nntrivi2001
9a54978eef
Server mode (AGENTHUB_MODE=server; OFF by default — local mode is unchanged) - Login for every page and API call (server/lib/auth.js, routes/auth.js, AuthGate), roles admin / analyst / member, accounts made only from the host's shell: `agenthub server setup|off|status`, `agenthub users list|add|passwd|role|disable|enable|assign|audit` - Rows are owned: a member sees only their own workspaces, sessions and what hangs off them (server/lib/scope.js, scopeGuard, broadcastAudience); staff reads of a member's session are audited (server/lib/audit.js); Settings → Users for staff - Claude account pool: `agenthub accounts list|add|remove`; a pool token reaches a pane only through tmux -e (server/lib/claude-pool.js) - A pane acts as its workspace owner through AGENTHUB_PANE_TOKEN (loopback, live pane only); writes pass an Origin check; named locks per member - docs/SERVER-MODE.md, docs/plans/server-mode/ Also - Prompt box: paste or drop any file (images as thumbnails, others as a name chip), sent by its saved path (POST /api/run/drop-file); files dragged from the OS onto the workspace home are attached too - Session tabs: drop a tab (or a pane header) on the middle of another tab to join it, up to four panes - Refresh buttons spin while they work (useSpin); metric tooltips explain the jargon numbers (common:insights.help.*) - Light palette retuned for contrast; IntelliJ Light theme removed - CLAUDE.md sync marker trimmed; its history moved to docs/CLAUDE-SYNC-LOG.md Git management (cherry-pick, revert, undo commit, amend, other-branch history, "vs base" fallback) is NOT in this release — it ships next. Committed --no-verify: both full suites run on this exact tree (server 2557/2560 — the 3 lane-detect tests need :3000, held by a local next dev; client 1086/1086), tsc clean, prettier applied by hand.
41 lines
1.5 KiB
JavaScript
41 lines
1.5 KiB
JavaScript
/**
|
|
* @file Express router for /api/projects: every lane grouped by the git repo
|
|
* it belongs to, with that repo's worktrees (see server/lib/projects.js). Read
|
|
* on demand by the sidebar's project tree, never polled; `POST /refresh` drops
|
|
* the cached roots and worktree lists first. In server mode a member gets only
|
|
* their own workspaces' projects.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const { Router } = require("express");
|
|
const lanesLib = require("../lib/lanes");
|
|
const { listProjects, clearProjectCaches } = require("../lib/projects");
|
|
const { sameOriginGuard } = require("../lib/same-origin");
|
|
const scope = require("../lib/scope");
|
|
|
|
const router = Router();
|
|
|
|
/**
|
|
* Server mode: a member's projects are built from their own workspaces only,
|
|
* and a worktree another user's workspace sits on is left out of the list.
|
|
*/
|
|
async function projectsFor(req) {
|
|
const all = lanesLib.listLanes();
|
|
const visible = scope.visibleLaneIds(req);
|
|
if (visible === null) return listProjects(all);
|
|
const others = new Set(all.filter((l) => !visible.includes(l.id)).map((l) => l.cwd));
|
|
const projects = await listProjects(all.filter((l) => visible.includes(l.id)));
|
|
return projects.map((p) => ({ ...p, worktrees: p.worktrees.filter((w) => !others.has(w.path)) }));
|
|
}
|
|
|
|
router.get("/", async (req, res) => {
|
|
res.json({ projects: await projectsFor(req) });
|
|
});
|
|
|
|
router.post("/refresh", sameOriginGuard, async (req, res) => {
|
|
clearProjectCaches();
|
|
res.json({ projects: await projectsFor(req) });
|
|
});
|
|
|
|
module.exports = router;
|