@agent-foundry/replay-server 1.0.0 → 1.0.1

package/dist/services/OSSClient.js

@@ -0,0 +1,207 @@
+/**
+ * OSS Client
+ *
+ * Handles authenticated downloads from Alibaba Cloud OSS using STS credentials
+ * obtained from the BFF API.
+ */
+import OSS from 'ali-oss';
+import * as fs from 'fs';
+import * as path from 'path';
+/**
+ * Error thrown by OSS client operations
+ */
+export class OSSClientError extends Error {
+    code;
+    statusCode;
+    constructor(message, code, statusCode) {
+        super(message);
+        this.code = code;
+        this.statusCode = statusCode;
+        this.name = 'OSSClientError';
+    }
+}
+/**
+ * OSS Client for downloading bundles with STS authentication
+ */
+export class OSSClient {
+    bffBaseUrl;
+    serviceToken;
+    timeout;
+    cachedCredentials = null;
+    credentialsExpiresAt = null;
+    constructor(config) {
+        this.bffBaseUrl = config.bffBaseUrl.replace(/\/$/, '');
+        this.serviceToken = config.serviceToken;
+        this.timeout = config.timeout ?? 30000;
+    }
+    /**
+     * Get STS credentials from BFF API
+     * Caches credentials until they expire (with 5 minute buffer)
+     *
+     * Uses the /studio/service/sts endpoint which requires BFF_SERVICE_TOKEN
+     * (set to SUPABASE_JWT_SECRET) for service-to-service authentication.
+     */
+    async getSTSCredentials() {
+        // Check if cached credentials are still valid (with 5 minute buffer)
+        if (this.cachedCredentials && this.credentialsExpiresAt) {
+            const bufferMs = 5 * 60 * 1000; // 5 minutes
+            if (new Date().getTime() + bufferMs < this.credentialsExpiresAt.getTime()) {
+                return this.cachedCredentials;
+            }
+        }
+        if (!this.serviceToken) {
+            throw new OSSClientError('BFF_SERVICE_TOKEN is required for STS credentials. Set it to the value of SUPABASE_JWT_SECRET from BFF.', 'SERVICE_TOKEN_MISSING');
+        }
+        console.log('[OSSClient] Requesting STS credentials from BFF...');
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        try {
+            const headers = {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${this.serviceToken}`,
+            };
+            // Use the service-to-service endpoint
+            const response = await fetch(`${this.bffBaseUrl}/studio/service/sts`, {
+                method: 'POST',
+                headers,
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            if (!response.ok) {
+                let detail = response.statusText;
+                try {
+                    const error = await response.json();
+                    detail = error.detail || error.message || response.statusText;
+                }
+                catch {
+                    // Ignore JSON parse error
+                }
+                throw new OSSClientError(`Failed to get STS credentials: ${detail}`, 'STS_REQUEST_FAILED', response.status);
+            }
+            const data = await response.json();
+            // Extract credentials from response
+            // BFF /studio/service/sts returns: { credentials: { accessKeyId, ... }, bucket, region }
+            const creds = data.credentials || data;
+            const credentials = {
+                accessKeyId: creds.accessKeyId || creds.access_key_id,
+                accessKeySecret: creds.accessKeySecret || creds.access_key_secret,
+                securityToken: creds.securityToken || creds.security_token,
+                expiration: creds.expiration,
+                bucket: data.bucket,
+                region: data.region,
+            };
+            // Validate credentials
+            if (!credentials.accessKeyId || !credentials.accessKeySecret || !credentials.securityToken) {
+                throw new OSSClientError('Invalid STS credentials response from BFF', 'INVALID_STS_RESPONSE');
+            }
+            // Validate bucket and region
+            if (!credentials.bucket || !credentials.region) {
+                throw new OSSClientError('Invalid STS credentials response from BFF: missing bucket or region', 'INVALID_STS_RESPONSE');
+            }
+            // Cache credentials
+            this.cachedCredentials = credentials;
+            this.credentialsExpiresAt = new Date(credentials.expiration);
+            console.log('[OSSClient] STS credentials obtained, expires:', credentials.expiration);
+            return credentials;
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            if (error instanceof OSSClientError) {
+                throw error;
+            }
+            if (error instanceof Error && error.name === 'AbortError') {
+                throw new OSSClientError('STS credentials request timeout', 'STS_TIMEOUT', 408);
+            }
+            throw new OSSClientError(`Failed to get STS credentials: ${error instanceof Error ? error.message : String(error)}`, 'STS_REQUEST_ERROR');
+        }
+    }
+    /**
+     * Download file from OSS URL with STS authentication
+     *
+     * @param url - OSS URL to download from
+     * @param destPath - Local destination path
+     * @param onProgress - Optional progress callback (0-100)
+     */
+    async downloadFile(url, destPath, onProgress) {
+        console.log(`[OSSClient] Downloading ${url} to ${destPath}`);
+        // Get STS credentials
+        const credentials = await this.getSTSCredentials();
+        if (!credentials.bucket || !credentials.region) {
+            throw new OSSClientError('Missing bucket or region in STS credentials', 'INVALID_CREDENTIALS');
+        }
+        // Parse URL to extract object key
+        // URL format: https://bucket.oss-region.aliyuncs.com/path/to/object
+        // or: https://oss-region.aliyuncs.com/bucket/path/to/object
+        const parsedUrl = new URL(url);
+        let objectKey = parsedUrl.pathname.slice(1); // Remove leading /
+        // Handle case where bucket is in the path (not subdomain)
+        if (parsedUrl.hostname.includes('aliyuncs.com') && !parsedUrl.hostname.startsWith(credentials.bucket)) {
+            // Format: https://oss-region.aliyuncs.com/bucket/path/to/object
+            const pathParts = objectKey.split('/');
+            if (pathParts[0] === credentials.bucket) {
+                objectKey = pathParts.slice(1).join('/');
+            }
+        }
+        console.log(`[OSSClient] Extracted object key: ${objectKey}`);
+        try {
+            // Create OSS client with STS credentials
+            const client = new OSS({
+                accessKeyId: credentials.accessKeyId,
+                accessKeySecret: credentials.accessKeySecret,
+                stsToken: credentials.securityToken,
+                bucket: credentials.bucket,
+                region: credentials.region,
+                timeout: 10 * 60 * 1000, // 10 minutes
+            });
+            // Ensure destination directory exists
+            const destDir = path.dirname(destPath);
+            fs.mkdirSync(destDir, { recursive: true });
+            // Download file
+            // Note: ali-oss client.get() for Node.js doesn't support progress callbacks
+            // Progress tracking would require streaming the response manually
+            const result = await client.get(objectKey, destPath, {
+                timeout: 10 * 60 * 1000,
+            });
+            if (onProgress) {
+                onProgress(100);
+            }
+            console.log(`[OSSClient] Download complete: ${destPath}`);
+        }
+        catch (error) {
+            // Clean up partial download
+            if (fs.existsSync(destPath)) {
+                try {
+                    fs.unlinkSync(destPath);
+                }
+                catch {
+                    // Ignore cleanup error
+                }
+            }
+            // Handle OSS SDK errors
+            if (error.code === 'ConnectionTimeoutError' || error.code === 'RequestTimeout') {
+                throw new OSSClientError('Download timeout', 'DOWNLOAD_TIMEOUT', 408);
+            }
+            if (error.status === 403 || error.code === 'AccessDenied') {
+                throw new OSSClientError('Access denied - check STS credentials and permissions', 'DOWNLOAD_FORBIDDEN', 403);
+            }
+            if (error.status === 404 || error.code === 'NoSuchKey') {
+                throw new OSSClientError(`Object not found: ${objectKey}`, 'OBJECT_NOT_FOUND', 404);
+            }
+            throw new OSSClientError(`Download failed: ${error.message || String(error)}`, 'DOWNLOAD_ERROR', error.status);
+        }
+    }
+    /**
+     * Clear cached credentials
+     */
+    clearCredentialsCache() {
+        this.cachedCredentials = null;
+        this.credentialsExpiresAt = null;
+    }
+}
+/**
+ * Create an OSS client instance
+ */
+export function createOSSClient(config) {
+    return new OSSClient(config);
+}
+//# sourceMappingURL=OSSClient.js.map

