@agentproto/runtime 3.6.1 → 4.1.0

package/README.md

@@ -44,6 +44,7 @@ A per-boot bearer token is generated automatically and written into `<workspace>
 | Adapter discovery | `GET /adapters` / `POST /adapters/:slug/install` | When `listAgentAdapters` / `installAgentAdapter` is wired |
 | App scope mounts   | `POST /apps/:appId/apply` / `DELETE /apps/:appId/apply` / `GET /scopes/:scopeId/apps` | Mirrors MCP `app_apply` / `app_unapply` / `app_list_applied`; needs `appRegistry` |
 | Sessions list     | `GET /sessions` / `GET /sessions/:id` / `GET /sessions/summaries` | id-or-name in `:id`; summaries are lightweight + paginated |
+| Session usage     | `GET /sessions/:id/usage`                | REST twin of `session_usage` MCP tool; add `?includeSubtree=1` to roll up cost + tokens over all descendant sessions |
 | Agent spawn       | `POST /sessions/agent`                   | Long-lived ACP agent (needs `resolveAgentAdapter`)    |
 | Interrupt turn    | `POST /sessions/:id/interrupt`           | Cancel the in-flight turn; session stays alive        |
 | Terminal input    | `POST /sessions/:id/terminal/input`      | Write raw input into a live PTY session               |
@@ -66,16 +67,20 @@ The `/mcp` endpoint exposes the core toolset plus several opt-in / feature-gated
 | `session_list` / `session_tree` / `session_usage` / `session_restart` / `session_rename` | Session management |
 | `app_install` / `app_run` / `app_list` / `app_status` / `app_stop` / `app_apply` / `app_unapply` / `app_list_applied` | App-kit apps |
 | `app_data_read` / `app_data_write` / `app_data_list` / `app_data_migrate` | App-scoped durable data plane, anchored at the app's `dataDir` (default `<dir>/data`; `app_install {dataDir}`) |
-| `app_state_append` / `app_state_get` / `app_state_list` | App-scoped **state ledger** (`<dataDir>/state/events.jsonl`) — append-only, zod-validated event envelope, fold to a stage snapshot; see below |
+| `app_state_append` / `app_state_get` / `app_state_list` | App-scoped **state ledger** (`<stateDir>/events.jsonl`, under `~/.agentproto/app-state/`) — append-only, zod-validated event envelope, fold to a stage snapshot; see below |
 | `harness_preset_list` / `harness_preset_create` / `harness_preset_delete` / `harness_preset_set_default` | Persisted harness→auth-profile presets (new) |
+| `review_run` / `review_status` / `review_cancel` / `review_ledger` / `review_export` | [`@agentproto/review`](../review) host: run a REVIEW.md binding over a git range (command lanes as subprocesses, agent lanes as child reviewer sessions), fold a `pass`/`block`/`incomplete` verdict, and record the attestation in the review ledger (`~/.agentproto/reviews`) (new) |
 | `workspace_brain_query` / `workspace_brain_status` / `workspace_brain_ingest` | Per-workspace transcript recall (new) |
 | `conversation_export` | Export a daemon transcript to a target adapter's native store, e.g. `claude-code` (new) |
 | `llm_endpoint_*` (`start`, `stop`, `status`, `set_upstream_link`, `list_links`) | Local LLM Endpoint proxy sidecar — only when `features.llmEndpoint` is enabled (new) |
 
 ### App state ledger (`app_state_*`)
 
-Per installed app, an append-only JSONL event log lives at
-`<dataDir>/state/events.jsonl` (`src/app-state.ts`). One JSON object per
+Per installed app, an append-only JSONL event log lives in the daemon's own
+state dir, `~/.agentproto/app-state/<encoded appId>/events.jsonl`
+(`InstalledApp.stateDir`, `src/app-state.ts`) — never in the app's source
+tree. A ledger left at the old `<dataDir>/state/events.jsonl` is still read,
+and moved over on the next append. One JSON object per
 line: `{ id (ULID), ts, appRunId?, stage, item?, kind, by, payload }` with
 `kind ∈ stage-started | gate-report | approval | stage-done | blocked | note`
 and `by ∈ runner | human | policy | system`. Payloads are validated per kind

package/dist/app-ui-build.d.ts

@@ -0,0 +1,96 @@
+import { AppUiBuildConfig } from '@agentproto/app-kit';
+
+/**
+ * Build an installed app's UI bundle on demand, per APP.md's declared
+ * `ui.build` (`@agentproto/app-kit`'s `AppUiBuildConfig`) — the piece that
+ * lets a repo declare "how to build the UI" instead of committing the
+ * generated `.agentproto/ui/index.html`.
+ *
+ * `ensureAppUiBuilt` is the one entry point, called from every path that's
+ * about to serve or install an app's UI (`app_install` in app-tools.ts,
+ * `GET /apps/:appId/ui` in http-server.ts, the MCP panel cache in
+ * app-ui-apps.ts, and the CLI's `agentproto app serve`): if the declared
+ * `uiPath` is missing, or older than the newest file matching `ui.build`'s
+ * `sources` globs (default `["src/**"]`, resolved against `ui.build.cwd` —
+ * default the app dir), it runs `ui.build.command` once, captures output to
+ * `<appDir>/.agentproto/ui-build.log`, and returns a result the caller turns
+ * into either a served page or a readable error. Concurrent callers for the
+ * same `uiPath` share one in-flight build (single-flight, keyed on the
+ * absolute `uiPath` — an app's bundle lives at one path regardless of which
+ * route is asking).
+ *
+ * An app with no `ui.build` declared keeps today's behavior exactly: the
+ * bundle must already exist on disk, and a missing one is a clear error
+ * naming the path rather than a bare 404.
+ */
+
+/** Newest mtime (ms) among every file matched by `patterns` (relative to
+ *  `cwd`), or `undefined` if nothing matched any pattern. */
+declare function newestSourceMtime(cwd: string, patterns: readonly string[]): Promise<number | undefined>;
+/** Where a `ui.build` run's captured output lands — read this on a build
+ *  failure for the full log; the returned error carries only a tail. */
+declare function appUiBuildLogPath(appDir: string): string;
+interface EnsureAppUiBuiltInput {
+    /** Absolute app directory — anchors a relative `build.cwd` and the build
+     *  log's location. */
+    readonly dir: string;
+    /** Absolute path to the ui bundle's entry file (APP.md's `ui.path`,
+     *  already resolved absolute). Also the single-flight key. */
+    readonly uiPath: string;
+    readonly build?: AppUiBuildConfig;
+    /** Hard timeout for the build command. Defaults to 120s. */
+    readonly timeoutMs?: number;
+}
+type EnsureAppUiBuiltResult = {
+    readonly ok: true;
+    readonly built: boolean;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/** Peek whether `uiPath` has a build running right now without starting one
+ *  — a non-blocking caller (`resolveAppUiBuildState`) uses this to join an
+ *  ALREADY-showing build instead of racing a fresh `ensureAppUiBuilt` call
+ *  (which would itself re-do the cheap stat/freshness check every time). */
+declare function peekInFlightBuild(uiPath: string): Promise<EnsureAppUiBuiltResult> | undefined;
+/** Paired with {@link peekInFlightBuild}: when that returns a promise, this
+ *  is the wall-clock time (`Date.now()`) its build command actually started
+ *  — `undefined` if the in-flight promise hasn't reached `runShellCommand`
+ *  yet (a handful of stat calls out), in which case "now" is as good a
+ *  start time as any. */
+declare function peekBuildStartedAt(uiPath: string): number | undefined;
+/**
+ * Ensure `uiPath` exists and is at least as new as its declared sources,
+ * building it first if not. Single-flight per `uiPath`: a second call for
+ * the same path while a build is running awaits the same result instead of
+ * starting a second build.
