@agentproto/runtime 3.6.1 → 4.0.0

package/README.md

@@ -66,16 +66,20 @@ The `/mcp` endpoint exposes the core toolset plus several opt-in / feature-gated
 | `session_list` / `session_tree` / `session_usage` / `session_restart` / `session_rename` | Session management |
 | `app_install` / `app_run` / `app_list` / `app_status` / `app_stop` / `app_apply` / `app_unapply` / `app_list_applied` | App-kit apps |
 | `app_data_read` / `app_data_write` / `app_data_list` / `app_data_migrate` | App-scoped durable data plane, anchored at the app's `dataDir` (default `<dir>/data`; `app_install {dataDir}`) |
-| `app_state_append` / `app_state_get` / `app_state_list` | App-scoped **state ledger** (`<dataDir>/state/events.jsonl`) — append-only, zod-validated event envelope, fold to a stage snapshot; see below |
+| `app_state_append` / `app_state_get` / `app_state_list` | App-scoped **state ledger** (`<stateDir>/events.jsonl`, under `~/.agentproto/app-state/`) — append-only, zod-validated event envelope, fold to a stage snapshot; see below |
 | `harness_preset_list` / `harness_preset_create` / `harness_preset_delete` / `harness_preset_set_default` | Persisted harness→auth-profile presets (new) |
+| `review_run` / `review_status` / `review_cancel` / `review_ledger` / `review_export` | [`@agentproto/review`](../review) host: run a REVIEW.md binding over a git range (command lanes as subprocesses, agent lanes as child reviewer sessions), fold a `pass`/`block`/`incomplete` verdict, and record the attestation in the review ledger (`~/.agentproto/reviews`) (new) |
 | `workspace_brain_query` / `workspace_brain_status` / `workspace_brain_ingest` | Per-workspace transcript recall (new) |
 | `conversation_export` | Export a daemon transcript to a target adapter's native store, e.g. `claude-code` (new) |
 | `llm_endpoint_*` (`start`, `stop`, `status`, `set_upstream_link`, `list_links`) | Local LLM Endpoint proxy sidecar — only when `features.llmEndpoint` is enabled (new) |
 
 ### App state ledger (`app_state_*`)
 
-Per installed app, an append-only JSONL event log lives at
-`<dataDir>/state/events.jsonl` (`src/app-state.ts`). One JSON object per
+Per installed app, an append-only JSONL event log lives in the daemon's own
+state dir, `~/.agentproto/app-state/<encoded appId>/events.jsonl`
+(`InstalledApp.stateDir`, `src/app-state.ts`) — never in the app's source
+tree. A ledger left at the old `<dataDir>/state/events.jsonl` is still read,
+and moved over on the next append. One JSON object per
 line: `{ id (ULID), ts, appRunId?, stage, item?, kind, by, payload }` with
 `kind ∈ stage-started | gate-report | approval | stage-done | blocked | note`
 and `by ∈ runner | human | policy | system`. Payloads are validated per kind

package/dist/app-ui-delivery.d.ts

@@ -0,0 +1,75 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+
+/**
+ * HTTP delivery primitives for the app-UI shell — `GET /apps/:appId/ui` and
+ * `GET /apps/:appId/ui/assets/:file` on the daemon (http-server.ts), and the
+ * same shapes under `agentproto app serve` (cli/src/app-serve.ts). One
+ * module so both hosts negotiate, validate and cache identically:
+ *
+ *   - `accept-encoding` negotiation (`br` preferred, then `gzip`, else
+ *     identity) with `vary: accept-encoding` on every response.
+ *   - A strong `etag` (sha256 of the exact bytes served) answered with 304
+ *     on a matching `if-none-match`.
+ *   - An LRU of encoded representations keyed by a caller-chosen key and
+ *     invalidated by a caller-chosen stamp (path + mtime + size for files),
+ *     so neither the digest nor the compression reruns until the file
+ *     changes.
+ *
+ * Deliberately scoped to the shell: SSE, MCP and every API route keep their
+ * own framing and never go through here.