package/dist/services/OSSClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OSSClient.js","sourceRoot":"","sources":["../../src/services/OSSClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,GAAG,MAAM,SAAS,CAAC;AAC1B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGjB;IACA;IAHpB,YACI,OAAe,EACC,IAAY,EACZ,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IACjC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,OAAO,SAAS;IACD,UAAU,CAAS;IACnB,YAAY,CAAU;IACtB,OAAO,CAAS;IAEzB,iBAAiB,GAA0B,IAAI,CAAC;IAChD,oBAAoB,GAAgB,IAAI,CAAC;IAEjD,YAAY,MAAuB;QAC/B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB;QACnB,qEAAqE;QACrE,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;YAC5C,IAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAClC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,cAAc,CACpB,yGAAyG,EACzG,uBAAuB,CAC1B,CAAC;QACN,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAElE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACD,MAAM,OAAO,GAA2B;gBACpC,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE;aACjD,CAAC;YAEF,sCAAsC;YACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,qBAAqB,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;gBACjC,IAAI,CAAC;oBACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACpC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACL,0BAA0B;gBAC9B,CAAC;gBACD,MAAM,IAAI,cAAc,CACpB,kCAAkC,MAAM,EAAE,EAC1C,oBAAoB,EACpB,QAAQ,CAAC,MAAM,CAClB,CAAC;YACN,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,oCAAoC;YACpC,yFAAyF;YACzF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;YACvC,MAAM,WAAW,GAAmB;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa;gBACrD,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,iBAAiB;gBACjE,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,cAAc;gBAC1D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;aACtB,CAAC;YAEF,uBAAuB;YACvB,IAAI,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,eAAe,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;gBACzF,MAAM,IAAI,cAAc,CACpB,2CAA2C,EAC3C,sBAAsB,CACzB,CAAC;YACN,CAAC;YAED,6BAA6B;YAC7B,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC7C,MAAM,IAAI,cAAc,CACpB,qEAAqE,EACrE,sBAAsB,CACzB,CAAC;YACN,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACrC,IAAI,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAE7D,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;YAEtF,OAAO,WAAW,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACxD,MAAM,IAAI,cAAc,CACpB,iCAAiC,EACjC,aAAa,EACb,GAAG,CACN,CAAC;YACN,CAAC;YAED,MAAM,IAAI,cAAc,CACpB,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC1F,mBAAmB,CACtB,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CACd,GAAW,EACX,QAAgB,EAChB,UAAsC;QAEtC,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,OAAO,QAAQ,EAAE,CAAC,CAAC;QAE7D,sBAAsB;QACtB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEnD,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,cAAc,CACpB,6CAA6C,EAC7C,qBAAqB,CACxB,CAAC;QACN,CAAC;QAED,kCAAkC;QAClC,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;QAEhE,0DAA0D;QAC1D,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACpG,gEAAgE;YAChE,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBACtC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC;YACD,yCAAyC;YACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;gBACnB,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,eAAe,EAAE,WAAW,CAAC,eAAe;gBAC5C,QAAQ,EAAE,WAAW,CAAC,aAAa;gBACnC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;aACzC,CAAC,CAAC;YAEH,sCAAsC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE3C,gBAAgB;YAChB,4EAA4E;YAC5E,kEAAkE;YAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE;gBACjD,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;aAC1B,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,4BAA4B;YAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACL,uBAAuB;gBAC3B,CAAC;YACL,CAAC;YAED,wBAAwB;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC7E,MAAM,IAAI,cAAc,CACpB,kBAAkB,EAClB,kBAAkB,EAClB,GAAG,CACN,CAAC;YACN,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxD,MAAM,IAAI,cAAc,CACpB,uDAAuD,EACvD,oBAAoB,EACpB,GAAG,CACN,CAAC;YACN,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACrD,MAAM,IAAI,cAAc,CACpB,qBAAqB,SAAS,EAAE,EAChC,kBAAkB,EAClB,GAAG,CACN,CAAC;YACN,CAAC;YAED,MAAM,IAAI,cAAc,CACpB,oBAAoB,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EACpD,gBAAgB,EAChB,KAAK,CAAC,MAAM,CACf,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACjB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACrC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACnD,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/dist/services/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Services exports
+ */
+export * from './types.js';
+export * from './OSSClient.js';
+export * from './BundleManager.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/services/index.js