+ */
+declare function ensureAppUiBuilt(input: EnsureAppUiBuiltInput): Promise<EnsureAppUiBuiltResult>;
+type AppUiBuildState = {
+    readonly kind: "ready";
+} | {
+    readonly kind: "building";
+    readonly startedAt: number;
+    readonly logTail?: string;
+} | {
+    readonly kind: "error";
+    readonly message: string;
+    readonly logPath: string;
+    readonly logTail?: string;
+};
+/**
+ * Non-blocking status check for `ensureAppUiBuilt`'s outcome — the piece
+ * that lets a PAGE render (the `ui://app_ui_<id>/view` MCP resource in
+ * app-ui-apps.ts, `GET /apps/:appId/ui` in http-server.ts) never stall on a
+ * multi-second `ui.build` run. Joins an already-running build via
+ * {@link peekInFlightBuild} (or starts one — still single-flight, since
+ * `ensureAppUiBuilt` itself owns `inFlight`) and waits only up to
+ * `RESOLVE_FAST_PATH_MS`: long enough that the common "already built and
+ * fresh" case (a handful of `stat` calls) resolves as `"ready"` without ever
+ * showing a placeholder, short enough that a real build never blocks the
+ * caller — it keeps running in the background regardless, and the NEXT call
+ * (after the page's own reload) picks up wherever that build landed.
+ */
+declare function resolveAppUiBuildState(input: EnsureAppUiBuiltInput): Promise<AppUiBuildState>;
+
+export { type AppUiBuildState, type EnsureAppUiBuiltInput, type EnsureAppUiBuiltResult, appUiBuildLogPath, ensureAppUiBuilt, newestSourceMtime, peekBuildStartedAt, peekInFlightBuild, resolveAppUiBuildState };

package/dist/app-ui-build.mjs

@@ -0,0 +1,250 @@
+import { spawn } from 'child_process';
+import { stat, readdir, mkdir, writeFile, readFile } from 'fs/promises';
+import { join, dirname, isAbsolute } from 'path';
+
+/**
+ * @agentproto/runtime v0.1.0-alpha
+ * Long-running gateway: MCP server + HTTP transport + HEARTBEAT autonomy + conversation persistence over a workspace dir.
+ */
+
+function runShellCommand(command, cwd, timeoutMs) {
+  return new Promise((resolvePromise) => {
+    const child = spawn(command, {
+      cwd,
+      shell: true,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    child.stdout?.on("data", (d) => {
+      stdout += d.toString("utf8");
+    });
+    child.stderr?.on("data", (d) => {
+      stderr += d.toString("utf8");
+    });
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGTERM");
+      setTimeout(() => child.kill("SIGKILL"), 2e3).unref();
+    }, timeoutMs);
+    timer.unref();
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      resolvePromise({ exitCode: -1, timedOut, stdout, stderr: stderr + err.message });
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolvePromise({ exitCode: code ?? -1, timedOut, stdout, stderr });
+    });
+  });
+}
+function resolveAgainst(dir, path) {
+  return isAbsolute(path) ? path : join(dir, path);
+}
+function segmentToRegex(segment) {
+  const escaped = segment.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`);
+}
+async function collectGlobFiles(baseDir, segments) {
+  if (segments.length === 0) {
+    try {
+      const st = await stat(baseDir);
+      return st.isFile() ? [baseDir] : [];
+    } catch {
+      return [];
+    }
+  }
+  const [head, ...rest] = segments;
+  if (head === "**") {
+    const results2 = [...await collectGlobFiles(baseDir, rest)];
+    let entries2;
+    try {
+      entries2 = await readdir(baseDir, { withFileTypes: true });
+    } catch {
+      return results2;
+    }
+    for (const entry of entries2) {
+      const full = join(baseDir, entry.name);
+      if (entry.isDirectory()) {
+        results2.push(...await collectGlobFiles(full, segments));
+      } else if (rest.length === 0) {
+        results2.push(full);
+      }
+    }
+    return results2;
+  }
+  const regex = segmentToRegex(head);
+  let entries;
+  try {
+    entries = await readdir(baseDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const results = [];
+  for (const entry of entries) {
+    if (!regex.test(entry.name)) continue;
+    results.push(...await collectGlobFiles(join(baseDir, entry.name), rest));
+  }
+  return results;
+}
+async function newestSourceMtime(cwd, patterns) {
+  let max;
+  for (const pattern of patterns) {
+    const segments = pattern.replace(/^\.\//, "").split("/").filter((s) => s.length > 0);
+    if (segments.length === 0) continue;
+    for (const file of await collectGlobFiles(cwd, segments)) {
+      try {
+        const st = await stat(file);
+        if (max === void 0 || st.mtimeMs > max) max = st.mtimeMs;
+      } catch {
+      }
+    }
+  }
+  return max;
+}
+var DEFAULT_BUILD_TIMEOUT_MS = 12e4;
+var DEFAULT_SOURCE_GLOBS = ["src/**"];
+function appUiBuildLogPath(appDir) {
+  return join(appDir, ".agentproto", "ui-build.log");
+}
+function tailLines(text, n) {
+  const lines = text.split("\n");
+  return lines.slice(-40).join("\n");
+}
+var ASSET_REFERENCE_RE = /(?:src|href)\s*=\s*["'](?:\.{0,2}\/)?assets\//i;
+async function warnIfNotSingleFile(uiPath) {
+  let html;
+  try {
+    html = await readFile(uiPath, "utf8");
+  } catch {
+    return;
+  }
+  if (ASSET_REFERENCE_RE.test(html)) {
+    console.warn(
+      `[app-ui-build] "${uiPath}" references "./assets" after a ui.build run. The daemon expects a single-file bundle here \u2014 a split build (separate JS/CSS chunks under an assets/ dir) may 404 those chunks unless the app's bundler inlines everything into one file.`
+    );
+  }
+}
+var inFlight = /* @__PURE__ */ new Map();
+var buildStartedAt = /* @__PURE__ */ new Map();
+function peekInFlightBuild(uiPath) {
+  return inFlight.get(uiPath);
+}
+function peekBuildStartedAt(uiPath) {
+  return buildStartedAt.get(uiPath);
+}
+async function runEnsure(input) {
+  const { dir, uiPath, build } = input;
+  let existing;
+  try {
+    existing = await stat(uiPath);
+  } catch {
+    existing = void 0;
+  }
+  if (!build) {
+    if (existing) return { ok: true, built: false };
+    return {
+      ok: false,
+      error: `app ui bundle "${uiPath}" is missing and the app declares no \`ui.build\` \u2014 either commit the built bundle, or add a \`ui.build\` step to APP.md's \`ui\` frontmatter (\`ui.build.command\`, run with cwd \`ui.build.cwd\` or the app dir).`
+    };
+  }
+  const buildCwd = build.cwd ? resolveAgainst(dir, build.cwd) : dir;
+  const sources = build.sources ?? DEFAULT_SOURCE_GLOBS;
+  if (existing) {
+    const newest = await newestSourceMtime(buildCwd, sources);
+    if (newest === void 0 || newest <= existing.mtimeMs) {
+      return { ok: true, built: false };
+    }
+  }
+  const logPath = appUiBuildLogPath(dir);
+  const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+  buildStartedAt.set(uiPath, Date.now());
