@a5c-ai/agent-mux-gateway 0.0.0 → 0.4.2

package/README.md

@@ -7,7 +7,14 @@ Current scope:
 
 - `GatewayConfig` and default configuration helpers
 - `createGateway(config)` returning a start/stop gateway handle
-- basic gateway logger wiring
+- token auth, HTTP/WS server, run manager, fanout replay, and runtime hook brokering
+- optional static webui hosting from `@a5c-ai/agent-mux-webui/dist`
 
-Later tasks in `advanced-uis.md` will add the protocol server, auth, fanout,
-run management, and static web UI hosting.
+Service templates:
+
+- `examples/systemd/amux-gateway.service`
+- `examples/launchd/ai.a5c.amux.gateway.plist`
+
+If the web UI package is not installed, `/` returns a helpful 404. Install
+`@a5c-ai/agent-mux-webui` alongside this package or start the CLI with
+`amux gateway serve --webui /path/to/dist`.

package/dist/auth/hashing.d.ts

@@ -0,0 +1,3 @@
+export declare function hashToken(plaintext: string): Promise<string>;
+export declare function verifyTokenHash(hash: string, plaintext: string): Promise<boolean>;
+//# sourceMappingURL=hashing.d.ts.map

package/dist/auth/hashing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashing.d.ts","sourceRoot":"","sources":["../../src/auth/hashing.ts"],"names":[],"mappings":"AAaA,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKlE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMvF"}

package/dist/auth/hashing.js

@@ -0,0 +1,25 @@
+import { randomBytes } from 'node:crypto';
+import argon2 from 'argon2';
+const ARGON2_OPTIONS = Object.freeze({
+    type: argon2.argon2id,
+    saltLength: 16,
+    hashLength: 32,
+    parallelism: 1,
+    memoryCost: 64 * 1024,
+    timeCost: 3,
+});
+export async function hashToken(plaintext) {
+    return await argon2.hash(plaintext, {
+        ...ARGON2_OPTIONS,
+        salt: randomBytes(ARGON2_OPTIONS.saltLength),
+    });
+}
+export async function verifyTokenHash(hash, plaintext) {
+    try {
+        return await argon2.verify(hash, plaintext);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=hashing.js.map

package/dist/auth/hashing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashing.js","sourceRoot":"","sources":["../../src/auth/hashing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC,QAAQ;IACrB,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,WAAW,EAAE,CAAC;IACd,UAAU,EAAE,EAAE,GAAG,IAAI;IACrB,QAAQ,EAAE,CAAC;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB;IAC/C,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;QAClC,GAAG,cAAc;QACjB,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,SAAiB;IACnE,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/auth/middleware.d.ts

@@ -0,0 +1,4 @@
+import type { TokenStore, TokenRecord } from './tokens.js';
+export declare function parseBearerToken(headerValue: string | null | undefined): string | null;
+export declare function authenticateBearerToken(tokenStore: TokenStore, headerValue: string | null | undefined): Promise<TokenRecord | null>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/auth/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE3D,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAItF;AAED,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACrC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAO7B"}

package/dist/auth/middleware.js

@@ -0,0 +1,17 @@
+export function parseBearerToken(headerValue) {
+    if (!headerValue)
+        return null;
+    const match = headerValue.match(/^Bearer\s+(.+)$/i);
+    return match?.[1]?.trim() ?? null;
+}
+export async function authenticateBearerToken(tokenStore, headerValue) {
+    const token = parseBearerToken(headerValue);
+    if (!token)
+        return null;
+    const record = await tokenStore.verify(token);
+    if (!record)
+        return null;
+    await tokenStore.touch(record.id);
+    return record;
+}
+//# sourceMappingURL=middleware.js.map

package/dist/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAAC,WAAsC;IACrE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAsB,EACtB,WAAsC;IAEtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/auth/tokens.d.ts

