@action-llama/action-llama 0.17.7 → 0.18.1

package/dist/chat/types.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Chat protocol types for bidirectional real-time agent communication.
+ *
+ * Used by both browser WebSocket connections and container-side chat entries.
+ */
+export interface UserMessage {
+    type: "user_message";
+    text: string;
+}
+export interface CancelMessage {
+    type: "cancel";
+}
+export interface ShutdownMessage {
+    type: "shutdown";
+}
+export type ChatInbound = UserMessage | CancelMessage | ShutdownMessage;
+export interface AssistantMessage {
+    type: "assistant_message";
+    text: string;
+    done: boolean;
+}
+export interface ToolStart {
+    type: "tool_start";
+    toolCallId: string;
+    tool: string;
+    input: string;
+}
+export interface ToolResult {
+    type: "tool_result";
+    toolCallId: string;
+    tool: string;
+    output: string;
+    error?: boolean;
+}
+export interface ChatError {
+    type: "error";
+    message: string;
+}
+export interface Heartbeat {
+    type: "heartbeat";
+}
+export type ChatOutbound = AssistantMessage | ToolStart | ToolResult | ChatError | Heartbeat;
+export interface ChatSession {
+    sessionId: string;
+    agentName: string;
+    containerName?: string;
+    createdAt: Date;
+    lastActivityAt: Date;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/chat/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/chat/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,eAAe,CAAC;AAIxE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,SAAS,GACT,UAAU,GACV,SAAS,GACT,SAAS,CAAC;AAId,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,IAAI,CAAC;CACtB"}

package/dist/chat/types.js

@@ -0,0 +1,7 @@
+/**
+ * Chat protocol types for bidirectional real-time agent communication.
+ *
+ * Used by both browser WebSocket connections and container-side chat entries.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/chat/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/chat/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/chat/validation.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Message validation and rate limiting for the chat protocol.
+ */
+export interface ValidationResult {
+    valid: boolean;
+    error?: string;
+}
+/**
+ * Validate an inbound chat message.
+ */
+export declare function validateInbound(raw: string): ValidationResult;
+/**
+ * Validate an outbound chat message.
+ */
+export declare function validateOutbound(raw: string): ValidationResult;
+/**
+ * Token bucket rate limiter for chat messages.
+ */
+export declare class RateLimiter {
+    private tokens;
+    private lastRefill;
+    private readonly maxTokens;
+    private readonly refillRate;
+    constructor(maxTokens?: number, refillRatePerSecond?: number);
+    /**
+     * Try to consume a token. Returns true if allowed, false if rate-limited.
+     */
+    consume(): boolean;
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/chat/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/chat/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAuB7D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAiB9D;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,SAAS,SAAK,EAAE,mBAAmB,SAAK;IAOpD;;OAEG;IACH,OAAO,IAAI,OAAO;CAYnB"}

