project-normalize.js

'use strict';

const ModePresets = require('./public/core/mode-presets');

// Deliberate ALLOW-LIST: only the fields listed here cross to the client. A
// new relay field is silently dropped until added here; the project token
// must never leak and is intentionally absent (see below).
function normalizeProject(p) {
  return {
    id: p.id,
    name: p.name,
    path: p.path,
    // '' for a console project. The full `host` object (id/name/status) is
    // attached separately by server.js#resolveProject from its hosts cache —
    // this module has no relay transport to fetch it with, and ssh_argv must
    // never reach here at all (see docs/security — ssh-hosts.md).
    hostId: p.host_id || '',
    allowedMcpIds: p.allowed_mcp_ids || [],
    allowedModels: p.allowed_models || [],
    chatTemplates: (p.chat_templates || []).map(t => ({
      id: t.id,
      name: t.name,
      model: t.model,
      mode: t.mode || 'text',
      voice: t.voice || '',
      systemPrompt: t.system_prompt || '',
      presetFor: ModePresets.normalize(t.preset_for),
    })),
    permissionPolicy: p.permission_policy ? {
      defaultMode: p.permission_policy.default_mode || 'default',
      allowedTools: p.permission_policy.allowed_tools || [],
      deniedTools: p.permission_policy.denied_tools || [],
    } : null,
    sessionFolders: p.session_folders || [],
    // 'home' | 'work' | 'both'; relay treats a missing mode as both. defaultFor
    // lists the modes this project is the default project of.
    mode: p.mode === 'home' || p.mode === 'work' ? p.mode : 'both',
    defaultFor: Array.isArray(p.default_for) ? p.default_for : [],
    // No `token`: relay is the sole project-token authority. Never cache or
    // forward the secret here.
    createdAt: p.created_at || '',
  };
}

module.exports = { normalizeProject };