@@ -0,0 +1,45 @@
+export interface TokenRecord {
+    id: string;
+    name: string;
+    createdAt: number;
+    updatedAt: number;
+    lastUsedAt: number | null;
+    expiresAt: number | null;
+    revokedAt: number | null;
+}
+export interface TokenIssueResult {
+    id: string;
+    plaintext: string;
+    record: TokenRecord;
+}
+export interface TokenCreateInput {
+    name: string;
+    ttlMs?: number | null;
+}
+export interface TokenStore {
+    create(input: TokenCreateInput): Promise<TokenIssueResult>;
+    verify(plaintext: string): Promise<TokenRecord | null>;
+    revoke(id: string): Promise<boolean>;
+    list(): Promise<TokenRecord[]>;
+    touch(id: string): Promise<boolean>;
+}
+export declare class MemoryTokenStore implements TokenStore {
+    private readonly records;
+    create(input: TokenCreateInput): Promise<TokenIssueResult>;
+    verify(plaintext: string): Promise<TokenRecord | null>;
+    revoke(id: string): Promise<boolean>;
+    list(): Promise<TokenRecord[]>;
+    touch(id: string): Promise<boolean>;
+}
+export declare class SqliteTokenStore implements TokenStore {
+    private readonly db;
+    constructor(dbPath?: string);
+    create(input: TokenCreateInput): Promise<TokenIssueResult>;
+    verify(plaintext: string): Promise<TokenRecord | null>;
+    revoke(id: string): Promise<boolean>;
+    list(): Promise<TokenRecord[]>;
+    touch(id: string): Promise<boolean>;
+    close(): void;
+    private rowToRecord;
+}
+//# sourceMappingURL=tokens.d.ts.map

package/dist/auth/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/auth/tokens.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrC;AA6BD,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAE1D,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqB1D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAWtD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQpC,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAI9B,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAO1C;AAED,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAM;gBAEb,MAAM,GAAE,MAA4B;IAiB1C,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiC1D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAiBtD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUpC,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAS9B,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUzC,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,WAAW;CAYpB"}