+  const result = await runShellCommand(build.command, buildCwd, input.timeoutMs ?? DEFAULT_BUILD_TIMEOUT_MS);
+  const logBody = `[${startedAt}] ui.build: ${build.command}
+cwd: ${buildCwd}
+exit: ${result.exitCode}${result.timedOut ? " (timed out)" : ""}
+
+--- stdout ---
+${result.stdout}
+--- stderr ---
+${result.stderr}
+`;
+  try {
+    await mkdir(dirname(logPath), { recursive: true });
+    await writeFile(logPath, logBody, "utf8");
+  } catch {
+  }
+  if (result.exitCode !== 0) {
+    return {
+      ok: false,
+      error: `ui.build command "${build.command}" failed (exit ${result.exitCode}${result.timedOut ? ", timed out" : ""}). See "${logPath}" for full output. Last lines:
+${tailLines(result.stderr || result.stdout)}`
+    };
+  }
+  let rebuilt;
+  try {
+    rebuilt = await stat(uiPath);
+  } catch {
+    rebuilt = void 0;
+  }
+  if (!rebuilt) {
+    return {
+      ok: false,
+      error: `ui.build command "${build.command}" exited 0 but "${uiPath}" is still missing \u2014 check the command actually writes its output there. See "${logPath}" for full output.`
+    };
+  }
+  await warnIfNotSingleFile(uiPath);
+  return { ok: true, built: true };
+}
+async function ensureAppUiBuilt(input) {
+  const key = input.uiPath;
+  const inflight = inFlight.get(key);
+  if (inflight) return inflight;
+  const promise = runEnsure(input).finally(() => {
+    inFlight.delete(key);
+    buildStartedAt.delete(key);
+  });
+  inFlight.set(key, promise);
+  return promise;
+}
+var RESOLVE_FAST_PATH_MS = 300;
+var READABLE_LOG_TAIL_LINES = 20;
+var RESOLVE_TIMEOUT = /* @__PURE__ */ Symbol("app-ui-build-resolve-timeout");
+async function readLogTailSafe(dir, n) {
+  try {
+    const text = await readFile(appUiBuildLogPath(dir), "utf8");
+    const lines = text.split("\n").filter((line) => line.length > 0);
+    const tail = lines.slice(-n).join("\n");
+    return tail.length > 0 ? tail : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function resolveAppUiBuildState(input) {
+  const { dir, uiPath } = input;
+  const pending = peekInFlightBuild(uiPath) ?? ensureAppUiBuilt(input);
+  const timeout = new Promise((resolve) => {
+    const timer = setTimeout(() => resolve(RESOLVE_TIMEOUT), RESOLVE_FAST_PATH_MS);
+    timer.unref();
+  });
+  const raced = await Promise.race([pending, timeout]);
+  if (raced === RESOLVE_TIMEOUT) {
+    const startedAt = peekBuildStartedAt(uiPath) ?? Date.now();
+    return { kind: "building", startedAt, logTail: await readLogTailSafe(dir, READABLE_LOG_TAIL_LINES) };
+  }
+  const result = raced;
+  if (!result.ok) {
+    return {
+      kind: "error",
+      message: result.error,
+      logPath: appUiBuildLogPath(dir),
+      logTail: await readLogTailSafe(dir, READABLE_LOG_TAIL_LINES)
+    };
+  }
+  return { kind: "ready" };
+}
+
+export { appUiBuildLogPath, ensureAppUiBuilt, newestSourceMtime, peekBuildStartedAt, peekInFlightBuild, resolveAppUiBuildState };
+//# sourceMappingURL=app-ui-build.mjs.map
+//# sourceMappingURL=app-ui-build.mjs.map

package/dist/app-ui-build.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/app-ui-build.ts"],"names":["results","entries"],"mappings":";;;;;;;;;AAgDA,SAAS,eAAA,CAAgB,OAAA,EAAiB,GAAA,EAAa,SAAA,EAAuC;AAC5F,EAAA,OAAO,IAAI,QAAQ,CAAA,cAAA,KAAkB;AACnC,IAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,EAAS;AAAA,MAC3B,GAAA;AAAA,MACA,KAAA,EAAO,IAAA;AAAA,MACP,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM;AAAA,KACjC,CAAA;AACD,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAA,CAAA,KAAK;AAC5B,MAAA,MAAA,IAAU,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,IAC7B,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAA,CAAA,KAAK;AAC5B,MAAA,MAAA,IAAU,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,IAC7B,CAAC,CAAA;AACD,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,KAAA,CAAM,KAAK,SAAS,CAAA;AACpB,MAAA,UAAA,CAAW,MAAM,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA,EAAG,GAAK,EAAE,KAAA,EAAM;AAAA,IACvD,GAAG,SAAS,CAAA;AACZ,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,KAAA,CAAM,EAAA,CAAG,SAAS,CAAA,GAAA,KAAO;AACvB,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,cAAA,CAAe,EAAE,UAAU,EAAA,EAAI,QAAA,EAAU,QAAQ,MAAA,EAAQ,MAAA,GAAU,GAAA,CAAc,OAAA,EAAS,CAAA;AAAA,IAC5F,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,SAAS,CAAA,IAAA,KAAQ;AACxB,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,cAAA,CAAe,EAAE,QAAA,EAAU,IAAA,IAAQ,IAAI,QAAA,EAAU,MAAA,EAAQ,QAAQ,CAAA;AAAA,IACnE,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AACH;AAEA,SAAS,cAAA,CAAe,KAAa,IAAA,EAAsB;AACzD,EAAA,OAAO,WAAW,IAAI,CAAA,GAAI,IAAA,GAAO,IAAA,CAAK,KAAK,IAAI,CAAA;AACjD;AAIA,SAAS,eAAe,OAAA,EAAyB;AAC/C,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,CAAQ,mBAAA,EAAqB,MAAM,CAAA,CAAE,OAAA,CAAQ,OAAO,IAAI,CAAA;AAChF,EAAA,OAAO,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA,CAAG,CAAA;AAClC;AAYA,eAAe,gBAAA,CAAiB,SAAiB,QAAA,EAAgD;AAC/F,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,IAAA,CAAK,OAAO,CAAA;AAC7B,MAAA,OAAO,GAAG,MAAA,EAAO,GAAI,CAAC,OAAO,IAAI,EAAC;AAAA,IACpC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAC;AAAA,IACV;AAAA,EACF;AACA,EAAA,MAAM,CAAC,IAAA,EAAM,GAAG,IAAI,CAAA,GAAI,QAAA;AACxB,EAAA,IAAI,SAAS,IAAA,EAAM;AACjB,IAAA,MAAMA,WAAoB,CAAC,GAAI,MAAM,gBAAA,CAAiB,OAAA,EAAS,IAAI,CAAE,CAAA;AACrE,IAAA,IAAIC,QAAAA;AACJ,IAAA,IAAI;AACF,MAAAA,WAAU,MAAM,OAAA,CAAQ,SAAS,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,IAC1D,CAAA,CAAA,MAAQ;AACN,MAAA,OAAOD,QAAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,SAASC,QAAAA,EAAS;AAC3B,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,EAAS,KAAA,CAAM,IAAI,CAAA;AACrC,MAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,QAAAD,SAAQ,IAAA,CAAK,GAAI,MAAM,gBAAA,CAAiB,IAAA,EAAM,QAAQ,CAAE,CAAA;AAAA,MAC1D,CAAA,MAAA,IAAW,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC5B,QAAAA,QAAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,MACnB;AAAA,IACF;AACA,IAAA,OAAOA,QAAAA;AAAA,EACT;AACA,EAAA,MAAM,KAAA,GAAQ,eAAe,IAAK,CAAA;AAClC,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,EAAS,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,CAAC,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG;AAC7B,IAAA,OAAA,CAAQ,IAAA,CAAK,GAAI,MAAM,gBAAA,CAAiB,IAAA,CAAK,SAAS,KAAA,CAAM,IAAI,CAAA,EAAG,IAAI,CAAE,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,OAAA;AACT;AAIA,eAAsB,iBAAA,CACpB,KACA,QAAA,EAC6B;AAC7B,EAAA,IAAI,GAAA;AACJ,EAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,CAAC,CAAA;AACjF,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3B,IAAA,KAAA,MAAW,IAAA,IAAQ,MAAM,gBAAA,CAAiB,GAAA,EAAK,QAAQ,CAAA,EAAG;AACxD,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,GAAK,MAAM,IAAA,CAAK,IAAI,CAAA;AAC1B,QAAA,IAAI,QAAQ,KAAA,CAAA,