@@ -0,0 +1,7 @@
+/**
+ * Services exports
+ */
+export * from './types.js';
+export * from './OSSClient.js';
+export * from './BundleManager.js';
+//# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/services/types.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Shared types for replay-server services
+ */
+/**
+ * STS credentials from BFF API for OSS access
+ */
+export interface STSCredentials {
+    accessKeyId: string;
+    accessKeySecret: string;
+    securityToken: string;
+    expiration: string;
+    bucket?: string;
+    region?: string;
+}
+/**
+ * OSS client configuration
+ */
+export interface OSSClientConfig {
+    /** BFF API base URL for STS credentials */
+    bffBaseUrl: string;
+    /** Optional service-to-service auth token */
+    serviceToken?: string;
+    /** Request timeout in milliseconds (default: 30000) */
+    timeout?: number;
+}
+/**
+ * Bundle information
+ */
+export interface BundleInfo {
+    bundleId: string;
+    bundleUrl?: string;
+    status: 'pending' | 'downloading' | 'ready' | 'error';
+    size?: number;
+    cachedAt?: Date;
+    lastAccessedAt?: Date;
+    error?: string;
+    /** Download progress percentage (0-100) */
+    progress?: number;
+}
+/**
+ * Bundle manager configuration
+ */
+export interface BundleManagerConfig {
+    /** Directory to store bundles (default: /tmp/bundles) */
+    bundlesDir: string;
+    /** Maximum cache size in bytes (default: 10GB) */
+    maxCacheSize: number;
+}
+/**
+ * Cache statistics
+ */
+export interface CacheStats {
+    /** Used cache size in bytes */
+    used: number;
+    /** Maximum cache size in bytes */
+    max: number;
+    /** Usage percentage (0-100) */
+    usedPercent: number;
+    /** Number of cached bundles */
+    bundleCount: number;
+}
+/**
+ * Download statistics
+ */
+export interface DownloadStats {
+    /** Number of active downloads */
+    active: number;
+    /** Total completed downloads */
+    completed: number;
+    /** Total failed downloads */
+    failed: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/services/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/services/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;CAClB"}