package/dist/auth/tokens.js

@@ -0,0 +1,182 @@
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { randomBytes, randomUUID } from 'node:crypto';
+import { mkdirSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { hashToken, verifyTokenHash } from './hashing.js';
+const require = createRequire(import.meta.url);
+const { DatabaseSync } = require('node:sqlite');
+function defaultSqlitePath() {
+    return path.join(os.homedir(), '.amux', 'gateway', 'tokens.db');
+}
+function now() {
+    return Date.now();
+}
+function issuePlaintextToken() {
+    return randomBytes(32).toString('base64url');
+}
+function toPublicRecord(record) {
+    const { hash: _hash, ...publicRecord } = record;
+    return publicRecord;
+}
+function isUsable(record, currentTime) {
+    if (record.revokedAt !== null)
+        return false;
+    if (record.expiresAt !== null && record.expiresAt <= currentTime)
+        return false;
+    return true;
+}
+export class MemoryTokenStore {
+    records = new Map();
+    async create(input) {
+        const plaintext = issuePlaintextToken();
+        const createdAt = now();
+        const record = {
+            id: randomUUID(),
+            name: input.name,
+            hash: await hashToken(plaintext),
+            createdAt,
+            updatedAt: createdAt,
+            lastUsedAt: null,
+            expiresAt: input.ttlMs ? createdAt + input.ttlMs : null,
+            revokedAt: null,
+        };
+        this.records.set(record.id, record);
+        return {
+            id: record.id,
+            plaintext,
+            record: toPublicRecord(record),
+        };
+    }
+    async verify(plaintext) {
+        const currentTime = now();
+        for (const record of this.records.values()) {
+            if (!isUsable(record, currentTime))
+                continue;
+            if (await verifyTokenHash(record.hash, plaintext)) {
+                return toPublicRecord(record);
+            }
+        }
+        return null;
+    }
+    async revoke(id) {
+        const record = this.records.get(id);
+        if (!record || record.revokedAt !== null)
+            return false;
+        record.revokedAt = now();
+        record.updatedAt = record.revokedAt;
+        return true;
+    }
+    async list() {
+        return Array.from(this.records.values()).map(toPublicRecord);
+    }
+    async touch(id) {
+        const record = this.records.get(id);
+        if (!record)
+            return false;
+        record.lastUsedAt = now();
+        record.updatedAt = record.lastUsedAt;
+        return true;
+    }
+}
+export class SqliteTokenStore {
+    db;
+    constructor(dbPath = defaultSqlitePath()) {
+        mkdirSync(path.dirname(dbPath), { recursive: true });
+        this.db = new DatabaseSync(dbPath);
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS gateway_tokens (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        hash TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL,
+        last_used_at INTEGER,
+        expires_at INTEGER,
+        revoked_at INTEGER
+      );
+    `);
+    }
+    async create(input) {
+        const plaintext = issuePlaintextToken();
+        const createdAt = now();
+        const record = {
+            id: randomUUID(),
+            name: input.name,
+            hash: await hashToken(plaintext),
+            createdAt,
+            updatedAt: createdAt,
+            lastUsedAt: null,
+            expiresAt: input.ttlMs ? createdAt + input.ttlMs : null,
+            revokedAt: null,
+        };
+        this.db.prepare(`
+      INSERT INTO gateway_tokens (id, name, hash, created_at, updated_at, last_used_at, expires_at, revoked_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(record.id, record.name, record.hash, record.createdAt, record.updatedAt, record.lastUsedAt, record.expiresAt, record.revokedAt);
+        return {
+            id: record.id,
+            plaintext,
+            record: toPublicRecord(record),
+        };
+    }
+    async verify(plaintext) {
+        const rows = this.db.prepare(`
+      SELECT id, name, hash, created_at, updated_at, last_used_at, expires_at, revoked_at
+      FROM gateway_tokens
+      ORDER BY created_at DESC
+    `).all();
+        const currentTime = now();
+        for (const row of rows) {
+            const record = this.rowToRecord(row);
+            if (!isUsable(record, currentTime))
+                continue;
+            if (await verifyTokenHash(record.hash, plaintext)) {
+                return toPublicRecord(record);
+            }
+        }
+        return null;
+    }
+    async revoke(id) {
+        const updatedAt = now();
+        const result = this.db.prepare(`
+      UPDATE gateway_tokens
+      SET revoked_at = ?, updated_at = ?
+      WHERE id = ? AND revoked_at IS NULL
+    `).run(updatedAt, updatedAt, id);
+        return result.changes > 0;
+    }
+    async list() {
+        const rows = this.db.prepare(`
+      SELECT id, name, hash, created_at, updated_at, last_used_at, expires_at, revoked_at
+      FROM gateway_tokens
+      ORDER BY created_at DESC
+    `).all();
+        return rows.map((row) => toPublicRecord(this.rowToRecord(row)));
+    }
+    async touch(id) {
+        const updatedAt = now();
+        const result = this.db.prepare(`
+      UPDATE gateway_tokens
+      SET last_used_at = ?, updated_at = ?
+      WHERE id = ?
+    `).run(updatedAt, updatedAt, id);
+        return result.changes > 0;
+    }
+    close() {
+        this.db.close();
+    }
+    rowToRecord(row) {
+        return {
+            id: String(row['id']),
+            name: String(row['name']),
+            hash: String(row['hash']),
+            createdAt: Number(row['created_at']),
+            updatedAt: Number(row['updated_at']),
+            lastUsedAt: row['last_used_at'] == null ? null : Number(row['last_used_at']),
+            expiresAt: row['expires_at'] == null ? null : Number(row['expires_at']),
+            revokedAt: row['revoked_at'] == null ? null : Number(row['revoked_at']),
+        };
+    }
+}
+//# sourceMappingURL=tokens.js.map