IAAa,EAAA,CAAG,OAAA,GAAU,GAAA,QAAW,EAAA,CAAG,OAAA;AAAA,MACtD,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,wBAAA,GAA2B,IAAA;AACjC,IAAM,oBAAA,GAAuB,CAAC,QAAQ,CAAA;AAK/B,SAAS,kBAAkB,MAAA,EAAwB;AACxD,EAAA,OAAO,IAAA,CAAK,MAAA,EAAQ,aAAA,EAAe,cAAc,CAAA;AACnD;AAEA,SAAS,SAAA,CAAU,MAAc,CAAA,EAAmB;AAClD,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,EAAA,OAAO,MAAM,KAAA,CAAM,GAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AAClC;AASA,IAAM,kBAAA,GAAqB,gDAAA;AAE3B,eAAe,oBAAoB,MAAA,EAA+B;AAChE,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,MAAM,QAAA,CAAS,MAAA,EAAQ,MAAM,CAAA;AAAA,EACtC,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AACA,EAAA,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AACjC,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,mBAAmB,MAAM,CAAA,6OAAA;AAAA,KAI3B;AAAA,EACF;AACF;AAuBA,IAAM,QAAA,uBAAe,GAAA,EAA6C;AAOlE,IAAM,cAAA,uBAAqB,GAAA,EAAoB;AAMxC,SAAS,kBAAkB,MAAA,EAA6D;AAC7F,EAAA,OAAO,QAAA,CAAS,IAAI,MAAM,CAAA;AAC5B;AAOO,SAAS,mBAAmB,MAAA,EAAoC;AACrE,EAAA,OAAO,cAAA,CAAe,IAAI,MAAM,CAAA;AAClC;AAEA,eAAe,UAAU,KAAA,EAA+D;AACtF,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAM,GAAI,KAAA;AAE/B,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI;AACF,IAAA,QAAA,GAAW,MAAM,KAAK,MAAM,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,QAAA,GAAW,MAAA;AAAA,EACb;AAEA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,IAAI,UAAU,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,OAAO,KAAA,EAAM;AAC9C,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EACE,kBAAkB,MAAM,CAAA,wNAAA;AAAA,KAG5B;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,KAAA,CAAM,GAAA,GAAM,eAAe,GAAA,EAAK,KAAA,CAAM,GAAG,CAAA,GAAI,GAAA;AAC9D,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,oBAAA;AAEjC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,QAAA,EAAU,OAAO,CAAA;AACxD,IAAA,IAAI,MAAA,KAAW,MAAA,IAAa,MAAA,IAAU,QAAA,CAAS,OAAA,EAAS;AACtD,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,KAAA,EAAM;AAAA,IAClC;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,kBAAkB,GAAG,CAAA;AACrC,EAAA,MAAM,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACzC,EAAA,cAAA,CAAe,GAAA,CAAI,MAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA;AACrC,EAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,KAAA,CAAM,SAAS,QAAA,EAAU,KAAA,CAAM,aAAa,wBAAwB,CAAA;AAEzG,EAAA,MAAM,OAAA,GACJ,CAAA,CAAA,EAAI,SAAS,CAAA,YAAA,EAAe,MAAM,OAAO;AAAA,KAAA,EACjC,QAAQ;AAAA,MAAA,EACP,OAAO,QAAQ,CAAA,EAAG,MAAA,CAAO,QAAA,GAAW,iBAAiB,EAAE;;AAAA;AAAA,EAC7C,OAAO,MAAM;AAAA;AAAA,EAAqB,OAAO,MAAM;AAAA,CAAA;AACpE,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,OAAA,CAAQ,OAAO,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AACjD,IAAA,MAAM,SAAA,CAAU,OAAA,EAAS,OAAA,EAAS,MAAM,CAAA;AAAA,EAC1C,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,CAAA,EAAG;AACzB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EACE,CAAA,kBAAA,EAAqB,KAAA,CAAM,OAAO,CAAA,eAAA,EAAkB,MAAA,CAAO,QAAQ,CAAA,EAChE,MAAA,CAAO,QAAA,GAAW,aAAA,GAAgB,EAAE,WAAW,OAAO,CAAA;AAAA,EACzC,UAAU,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAsB,CAAC,CAAA;AAAA,KAC7E;AAAA,EACF;AAEA,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,KAAK,MAAM,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,GAAU,MAAA;AAAA,EACZ;AACA,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,OACE,CAAA,kBAAA,EAAqB,KAAA,CAAM,OAAO,CAAA,gBAAA,EAAmB,MAAM,sFACC,OAAO,CAAA,kBAAA;AAAA,KACvE;AAAA,EACF;AAEA,EAAA,MAAM,oBAAoB,MAAM,CAAA;AAEhC,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,IAAA,EAAK;AACjC;AAQA,eAAsB,iBACpB,KAAA,EACiC;AACjC,EAAA,MAAM,MAAM,KAAA,CAAM,MAAA;AAClB,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AACjC,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,SAAA,CAAU,KAAK,CAAA,CAAE,QAAQ,MAAM;AAC7C,IAAA,QAAA,CAAS,OAAO,GAAG,CAAA;AACnB,IAAA,cAAA,CAAe,OAAO,GAAG,CAAA;AAAA,EAC3B,CAAC,CAAA;AACD,EAAA,QAAA,CAAS,GAAA,CAAI,KAAK,OAAO,CAAA;AACzB,EAAA,OAAO,OAAA;AACT;AAEA,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,uBAAA,GAA0B,EAAA;AAChC,IAAM,eAAA,0BAAyB,8BAA8B,CAAA;AAE7D,eAAe,eAAA,CAAgB,KAAa,CAAA,EAAwC;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,OAAO,MAAM,QAAA,CAAS,iBAAA,CAAkB,GAAG,GAAG,MAAM,CAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,CAAM,IAAI,EAAE,MAAA,CAAO,CAAA,IAAA,KAAQ,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA;AAC7D,IAAA,MAAM,OAAO,KAAA,CAAM,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AACtC,IAAA,OAAO,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,KAAA,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAoBA,eAAsB,uBAAuB,KAAA,EAAwD;AACnG,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAO,GAAI,KAAA;AACxB,EAAA,MAAM,OAAA,GAAU,iBAAA,CAAkB,MAAM,CAAA,IAAK,iBAAiB,KAAK,CAAA;AAEnE,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAgC,CAAA,OAAA,KAAW;AAC7D,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,OAAA,CAAQ,eAAe,GAAG,oBAAoB,CAAA;AAC7E,IAAA,KAAA,CAAM,KAAA,EAAM;AAAA,EACd,CAAC,CAAA;AACD,EAAA,MAAM,QAAQ,MAAM,OAAA,CAAQ,KAAK,CAAC,OAAA,EAAS,OAAO,CAAC,CAAA;AAEnD,EAAA,IAAI,UAAU,eAAA,EAAiB;AAC7B,IAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,MAAM,CAAA,IAAK,KAAK,GAAA,EAAI;AACzD,IAAA,OAAO,EAAE,MAAM,UAAA,EAAY,SAAA,EAAW,SAAS,MAAM,eAAA,CAAgB,GAAA,EAAK,uBAAuB,CAAA,EAAE;AAAA,EACrG;AACA,EAAA,MAAM,MAAA,GAAS,KAAA;AACf,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,OAAA;AAAA,MACN,SAAS,MAAA,CAAO,KAAA;AAAA,MAChB,OAAA,EAAS,kBAAkB,GAAG,CAAA;AAAA,MAC9B,OAAA,EAAS,MAAM,eAAA,CAAgB,GAAA,EAAK,uBAAuB;AAAA,KAC7D;AAAA,EACF;AACA,EAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AACzB","file":"app-ui-build.mjs","sourcesContent":["/**\n * Build an installed app's UI bundle on demand, per APP.md's declared\n * `ui.build` (`@agentproto/app-kit`'s `AppUiBuildConfig`) — the piece that\n * lets a repo declare \"how to build the UI\" instead of committing the\n * generated `.agentproto/ui/index.html`.\n *\n * `ensureAppUiBuilt` is the one entry point, called from every path that's\n * about to serve or install an app's UI (`app_install` in app-tools.ts,\n * `GET /apps/:appId/ui` in http-server.ts, the MCP panel cache in\n * app-ui-apps.ts, and the CLI's `agentproto app serve`): if the declared\n * `uiPath` is missing, or older than the newest file matching `ui.build`'s\n * `sources` globs (default `[\"src/**\"]`, resolved against `ui.build.cwd` —\n * default the app dir), it runs `ui.build.command` once, captures output to\n * `<appDir>/.agentproto/ui-build.log`, and returns a result the caller turns\n * into either a served page or a readable error. Concurrent callers for the\n * same `uiPath` share one in-flight build (single-flight, keyed on the\n * absolute `uiPath` — an app's bundle lives at one path regardless of which\n * route is asking).