+ */
+
+type ContentCoding = "br" | "gzip" | "identity";
+/** Pick the response coding from an `accept-encoding` header: `br` when
+ *  acceptable, then `gzip`, else identity. q-values are honoured only as
+ *  acceptable (`q>0`) vs refused (`q=0`) — the preference order is ours, not
+ *  the client's. A `*` entry covers codings the header doesn't name. */
+declare function negotiateContentEncoding(header: string | string[] | undefined): ContentCoding;
+/** Strong entity tag over `body` (sha256, base64url). `variant`, when set,
+ *  is appended so two representations of the same bytes that carry
+ *  different response headers (e.g. with/without frame headers) never
+ *  validate each other's cache entry. */
+declare function strongEtag(body: Buffer | string, variant?: string): string;
+/** `if-none-match` evaluation (RFC 9110 §13.1.2): `*` or any listed tag
+ *  equal to `etag` under weak comparison. */
+declare function ifNoneMatchHits(header: string | string[] | undefined, etag: string): boolean;
+/** Content types the app-UI routes serve, by lowercase extension. */
+declare const APP_UI_MIME_BY_EXT: Readonly<Record<string, string>>;
+/** Content type for an extension (with or without the leading dot). */
+declare function appUiContentType(ext: string): string;
+/** Whether a content type is worth compressing — text-ish only; woff2/png
+ *  and friends are already compressed. */
+declare function isCompressibleContentType(contentType: string): boolean;
+/** `:file` segment of the assets route: a flat name from `[A-Za-z0-9._-]`,
+ *  not starting with `.` (so no `.`/`..`, no dotfiles), no separators. */
+declare function isValidAppUiAssetName(file: string): boolean;
+/** Assets route cache policy — Vite emits content-hashed file names. */
+declare const IMMUTABLE_CACHE_CONTROL = "public, max-age=31536000, immutable";
+/** One servable body, its strong etag, and its encodings (computed lazily,
+ *  memoized — a representation that is never requested as gzip never pays
+ *  for it). */
+interface EncodedRepresentation {
+    readonly etag: string;
+    readonly compressible: boolean;
+    body(coding: ContentCoding): Buffer;
+}
+declare function createEncodedRepresentation(identity: Buffer, opts: {
+    compressible: boolean;
+    etag?: string;
+}): EncodedRepresentation;
+/** Small LRU of representations. `stamp` is whatever identifies the source
+ *  version (e.g. `${mtimeMs}:${size}`); a stamp mismatch rebuilds. Bounded
+ *  because some keys fold in request-derived input (the injected base URL). */
+interface RepresentationCache {
+    get(key: string, stamp: string, build: () => Promise<EncodedRepresentation> | EncodedRepresentation): Promise<EncodedRepresentation>;
+    readonly size: number;
+}
+declare function createRepresentationCache(maxEntries?: number): RepresentationCache;
+/** Write `rep` to `res` with `headers` (content-type, cache-control, frame
+ *  headers — whatever the route decided), adding `etag`, `vary:
+ *  accept-encoding`, `content-encoding` and `content-length`. A matching
+ *  `if-none-match` answers 304 with the same headers and no body, so a
+ *  revalidation refreshes the stored headers exactly as a 200 would. */
+declare function sendRepresentation(req: IncomingMessage, res: ServerResponse, rep: EncodedRepresentation, headers: Record<string, string>): void;
+
+export { APP_UI_MIME_BY_EXT, type ContentCoding, type EncodedRepresentation, IMMUTABLE_CACHE_CONTROL, type RepresentationCache, appUiContentType, createEncodedRepresentation, createRepresentationCache, ifNoneMatchHits, isCompressibleContentType, isValidAppUiAssetName, negotiateContentEncoding, sendRepresentation, strongEtag };

package/dist/app-ui-delivery.mjs

@@ -0,0 +1,144 @@
+import { createHash } from 'crypto';
+import { brotliCompressSync, constants, gzipSync } from 'zlib';
+
+/**
+ * @agentproto/runtime v0.1.0-alpha
+ * Long-running gateway: MCP server + HTTP transport + HEARTBEAT autonomy + conversation persistence over a workspace dir.