package/dist/auth/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/auth/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,aAAa,CAAgD,CAAC;AAmC/F,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,GAAG;IACV,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;IAChD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAyB,EAAE,WAAmB;IAC9D,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,gBAAgB;IACV,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEhE,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAsB;YAChC,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,MAAM,SAAS,CAAC,SAAS,CAAC;YAChC,SAAS;YACT,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YACvD,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,SAAS;YACT,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;gBAAE,SAAS;YAC7C,IAAI,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBAClD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IACV,EAAE,CAAM;IAEzB,YAAY,SAAiB,iBAAiB,EAAE;QAC9C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;KAWZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAsB;YAChC,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,MAAM,SAAS,CAAC,SAAS,CAAC;YAChC,SAAS;YACT,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YACvD,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CACJ,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC;QACF,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,SAAS;YACT,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI5B,CAAC,CAAC,GAAG,EAAoC,CAAC;QAC3C,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;gBAAE,SAAS;YAC7C,IAAI,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBAClD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI5B,CAAC,CAAC,GAAG,EAAoC,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAEO,WAAW,CAAC,GAA4B;QAC9C,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACpC,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5E,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACvE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SACxE,CAAC;IACJ,CAAC;CACF"}

package/dist/builtin-adapters.d.ts

@@ -0,0 +1,15 @@
+import type { GatewayRunClient } from './config.js';
+export declare function createGatewayRunClient(): GatewayRunClient;
+export declare function listBuiltInAgentNames(): string[];
+export interface RunnableGatewayAgent {
+    agent: string;
+    displayName: string;
+    adapterType: string;
+    structuredSessionTransport: 'none' | 'restart-per-turn' | 'persistent';
+    sessionControlPlane: 'self-managed' | 'external-host' | 'mcp-mediated';
+    supportsInteractiveMode: boolean;
+    canResume: boolean;
+}
+export declare function listRunnableGatewayAgents(client?: GatewayRunClient): Promise<RunnableGatewayAgent[]>;
+export declare function listRunnableGatewayAgentNames(client?: GatewayRunClient): Promise<string[]>;
+//# sourceMappingURL=builtin-adapters.d.ts.map

package/dist/builtin-adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-adapters.d.ts","sourceRoot":"","sources":["../src/builtin-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA2BpD,wBAAgB,sBAAsB,IAAI,gBAAgB,CAuCzD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAGhD;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B,EAAE,MAAM,GAAG,kBAAkB,GAAG,YAAY,CAAC;IACvE,mBAAmB,EAAE,cAAc,GAAG,eAAe,GAAG,cAAc,CAAC;IACvE,uBAAuB,EAAE,OAAO,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;CACpB;AAkBD,wBAAsB,yBAAyB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+D1G;AAED,wBAAsB,6BAA6B,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhG"}