package/dist/chat/validation.js

@@ -0,0 +1,79 @@
+/**
+ * Message validation and rate limiting for the chat protocol.
+ */
+const MAX_MESSAGE_SIZE = 64 * 1024; // 64KB
+const INBOUND_TYPES = new Set(["user_message", "cancel", "shutdown"]);
+const OUTBOUND_TYPES = new Set(["assistant_message", "tool_start", "tool_result", "error", "heartbeat"]);
+/**
+ * Validate an inbound chat message.
+ */
+export function validateInbound(raw) {
+    if (raw.length > MAX_MESSAGE_SIZE) {
+        return { valid: false, error: `Message exceeds ${MAX_MESSAGE_SIZE} byte limit` };
+    }
+    let msg;
+    try {
+        msg = JSON.parse(raw);
+    }
+    catch {
+        return { valid: false, error: "Invalid JSON" };
+    }
+    if (!msg || typeof msg !== "object" || !INBOUND_TYPES.has(msg.type)) {
+        return { valid: false, error: `Invalid message type: ${msg?.type}` };
+    }
+    if (msg.type === "user_message") {
+        if (typeof msg.text !== "string" || msg.text.length === 0) {
+            return { valid: false, error: "user_message requires non-empty text" };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Validate an outbound chat message.
+ */
+export function validateOutbound(raw) {
+    if (raw.length > MAX_MESSAGE_SIZE) {
+        return { valid: false, error: `Message exceeds ${MAX_MESSAGE_SIZE} byte limit` };
+    }
+    let msg;
+    try {
+        msg = JSON.parse(raw);
+    }
+    catch {
+        return { valid: false, error: "Invalid JSON" };
+    }
+    if (!msg || typeof msg !== "object" || !OUTBOUND_TYPES.has(msg.type)) {
+        return { valid: false, error: `Invalid message type: ${msg?.type}` };
+    }
+    return { valid: true };
+}
+/**
+ * Token bucket rate limiter for chat messages.
+ */
+export class RateLimiter {
+    tokens;
+    lastRefill;
+    maxTokens;
+    refillRate;
+    constructor(maxTokens = 10, refillRatePerSecond = 10) {
+        this.maxTokens = maxTokens;
+        this.tokens = maxTokens;
+        this.refillRate = refillRatePerSecond;
+        this.lastRefill = Date.now();
+    }
+    /**
+     * Try to consume a token. Returns true if allowed, false if rate-limited.
+     */
+    consume() {
+        const now = Date.now();
+        const elapsed = (now - this.lastRefill) / 1000;
+        this.tokens = Math.min(this.maxTokens, this.tokens + elapsed * this.refillRate);
+        this.lastRefill = now;
+        if (this.tokens >= 1) {
+            this.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/chat/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/chat/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;AAE3C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AACtE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAOzG;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,GAAG,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,gBAAgB,aAAa,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,GAAgB,CAAC;IACrB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAA0B,GAAW,EAAE,IAAI,EAAE,EAAE,CAAC;IAChF,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,gBAAgB,aAAa,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAA0B,GAAW,EAAE,IAAI,EAAE,EAAE,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,WAAW;IACd,MAAM,CAAS;IACf,UAAU,CAAS;IACV,SAAS,CAAS;IAClB,UAAU,CAAS;IAEpC,YAAY,SAAS,GAAG,EAAE,EAAE,mBAAmB,GAAG,EAAE;QAClD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAChF,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QAEtB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/chat/ws-handler.d.ts

@@ -0,0 +1,31 @@
+/**
+ * WebSocket handler for chat — bridges browser ↔ container per session.
+ *
+ * Two WS paths:
+ *   /chat/ws/:sessionId      — browser connects here (auth via header/cookie)
+ *   /chat/container/:sessionId — container connects here (auth via first-message token)
+ */
+import type { Server } from "http";
+import { WebSocket } from "ws";
+import type { ChatSessionManager } from "./session-manager.js";
+import { RateLimiter } from "./validation.js";
+import type { SessionStore } from "../control/session-store.js";
+import type { Logger } from "../shared/logger.js";
+interface BrowserConnection {
+    ws: WebSocket;
+    rateLimiter: RateLimiter;
+}
+interface ContainerConnection {
+    ws: WebSocket;
+    authenticated: boolean;
+}
+export interface ChatWebSocketState {
+    browserConnections: Map<string, BrowserConnection>;
+    containerConnections: Map<string, ContainerConnection>;
+    cleanupInterval: ReturnType<typeof setInterval>;
+    /** Callback to stop a chat container by session. */
+    stopContainer?: (sessionId: string) => Promise<void>;
+}
+export declare function attachChatWebSocket(server: Server, sessionManager: ChatSessionManager, apiKey: string, sessionStore?: SessionStore, logger?: Logger): ChatWebSocketState;
+export {};
+//# sourceMappingURL=ws-handler.d.ts.map

package/dist/chat/ws-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-handler.d.ts","sourceRoot":"","sources":["../../src/chat/ws-handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,EAAmB,SAAS,EAAgB,MAAM,IAAI,CAAC;AAE9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAqC,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,UAAU,iBAAiB;IACzB,EAAE,EAAE,SAAS,CAAC;IACd,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,UAAU,mBAAmB;IAC3B,EAAE,EAAE,SAAS,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACnD,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACvD,eAAe,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAChD,oDAAoD;IACpD,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,kBAAkB,EAClC,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,YAAY,EAC3B,MAAM,CAAC,EAAE,MAAM,GACd,kBAAkB,CA2OpB"}

