>
+		console.error("[search] ensureIndexer failed", e),
+	);
+
+	const result = ftsSearch(ctx.ws.id, query, limit);
+
+	return NextResponse.json({
+		kind: "fts",
+		query,
+		matches: result.matches,
+		truncated: result.truncated,
+	});
+}

package/.next/standalone/src/app/api/wiki/slugs/route.ts

@@ -1,8 +1,7 @@
 import { readdir } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { getRootDir } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
 
 type SlugBuckets = {
 	entities: string[];
@@ -28,17 +27,18 @@ async function readMarkdownSlugsFromDir(dirPath: string): Promise<string[]> {
 }
 
 export async function GET(request: Request) {
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	try {
 		// Scan root + known dirs (entities, concepts, comparisons for wiki compat)
 		// plus any other immediate subdirectories
 		const [entities, concepts, comparisons, root] = await Promise.all([
-			readMarkdownSlugsFromDir(path.join(getRootDir(), "entities")),
-			readMarkdownSlugsFromDir(path.join(getRootDir(), "concepts")),
-			readMarkdownSlugsFromDir(path.join(getRootDir(), "comparisons")),
-			readMarkdownSlugsFromDir(getRootDir()),
+			readMarkdownSlugsFromDir(path.join(rootDir, "entities")),
+			readMarkdownSlugsFromDir(path.join(rootDir, "concepts")),
+			readMarkdownSlugsFromDir(path.join(rootDir, "comparisons")),
+			readMarkdownSlugsFromDir(rootDir),
 		]);
 
 		const body: SlugBuckets = { entities, concepts, comparisons, root };

package/.next/standalone/src/app/api/wiki/upload/route.ts

@@ -2,8 +2,8 @@ import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { NextResponse } from "next/server";
 import { checkOrigin } from "@/lib/auth/csrf";
-import { requireUser } from "@/lib/auth/server";
-import { safeRootPath } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { safeWorkspacePath } from "@/lib/workspaces";
 
 const ALLOWED_MIME_TYPES = new Set([
 	"application/pdf",
@@ -39,8 +39,9 @@ function sanitizeFilename(name: string): string {
 export async function POST(request: Request) {
 	const csrf = checkOrigin(request);
 	if (csrf) return csrf;
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return NextResponse.json({ error: ctx.code }, { status: ctx.status });
+	const { rootDir } = ctx;
 
 	let formData: FormData;
 	try {
@@ -54,7 +55,7 @@ export async function POST(request: Request) {
 		return NextResponse.json({ error: "No file provided" }, { status: 400 });
 
 	const dir = (formData.get("dir") as string) ?? "";
-	const targetDir = safeRootPath(dir);
+	const targetDir = safeWorkspacePath(rootDir, dir);
 	if (!targetDir)
 		return NextResponse.json({ error: "Invalid directory" }, { status: 400 });
 

package/.next/standalone/src/app/api/wiki/watch/route.ts

@@ -1,23 +1,21 @@
 export const runtime = "nodejs";
 
-import { watch } from "chokidar";
-import path from "node:path";
-import { NextResponse } from "next/server";
-import { requireUser } from "@/lib/auth/server";
-import { getRootDir } from "@/lib/root-dir";
+import { resolveWorkspaceForUser } from "@/lib/workspace-context";
+import { subscribe } from "@/lib/search/watcher-pool";
+import { ensureIndexer } from "@/lib/search/indexer";
 
 export async function GET(request: Request) {
-	const auth = await requireUser(request);
-	if (!auth.ok) return NextResponse.json({ error: "UNAUTHORIZED" }, { status: 401 });
+	const ctx = await resolveWorkspaceForUser(request);
+	if (!ctx.ok) return new Response(ctx.code, { status: ctx.status });
+	const { ws, rootDir } = ctx;
 
-	const rootDir = getRootDir();
-	if (!rootDir) {
-		return new Response("Root not configured", { status: 503 });
-	}
+	// Fire-and-forget: brings the indexer up on first SSE connection per workspace.
+	ensureIndexer(ws.id, rootDir).catch((e) =>
+		console.error("[search] ensureIndexer failed", e),
+	);
 
 	const encoder = new TextEncoder();
-	// eslint-disable-next-line @typescript-eslint/no-explicit-any
-	let watcher: any = null;
+	let unsubscribe: (() => void) | null = null;
 	let heartbeatId: ReturnType<typeof setInterval> | null = null;
 	let controllerRef: ReadableStreamDefaultController | null = null;
 
@@ -36,34 +34,12 @@ export async function GET(request: Request) {
 		start(controller) {
 			controllerRef = controller;
 
-			watcher = watch(rootDir, {
-				ignoreInitial: true,
-				ignored: /(node_modules|\.git)/,
-				persistent: true,
-				awaitWriteFinish: { stabilityThreshold: 150, pollInterval: 50 },
+			// Subscribe via the shared pool -- no second watcher is created.
+			unsubscribe = subscribe(ws.id, rootDir, (type, relPath) => {
+				send({ type, path: relPath });
 			});
 
-			function relPath(absPath: string) {
-				return path.relative(rootDir, absPath);
-			}
-
-			watcher.on("add", (p: string) => send({ type: "add", path: relPath(p) }));
-			watcher.on("unlink", (p: string) =>
-				send({ type: "unlink", path: relPath(p) }),
-			);
-			watcher.on("addDir", (p: string) => {
-				const rel = relPath(p);
-				if (rel) send({ type: "addDir", path: rel }); // skip root itself
-			});
-			watcher.on("unlinkDir", (p: string) => {
-				const rel = relPath(p);
-				if (rel) send({ type: "unlinkDir", path: rel });
-			});
-			watcher.on("change", (p: string) =>
-				send({ type: "change", path: relPath(p) }),
-			);
-
-			// Heartbeat keeps the connection alive through proxies / load balancers
+			// Heartbeat keeps the connection alive through proxies / load balancers.
 			heartbeatId = setInterval(() => {
 				try {
 					controller.enqueue(encoder.encode(": heartbeat\n\n"));
@@ -76,7 +52,7 @@ export async function GET(request: Request) {
 		cancel() {
 			controllerRef = null;
 			if (heartbeatId !== null) clearInterval(heartbeatId);
-			watcher?.close();
+			unsubscribe?.();
 		},
 	});