package/dist/builtin-adapters.js

@@ -0,0 +1,110 @@
+import { createClient } from '@a5c-ai/agent-mux-core';
+import { AgentMuxRemoteAdapter, AmpAdapter, ClaudeAdapter, ClaudeAgentSdkAdapter, ClaudeRemoteControlAdapter, CodexAdapter, CodexSdkAdapter, CodexWebSocketAdapter, CopilotAdapter, CursorAdapter, DroidAdapter, GeminiAdapter, HermesAdapter, OmpAdapter, OpenClawAdapter, OpenCodeAdapter, OpenCodeHttpAdapter, PiAdapter, PiSdkAdapter, QwenAdapter, BabysitterAdapter, } from '@a5c-ai/agent-mux-adapters';
+export function createGatewayRunClient() {
+    const client = createClient();
+    const registry = client.adapters;
+    const adapters = [
+        new ClaudeAdapter(),
+        new ClaudeAgentSdkAdapter(),
+        new ClaudeRemoteControlAdapter(),
+        new CodexAdapter(),
+        new CodexSdkAdapter(),
+        new CodexWebSocketAdapter(),
+        new DroidAdapter(),
+        new AmpAdapter(),
+        new GeminiAdapter(),
+        new CopilotAdapter(),
+        new CursorAdapter(),
+        new OpenCodeAdapter(),
+        new OpenCodeHttpAdapter(),
+        new PiAdapter(),
+        new PiSdkAdapter(),
+        new OmpAdapter(),
+        new OpenClawAdapter(),
+        new HermesAdapter(),
+        new AgentMuxRemoteAdapter(),
+        new QwenAdapter(),
+        new BabysitterAdapter(),
+    ];
+    for (const adapter of adapters) {
+        if (typeof registry.registerBuiltIn === 'function') {
+            registry.registerBuiltIn(adapter);
+            continue;
+        }
+        registry.register(adapter);
+    }
+    return client;
+}
+export function listBuiltInAgentNames() {
+    const client = createGatewayRunClient();
+    return client.adapters.list().map((entry) => entry.agent);
+}
+export async function listRunnableGatewayAgents(client) {
+    const detectable = client;
+    if (!detectable?.adapters) {
+        return listBuiltInAgentNames().map((agent) => ({
+            agent,
+            displayName: agent,
+            adapterType: 'subprocess',
+            structuredSessionTransport: 'none',
+            sessionControlPlane: 'self-managed',
+            supportsInteractiveMode: false,
+            canResume: false,
+        }));
+    }
+    const [entries, installed] = await Promise.all([
+        Promise.resolve(detectable.adapters.list()),
+        detectable.adapters.installed(),
+    ]);
+    const installMap = new Map(installed.map((entry) => [entry.agent, entry]));
+    const runnable = entries.flatMap((entry) => {
+        const adapter = detectable.adapters?.get(entry.agent);
+        const status = installMap.get(entry.agent);
+        if (!status?.installed || !status.meetsMinVersion) {
+            return [];
+        }
+        return [{
+                agent: entry.agent,
+                displayName: entry.displayName,
+                adapterType: adapter?.adapterType ?? 'subprocess',
+                structuredSessionTransport: adapter?.capabilities?.structuredSessionTransport ?? 'none',
+                sessionControlPlane: adapter?.capabilities?.sessionControlPlane ?? 'self-managed',
+                supportsInteractiveMode: adapter?.capabilities?.supportsInteractiveMode ?? false,
+                canResume: adapter?.capabilities?.canResume ?? false,
+            }];
+    });
+    if (runnable.length > 0) {
+        return runnable.sort((left, right) => {
+            const score = (candidate) => {
+                if (candidate.structuredSessionTransport === 'persistent' && candidate.supportsInteractiveMode)
+                    return 4;
+                if (candidate.supportsInteractiveMode)
+                    return 3;
+                if (candidate.structuredSessionTransport === 'persistent')
+                    return 2;
+                if (candidate.canResume)
+                    return 1;
+                return 0;
+            };
+            const delta = score(right) - score(left);
+            if (delta !== 0) {
+                return delta;
+            }
+            return left.displayName.localeCompare(right.displayName);
+        });
+    }
+    return listBuiltInAgentNames().map((agent) => ({
+        agent,
+        displayName: agent,
+        adapterType: 'subprocess',
+        structuredSessionTransport: 'none',
+        sessionControlPlane: 'self-managed',
+        supportsInteractiveMode: false,
+        canResume: false,
+    }));
+}
+export async function listRunnableGatewayAgentNames(client) {
+    const runnable = await listRunnableGatewayAgents(client);
+    return runnable.map((entry) => entry.agent);
+}
+//# sourceMappingURL=builtin-adapters.js.map