package/dist/chat/ws-handler.js

@@ -0,0 +1,247 @@
+/**
+ * WebSocket handler for chat — bridges browser ↔ container per session.
+ *
+ * Two WS paths:
+ *   /chat/ws/:sessionId      — browser connects here (auth via header/cookie)
+ *   /chat/container/:sessionId — container connects here (auth via first-message token)
+ */
+import { WebSocketServer, WebSocket } from "ws";
+import { safeCompare } from "../control/auth.js";
+import { validateInbound, validateOutbound, RateLimiter } from "./validation.js";
+export function attachChatWebSocket(server, sessionManager, apiKey, sessionStore, logger) {
+    const browserConnections = new Map();
+    const containerConnections = new Map();
+    // Browser-facing WS server
+    const browserWss = new WebSocketServer({ noServer: true });
+    // Container-facing WS server
+    const containerWss = new WebSocketServer({ noServer: true });
+    // Disconnection grace periods: track when browser disconnected
+    const browserDisconnectTimers = new Map();
+    server.on("upgrade", async (req, socket, head) => {
+        const url = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+        const pathname = url.pathname;
+        // Browser path: /chat/ws/:sessionId
+        const browserMatch = pathname.match(/^\/chat\/ws\/([^/]+)$/);
+        if (browserMatch) {
+            const sessionId = browserMatch[1];
+            const session = sessionManager.getSession(sessionId);
+            if (!session) {
+                socket.write("HTTP/1.1 404 Not Found\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+            // Authenticate via Authorization header or cookie
+            const authenticated = await authenticateBrowser(req, apiKey, sessionStore);
+            if (!authenticated) {
+                socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+            browserWss.handleUpgrade(req, socket, head, (ws) => {
+                handleBrowserConnection(ws, sessionId);
+            });
+            return;
+        }
+        // Container path: /chat/container/:sessionId
+        const containerMatch = pathname.match(/^\/chat\/container\/([^/]+)$/);
+        if (containerMatch) {
+            const sessionId = containerMatch[1];
+            const session = sessionManager.getSession(sessionId);
+            if (!session) {
+                socket.write("HTTP/1.1 404 Not Found\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+            containerWss.handleUpgrade(req, socket, head, (ws) => {
+                handleContainerConnection(ws, sessionId);
+            });
+            return;
+        }
+        // Not a chat path — let other upgrade handlers deal with it
+    });
+    function handleBrowserConnection(ws, sessionId) {
+        logger?.debug({ sessionId }, "browser WebSocket connected");
+        // Clear any grace-period timer from a prior disconnect
+        const timer = browserDisconnectTimers.get(sessionId);
+        if (timer) {
+            clearTimeout(timer);
+            browserDisconnectTimers.delete(sessionId);
+        }
+        const conn = { ws, rateLimiter: new RateLimiter() };
+        browserConnections.set(sessionId, conn);
+        ws.on("message", (data) => {
+            const raw = data.toString();
+            sessionManager.touchSession(sessionId);
+            if (!conn.rateLimiter.consume()) {
+                ws.send(JSON.stringify({ type: "error", message: "Rate limited" }));
+                return;
+            }
+            const validation = validateInbound(raw);
+            if (!validation.valid) {
+                ws.send(JSON.stringify({ type: "error", message: validation.error }));
+                return;
+            }
+            // Forward to container
+            const containerConn = containerConnections.get(sessionId);
+            if (containerConn?.authenticated && containerConn.ws.readyState === WebSocket.OPEN) {
+                containerConn.ws.send(raw);
+            }
+            else {
+                ws.send(JSON.stringify({ type: "error", message: "Agent container not connected" }));
+            }
+        });
+        ws.on("close", () => {
+            logger?.debug({ sessionId }, "browser WebSocket disconnected");
+            browserConnections.delete(sessionId);
+            // Grace period: wait 60s before shutting down the container
+            const gracePeriod = setTimeout(() => {
+                browserDisconnectTimers.delete(sessionId);
+                logger?.info({ sessionId }, "browser grace period expired, shutting down container");
+                shutdownSession(sessionId);
+            }, 60_000);
+            browserDisconnectTimers.set(sessionId, gracePeriod);
+        });
+        ws.on("error", (err) => {
+            logger?.warn({ sessionId, err: err.message }, "browser WebSocket error");
+        });
+    }
+    function handleContainerConnection(ws, sessionId) {
+        logger?.debug({ sessionId }, "container WebSocket connected");
+        const conn = { ws, authenticated: false };
+        containerConnections.set(sessionId, conn);
+        // Container must authenticate with session token in first message within 5s
+        const authTimeout = setTimeout(() => {
+            if (!conn.authenticated) {
+                logger?.warn({ sessionId }, "container auth timeout");