+ */
+
+function negotiateContentEncoding(header) {
+  const raw = Array.isArray(header) ? header.join(",") : header;
+  if (!raw) return "identity";
+  const q = /* @__PURE__ */ new Map();
+  for (const part of raw.split(",")) {
+    const [name, ...params] = part.trim().toLowerCase().split(";");
+    if (!name) continue;
+    let weight = 1;
+    for (const p of params) {
+      const m = p.trim().match(/^q=([0-9.]+)$/);
+      if (m) weight = Number(m[1]);
+    }
+    q.set(name === "x-gzip" ? "gzip" : name, Number.isFinite(weight) ? weight : 0);
+  }
+  const acceptable = (coding) => {
+    const v = q.get(coding) ?? q.get("*");
+    return v !== void 0 && v > 0;
+  };
+  if (acceptable("br")) return "br";
+  if (acceptable("gzip")) return "gzip";
+  return "identity";
+}
+function strongEtag(body, variant) {
+  const digest = createHash("sha256").update(body).digest("base64url");
+  return variant ? `"${digest}-${variant}"` : `"${digest}"`;
+}
+function ifNoneMatchHits(header, etag) {
+  const raw = Array.isArray(header) ? header.join(",") : header;
+  if (!raw) return false;
+  const bare = etag.replace(/^W\//, "");
+  for (const part of raw.split(",")) {
+    const tag = part.trim();
+    if (tag === "*") return true;
+    if (tag.replace(/^W\//, "") === bare) return true;
+  }
+  return false;
+}
+var APP_UI_MIME_BY_EXT = {
+  ".html": "text/html; charset=utf-8",
+  ".htm": "text/html; charset=utf-8",
+  ".js": "text/javascript; charset=utf-8",
+  ".mjs": "text/javascript; charset=utf-8",
+  ".css": "text/css; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".webmanifest": "application/manifest+json; charset=utf-8",
+  ".map": "application/json; charset=utf-8",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".txt": "text/plain; charset=utf-8",
+  ".wasm": "application/wasm"
+};
+function appUiContentType(ext) {
+  const key = (ext.startsWith(".") ? ext : `.${ext}`).toLowerCase();
+  return APP_UI_MIME_BY_EXT[key] ?? "application/octet-stream";
+}
+function isCompressibleContentType(contentType) {
+  const base = contentType.split(";")[0].trim().toLowerCase();
+  return base.startsWith("text/") || base === "application/json" || base === "application/javascript" || base === "image/svg+xml" || base === "application/wasm";
+}
+function isValidAppUiAssetName(file) {
+  return /^[A-Za-z0-9_-][A-Za-z0-9._-]*$/.test(file);
+}
+var IMMUTABLE_CACHE_CONTROL = "public, max-age=31536000, immutable";
+function createEncodedRepresentation(identity, opts) {
+  const encoded = /* @__PURE__ */ new Map([["identity", identity]]);
+  return {
+    etag: opts.etag ?? strongEtag(identity),
+    compressible: opts.compressible,
+    body(coding) {
+      const hit = encoded.get(coding);
+      if (hit) return hit;
+      const out = coding === "br" ? brotliCompressSync(identity, {
+        params: {
+          [constants.BROTLI_PARAM_QUALITY]: 5,
+          [constants.BROTLI_PARAM_SIZE_HINT]: identity.length
+        }
+      }) : gzipSync(identity, { level: 6 });
+      encoded.set(coding, out);
+      return out;
+    }
+  };
+}
+function createRepresentationCache(maxEntries = 64) {
+  const entries = /* @__PURE__ */ new Map();
+  return {
+    async get(key, stamp, build) {
+      const hit = entries.get(key);
+      if (hit && hit.stamp === stamp) {
+        entries.delete(key);
+        entries.set(key, hit);
+        return hit.rep;
+      }
+      const rep = await build();
+      entries.delete(key);
+      entries.set(key, { stamp, rep });