package/dist/services/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types for replay-server services
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/services/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/services/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/docker-compose.local.yml

@@ -13,6 +13,8 @@ version: '3.8'
 
 services:
   replay-server:
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
     build:
       context: ../..
       dockerfile: packages/replay-server/Dockerfile
@@ -22,6 +24,12 @@ services:
       - PORT=3001
       - BUNDLES_DIR=/app/packages/replay-server/bundles
       - OUTPUT_DIR=/app/packages/replay-server/output
+      # BFF API URL for STS credentials (required for dynamic bundle downloads)
+      - BFF_BASE_URL=http://host.docker.internal:11001
+      # Service-to-service auth token for BFF
+      - BFF_SERVICE_TOKEN=ijwt8jbx3Kkf2XDE8bR3AViGJchA5VppbOwpBFTF
+      # Maximum cache size in bytes (default: 10GB)
+      - MAX_CACHE_SIZE=10737418240
     volumes:
       # Mount output directory for easy access to rendered videos
       - ./output:/app/packages/replay-server/output

package/env.example

@@ -0,0 +1,30 @@
+# Replay Server Environment Variables
+
+# Server port
+PORT=3001
+
+# Default game URL (fallback when no bundleId specified)
+GAME_URL=http://localhost:5173
+
+# Directory containing game bundles
+BUNDLES_DIR=./bundles
+
+# Directory for rendered video output
+OUTPUT_DIR=./output
+
+# Puppeteer executable path (for containerized environments)
+PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
+
+# =============================================================================
+# Bundle Download Configuration
+# =============================================================================
+
+# BFF API URL for STS credentials (required for dynamic bundle downloads)
+BFF_BASE_URL=http://localhost:11001
+
+# Service-to-service auth token for BFF (REQUIRED for bundle downloads)
+# Set this to the value of SUPABASE_JWT_SECRET from BFF's .env file
+# BFF_SERVICE_TOKEN=your-supabase-jwt-secret-from-bff
+
+# Maximum bundle cache size in bytes (default: 10GB = 10737418240)
+MAX_CACHE_SIZE=10737418240

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@agent-foundry/replay-server",
-    "version": "1.0.0",
+    "version": "1.0.1",
     "description": "Video rendering service for AgentFoundry mini-game replays",
     "type": "module",
     "main": "./dist/index.js",
@@ -17,7 +17,9 @@
         "puppeteer": "^22.0.0",
         "fluent-ffmpeg": "^2.1.2",
         "cors": "^2.8.5",
-        "uuid": "^9.0.0"
+        "uuid": "^9.0.0",
+        "tar-stream": "^3.1.6",
+        "ali-oss": "^6.23.0"
     },
     "devDependencies": {
         "@types/express": "^4.17.21",
@@ -25,6 +27,8 @@
         "@types/cors": "^2.8.17",
         "@types/uuid": "^9.0.7",
         "@types/node": "^20.11.0",
+        "@types/tar-stream": "^3.1.3",
+        "@types/ali-oss": "^6.23.0",
         "typescript": "^5.3.3",
         "tsx": "^4.7.0",
         "rimraf": "^5.0.5"
@@ -32,4 +36,4 @@
     "publishConfig": {
         "access": "public"
     }
-}
+}

package/restart.sh

@@ -0,0 +1,5 @@
+docker compose -f docker-compose.local.yml down
+
+docker compose -f docker-compose.local.yml build
+
+docker compose -f docker-compose.local.yml up -d