wispy-cli 1.2.2 → 1.3.0

package/core/server.mjs

@@ -7,11 +7,71 @@
 
 import { createServer } from "node:http";
 import path from "node:path";
-import { readFile, writeFile, mkdir } from "node:fs/promises";
-import { randomBytes, createHmac } from "node:crypto";
+import { readFile, writeFile, mkdir, readdir, stat } from "node:fs/promises";
+import { randomBytes, createHmac, createHash } from "node:crypto";
 
 import { WISPY_DIR } from "./config.mjs";
 
+// ── Sync helpers ──────────────────────────────────────────────────────────────
+
+const SYNC_PATTERNS = [
+  (f) => f.startsWith("memory/") && f.endsWith(".md"),
+  (f) => f.startsWith("sessions/") && f.endsWith(".json"),
+  (f) => f === "cron/jobs.json",
+  (f) => /^workstreams\/[^/]+\/work\.md$/.test(f),
+  (f) => f === "permissions.json",
+];
+
+function isSyncable(relPath) {
+  return SYNC_PATTERNS.some(fn => fn(relPath));
+}
+
+function sha256(content) {
+  return createHash("sha256").update(content).digest("hex");
+}
+
+function isPathSafe(relPath) {
+  // Reject absolute paths and path traversal
+  if (path.isAbsolute(relPath)) return false;
+  if (relPath.includes("..")) return false;
+  if (relPath.includes("\0")) return false;
+  return true;
+}
+
+async function scanSyncableFiles(baseDir) {
+  const entries = [];
+  await _scanDir(baseDir, baseDir, entries);
+  return entries;
+}
+
+async function _scanDir(baseDir, dir, entries) {
+  let items;
+  try {
+    items = await readdir(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const item of items) {
+    const fullPath = path.join(dir, item.name);
+    const relPath = path.relative(baseDir, fullPath).replace(/\\/g, "/");
+    if (item.isDirectory()) {
+      if (["node_modules", ".git", ".npm"].includes(item.name)) continue;
+      await _scanDir(baseDir, fullPath, entries);
+    } else if (item.isFile() && isSyncable(relPath)) {
+      try {
+        const content = await readFile(fullPath);
+        const fileStat = await stat(fullPath);
+        entries.push({
+          path: relPath,
+          hash: sha256(content),
+          modifiedAt: fileStat.mtime.toISOString(),
+          size: content.length,
+        });
+      } catch { /* skip */ }
+    }
+  }
+}
+
 const SERVER_CONFIG_FILE = path.join(WISPY_DIR, "server.json");
 const DEFAULT_PORT = 18790;
 const DEFAULT_HOST = "127.0.0.1";
@@ -335,6 +395,96 @@ export class WispyServer {
       }
     }
 