\n *\n * An app with no `ui.build` declared keeps today's behavior exactly: the\n * bundle must already exist on disk, and a missing one is a clear error\n * naming the path rather than a bare 404.\n */\n\nimport { spawn } from \"node:child_process\"\nimport { mkdir, readdir, readFile, stat, writeFile } from \"node:fs/promises\"\nimport type { Dirent, Stats } from \"node:fs\"\nimport { dirname, isAbsolute, join } from \"node:path\"\nimport type { AppUiBuildConfig } from \"@agentproto/app-kit\"\n\n/**\n * Deliberately NOT `command-tools.ts`'s `runCommand` — that pulls in\n * `sessions.ts` (session identity, spawn bookkeeping — thousands of lines\n * unrelated to running a build), which would drag the whole session\n * subsystem into this module's own `tsup` entry (`./app-ui-build`,\n * `tsup.config.ts`), a lean subpath the CLI imports on its own (same\n * pattern as `app-ui-delivery.ts`, which only imports node builtins). A\n * one-shot build command doesn't need `runCommand`'s process-group\n * bookkeeping either — it has no long-lived subtree to reap beyond its own\n * (possibly shell-spawned) child.\n */\ninterface RunResult {\n  readonly exitCode: number\n  readonly timedOut: boolean\n  readonly stdout: string\n  readonly stderr: string\n}\n\nfunction runShellCommand(command: string, cwd: string, timeoutMs: number): Promise<RunResult> {\n  return new Promise(resolvePromise => {\n    const child = spawn(command, {\n      cwd,\n      shell: true,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    })\n    let stdout = \"\"\n    let stderr = \"\"\n    let timedOut = false\n    child.stdout?.on(\"data\", d => {\n      stdout += d.toString(\"utf8\")\n    })\n    child.stderr?.on(\"data\", d => {\n      stderr += d.toString(\"utf8\")\n    })\n    const timer = setTimeout(() => {\n      timedOut = true\n      child.kill(\"SIGTERM\")\n      setTimeout(() => child.kill(\"SIGKILL\"), 2_000).unref()\n    }, timeoutMs)\n    timer.unref()\n    child.on(\"error\", err => {\n      clearTimeout(timer)\n      resolvePromise({ exitCode: -1, timedOut, stdout, stderr: stderr + (err as Error).message })\n    })\n    child.on(\"close\", code => {\n      clearTimeout(timer)\n      resolvePromise({ exitCode: code ?? -1, timedOut, stdout, stderr })\n    })\n  })\n}\n\nfunction resolveAgainst(dir: string, path: string): string {\n  return isAbsolute(path) ? path : join(dir, path)\n}\n\n/** Turn one glob SEGMENT (no `/`) into a regex — `*` matches any run of\n *  characters within the segment, everything else is literal. */\nfunction segmentToRegex(segment: string): RegExp {\n  const escaped = segment.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\").replace(/\\*/g, \".*\")\n  return new RegExp(`^${escaped}$`)\n}\n\n/**\n * Resolve one glob pattern (already split into path segments, relative to\n * `baseDir`) to the absolute paths of every FILE it matches. Supports `**`\n * (zero or more path segments, so `\"src/**\"` matches every file anywhere\n * under `src/`, including `src/` itself) and `*` within a single segment —\n * not full glob syntax (no brace expansion, no negation, no `?`). That\n * subset covers the documented default (`src/**`) and the common overrides\n * (`package.json`, `public/**`, `*.html`) without pulling in a glob\n * dependency for a staleness check.\n */\nasync function collectGlobFiles(baseDir: string, segments: readonly string[]): Promise<string[]> {\n  if (segments.length === 0) {\n    try {\n      const st = await stat(baseDir)\n      return st.isFile() ? [baseDir] : []\n    } catch {\n      return []\n    }\n  }\n  const [head, ...rest] = segments\n  if (head === \"**\") {\n    const results: string[] = [...(await collectGlobFiles(baseDir, rest))]\n    let entries: Dirent[]\n    try {\n      entries = await readdir(baseDir, { withFileTypes: true })\n    } catch {\n      return results\n    }\n    for (const entry of entries) {\n      const full = join(baseDir, entry.name)\n      if (entry.isDirectory()) {\n        results.push(...(await collectGlobFiles(full, segments)))\n      } else if (rest.length === 0) {\n        results.push(full)\n      }\n    }\n    return results\n  }\n  const regex = segmentToRegex(head!)\n  let entries: Dirent[]\n  try {\n    entries = await readdir(baseDir, { withFileTypes: true })\n  } catch {\n    return []\n  }\n  const results: string[] = []\n  for (const entry of entries) {\n    if (!regex.test(entry.name)) continue\n    results.push(...(await collectGlobFiles(join(baseDir, entry.name), rest)))\n  }\n  return results\n}\n\n/** Newest mtime (ms) among every file matched by `patterns` (relative to\n *  `cwd`), or `undefined` if nothing matched any pattern. */\nexport async function newestSourceMtime(\n  cwd: string,\n  patterns: readonly string[],\n): Promise<number | undefined> {\n  let max: number | undefined\n  for (const pattern of patterns) {\n    const segments = pattern.replace(/^\\.\\//, \"\").split(\"/\").filter(s => s.length > 0)\n    if (segments.length === 0) continue\n    for (const file of await collectGlobFiles(cwd, segments)) {\n      try {\n        const st = await stat(file)\n        if (max === undefined || st.mtimeMs > max) max = st.mtimeMs\n      } catch {\n        // Vanished between listing and stat — ignore.\n      }\n    }\n  }\n  return max\n}\n\nconst DEFAULT_BUILD_TIMEOUT_MS = 120_000\nconst DEFAULT_SOURCE_GLOBS = [\"src/**\"]\nconst LOG_TAIL_LINES = 40\n\n/** Where a `ui.build` run's captured output lands — read this on a build\n *  failure for the full log; the returned error carries only a tail. */\nexport function appUiBuildLogPath(appDir: string): string {\n  return join(appDir, \".agentproto\", \"ui-build.log\")\n}\n\nfunction tailLines(text: string, n: number): string {\n  const lines = text.split(\"\\n\")\n  return lines.slice(-n).join(\"\\n\")\n}\n\n/** A built single-file bundle should never reference `./assets/…` — the\n *  daemon serves `ui.path` standalone (no adjacent static server for a\n *  split build's chunks outside the one `assets/` convention `GET\n *  /apps/:appId/ui/assets/:file` already covers for a *committed* bundle).\n *  A build step that emits a split bundle anyway gets a loud warning, not a\n *  failure — the app may still work if its bundler also copied the chunks\n *  next to `ui.path`. */\nconst ASSET_REFERENCE_RE = /(?:src|href)\\s*=\\s*[\"'](?:\\.{0,2}\\/)?assets\\//i\n\nasync function warnIfNotSingleFile(uiPath: string): Promise<void> {\n  let html: string\n  try {\n    html = await readFile(uiPath, \"utf8\")\n  } catch {\n    return\n  }\n  if (ASSET_REFERENCE_RE.test(html)) {\n    console.warn(\n      `[app-ui-build] \"${uiPath}\" references \"./assets\" after a ui.build run. ` +\n        \"The daemon expects a single-file bundle here — a split build (separate \" +\n        \"JS/CSS chunks under an assets/ dir) may 404 those chunks unless the \" +\n        \"app's bundler inlines everything into one file.