@agentsean/daemon 1.0.0

package/dist/main.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { startDaemon } from "./boot.js";
+import { DEFAULT_HOST, DEFAULT_PORT, defaultSeanHome } from "./paths.js";
+function arg(name) {
+    const idx = process.argv.indexOf(`--${name}`);
+    if (idx === -1)
+        return undefined;
+    return process.argv[idx + 1];
+}
+const host = arg("host") ?? process.env["SEAN_HOST"] ?? DEFAULT_HOST;
+const portRaw = arg("port") ?? process.env["SEAN_PORT"];
+const port = portRaw ? Number(portRaw) : DEFAULT_PORT;
+const seanHome = arg("home") ?? defaultSeanHome();
+if (!Number.isInteger(port) || port < 1 || port > 65535) {
+    process.stderr.write(`invalid port: ${portRaw}\n`);
+    process.exit(2);
+}
+const running = await startDaemon({ host, port, seanHome });
+process.stdout.write(JSON.stringify({
+    ok: true,
+    host: running.host,
+    port: running.port,
+    pid: running.pid,
+}) + "\n");
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEzE,SAAS,GAAG,CAAC,IAAY;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC;AACrE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACxD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;AAElD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,OAAO,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;IACb,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,GAAG,EAAE,OAAO,CAAC,GAAG;CACjB,CAAC,GAAG,IAAI,CACV,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,13 @@
+export declare const DEFAULT_HOST = "127.0.0.1";
+export declare const DEFAULT_PORT = 7777;
+export declare const TOKEN_ACCOUNT = "daemon-auth-token";
+export declare const HALT_FILENAME = "HALT";
+export declare function defaultSeanHome(): string;
+export declare function ensureSeanHome(home: string): string;
+export declare function pidPath(home: string): string;
+export declare function logPath(home: string): string;
+export declare function dbPath(home: string): string;
+export declare function haltPath(home: string): string;
+export declare function isHalted(home: string): boolean;
+export declare function setHalted(home: string, halted: boolean): void;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,eAAO,MAAM,YAAY,OAAO,CAAC;AACjC,eAAO,MAAM,aAAa,sBAAsB,CAAC;AACjD,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUnD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG9C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAO7D"}

package/dist/paths.js

@@ -0,0 +1,49 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export const DEFAULT_HOST = "127.0.0.1";
+export const DEFAULT_PORT = 7777;
+export const TOKEN_ACCOUNT = "daemon-auth-token";
+export const HALT_FILENAME = "HALT";
+export function defaultSeanHome() {
+    return process.env["SEAN_HOME"]?.trim() || path.join(os.homedir(), ".sean");
+}
+export function ensureSeanHome(home) {
+    fs.mkdirSync(home, { recursive: true, mode: 0o700 });
+    if (process.platform !== "win32") {
+        try {
+            fs.chmodSync(home, 0o700);
+        }
+        catch {
+            // best-effort
+        }
+    }
+    return home;
+}
+export function pidPath(home) {
+    return path.join(home, "daemon.pid");
+}
+export function logPath(home) {
+    return path.join(home, "daemon.log");
+}
+export function dbPath(home) {
+    return path.join(home, "sean.db");
+}
+export function haltPath(home) {
+    return path.join(home, HALT_FILENAME);
+}
+export function isHalted(home) {
+    if (process.env["SEAN_HALT"] === "1")
+        return true;
+    return fs.existsSync(haltPath(home));
+}
+export function setHalted(home, halted) {
+    const file = haltPath(ensureSeanHome(home));
+    if (halted) {
+        fs.writeFileSync(file, `halted ${new Date().toISOString()}\n`, { mode: 0o600 });
+        return;
+    }
+    if (fs.existsSync(file))
+        fs.unlinkSync(file);
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAe;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,IAAI,MAAM,EAAE,CAAC;QACX,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC"}

package/dist/pdf.d.ts

@@ -0,0 +1,3 @@
+/** Minimal single-page PDF. Enough for an immutable snapshot download. */
+export declare function textToPdf(title: string, body: string): Buffer;
+//# sourceMappingURL=pdf.d.ts.map

package/dist/pdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.d.ts","sourceRoot":"","sources":["../src/pdf.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAmB1E,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CA+B7D"}