package/dist/builtin-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-adapters.js","sourceRoot":"","sources":["../src/builtin-adapters.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,0BAA0B,EAC1B,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAGvB,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,IAAI,aAAa,EAAE;QACnB,IAAI,qBAAqB,EAAE;QAC3B,IAAI,0BAA0B,EAAE;QAChC,IAAI,YAAY,EAAE;QAClB,IAAI,eAAe,EAAE;QACrB,IAAI,qBAAqB,EAAE;QAC3B,IAAI,YAAY,EAAE;QAClB,IAAI,UAAU,EAAE;QAChB,IAAI,aAAa,EAAE;QACnB,IAAI,cAAc,EAAE;QACpB,IAAI,aAAa,EAAE;QACnB,IAAI,eAAe,EAAE;QACrB,IAAI,mBAAmB,EAAE;QACzB,IAAI,SAAS,EAAE;QACf,IAAI,YAAY,EAAE;QAClB,IAAI,UAAU,EAAE;QAChB,IAAI,eAAe,EAAE;QACrB,IAAI,aAAa,EAAE;QACnB,IAAI,qBAAqB,EAAE;QAC3B,IAAI,WAAW,EAAE;QACjB,IAAI,iBAAiB,EAAE;KACxB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;YACnD,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,MAAM,GAAG,sBAAsB,EAAqC,CAAC;IAC3E,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AA4BD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAyB;IACvE,MAAM,UAAU,GAAG,MAA6C,CAAC;IACjE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;QAC1B,OAAO,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7C,KAAK;YACL,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,YAAY;YACzB,0BAA0B,EAAE,MAAM;YAClC,mBAAmB,EAAE,cAAc;YACnC,uBAAuB,EAAE,KAAK;YAC9B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC7C,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE;KAChC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC;gBACN,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,YAAY;gBACjD,0BAA0B,EAAE,OAAO,EAAE,YAAY,EAAE,0BAA0B,IAAI,MAAM;gBACvF,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,IAAI,cAAc;gBACjF,uBAAuB,EAAE,OAAO,EAAE,YAAY,EAAE,uBAAuB,IAAI,KAAK;gBAChF,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,IAAI,KAAK;aACrD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,CAAC,SAA+B,EAAU,EAAE;gBACxD,IAAI,SAAS,CAAC,0BAA0B,KAAK,YAAY,IAAI,SAAS,CAAC,uBAAuB;oBAAE,OAAO,CAAC,CAAC;gBACzG,IAAI,SAAS,CAAC,uBAAuB;oBAAE,OAAO,CAAC,CAAC;gBAChD,IAAI,SAAS,CAAC,0BAA0B,KAAK,YAAY;oBAAE,OAAO,CAAC,CAAC;gBACpE,IAAI,SAAS,CAAC,SAAS;oBAAE,OAAO,CAAC,CAAC;gBAClC,OAAO,CAAC,CAAC;YACX,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7C,KAAK;QACL,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,YAAY;QACzB,0BAA0B,EAAE,MAAM;QAClC,mBAAmB,EAAE,cAAc;QACnC,uBAAuB,EAAE,KAAK;QAC9B,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAAyB;IAC3E,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC"}

package/dist/config.d.ts

@@ -1,8 +1,28 @@
+import type { RunHandle, RunOptions } from '@a5c-ai/agent-mux-core';
+import type { TokenStore } from './auth/tokens.js';
+import type { NotificationWebhookConfig } from './notifications/types.js';
+export interface GatewayRunClient {
+    run(options: RunOptions): RunHandle;
+}
 export interface GatewayConfig {
     host: string;
     port: number;
     webuiRoot?: string | null;
     enableWebui: boolean;
+    serverVersion: string;
+    unauthenticatedTimeoutMs: number;
+    maxPendingFrames: number;
+    tokenStore?: TokenStore;
+    tokenStoreKind: 'sqlite' | 'memory';
+    tokenDbPath: string;
+    eventLogDir: string;
+    maxEventsPerRun: number;
+    replayBufferSize: number;
+    maxConcurrentRuns: number;
+    shutdownGraceMs: number;
+    hookDecisionTimeoutMs: number;
+    notificationWebhook?: NotificationWebhookConfig | null;
+    client?: GatewayRunClient;
 }
 export declare const DEFAULT_GATEWAY_CONFIG: Readonly<GatewayConfig>;
 export declare function resolveGatewayConfig(config?: Partial<GatewayConfig>): GatewayConfig;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,aAAa,CAKzD,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,OAAO,CAAC,aAAa,CAAM,GAAG,aAAa,CAKvF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,wBAAwB,EAAE,MAAM,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACvD,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,aAAa,CAiBzD,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,OAAO,CAAC,aAAa,CAAM,GAAG,aAAa,CAKvF"}