\",\n    )\n  }\n}\n\nexport interface EnsureAppUiBuiltInput {\n  /** Absolute app directory — anchors a relative `build.cwd` and the build\n   *  log's location. */\n  readonly dir: string\n  /** Absolute path to the ui bundle's entry file (APP.md's `ui.path`,\n   *  already resolved absolute). Also the single-flight key. */\n  readonly uiPath: string\n  readonly build?: AppUiBuildConfig\n  /** Hard timeout for the build command. Defaults to 120s. */\n  readonly timeoutMs?: number\n}\n\nexport type EnsureAppUiBuiltResult =\n  | { readonly ok: true; readonly built: boolean }\n  | { readonly ok: false; readonly error: string }\n\n/** In-flight builds keyed on the absolute `uiPath` — an app's bundle lives\n *  at one path regardless of which route (app_install, GET .../ui, the MCP\n *  panel cache, `app serve`) asked for it, so keying here (rather than on\n *  appId, which isn't always known yet — see app-tools.ts's `performInstall`\n *  calling this BEFORE the app has an id) still dedupes every caller. */\nconst inFlight = new Map<string, Promise<EnsureAppUiBuiltResult>>()\n\n/** When the CURRENTLY in-flight build (if any) actually started running its\n *  `build.command` — set right before `runShellCommand`, read by a\n *  non-blocking caller (`resolveAppUiBuildState` below) to render \"building\n *  for Ns\" without itself timing anything. Not set for a call that resolves\n *  from `existing`/freshness alone (no command ever ran). */\nconst buildStartedAt = new Map<string, number>()\n\n/** Peek whether `uiPath` has a build running right now without starting one\n *  — a non-blocking caller (`resolveAppUiBuildState`) uses this to join an\n *  ALREADY-showing build instead of racing a fresh `ensureAppUiBuilt` call\n *  (which would itself re-do the cheap stat/freshness check every time). */\nexport function peekInFlightBuild(uiPath: string): Promise<EnsureAppUiBuiltResult> | undefined {\n  return inFlight.get(uiPath)\n}\n\n/** Paired with {@link peekInFlightBuild}: when that returns a promise, this\n *  is the wall-clock time (`Date.now()`) its build command actually started\n *  — `undefined` if the in-flight promise hasn't reached `runShellCommand`\n *  yet (a handful of stat calls out), in which case \"now\" is as good a\n *  start time as any. */\nexport function peekBuildStartedAt(uiPath: string): number | undefined {\n  return buildStartedAt.get(uiPath)\n}\n\nasync function runEnsure(input: EnsureAppUiBuiltInput): Promise<EnsureAppUiBuiltResult> {\n  const { dir, uiPath, build } = input\n\n  let existing: Stats | undefined\n  try {\n    existing = await stat(uiPath)\n  } catch {\n    existing = undefined\n  }\n\n  if (!build) {\n    if (existing) return { ok: true, built: false }\n    return {\n      ok: false,\n      error:\n        `app ui bundle \"${uiPath}\" is missing and the app declares no \\`ui.build\\` — ` +\n        \"either commit the built bundle, or add a `ui.build` step to APP.md's `ui` \" +\n        \"frontmatter (`ui.build.command`, run with cwd `ui.build.cwd` or the app dir).\",\n    }\n  }\n\n  const buildCwd = build.cwd ? resolveAgainst(dir, build.cwd) : dir\n  const sources = build.sources ?? DEFAULT_SOURCE_GLOBS\n\n  if (existing) {\n    const newest = await newestSourceMtime(buildCwd, sources)\n    if (newest === undefined || newest <= existing.mtimeMs) {\n      return { ok: true, built: false }\n    }\n  }\n\n  const logPath = appUiBuildLogPath(dir)\n  const startedAt = new Date().toISOString()\n  buildStartedAt.set(uiPath, Date.now())\n  const result = await runShellCommand(build.command, buildCwd, input.timeoutMs ?? DEFAULT_BUILD_TIMEOUT_MS)\n\n  const logBody =\n    `[${startedAt}] ui.build: ${build.command}\\n` +\n    `cwd: ${buildCwd}\\n` +\n    `exit: ${result.exitCode}${result.timedOut ? \" (timed out)\" : \"\"}\\n\\n` +\n    `--- stdout ---\\n${result.stdout}\\n--- stderr ---\\n${result.stderr}\\n`\n  try {\n    await mkdir(dirname(logPath), { recursive: true })\n    await writeFile(logPath, logBody, \"utf8\")\n  } catch {\n    // Best-effort — a log write failure must not hide a build failure.\n  }\n\n  if (result.exitCode !== 0) {\n    return {\n      ok: false,\n      error:\n        `ui.build command \"${build.command}\" failed (exit ${result.exitCode}` +\n        `${result.timedOut ? \", timed out\" : \"\"}). See \"${logPath}\" for full output. ` +\n        `Last lines:\\n${tailLines(result.stderr || result.stdout, LOG_TAIL_LINES)}`,\n    }\n  }\n\n  let rebuilt: Stats | undefined\n  try {\n    rebuilt = await stat(uiPath)\n  } catch {\n    rebuilt = undefined\n  }\n  if (!rebuilt) {\n    return {\n      ok: false,\n      error:\n        `ui.build command \"${build.command}\" exited 0 but \"${uiPath}\" is still missing — ` +\n        `check the command actually writes its output there. See \"${logPath}\" for full output.`,\n    }\n  }\n\n  await warnIfNotSingleFile(uiPath)\n\n  return { ok: true, built: true }\n}\n\n/**\n * Ensure `uiPath` exists and is at least as new as its declared sources,\n * building it first if not. Single-flight per `uiPath`: a second call for\n * the same path while a build is running awaits the same result instead of\n * starting a second build.\n */\nexport async function ensureAppUiBuilt(\n  input: EnsureAppUiBuiltInput,\n): Promise<EnsureAppUiBuiltResult> {\n  const key = input.uiPath\n  const inflight = inFlight.get(key)\n  if (inflight) return inflight\n  const promise = runEnsure(input).finally(() => {\n    inFlight.delete(key)\n    buildStartedAt.delete(key)\n  })\n  inFlight.set(key, promise)\n  return promise\n}\n\nconst RESOLVE_FAST_PATH_MS = 300\nconst READABLE_LOG_TAIL_LINES = 20\nconst RESOLVE_TIMEOUT = Symbol(\"app-ui-build-resolve-timeout\")\n\nasync function readLogTailSafe(dir: string, n: number): Promise<string | undefined> {\n  try {\n    const text = await readFile(appUiBuildLogPath(dir), \"utf8\")\n    const lines = text.split(\"\\n\").filter(line => line.length > 0)\n    const tail = lines.slice(-n).join(\"\\n\")\n    return tail.length > 0 ? tail : undefined\n  } catch {\n    return undefined\n  }\n}\n\nexport type AppUiBuildState =\n  | { readonly kind: \"ready\" }\n  | { readonly kind: \"building\"; readonly startedAt: number; readonly logTail?: string }\n  | { readonly kind: \"error\"; readonly message: string; readonly logPath: string; readonly logTail?: string }\n\n/**\n * Non-blocking status check for `ensureAppUiBuilt`'s outcome — the piece\n * that lets a PAGE render (the `ui://app_ui_<id>/view` MCP resource in\n * app-ui-apps.ts, `GET /apps/:appId/ui` in http-server.ts) never stall on a\n * multi-second `ui.build` run. Joins an already-running build via\n * {@link peekInFlightBuild} (or starts one — still single-flight, since\n * `ensureAppUiBuilt` itself owns `inFlight`) and waits only up to\n * `RESOLVE_FAST_PATH_MS`: long enough that the common \"already built and\n * fresh\" case (a handful of `stat` calls) resolves as `\"ready\"` without ever\n * showing a placeholder, short enough that a real build never blocks the\n * caller — it keeps running in the background regardless, and the NEXT call\n * (after the page's own reload) picks up wherever that build landed.