package/dist/pdf.js

@@ -0,0 +1,51 @@
+/** Minimal single-page PDF. Enough for an immutable snapshot download. */
+function escapePdf(text) {
+    return text.replace(/\\/g, "\\\\").replace(/\(/g, "\\(").replace(/\)/g, "\\)");
+}
+function wrap(text, width) {
+    const out = [];
+    for (const raw of text.split(/\n/)) {
+        let line = raw.replace(/\t/g, "  ");
+        while (line.length > width) {
+            out.push(line.slice(0, width));
+            line = line.slice(width);
+        }
+        out.push(line);
+    }
+    return out.slice(0, 60);
+}
+export function textToPdf(title, body) {
+    const lines = [title, "", ...wrap(body, 96)];
+    const y0 = 780;
+    const cmds = ["BT", "/F1 11 Tf", "14 TL", `50 ${y0} Td`];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i] ?? "";
+        if (i === 0)
+            cmds.push("/F1 16 Tf", `(${escapePdf(line)}) Tj`, "T*", "/F1 11 Tf");
+        else
+            cmds.push(`(${escapePdf(line)}) Tj`, "T*");
+    }
+    cmds.push("ET");
+    const stream = cmds.join("\n");
+    const objects = [
+        "<< /Type /Catalog /Pages 2 0 R >>",
+        "<< /Type /Pages /Kids [3 0 R] /Count 1 >>",
+        "<< /Type /Page /Parent 2 0 R /MediaBox [0 0 612 792] /Contents 4 0 R /Resources << /Font << /F1 5 0 R >> >> >>",
+        `<< /Length ${Buffer.byteLength(stream)} >>\nstream\n${stream}\nendstream`,
+        "<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica >>",
+    ];
+    let out = "%PDF-1.4\n";
+    const offsets = [0];
+    for (let i = 0; i < objects.length; i++) {
+        offsets.push(Buffer.byteLength(out));
+        out += `${i + 1} 0 obj\n${objects[i]}\nendobj\n`;
+    }
+    const xref = Buffer.byteLength(out);
+    out += `xref\n0 ${objects.length + 1}\n0000000000 65535 f \n`;
+    for (let i = 1; i < offsets.length; i++) {
+        out += `${String(offsets[i]).padStart(10, "0")} 00000 n \n`;
+    }
+    out += `trailer << /Size ${objects.length + 1} /Root 1 0 R >>\nstartxref\n${xref}\n%%EOF\n`;
+    return Buffer.from(out, "utf8");
+}
+//# sourceMappingURL=pdf.js.map

package/dist/pdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.js","sourceRoot":"","sources":["../src/pdf.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,GAAG,CAAC;IACf,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;;YAC7E,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG;QACd,mCAAmC;QACnC,2CAA2C;QAC3C,gHAAgH;QAChH,cAAc,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,MAAM,aAAa;QAC1E,wDAAwD;KACzD,CAAC;IACF,IAAI,GAAG,GAAG,YAAY,CAAC;IACvB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,GAAG,IAAI,WAAW,OAAO,CAAC,MAAM,GAAG,CAAC,yBAAyB,CAAC;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,GAAG,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,aAAa,CAAC;IAC9D,CAAC;IACD,GAAG,IAAI,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,+BAA+B,IAAI,WAAW,CAAC;IAC5F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/pid.d.ts

@@ -0,0 +1,11 @@
+export type PidInfo = {
+    pid: number;
+    host: string;
+    port: number;
+    startedAt: string;
+};
+export declare function readPid(home: string): PidInfo | null;
+export declare function writePid(home: string, info: PidInfo): void;
+export declare function removePid(home: string): void;
+export declare function isPidAlive(pid: number): boolean;
+//# sourceMappingURL=pid.d.ts.map

package/dist/pid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.d.ts","sourceRoot":"","sources":["../src/pid.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,OAAO,GAAG;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAUpD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAE1D;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO5C;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO/C"}

package/dist/pid.js

@@ -0,0 +1,38 @@
+import fs from "node:fs";
+import { pidPath } from "./paths.js";
+export function readPid(home) {
+    const file = pidPath(home);
+    if (!fs.existsSync(file))
+        return null;
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+        if (typeof parsed.pid !== "number")
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export function writePid(home, info) {
+    fs.writeFileSync(pidPath(home), JSON.stringify(info), { mode: 0o600 });
+}
+export function removePid(home) {
+    const file = pidPath(home);
+    try {
+        fs.unlinkSync(file);
+    }
+    catch {
+        // already gone
+    }
+}
+export function isPidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=pid.js.map

package/dist/pid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.js","sourceRoot":"","sources":["../src/pid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AASrC,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACpE,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAa;IAClD,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/security.d.ts