+      while (entries.size > maxEntries) {
+        const oldest = entries.keys().next().value;
+        if (oldest === void 0) break;
+        entries.delete(oldest);
+      }
+      return rep;
+    },
+    get size() {
+      return entries.size;
+    }
+  };
+}
+function sendRepresentation(req, res, rep, headers) {
+  const prior = res.getHeader("vary");
+  const priorVary = Array.isArray(prior) ? prior.join(", ") : prior === void 0 ? "" : String(prior);
+  const vary = /(^|,)\s*accept-encoding\s*(,|$)/i.test(priorVary) ? priorVary : priorVary ? `${priorVary}, accept-encoding` : "accept-encoding";
+  const out = { ...headers, etag: rep.etag, vary };
+  if (ifNoneMatchHits(req.headers["if-none-match"], rep.etag)) {
+    res.writeHead(304, out);
+    res.end();
+    return;
+  }
+  const coding = rep.compressible ? negotiateContentEncoding(req.headers["accept-encoding"]) : "identity";
+  const body = rep.body(coding);
+  if (coding !== "identity") out["content-encoding"] = coding;
+  out["content-length"] = String(body.length);
+  res.writeHead(200, out);
+  res.end(req.method === "HEAD" ? void 0 : body);
+}
+
+export { APP_UI_MIME_BY_EXT, IMMUTABLE_CACHE_CONTROL, appUiContentType, createEncodedRepresentation, createRepresentationCache, ifNoneMatchHits, isCompressibleContentType, isValidAppUiAssetName, negotiateContentEncoding, sendRepresentation, strongEtag };
+//# sourceMappingURL=app-ui-delivery.mjs.map
+//# sourceMappingURL=app-ui-delivery.mjs.map

package/dist/app-ui-delivery.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/app-ui-delivery.ts"],"names":["zlibConstants"],"mappings":";;;;;;;;AA6BO,SAAS,yBAAyB,MAAA,EAAsD;AAC7F,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,MAAM,IAAI,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,GAAI,MAAA;AACvD,EAAA,IAAI,CAAC,KAAK,OAAO,UAAA;AACjB,EAAA,MAAM,CAAA,uBAAQ,GAAA,EAAoB;AAClC,EAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,EAAG;AACjC,IAAA,MAAM,CAAC,IAAA,EAAM,GAAG,MAAM,CAAA,GAAI,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,KAAA,CAAM,GAAG,CAAA;AAC7D,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,MAAM,CAAA,GAAI,CAAA,CAAE,IAAA,EAAK,CAAE,MAAM,eAAe,CAAA;AACxC,MAAA,IAAI,CAAA,EAAG,MAAA,GAAS,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA;AAAA,IAC7B;AACA,IAAA,CAAA,CAAE,GAAA,CAAI,IAAA,KAAS,QAAA,GAAW,MAAA,GAAS,IAAA,EAAM,OAAO,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,GAAS,CAAC,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,MAAA,KAA4B;AAC9C,IAAA,MAAM,IAAI,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA,IAAK,CAAA,CAAE,IAAI,GAAG,CAAA;AACpC,IAAA,OAAO,CAAA,KAAM,UAAa,CAAA,GAAI,CAAA;AAAA,EAChC,CAAA;AACA,EAAA,IAAI,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,IAAA;AAC7B,EAAA,IAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,MAAA;AAC/B,EAAA,OAAO,UAAA;AACT;AAMO,SAAS,UAAA,CAAW,MAAuB,OAAA,EAA0B;AAC1E,EAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAAE,OAAO,IAAI,CAAA,CAAE,OAAO,WAAW,CAAA;AACnE,EAAA,OAAO,UAAU,CAAA,CAAA,EAAI,MAAM,IAAI,OAAO,CAAA,CAAA,CAAA,GAAM,IAAI,MAAM,CAAA,CAAA,CAAA;AACxD;AAIO,SAAS,eAAA,CAAgB,QAAuC,IAAA,EAAuB;AAC5F,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,MAAM,IAAI,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,GAAI,MAAA;AACvD,EAAA,IAAI,CAAC,KAAK,OAAO,KAAA;AACjB,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACpC,EAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,EAAG;AACjC,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,IAAI,GAAA,KAAQ,KAAK,OAAO,IAAA;AACxB,IAAA,IAAI,IAAI,