\n */\nexport async function resolveAppUiBuildState(input: EnsureAppUiBuiltInput): Promise<AppUiBuildState> {\n  const { dir, uiPath } = input\n  const pending = peekInFlightBuild(uiPath) ?? ensureAppUiBuilt(input)\n\n  const timeout = new Promise<typeof RESOLVE_TIMEOUT>(resolve => {\n    const timer = setTimeout(() => resolve(RESOLVE_TIMEOUT), RESOLVE_FAST_PATH_MS)\n    timer.unref()\n  })\n  const raced = await Promise.race([pending, timeout])\n\n  if (raced === RESOLVE_TIMEOUT) {\n    const startedAt = peekBuildStartedAt(uiPath) ?? Date.now()\n    return { kind: \"building\", startedAt, logTail: await readLogTailSafe(dir, READABLE_LOG_TAIL_LINES) }\n  }\n  const result = raced as EnsureAppUiBuiltResult\n  if (!result.ok) {\n    return {\n      kind: \"error\",\n      message: result.error,\n      logPath: appUiBuildLogPath(dir),\n      logTail: await readLogTailSafe(dir, READABLE_LOG_TAIL_LINES),\n    }\n  }\n  return { kind: \"ready\" }\n}\n"]}

package/dist/app-ui-delivery.d.ts

@@ -0,0 +1,75 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+
+/**
+ * HTTP delivery primitives for the app-UI shell — `GET /apps/:appId/ui` and
+ * `GET /apps/:appId/ui/assets/:file` on the daemon (http-server.ts), and the
+ * same shapes under `agentproto app serve` (cli/src/app-serve.ts). One
+ * module so both hosts negotiate, validate and cache identically:
+ *
+ *   - `accept-encoding` negotiation (`br` preferred, then `gzip`, else
+ *     identity) with `vary: accept-encoding` on every response.
+ *   - A strong `etag` (sha256 of the exact bytes served) answered with 304
+ *     on a matching `if-none-match`.
+ *   - An LRU of encoded representations keyed by a caller-chosen key and
+ *     invalidated by a caller-chosen stamp (path + mtime + size for files),
+ *     so neither the digest nor the compression reruns until the file
+ *     changes.
+ *
+ * Deliberately scoped to the shell: SSE, MCP and every API route keep their
+ * own framing and never go through here.
+ */
+
+type ContentCoding = "br" | "gzip" | "identity";
+/** Pick the response coding from an `accept-encoding` header: `br` when
+ *  acceptable, then `gzip`, else identity. q-values are honoured only as
+ *  acceptable (`q>0`) vs refused (`q=0`) — the preference order is ours, not
+ *  the client's. A `*` entry covers codings the header doesn't name. */
+declare function negotiateContentEncoding(header: string | string[] | undefined): ContentCoding;
+/** Strong entity tag over `body` (sha256, base64url). `variant`, when set,
+ *  is appended so two representations of the same bytes that carry
+ *  different response headers (e.g. with/without frame headers) never
+ *  validate each other's cache entry. */
+declare function strongEtag(body: Buffer | string, variant?: string): string;
+/** `if-none-match` evaluation (RFC 9110 §13.1.2): `*` or any listed tag
+ *  equal to `etag` under weak comparison. */
+declare function ifNoneMatchHits(header: string | string[] | undefined, etag: string): boolean;
+/** Content types the app-UI routes serve, by lowercase extension. */
+declare const APP_UI_MIME_BY_EXT: Readonly<Record<string, string>>;
+/** Content type for an extension (with or without the leading dot). */
+declare function appUiContentType(ext: string): string;
+/** Whether a content type is worth compressing — text-ish only; woff2/png
+ *  and friends are already compressed. */
+declare function isCompressibleContentType(contentType: string): boolean;
+/** `:file` segment of the assets route: a flat name from `[A-Za-z0-9._-]`,
+ *  not starting with `.` (so no `.`/`..`, no dotfiles), no separators. */
+declare function isValidAppUiAssetName(file: string): boolean;
+/** Assets route cache policy — Vite emits content-hashed file names. */
+declare const IMMUTABLE_CACHE_CONTROL = "public, max-age=31536000, immutable";
+/** One servable body, its strong etag, and its encodings (computed lazily,
+ *  memoized — a representation that is never requested as gzip never pays
+ *  for it). */
+interface EncodedRepresentation {
+    readonly etag: string;
+    readonly compressible: boolean;
+    body(coding: ContentCoding): Buffer;
+}
+declare function createEncodedRepresentation(identity: Buffer, opts: {
+    compressible: boolean;
+    etag?: string;
+}): EncodedRepresentation;
+/** Small LRU of representations. `stamp` is whatever identifies the source
+ *  version (e.g. `${mtimeMs}:${size}`); a stamp mismatch rebuilds. Bounded
+ *  because some keys fold in request-derived input (the injected base URL). */
+interface RepresentationCache {
+    get(key: string, stamp: string, build: () => Promise<EncodedRepresentation> | EncodedRepresentation): Promise<EncodedRepresentation>;
+    readonly size: number;
+}
+declare function createRepresentationCache(maxEntries?: number): RepresentationCache;
+/** Write `rep` to `res` with `headers` (content-type, cache-control, frame
+ *  headers — whatever the route decided), adding `etag`, `vary:
+ *  accept-encoding`, `content-encoding` and `content-length`. A matching
+ *  `if-none-match` answers 304 with the same headers and no body, so a
+ *  revalidation refreshes the stored headers exactly as a 200 would. */
+declare function sendRepresentation(req: IncomingMessage, res: ServerResponse, rep: EncodedRepresentation, headers: Record<string, string>): void;
+
+export { APP_UI_MIME_BY_EXT, type ContentCoding, type EncodedRepresentation, IMMUTABLE_CACHE_CONTROL, type RepresentationCache, appUiContentType, createEncodedRepresentation, createRepresentationCache, ifNoneMatchHits, isCompressibleContentType, isValidAppUiAssetName, negotiateContentEncoding, sendRepresentation, strongEtag };

package/dist/app-ui-delivery.mjs

@@ -0,0 +1,144 @@
+import { createHash } from 'crypto';
+import { brotliCompressSync, constants, gzipSync } from 'zlib';
+
+/**
+ * @agentproto/runtime v0.1.0-alpha
+ * Long-running gateway: MCP server + HTTP transport + HEARTBEAT autonomy + conversation persistence over a workspace dir.