@@ -0,0 +1,14 @@
+import type { FastifyInstance } from "fastify";
+export declare const CSRF_HEADER = "x-sean-csrf";
+export declare const TOKEN_HEADER = "x-sean-token";
+export declare const TOKEN_COOKIE = "sean_token";
+export type SecurityOptions = {
+    port: number;
+    token: string;
+    authEnabled: boolean;
+    /** Used when listen() assigned an ephemeral port (port 0). */
+    getPort?: (() => number) | undefined;
+    publicOrigin?: string | undefined;
+};
+export declare function registerSecurity(app: FastifyInstance, options: SecurityOptions): void;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAI7E,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,YAAY,eAAe,CAAC;AAUzC,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,CAAC;AAmBF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAuErF"}

package/dist/security.js

@@ -0,0 +1,93 @@
+import { allowedHosts, allowedOrigins } from "./bind.js";
+import { tokensEqual } from "./token.js";
+export const CSRF_HEADER = "x-sean-csrf";
+export const TOKEN_HEADER = "x-sean-token";
+export const TOKEN_COOKIE = "sean_token";
+const SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
+function pathOnly(url) {
+    const q = url.indexOf("?");
+    const path = q === -1 ? url : url.slice(0, q);
+    return path.endsWith("/") && path.length > 1 ? path.slice(0, -1) : path;
+}
+function readToken(req) {
+    const header = req.headers[TOKEN_HEADER];
+    if (typeof header === "string" && header.length > 0)
+        return header;
+    const auth = req.headers.authorization;
+    if (typeof auth === "string" && auth.startsWith("Bearer ")) {
+        return auth.slice("Bearer ".length);
+    }
+    const cookie = req.headers.cookie;
+    if (cookie) {
+        for (const part of cookie.split(";")) {
+            const [rawName, ...rest] = part.trim().split("=");
+            if (rawName === TOKEN_COOKIE)
+                return rest.join("=");
+        }
+    }
+    return undefined;
+}
+export function registerSecurity(app, options) {
+    const portOf = () => options.getPort?.() ?? options.port;
+    app.addHook("onRequest", async (req, reply) => {
+        const hosts = allowedHosts(portOf(), options.publicOrigin);
+        const host = req.headers.host ?? "";
+        if (!hosts.has(host)) {
+            return reply.code(403).send({ error: "forbidden_host" });
+        }
+        const path = pathOnly(req.url);
+        // RFC 8252 loopback: Google / the broker 302 here. Host is still checked.
+        if (SAFE_METHODS.has(req.method.toUpperCase()) && path === "/oauth/callback") {
+            return;
+        }
+        // Stripe webhooks cannot send CSRF or the session cookie. Signature is checked in-route.
+        if (req.method.toUpperCase() === "POST" && path === "/api/billing/webhook") {
+            return;
+        }
+        const origin = req.headers.origin;
+        if (typeof origin === "string" && origin.length > 0) {
+            if (!allowedOrigins(portOf(), options.publicOrigin).has(origin)) {
+                return reply.code(403).send({ error: "forbidden_origin" });
+            }
+        }
+        const fetchSite = req.headers["sec-fetch-site"];
+        if (fetchSite === "cross-site") {
+            return reply.code(403).send({ error: "forbidden_fetch_site" });
+        }
+        const method = req.method.toUpperCase();
+        if (SAFE_METHODS.has(method)) {
+            if (path === "/api/events") {
+                if (!options.authEnabled) {
+                    return reply.code(401).send({ error: "unauthorized" });
+                }
+                const presented = readToken(req);