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,KAAM,MAAM,OAAO,IAAA;AAAA,EAC/C;AACA,EAAA,OAAO,KAAA;AACT;AAGO,IAAM,kBAAA,GAAuD;AAAA,EAClE,OAAA,EAAS,0BAAA;AAAA,EACT,MAAA,EAAQ,0BAAA;AAAA,EACR,KAAA,EAAO,gCAAA;AAAA,EACP,MAAA,EAAQ,gCAAA;AAAA,EACR,MAAA,EAAQ,yBAAA;AAAA,EACR,OAAA,EAAS,iCAAA;AAAA,EACT,cAAA,EAAgB,0CAAA;AAAA,EAChB,MAAA,EAAQ,iCAAA;AAAA,EACR,MAAA,EAAQ,eAAA;AAAA,EACR,MAAA,EAAQ,WAAA;AAAA,EACR,MAAA,EAAQ,YAAA;AAAA,EACR,OAAA,EAAS,YAAA;AAAA,EACT,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS,YAAA;AAAA,EACT,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS,WAAA;AAAA,EACT,QAAA,EAAU,YAAA;AAAA,EACV,MAAA,EAAQ,UAAA;AAAA,EACR,MAAA,EAAQ,2BAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,SAAS,iBAAiB,GAAA,EAAqB;AACpD,EAAA,MAAM,GAAA,GAAA,CAAO,IAAI,UAAA,CAAW,GAAG,IAAI,GAAA,GAAM,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAI,WAAA,EAAY;AAChE,EAAA,OAAO,kBAAA,CAAmB,GAAG,CAAA,IAAK,0BAAA;AACpC;AAIO,SAAS,0BAA0B,WAAA,EAA8B;AACtE,EAAA,MAAM,IAAA,GAAO,YAAY,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA,CAAG,IAAA,EAAK,CAAE,WAAA,EAAY;AAC3D,EAAA,OACE,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,IACvB,IAAA,KAAS,sBACT,IAAA,KAAS,wBAAA,IACT,IAAA,KAAS,eAAA,IACT,IAAA,KAAS,kBAAA;AAEb;AAIO,SAAS,sBAAsB,IAAA,EAAuB;AAC3D,EAAA,OAAO,gCAAA,CAAiC,KAAK,IAAI,CAAA;AACnD;AAGO,IAAM,uBAAA,GAA0B;AAWhC,SAAS,2BAAA,CACd,UACA,IAAA,EACuB;AACvB,EAAA,MAAM,OAAA,uBAAc,GAAA,CAA2B,CAAC,CAAC,UAAA,EAAY,QAAQ,CAAC,CAAC,CAAA;AACvE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,CAAK,IAAA,IAAQ,UAAA,CAAW,QAAQ,CAAA;AAAA,IACtC,cAAc,IAAA,CAAK,YAAA;AAAA,IACnB,KAAK,MAAA,EAAQ;AACX,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AAC9B,MAAA,IAAI,KAAK,OAAO,GAAA;AAChB,MAAA,MAAM,GAAA,GACJ,MAAA,KAAW,IAAA,GACP,kBAAA,CAAmB,QAAA,EAAU;AAAA,QAC3B,MAAA,EAAQ;AAAA,UACN,CAACA,SAAA,CAAc,oBAAoB,GAAG,CAAA;AAAA,UACtC,CAACA,SAAA,CAAc,sBAAsB,GAAG,QAAA,CAAS;AAAA;AACnD,OACD,CAAA,GACD,QAAA,CAAS,UAAU,EAAE,KAAA,EAAO,GAAG,CAAA;AACrC,MAAA,OAAA,CAAQ,GAAA,CAAI,QAAQ,GAAG,CAAA;AACvB,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,GACF;AACF;AAcO,SAAS,yBAAA,CAA0B,aAAa,EAAA,EAAyB;AAC9E,EAAA,MAAM,OAAA,uBAAc,GAAA,EAA2D;AAC/E,EAAA,OAAO;AAAA,IACL,MAAM,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO,KAAA,EAAO;AAC3B,MAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC3B,MAAA,IAAI,GAAA,IAAO,GAAA,CAAI,KAAA,KAAU,KAAA,EAAO;AAC9B,QAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,QAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,GAAG,CAAA;AACpB,QAAA,OAAO,GAAA,CAAI,GAAA;AAAA,MACb;AACA,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,EAAM;AACxB,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,MAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,EAAE,KAAA,EAAO,KAAK,CAAA;AAC/B,MAAA,OAAO,OAAA,CAAQ,OAAO,UAAA,EAAY;AAChC,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AACrC,QAAA,IAAI,WAAW,MAAA,EAAW;AAC1B,QAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,MACvB;AACA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAAA,IACA,IAAI,IAAA,GAAO;AACT,MAAA,OAAO,OAAA,CAAQ,IAAA;AAAA,IACjB;AAAA,GACF;AACF;AAOO,SAAS,kBAAA,CACd,GAAA,EACA,GAAA,EACA,GAAA,EACA,OAAA,EACM;AAGN,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,SAAA,CAAU,MAAM,CAAA;AAClC,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA,KAAU,MAAA,GAAY,EAAA,GAAK,OAAO,KAAK,CAAA;AACnG,EAAA,MAAM,IAAA,GAAO,mCAAmC,IAAA,CAAK,SAAS,IAC1D,SAAA,GACA,SAAA,GACE,CAAA,EAAG,SAAS,CAAA,iBAAA,CAAA,GACZ,iBAAA;AACN,EAAA,MAAM,MAA8B,EAAE,GAAG,SAAS,IAAA,EAAM,GAAA,CAAI,MAAM,IAAA,EAAK;AACvE,EAAA,IAAI,gBAAgB,GAAA,CAAI,OAAA,CAAQ,eAAe,