+                ws.close(4001, "Auth timeout");
+                containerConnections.delete(sessionId);
+            }
+        }, 5000);
+        ws.on("message", (data) => {
+            const raw = data.toString();
+            // First message must be auth token
+            if (!conn.authenticated) {
+                try {
+                    const msg = JSON.parse(raw);
+                    if (msg.type === "auth" && typeof msg.token === "string") {
+                        const session = sessionManager.getSession(sessionId);
+                        if (session && safeCompare(msg.token, sessionId)) {
+                            conn.authenticated = true;
+                            clearTimeout(authTimeout);
+                            ws.send(JSON.stringify({ type: "auth_ok" }));
+                            logger?.info({ sessionId }, "container authenticated");
+                            return;
+                        }
+                    }
+                }
+                catch { /* invalid JSON */ }
+                ws.close(4003, "Auth failed");
+                containerConnections.delete(sessionId);
+                clearTimeout(authTimeout);
+                return;
+            }
+            sessionManager.touchSession(sessionId);
+            // Validate outbound message from container
+            const validation = validateOutbound(raw);
+            if (!validation.valid) {
+                logger?.warn({ sessionId, error: validation.error }, "invalid outbound from container");
+                return;
+            }
+            // Forward to browser
+            const browserConn = browserConnections.get(sessionId);
+            if (browserConn && browserConn.ws.readyState === WebSocket.OPEN) {
+                browserConn.ws.send(raw);
+            }
+        });
+        ws.on("close", () => {
+            logger?.debug({ sessionId }, "container WebSocket disconnected");
+            containerConnections.delete(sessionId);
+            // Notify browser
+            const browserConn = browserConnections.get(sessionId);
+            if (browserConn && browserConn.ws.readyState === WebSocket.OPEN) {
+                browserConn.ws.send(JSON.stringify({ type: "error", message: "Agent container disconnected" }));
+            }
+            sessionManager.removeSession(sessionId);
+        });
+        ws.on("error", (err) => {
+            logger?.warn({ sessionId, err: err.message }, "container WebSocket error");
+        });
+    }
+    async function shutdownSession(sessionId) {
+        // Send shutdown to container
+        const containerConn = containerConnections.get(sessionId);
+        if (containerConn?.authenticated && containerConn.ws.readyState === WebSocket.OPEN) {
+            containerConn.ws.send(JSON.stringify({ type: "shutdown" }));
+            containerConn.ws.close();
+        }
+        containerConnections.delete(sessionId);
+        // Close browser connection
+        const browserConn = browserConnections.get(sessionId);
+        if (browserConn && browserConn.ws.readyState === WebSocket.OPEN) {
+            browserConn.ws.close();
+        }
+        browserConnections.delete(sessionId);
+        // Stop container via callback
+        if (state.stopContainer) {
+            try {
+                await state.stopContainer(sessionId);
+            }
+            catch (err) {
+                logger?.warn({ sessionId, err: err.message }, "failed to stop chat container");
+            }
+        }
+        sessionManager.removeSession(sessionId);
+    }
+    // Idle session cleanup interval (Phase 8)
+    const IDLE_TIMEOUT_MS = 15 * 60 * 1000; // 15 minutes
+    const cleanupInterval = setInterval(() => {
+        const idle = sessionManager.getIdleSessions(IDLE_TIMEOUT_MS);
+        for (const session of idle) {
+            logger?.info({ sessionId: session.sessionId, agentName: session.agentName }, "cleaning up idle chat session");
+            shutdownSession(session.sessionId);
+        }
+    }, 60_000);
+    cleanupInterval.unref();
+    const state = {
+        browserConnections,
+        containerConnections,
+        cleanupInterval,
+    };
+    return state;
+}
+// --- Auth helpers ---
+async function authenticateBrowser(req, apiKey, sessionStore) {
+    // Check Authorization header
+    const authHeader = req.headers.authorization;
+    if (authHeader?.startsWith("Bearer ")) {
+        const token = authHeader.slice(7);
+        if (safeCompare(token, apiKey))
+            return true;
+    }
+    // Check al_session cookie
+    const cookieHeader = req.headers.cookie || "";
+    const sessionToken = parseCookie(cookieHeader)["al_session"];
+    if (sessionToken) {
+        if (sessionStore) {
+            const session = await sessionStore.getSession(sessionToken);
+            if (session)
+                return true;
+        }
+        else {
+            if (safeCompare(sessionToken, apiKey))
+                return true;
+        }
+    }
+    return false;
+}
+function parseCookie(header) {
+    const result = {};
+    for (const part of header.split(";")) {
+        const eq = part.indexOf("=");
+        if (eq === -1)
+            continue;
+        result[part.slice(0, eq).trim()] = part.slice(eq + 1).trim();
+    }
+    return result;
+}
+//# sourceMappingURL=ws-handler.js.map