+                if (!presented || !tokensEqual(presented, options.token)) {
+                    return reply.code(401).send({ error: "unauthorized" });
+                }
+            }
+            return;
+        }
+        const csrf = req.headers[CSRF_HEADER];
+        if (csrf !== "1") {
+            return reply.code(403).send({ error: "missing_csrf_header" });
+        }
+        if (!options.authEnabled) {
+            return reply.code(401).send({ error: "unauthorized" });
+        }
+        const presented = readToken(req);
+        if (!presented || !tokensEqual(presented, options.token)) {
+            return reply.code(401).send({ error: "unauthorized" });
+        }
+    });
+    // No CORS, ever. Strip any plugin that tries.
+    app.addHook("onSend", async (_req, reply) => {
+        reply.header("X-Content-Type-Options", "nosniff");
+        reply.header("X-Frame-Options", "DENY");
+        reply.header("Referrer-Policy", "no-referrer");
+        reply.removeHeader("access-control-allow-origin");
+        reply.removeHeader("access-control-allow-credentials");
+        reply.removeHeader("access-control-allow-headers");
+        reply.removeHeader("access-control-allow-methods");
+    });
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AACzC,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC;AAEzC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEzD,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAWD,SAAS,SAAS,CAAC,GAAmB;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACnE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,OAAO,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAoB,EAAE,OAAwB;IAC7E,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;IAEzD,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,GAAmB,EAAE,KAAmB,EAAE,EAAE;QAC1E,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,0EAA0E;QAC1E,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,yFAAyF;QACzF,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBACzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1C,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACxC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC/C,KAAK,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;QAClD,KAAK,CAAC,YAAY,CAAC,kCAAkC,CAAC,CAAC;QACvD,KAAK,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;QACnD,KAAK,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,25 @@
+import { type FastifyInstance } from "fastify";
+import type { SqliteDatabase } from "@agentsean/db";
+import { searchFindingsFts } from "@agentsean/db";
+import type { CredentialStore } from "@agentsean/credentials";
+import type { PendingStore } from "@agentsean/google";
+import type { JobQueue } from "@agentsean/scheduler";
+import { type EventBus } from "./events.js";
+export type CreateServerOptions = {
+    host: string;
+    port: number;
+    token: string;
+    authEnabled: boolean;
+    seanHome: string;
+    getPort?: (() => number) | undefined;
+    db?: SqliteDatabase | undefined;
+    sqlite?: Parameters<typeof searchFindingsFts>[0] | undefined;
+    store?: CredentialStore | undefined;
+    pending?: PendingStore | undefined;
+    fetch?: typeof fetch | undefined;
+    queue?: JobQueue | undefined;
+    bus?: EventBus | undefined;
+    publicOrigin?: string | undefined;
+};
+export declare function createServer(options: CreateServerOptions): Promise<FastifyInstance>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AASrD,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IACrC,EAAE,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAChC,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,GAAG,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAkF1B"}