package/dist/config.js

@@ -1,8 +1,22 @@
+import * as os from 'node:os';
+import * as path from 'node:path';
 export const DEFAULT_GATEWAY_CONFIG = Object.freeze({
     host: '127.0.0.1',
     port: 7878,
     webuiRoot: null,
     enableWebui: true,
+    serverVersion: '0.0.0',
+    unauthenticatedTimeoutMs: 5000,
+    maxPendingFrames: 1024,
+    tokenStoreKind: 'sqlite',
+    tokenDbPath: path.join(os.homedir(), '.amux', 'gateway', 'tokens.db'),
+    eventLogDir: path.join(os.homedir(), '.amux', 'gateway', 'events'),
+    maxEventsPerRun: 100_000,
+    replayBufferSize: 512,
+    maxConcurrentRuns: 16,
+    shutdownGraceMs: 5000,
+    hookDecisionTimeoutMs: 30_000,
+    notificationWebhook: null,
 });
 export function resolveGatewayConfig(config = {}) {
     return {

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,sBAAsB,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,IAAI;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,SAAiC,EAAE;IACtE,OAAO;QACL,GAAG,sBAAsB;QACzB,GAAG,MAAM;KACV,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAgClC,MAAM,CAAC,MAAM,sBAAsB,GAA4B,MAAM,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,OAAO;IACtB,wBAAwB,EAAE,IAAI;IAC9B,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC;IACrE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;IAClE,eAAe,EAAE,OAAO;IACxB,gBAAgB,EAAE,GAAG;IACrB,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,IAAI;IACrB,qBAAqB,EAAE,MAAM;IAC7B,mBAAmB,EAAE,IAAI;CAC1B,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,SAAiC,EAAE;IACtE,OAAO;QACL,GAAG,sBAAsB;QACzB,GAAG,MAAM;KACV,CAAC;AACJ,CAAC"}

package/dist/fanout/client-conn.d.ts

@@ -0,0 +1,21 @@
+import type { WebSocket } from 'ws';
+import type { TokenRecord } from '../auth/tokens.js';
+import type { GatewayFrame } from '../protocol/v1.js';
+export declare class ClientConn {
+    private readonly maxPendingFrames;
+    readonly id: `${string}-${string}-${string}-${string}-${string}`;
+    readonly socket: WebSocket;
+    readonly subscriptions: Set<string>;
+    readonly sessionSubscriptions: Set<string>;
+    readonly connectedAt: number;
+    tokenId: string | null;
+    authenticated: boolean;
+    private pendingFrames;
+    constructor(socket: WebSocket, maxPendingFrames: number, tokenRecord?: TokenRecord | null);
+    authenticate(record: TokenRecord): void;
+    send(frame: GatewayFrame): void;
+    sendJson(payload: Record<string, unknown>): void;
+    private sendEncoded;
+    close(code: number, reason: string): void;
+}
+//# sourceMappingURL=client-conn.d.ts.map

package/dist/fanout/client-conn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-conn.d.ts","sourceRoot":"","sources":["../../src/fanout/client-conn.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,qBAAa,UAAU;IAanB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAZnC,QAAQ,CAAC,EAAE,sDAAgB;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,aAAa,cAAqB;IAC3C,QAAQ,CAAC,oBAAoB,cAAqB;IAClD,QAAQ,CAAC,WAAW,SAAc;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,UAAS;IAEtB,OAAO,CAAC,aAAa,CAAK;gBAGxB,MAAM,EAAE,SAAS,EACA,gBAAgB,EAAE,MAAM,EACzC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI;IAOlC,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAKvC,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAI/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIhD,OAAO,CAAC,WAAW;IAcnB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;CAS1C"}