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3D,IAAA,GAAA,CAAI,SAAA,CAAU,KAAK,GAAG,CAAA;AACtB,IAAA,GAAA,CAAI,GAAA,EAAI;AACR,IAAA;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,IAAI,YAAA,GAAe,wBAAA,CAAyB,IAAI,OAAA,CAAQ,iBAAiB,CAAC,CAAA,GAAI,UAAA;AAC7F,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,MAAM,CAAA;AAC5B,EAAA,IAAI,MAAA,KAAW,UAAA,EAAY,GAAA,CAAI,kBAAkB,CAAA,GAAI,MAAA;AACrD,EAAA,GAAA,CAAI,gBAAgB,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAC1C,EAAA,GAAA,CAAI,SAAA,CAAU,KAAK,GAAG,CAAA;AACtB,EAAA,GAAA,CAAI,GAAA,CAAI,GAAA,CAAI,MAAA,KAAW,MAAA,GAAS,SAAY,IAAI,CAAA;AAClD","file":"app-ui-delivery.mjs","sourcesContent":["/**\n * HTTP delivery primitives for the app-UI shell — `GET /apps/:appId/ui` and\n * `GET /apps/:appId/ui/assets/:file` on the daemon (http-server.ts), and the\n * same shapes under `agentproto app serve` (cli/src/app-serve.ts). One\n * module so both hosts negotiate, validate and cache identically:\n *\n *   - `accept-encoding` negotiation (`br` preferred, then `gzip`, else\n *     identity) with `vary: accept-encoding` on every response.\n *   - A strong `etag` (sha256 of the exact bytes served) answered with 304\n *     on a matching `if-none-match`.\n *   - An LRU of encoded representations keyed by a caller-chosen key and\n *     invalidated by a caller-chosen stamp (path + mtime + size for files),\n *     so neither the digest nor the compression reruns until the file\n *     changes.\n *\n * Deliberately scoped to the shell: SSE, MCP and every API route keep their\n * own framing and never go through here.\n */\n\nimport { createHash } from \"node:crypto\"\nimport type { IncomingMessage, ServerResponse } from \"node:http\"\nimport { brotliCompressSync, constants as zlibConstants, gzipSync } from \"node:zlib\"\n\nexport type ContentCoding = \"br\" | \"gzip\" | \"identity\"\n\n/** Pick the response coding from an `accept-encoding` header: `br` when\n *  acceptable, then `gzip`, else identity. q-values are honoured only as\n *  acceptable (`q>0`) vs refused (`q=0`) — the preference order is ours, not\n *  the client's. A `*` entry covers codings the header doesn't name. */\nexport function negotiateContentEncoding(header: string | string[] | undefined): ContentCoding {\n  const raw = Array.isArray(header) ? header.join(\",\") : header\n  if (!raw) return \"identity\"\n  const q = new Map<string, number>()\n  for (const part of raw.split(\",\")) {\n    const [name, ...params] = part.trim().toLowerCase().split(\";\")\n    if (!name) continue\n    let weight = 1\n    for (const p of params) {\n      const m = p.trim().match(/^q=([0-9.]+)$/)\n      if (m) weight = Number(m[1])\n    }\n    q.set(name === \"x-gzip\" ? \"gzip\" : name, Number.isFinite(weight) ? weight : 0)\n  }\n  const acceptable = (coding: string): boolean => {\n    const v = q.get(coding) ?? q.get(\"*\")\n    return v !== undefined && v > 0\n  }\n  if (acceptable(\"br\")) return \"br\"\n  if (acceptable(\"gzip\")) return \"gzip\"\n  return \"identity\"\n}\n\n/** Strong entity tag over `body` (sha256, base64url). `variant`, when set,\n *  is appended so two representations of the same bytes that carry\n *  different response headers (e.g. with/without frame headers) never\n *  validate each other's cache entry. */\nexport function strongEtag(body: Buffer | string, variant?: string): string {\n  const digest = createHash(\"sha256\").update(body).digest(\"base64url\")\n  return variant ? `\"${digest}-${variant}\"` : `\"${digest}\"`\n}\n\n/** `if-none-match` evaluation (RFC 9110 §13.1.2): `*` or any listed tag\n *  equal to `etag` under weak comparison. */\nexport function ifNoneMatchHits(header: string | string[] | undefined, etag: string): boolean {\n  const raw = Array.isArray(header) ? header.join(\",\") : header\n  if (!raw) return false\n  const bare = etag.replace(/^W\\//, \"\")\n  for (const part of raw.split(\",\")) {\n    const tag = part.trim()\n    if (tag === \"*\") return true\n    if (tag.replace(/^W\\//, \"\") === bare) return true\n  }\n  return false\n}\n\n/** Content types the app-UI routes serve, by lowercase extension. */\nexport const APP_UI_MIME_BY_EXT: Readonly<Record<string, string>> = {\n  \".html\": \"text/html; charset=utf-8\",\n  \".htm\": \"text/html; charset=utf-8\",\n  \".js\": \"text/javascript; charset=utf-8\",\n  \".mjs\": \"text/javascript; charset=utf-8\",\n  \".css\": \"text/css; charset=utf-8\",\n  \".json\": \"application/json; charset=utf-8\",\n  \".webmanifest\": \"application/manifest+json; charset=utf-8\",\n  \".map\": \"application/json; charset=utf-8\",\n  \".svg\": \"image/svg+xml\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".webp\": \"image/webp\",\n  \".ico\": \"image/x-icon\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".txt\": \"text/plain; charset=utf-8\",\n  \".wasm\": \"application/wasm\",\n}\n\n/** Content type for an extension (with or without the leading dot). */\nexport function appUiContentType(ext: string): string {\n  const key = (ext.startsWith(\".\") ? ext : `.${ext}`).toLowerCase()\n  return APP_UI_MIME_BY_EXT[key] ?? \"application/octet-stream\"\n}\n\n/** Whether a content type is worth compressing — text-ish only; woff2/png\n *  and friends are already compressed. */\nexport function isCompressibleContentType(contentType: string): boolean {\n  const base = contentType.split(\";\")[0]!.trim().toLowerCase()\n  return (\n    base.startsWith(\"text/\") ||\n    base === \"application/json\" ||\n    base === \"application/javascript\" ||\n    base === \"image/svg+xml\" ||\n    base === \"application/wasm\"\n  )\n}\n\n/** `:file` segment of the assets route: a flat name from `[A-Za-z0-9._-]`,\n *  not starting with `.` (so no `.`/`..`, no dotfiles), no separators. */\nexport function isValidAppUiAssetName(file: string): boolean {\n  return /^[A-Za-z0-9_-][A-Za-z0-9._-]*$/.test(file)\n}\n\n/** Assets route cache policy — Vite emits content-hashed file names. */\nexport const IMMUTABLE_CACHE_CONTROL = \"public, max-age=31536000, immutable\"\n\n/** One servable body, its strong etag, and its encodings (computed lazily,\n *  memoized — a representation that is never requested as gzip never pays\n *  for it). */\nexport interface EncodedRepresentation {\n  readonly etag: string\n  readonly compressible: boolean\n  body(coding: ContentCoding): Buffer\n}\n\nexport function createEncodedRepresentation(\n  identity: Buffer,\n  opts: { compressible: boolean; etag?: string },\n): EncodedRepresentation {\n  const encoded = new Map<ContentCoding, Buffer>([[\"identity\", identity]])\n  return {\n    etag: opts.etag ?? strongEtag(identity),\n    compressible: opts.compressible,\n    body(coding) {\n      const hit = encoded.get(coding)\n      if (hit) return hit\n      const out =\n        coding === \"br\"\n          ? brotliCompressSync(identity, {\n              params: {\n                [zlibConstants.BROTLI_PARAM_QUALITY]: 5,\n                [zlibConstants.BROTLI_PARAM_SIZE_HINT]: identity.length,\n              },\n            })\n          : gzipSync(identity, { level: 6 })\n      encoded.set(coding, out)\n      return out\n    },\n  }\n}\n\n/** Small LRU of representations. `stamp` is whatever identifies the source\n *  version (e.g. `${mtimeMs}:${size}`); a stamp mismatch rebuilds. Bounded\n *  because some keys fold in request-derived input (the injected base URL). */\nexport interface RepresentationCache {\n  get(\n    key: string,\n    stamp: string,\n    build: () => Promise<EncodedRepresentation> | EncodedRepresentation,\n  ): Promise<EncodedRepresentation>\n  readonly size: number\n}\n\nexport function createRepresentationCache(maxEntries = 64): RepresentationCache {\n  const entries = new Map<string, { stamp: string; rep: EncodedRepresentation }>()\n  return {\n    async get(key, stamp, build) {\n      const hit = entries.get(key)\n      if (hit && hit.stamp === stamp) {\n        entries.delete(key)\n        entries.set(key, hit)\n        return hit.rep\n      }\n      const rep = await build()\n      entries.delete(key)\n      entries.set(key, { stamp, rep })\n      while (entries.size > maxEntries) {\n        const oldest = entries.keys().next().value\n        if (oldest === undefined) break\n        entries.delete(oldest)\n      }\n      return rep\n    },\n    get size() {\n      return entries.size\n    },\n  }\n}\n\n/** Write `rep` to `res` with `headers` (content-type, cache-control, frame\n *  headers — whatever the route decided), adding `etag`, `vary:\n *  accept-encoding`, `content-encoding` and `content-length`. A matching\n *  `if-none-match` answers 304 with the same headers and no body, so a\n *  revalidation refreshes the stored headers exactly as a 200 would. */\nexport function sendRepresentation(\n  req: IncomingMessage,\n  res: ServerResponse,\n  rep: EncodedRepresentation,\n  headers: Record<string, string>,\n): void {\n  // Merge, don't clobber: the daemon's CORS layer may already have set\n  // `Vary: Origin` via setHeader, which a writeHead `vary` would replace.\n  const prior = res.getHeader(\"vary\")\n  const priorVary = Array.isArray(prior) ? prior.join(\", \") : prior === undefined ? \"\" : String(prior)\n  const vary = /(^|,)\\s*accept-encoding\\s*(,|$)/i.test(priorVary)\n    ? priorVary\n    : priorVary\n      ? `${priorVary}, accept-encoding`\n      : \"accept-encoding\"\n  const out: Record<string, string> = { ...headers, etag: rep.etag, vary }\n  if (ifNoneMatchHits(req.headers[\"if-none-match\"], rep.etag)) {\n    res.writeHead(304, out)\n    res.end()\n    return\n  }\n  const coding = rep.compressible ? negotiateContentEncoding(req.headers[\"accept-encoding\"]) : \"identity\"\n  const body = rep.body(coding)\n  if (coding !== \"identity\") out[\"content-encoding\"] = coding\n  out[\"content-length\"] = String(body.length)\n  res.writeHead(200, out)\n  res.end(req.method === \"HEAD\" ? undefined : body)\n}\n"]}

package/dist/catalog-models.d.ts

@@ -1,8 +1,10 @@
 import { AuthProfile } from '@agentproto/auth';
-import { A as AdapterAuthDescriptor } from './spawn-defaults-CwI9Puwy.js';
-import { R as RouteSpec } from './session-config-DbWP9RRj.js';
+import { A as AdapterAuthDescriptor } from './spawn-defaults-CZj39Znq.js';
+import { R as RouteSpec } from './session-config-ByfVeEQJ.js';
+import './context-continuity-Bn99UtVC.js';
+import '@agentproto/acp';
+import '@agentproto/command-sandbox';
 import '@agentproto/model-catalog';
-import './context-continuity-ib9_bVYM.js';
 
 /**
  * Read-only catalog/vendor endpoint (`agentproto-session-config-axes`