package/dist/chat/ws-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-handler.js","sourceRoot":"","sources":["../../src/chat/ws-handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAgB,MAAM,IAAI,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAsBjF,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,cAAkC,EAClC,MAAc,EACd,YAA2B,EAC3B,MAAe;IAEf,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEpE,2BAA2B;IAC3B,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,6BAA6B;IAC7B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7D,+DAA+D;IAC/D,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEjF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE9B,oCAAoC;QACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,kDAAkD;YAClD,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAC3E,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAClD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;gBACjD,uBAAuB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,6CAA6C;QAC7C,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;gBACnD,yBAAyB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,4DAA4D;IAC9D,CAAC,CAAC,CAAC;IAEH,SAAS,uBAAuB,CAAC,EAAa,EAAE,SAAiB;QAC/D,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAE5D,uDAAuD;QACvD,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAsB,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,WAAW,EAAE,EAAE,CAAC;QACvE,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAExC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,cAAc,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAEvC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,aAAa,EAAE,aAAa,IAAI,aAAa,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACnF,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC/D,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAErC,4DAA4D;YAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;gBAClC,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,uDAAuD,CAAC,CAAC;gBACrF,eAAe,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,uBAAuB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,yBAAyB,CAAC,EAAa,EAAE,SAAiB;QACjE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAwB,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC/D,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAE1C,4EAA4E;QAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxB,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBACtD,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC/B,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QAET,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE5B,mCAAmC;YACnC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACzD,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;wBACrD,IAAI,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;4BACjD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;4BAC1B,YAAY,CAAC,WAAW,CAAC,CAAC;4BAC1B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;4BAC7C,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,yBAAyB,CAAC,CAAC;4BACvD,OAAO;wBACT,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC9B,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC9B,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,cAAc,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAEvC,2CAA2C;YAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE,iCAAiC,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBAChE,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,kCAAkC,CAAC,CAAC;YACjE,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAEvC,iBAAiB;YACjB,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBAChE,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;YAClG,CAAC;YAED,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,SAAiB;QAC9C,6BAA6B;QAC7B,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,aAAa,EAAE,aAAa,IAAI,aAAa,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACnF,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YAC5D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvC,2BAA2B;QAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAChE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QACD,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,8BAA8B;QAC9B,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,0CAA0C;IAC1C,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;IACrD,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,MAAM,IAAI,GAAG,cAAc,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC7D,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC9G,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,eAAe,CAAC,KAAK,EAAE,CAAC;IAExB,MAAM,KAAK,GAAuB;QAChC,kBAAkB;QAClB,oBAAoB;QACpB,eAAe;KAChB,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uBAAuB;AAEvB,KAAK,UAAU,mBAAmB,CAChC,GAAoB,EACpB,MAAc,EACd,YAA2B;IAE3B,6BAA6B;IAC7B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC5D,IAAI,OAAO;gBAAE,OAAO,IAAI,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli/commands/add.d.ts

@@ -0,0 +1,14 @@
+/**
+ * al add — install a skill from a git repository.
+ *
+ * 1. Fetch repo (shallow clone to temp dir)
+ * 2. Discover SKILL.md files (root or skills/star/)
+ * 3. If multiple and no --skill, prompt user to pick
+ * 4. Copy SKILL.md + config.toml into agents dir
+ * 5. Run al config for interactive gap-filling
+ */
+export declare function execute(repo: string, opts: {
+    skill?: string;
+    project: string;
+}): Promise<void>;
+//# sourceMappingURL=add.d.ts.map

package/dist/cli/commands/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/add.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmFH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAiHf"}