package/dist/server.js

@@ -0,0 +1,84 @@
+import Fastify, {} from "fastify";
+import { searchFindingsFts } from "@agentsean/db";
+import { VERSION } from "./version.js";
+import { registerSecurity, TOKEN_COOKIE } from "./security.js";
+import { isHalted } from "./paths.js";
+import { registerGoogleRoutes } from "./google-routes.js";
+import { registerActionRoutes } from "./action-routes.js";
+import { registerDashboardRoutes } from "./dashboard-routes.js";
+import { registerHostedRoutes } from "./hosted-routes.js";
+import { registerSpa } from "./spa.js";
+import { createEventBus } from "./events.js";
+export async function createServer(options) {
+    const app = Fastify({
+        logger: false,
+        trustProxy: false,
+        routerOptions: { ignoreTrailingSlash: true },
+    });
+    const security = {
+        port: options.port,
+        token: options.token,
+        authEnabled: options.authEnabled,
+    };
+    if (options.getPort)
+        security.getPort = options.getPort;
+    if (options.publicOrigin)
+        security.publicOrigin = options.publicOrigin;
+    registerSecurity(app, security);
+    app.get("/api/health", async () => ({
+        ok: true,
+        name: "sean",
+        version: VERSION,
+        bind: `${options.host}:${options.port}`,
+        halted: isHalted(options.seanHome),
+    }));
+    // Sets the SameSite=Strict cookie so the dashboard EventSource can auth.
+    app.get("/api/session", async (req, reply) => {
+        const presented = (typeof req.headers["x-sean-token"] === "string" &&
+            req.headers["x-sean-token"]) ||
+            (typeof req.headers.authorization === "string" &&
+                req.headers.authorization.startsWith("Bearer ")
+                ? req.headers.authorization.slice("Bearer ".length)
+                : undefined);
+        if (presented !== options.token) {
+            return reply.code(401).send({ error: "unauthorized" });
+        }
+        reply.header("Set-Cookie", `${TOKEN_COOKIE}=${options.token}; HttpOnly; SameSite=Strict; Path=/`);
+        return { ok: true };
+    });
+    if (options.db && options.store && options.pending) {
+        registerGoogleRoutes(app, {
+            db: options.db,
+            store: options.store,
+            pending: options.pending,
+            getPort: options.getPort ?? (() => options.port),
+            fetch: options.fetch,
+        });
+    }
+    if (options.db) {
+        registerActionRoutes(app, {
+            db: options.db,
+            seanHome: options.seanHome,
+            token: options.token,
+            gitFetch: options.fetch,
+        });
+    }
+    const sqlite = options.sqlite;
+    if (options.db) {
+        registerHostedRoutes(app, { db: options.db });
+    }
+    if (options.db && sqlite) {
+        registerDashboardRoutes(app, {
+            db: options.db,
+            sqlite,
+            seanHome: options.seanHome,
+            token: options.token,
+            bus: options.bus ?? createEventBus(),
+            queue: options.queue,
+            store: options.store,
+        });
+    }
+    registerSpa(app);
+    return app;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIlD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAwB,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAmB5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE;KAC7C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAoB;QAChC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;IACF,IAAI,OAAO,CAAC,OAAO;QAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACxD,IAAI,OAAO,CAAC,YAAY;QAAE,QAAQ,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACvE,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEhC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAClC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;QACvC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;KACnC,CAAC,CAAC,CAAC;IAEJ,yEAAyE;IACzE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,SAAS,GACb,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,QAAQ;YAC9C,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC9B,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;gBAC9C,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC7C,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBACnD,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,SAAS,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,MAAM,CACV,YAAY,EACZ,GAAG,YAAY,IAAI,OAAO,CAAC,KAAK,qCAAqC,CACtE,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACnD,oBAAoB,CAAC,GAAG,EAAE;YACxB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,oBAAoB,CAAC,GAAG,EAAE;YACxB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;QACzB,uBAAuB,CAAC,GAAG,EAAE;YAC3B,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,cAAc,EAAE;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,GAAG,CAAC,CAAC;IAEjB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/settings.d.ts

@@ -0,0 +1,5 @@
+import { type SqliteDatabase } from "@agentsean/db";
+export declare function getSetting(db: SqliteDatabase, key: string): string | null;
+export declare function setSetting(db: SqliteDatabase, key: string, value: string): void;
+export declare function getSettingNumber(db: SqliteDatabase, key: string, fallback: number): number;
+//# sourceMappingURL=settings.d.ts.map

package/dist/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE9D,wBAAgB,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEzE;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAW/E;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,cAAc,EAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GACf,MAAM,CAKR"}

package/dist/settings.js

@@ -0,0 +1,25 @@
+import { eq } from "drizzle-orm";
+import { settings } from "@agentsean/db";
+export function getSetting(db, key) {
+    return db.select().from(settings).where(eq(settings.key, key)).get()?.value ?? null;
+}
+export function setSetting(db, key, value) {
+    const now = new Date().toISOString();
+    const existing = db.select().from(settings).where(eq(settings.key, key)).get();
+    if (existing) {
+        db.update(settings)
+            .set({ value, updatedAt: now })
+            .where(eq(settings.key, key))
+            .run();
+        return;
+    }
+    db.insert(settings).values({ key, value, updatedAt: now }).run();
+}
+export function getSettingNumber(db, key, fallback) {
+    const raw = getSetting(db, key);
+    if (raw === null)
+        return fallback;
+    const n = Number(raw);
+    return Number.isFinite(n) ? n : fallback;
+}
+//# sourceMappingURL=settings.js.map

package/dist/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAuB,MAAM,eAAe,CAAC;AAE9D,MAAM,UAAU,UAAU,CAAC,EAAkB,EAAE,GAAW;IACxD,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAkB,EAAE,GAAW,EAAE,KAAa;IACvE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/E,IAAI,QAAQ,EAAE,CAAC;QACb,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;aAC9B,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;aAC5B,GAAG,EAAE,CAAC;QACT,OAAO;IACT,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,EAAkB,EAClB,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3C,CAAC"}

package/dist/spa.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyInstance } from "fastify";
+export declare function dashboardDist(): string | null;
+export declare function registerSpa(app: FastifyInstance): void;
+//# sourceMappingURL=spa.d.ts.map