+    // ── Sync ────────────────────────────────────────────────────────────────
+
+    // GET /api/sync/manifest — list all syncable files with hash + mtime
+    if (pathname === "/api/sync/manifest" && method === "GET") {
+      const files = await scanSyncableFiles(WISPY_DIR);
+      return jsonResponse(res, 200, { files });
+    }
+
+    // GET /api/sync/file?path=<relPath> — download a file
+    if (pathname === "/api/sync/file" && method === "GET") {
+      const relPath = url.searchParams.get("path");
+      if (!relPath) return errorResponse(res, 400, "path required");
+      if (!isPathSafe(relPath)) return errorResponse(res, 400, "invalid path");
+      if (!isSyncable(relPath)) return errorResponse(res, 400, "path not syncable");
+
+      const fullPath = path.join(WISPY_DIR, relPath);
+      try {
+        const content = await readFile(fullPath);
+        const fileStat = await stat(fullPath);
+        return jsonResponse(res, 200, {
+          path: relPath,
+          content: content.toString("base64"),
+          encoding: "base64",
+          modifiedAt: fileStat.mtime.toISOString(),
+          hash: sha256(content),
+          size: content.length,
+        });
+      } catch {
+        return errorResponse(res, 404, "File not found");
+      }
+    }
+
+    // POST /api/sync/file — upload a file
+    if (pathname === "/api/sync/file" && method === "POST") {
+      const body = await readBody(req);
+      const { path: relPath, content, encoding = "base64", modifiedAt } = body;
+      if (!relPath || content == null) return errorResponse(res, 400, "path and content required");
+      if (!isPathSafe(relPath)) return errorResponse(res, 400, "invalid path");
+      if (!isSyncable(relPath)) return errorResponse(res, 400, "path not syncable");
+
+      const fullPath = path.join(WISPY_DIR, relPath);
+      await mkdir(path.dirname(fullPath), { recursive: true });
+      const buf = Buffer.from(content, encoding === "base64" ? "base64" : "utf8");
+      await writeFile(fullPath, buf);
+      if (modifiedAt) {
+        const mtime = new Date(modifiedAt);
+        const { utimes } = await import("node:fs/promises");
+        await utimes(fullPath, mtime, mtime).catch(() => {});
+      }
+      return jsonResponse(res, 200, { success: true, path: relPath, size: buf.length });
+    }
+
+    // POST /api/sync/bulk — upload multiple files at once
+    if (pathname === "/api/sync/bulk" && method === "POST") {
+      const body = await readBody(req);
+      const files = body.files ?? [];
+      if (!Array.isArray(files)) return errorResponse(res, 400, "files must be an array");
+
+      const results = [];
+      for (const file of files) {
+        const { path: relPath, content, encoding = "base64", modifiedAt } = file;
+        if (!relPath || content == null) {
+          results.push({ path: relPath, success: false, error: "missing path or content" });
+          continue;
+        }
+        if (!isPathSafe(relPath) || !isSyncable(relPath)) {
+          results.push({ path: relPath, success: false, error: "invalid or non-syncable path" });
+          continue;
+        }
+        try {
+          const fullPath = path.join(WISPY_DIR, relPath);
+          await mkdir(path.dirname(fullPath), { recursive: true });
+          const buf = Buffer.from(content, encoding === "base64" ? "base64" : "utf8");
+          await writeFile(fullPath, buf);
+          if (modifiedAt) {
+            const mtime = new Date(modifiedAt);
+            const { utimes } = await import("node:fs/promises");
+            await utimes(fullPath, mtime, mtime).catch(() => {});
+          }
+          results.push({ path: relPath, success: true, size: buf.length });
+        } catch (err) {
+          results.push({ path: relPath, success: false, error: err.message });
+        }
+      }
+
+      const succeeded = results.filter(r => r.success).length;
+      const failed = results.filter(r => !r.success).length;
+      return jsonResponse(res, 200, { success: failed === 0, received: files.length, succeeded, failed, results });
+    }
+
     // ── Audit ───────────────────────────────────────────────────────────────
     if (pathname === "/api/audit" && method === "GET") {
       const filter = {};

package/core/session.mjs

@@ -116,6 +116,7 @@ export class SessionManager {
 
   /**
    * Save a session to disk.
+   * If auto-sync is enabled, pushes the file to remote (non-blocking).
    */
   async save(id) {
     const session = this._sessions.get(id);
@@ -123,6 +124,13 @@ export class SessionManager {
     await mkdir(SESSIONS_DIR, { recursive: true });
     const filePath = path.join(SESSIONS_DIR, `${id}.json`);
     await writeFile(filePath, JSON.stringify(session.toJSON(), null, 2) + "\n", "utf8");
+
+    // Auto-sync: push to remote if configured (fire-and-forget)
+    try {
+      const { getSyncManager } = await import("./sync.mjs");
+      const syncMgr = await getSyncManager();
+      if (syncMgr?.auto) syncMgr.pushFile(filePath);
+    } catch { /* sync is optional */ }
   }
 
   /**