package/dist/fanout/client-conn.js

@@ -0,0 +1,53 @@
+import { randomUUID } from 'node:crypto';
+import { encodeFrame } from '../protocol/frames.js';
+import { GATEWAY_CLOSE_CODES } from '../protocol/errors.js';
+export class ClientConn {
+    maxPendingFrames;
+    id = randomUUID();
+    socket;
+    subscriptions = new Set();
+    sessionSubscriptions = new Set();
+    connectedAt = Date.now();
+    tokenId;
+    authenticated = false;
+    pendingFrames = 0;
+    constructor(socket, maxPendingFrames, tokenRecord) {
+        this.maxPendingFrames = maxPendingFrames;
+        this.socket = socket;
+        this.tokenId = tokenRecord?.id ?? null;
+        this.authenticated = tokenRecord != null;
+    }
+    authenticate(record) {
+        this.tokenId = record.id;
+        this.authenticated = true;
+    }
+    send(frame) {
+        this.sendEncoded(encodeFrame(frame));
+    }
+    sendJson(payload) {
+        this.sendEncoded(JSON.stringify(payload));
+    }
+    sendEncoded(payload) {
+        if (this.socket.readyState !== this.socket.OPEN) {
+            return;
+        }
+        this.pendingFrames += 1;
+        if (this.pendingFrames > this.maxPendingFrames) {
+            this.socket.close(GATEWAY_CLOSE_CODES.backpressure, 'backpressure');
+            return;
+        }
+        this.socket.send(payload, () => {
+            this.pendingFrames = Math.max(0, this.pendingFrames - 1);
+        });
+    }
+    close(code, reason) {
+        if (this.socket.readyState === this.socket.CLOSED) {
+            return;
+        }
+        const normalizedReason = Buffer.from(reason, 'utf8').byteLength <= 123
+            ? reason
+            : `${reason.slice(0, 120)}...`;
+        this.socket.close(code, normalizedReason);
+    }
+}
+//# sourceMappingURL=client-conn.js.map

package/dist/fanout/client-conn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-conn.js","sourceRoot":"","sources":["../../src/fanout/client-conn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,OAAO,UAAU;IAaF;IAZV,EAAE,GAAG,UAAU,EAAE,CAAC;IAClB,MAAM,CAAY;IAClB,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,OAAO,CAAgB;IACvB,aAAa,GAAG,KAAK,CAAC;IAEd,aAAa,GAAG,CAAC,CAAC;IAE1B,YACE,MAAiB,EACA,gBAAwB,EACzC,WAAgC;QADf,qBAAgB,GAAhB,gBAAgB,CAAQ;QAGzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,EAAE,IAAI,IAAI,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,WAAW,IAAI,IAAI,CAAC;IAC3C,CAAC;IAED,YAAY,CAAC,MAAmB;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,KAAmB;QACtB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ,CAAC,OAAgC;QACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,MAAc;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAClD,OAAO;QACT,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,UAAU,IAAI,GAAG;YACpE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/fanout/subscriber.d.ts

@@ -0,0 +1,13 @@
+import type { ClientConn } from './client-conn.js';
+import type { LoggedRunEvent } from '../runs/event-log.js';
+export declare class RunSubscriber {
+    readonly conn: ClientConn;
+    readonly runId: string;
+    private readonly queuedLiveEvents;
+    private catchUpTailSeq;
+    constructor(conn: ClientConn, runId: string, catchUpTailSeq: number);
+    replay(events: readonly LoggedRunEvent[]): void;
+    sendLive(event: LoggedRunEvent): void;
+    finishCatchUp(): void;
+}
+//# sourceMappingURL=subscriber.d.ts.map

package/dist/fanout/subscriber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriber.d.ts","sourceRoot":"","sources":["../../src/fanout/subscriber.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAY3D,qBAAa,aAAa;IAKtB,QAAQ,CAAC,IAAI,EAAE,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM;IALxB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAwB;IACzD,OAAO,CAAC,cAAc,CAAgB;gBAG3B,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM;IAKxB,MAAM,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI;IAM/C,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAQrC,aAAa,IAAI,IAAI;CAOtB"}