package/dist/spa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spa.d.ts","sourceRoot":"","sources":["../src/spa.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAkC7E,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAe7C;AAwBD,wBAAgB,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CA4BtD"}

package/dist/spa.js

@@ -0,0 +1,95 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const SPA_PATHS = new Set([
+    "/",
+    "/findings",
+    "/crawls",
+    "/changes",
+    "/approvals",
+    "/automations",
+    "/content",
+    "/search",
+    "/keywords",
+    "/evidence",
+    "/ai",
+    "/local",
+    "/mentions",
+    "/reports",
+    "/billing",
+    "/settings",
+    "/onboarding",
+]);
+const MIME = {
+    ".html": "text/html; charset=utf-8",
+    ".js": "text/javascript; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".map": "application/json",
+    ".svg": "image/svg+xml",
+    ".json": "application/json",
+    ".woff2": "font/woff2",
+    ".png": "image/png",
+    ".ico": "image/x-icon",
+};
+export function dashboardDist() {
+    const candidates = [];
+    try {
+        const pkg = fileURLToPath(import.meta.resolve("@agentsean/dashboard/package.json"));
+        candidates.push(path.join(path.dirname(pkg), "dist"));
+    }
+    catch {
+        // not resolvable
+    }
+    candidates.push(path.resolve(fileURLToPath(new URL("../../../dashboard/dist", import.meta.url))));
+    for (const dir of candidates) {
+        if (fs.existsSync(path.join(dir, "index.html")))
+            return dir;
+    }
+    return null;
+}
+function fallbackHtml() {
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"/><title>Agent Sean</title>
+<meta name="viewport" content="width=device-width, initial-scale=1"/>
+<style>
+  body{font:16px/1.45 system-ui,sans-serif;margin:2rem;background:#f6f7f9;color:#111}
+  a{color:#0b57d0}
+</style></head>
+<body>
+<h1>Agent Sean</h1>
+<p>The SEO engineer that never sleeps. URL → 90-second crawl → first findings → then Google.</p>
+<p><a href="/connect">Connect Google</a> · <a href="/activity">Activity</a> — One click reverts it.</p>
+<p>Build <code>packages/dashboard</code> for the full SPA. The daemon already serves the JSON API on this origin — no CORS.</p>
+</body></html>`;
+}
+function sendFile(reply, file) {
+    const ext = path.extname(file);
+    reply.type(MIME[ext] ?? "application/octet-stream");
+    reply.send(fs.readFileSync(file));
+}
+export function registerSpa(app) {
+    const dist = dashboardDist();
+    const serveIndex = (_req, reply) => {
+        if (!dist) {
+            reply.type("text/html").send(fallbackHtml());
+            return;
+        }
+        sendFile(reply, path.join(dist, "index.html"));
+    };
+    for (const p of SPA_PATHS) {
+        app.get(p, serveIndex);
+    }
+    app.get("/assets/*", (req, reply) => {
+        if (!dist)
+            return reply.code(404).send({ error: "no_dashboard" });
+        const rel = req.url.split("?")[0] ?? "";
+        const file = path.resolve(dist, rel.replace(/^\/+/, ""));
+        if (!file.startsWith(dist) ||
+            !fs.existsSync(file) ||
+            fs.statSync(file).isDirectory()) {
+            return reply.code(404).send({ error: "not_found" });
+        }
+        sendFile(reply, file);
+    });
+}
+//# sourceMappingURL=spa.js.map

package/dist/spa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spa.js","sourceRoot":"","sources":["../src/spa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,GAAG;IACH,WAAW;IACX,SAAS;IACT,UAAU;IACV,YAAY;IACZ,cAAc;IACd,UAAU;IACV,SAAS;IACT,WAAW;IACX,WAAW;IACX,KAAK;IACL,QAAQ;IACR,WAAW;IACX,UAAU;IACV,UAAU;IACV,WAAW;IACX,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,IAAI,GAA2B;IACnC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,kBAAkB;IAC3B,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;CACvB,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,CAAC;QACpF,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CACjF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;;;;;;;;;;;;eAYM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAoB;IAC9C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAE7B,MAAM,UAAU,GAAG,CAAC,IAAoB,EAAE,KAAmB,EAAE,EAAE;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACtB,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YACpB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAC/B,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}