+ */
+
+function negotiateContentEncoding(header) {
+  const raw = Array.isArray(header) ? header.join(",") : header;
+  if (!raw) return "identity";
+  const q = /* @__PURE__ */ new Map();
+  for (const part of raw.split(",")) {
+    const [name, ...params] = part.trim().toLowerCase().split(";");
+    if (!name) continue;
+    let weight = 1;
+    for (const p of params) {
+      const m = p.trim().match(/^q=([0-9.]+)$/);
+      if (m) weight = Number(m[1]);
+    }
+    q.set(name === "x-gzip" ? "gzip" : name, Number.isFinite(weight) ? weight : 0);
+  }
+  const acceptable = (coding) => {
+    const v = q.get(coding) ?? q.get("*");
+    return v !== void 0 && v > 0;
+  };
+  if (acceptable("br")) return "br";
+  if (acceptable("gzip")) return "gzip";
+  return "identity";
+}
+function strongEtag(body, variant) {
+  const digest = createHash("sha256").update(body).digest("base64url");
+  return variant ? `"${digest}-${variant}"` : `"${digest}"`;
+}
+function ifNoneMatchHits(header, etag) {
+  const raw = Array.isArray(header) ? header.join(",") : header;
+  if (!raw) return false;
+  const bare = etag.replace(/^W\//, "");
+  for (const part of raw.split(",")) {
+    const tag = part.trim();
+    if (tag === "*") return true;
+    if (tag.replace(/^W\//, "") === bare) return true;
+  }
+  return false;
+}
+var APP_UI_MIME_BY_EXT = {
+  ".html": "text/html; charset=utf-8",
+  ".htm": "text/html; charset=utf-8",
+  ".js": "text/javascript; charset=utf-8",
+  ".mjs": "text/javascript; charset=utf-8",
+  ".css": "text/css; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".webmanifest": "application/manifest+json; charset=utf-8",
+  ".map": "application/json; charset=utf-8",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".txt": "text/plain; charset=utf-8",
+  ".wasm": "application/wasm"
+};
+function appUiContentType(ext) {
+  const key = (ext.startsWith(".") ? ext : `.${ext}`).toLowerCase();
+  return APP_UI_MIME_BY_EXT[key] ?? "application/octet-stream";
+}
+function isCompressibleContentType(contentType) {
+  const base = contentType.split(";")[0].trim().toLowerCase();
+  return base.startsWith("text/") || base === "application/json" || base === "application/javascript" || base === "image/svg+xml" || base === "application/wasm";
+}
+function isValidAppUiAssetName(file) {
+  return /^[A-Za-z0-9_-][A-Za-z0-9._-]*$/.test(file);
+}
+var IMMUTABLE_CACHE_CONTROL = "public, max-age=31536000, immutable";
+function createEncodedRepresentation(identity, opts) {
+  const encoded = /* @__PURE__ */ new Map([["identity", identity]]);
+  return {
+    etag: opts.etag ?? strongEtag(identity),
+    compressible: opts.compressible,
+    body(coding) {
+      const hit = encoded.get(coding);
+      if (hit) return hit;
+      const out = coding === "br" ? brotliCompressSync(identity, {
+        params: {
+          [constants.BROTLI_PARAM_QUALITY]: 5,
+          [constants.BROTLI_PARAM_SIZE_HINT]: identity.length
+        }
+      }) : gzipSync(identity, { level: 6 });
+      encoded.set(coding, out);
+      return out;
+    }
+  };
+}
+function createRepresentationCache(maxEntries = 64) {
+  const entries = /* @__PURE__ */ new Map();
+  return {
+    async get(key, stamp, build) {
+      const hit = entries.get(key);
+      if (hit && hit.stamp === stamp) {
+        entries.delete(key);
+        entries.set(key, hit);
+        return hit.rep;
+      }
+      const rep = await build();
+      entries.delete(key);
+      entries.set(key, { stamp, rep });
+      while (entries.size > maxEntries) {
+        const oldest = entries.keys().next().value;
+        if (oldest === void 0) break;
+        entries.delete(oldest);
+      }
+      return rep;
+    },
+    get size() {
+      return entries.size;
+    }
+  };
+}
+function sendRepresentation(req, res, rep, headers) {
+  const prior = res.getHeader("vary");
+  const priorVary = Array.isArray(prior) ? prior.join(", ") : prior === void 0 ? "" : String(prior);
+  const vary = /(^|,)\s*accept-encoding\s*(,|$)/i.test(priorVary) ? priorVary : priorVary ? `${priorVary}, accept-encoding` : "accept-encoding";
+  const out = { ...headers, etag: rep.etag, vary };
+  if (ifNoneMatchHits(req.headers["if-none-match"], rep.etag)) {
+    res.writeHead(304, out);
+    res.end();
+    return;
+  }
+  const coding = rep.compressible ? negotiateContentEncoding(req.headers["accept-encoding"]) : "identity";
+  const body = rep.body(coding);
+  if (coding !== "identity") out["content-encoding"] = coding;
+  out["content-length"] = String(body.length);
+  res.writeHead(200, out);
+  res.end(req.method === "HEAD" ? void 0 : body);
+}
+
+export { APP_UI_MIME_BY_EXT, IMMUTABLE_CACHE_CONTROL, appUiContentType, createEncodedRepresentation, createRepresentationCache, ifNoneMatchHits, isCompressibleContentType, isValidAppUiAssetName, negotiateContentEncoding, sendRepresentation, strongEtag };
+//# sourceMappingURL=app-ui-delivery.mjs.map
+//# sourceMappingURL=app-ui-delivery.mjs.map